Privacy Notice

This is the short-form notice referenced in our email correspondence. It summarizes, and does not replace, the eXtensi Privacy Policy, which is the complete and authoritative information about our processing of personal data. It supersedes the information clause previously used in our correspondence.

Who is the controller of your personal data?

The controller is eXtensi Chudziński Jędryka spółka jawna, with its registered office in Wrocław, at ul. Rysia 1A/362, 53-656 Wrocław, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division of the National Court Register, under KRS number 0000807163, NIP (VAT ID): PL8943146425, REGON: 384560483 (“eXtensi”, “we”, “us”). Contact for all privacy matters: support@extensi.io. We have not designated a data protection officer.

Why and on what basis do we process your data?

If you correspond with us, receive an offer from us, or act for one of our customers or prospective customers (for example as an owner, representative, or a billing or technical contact), we process your identification and contact details, your position, and the related order history in order to prepare and perform the contract (Article 6(1)(b) GDPR), to pursue or defend claims and to market our own products, with the right to object (Article 6(1)(f) GDPR), and to fulfil our legal obligations, such as accounting (Article 6(1)(c) GDPR). Electronic direct marketing (email) is sent only with your prior consent, as required by Article 398 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej); you may withdraw that consent at any time. Details per audience: Privacy Policy, Sections 3 and 4.

If you are an end user of our apps, the organization that installed the app is the controller of the data processed in it; for cloud apps eXtensi acts as that organization’s processor under the Data Processing Addendum. Please direct requests concerning that data to your organization. Details: Privacy Policy, Section 5.

Where did we get your data from?

Directly from you; from the organization you represent or an authorized reseller, when it provides your details in connection with an offer or a contract; or from Atlassian, when your organization obtains our apps through the Atlassian Marketplace (see Atlassian’s privacy program (opens in a new tab)).

How long do we keep your data?

For the duration of the offer or the contract, and afterwards until the statutory limitation periods for related claims expire, until statutory retention duties (such as accounting) end, or until you object or withdraw consent, whichever applies. Details: Privacy Policy, Section 4.

Who receives your data? Does it leave the EEA?

Recipients are service providers processing data for us under Article 28 GDPR contracts (hosting, email, accounting, support desk, analytics) and authorities where the law requires disclosure. Where a provider processes data outside the EEA, the transfer relies on a European Commission adequacy decision (including the EU-US Data Privacy Framework for certified US providers) or on the Commission’s 2021 Standard Contractual Clauses with supplementary measures where needed. The current providers and transfer details: Privacy Policy, Sections 7 and 9.

Your rights

You have the right to access your data and receive a copy of it, to rectification, erasure, and restriction of processing, and to data portability; the right to object to processing based on our legitimate interests, including direct marketing; and the right to withdraw consent at any time without affecting earlier processing. To exercise them, write to support@extensi.io. You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland. Details: Privacy Policy, Section 8.

Providing your data is voluntary, but without it we may be unable to respond to you, prepare an offer, or perform the contract.