Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), we hereby inform you that:

Scope, Purposes and Legal Basis for the Processing of Personal Data

The categories of personal data we process and the purposes for which we process them depend on our legal relationship with you.

We may process the following personal data collected through our website: first name and surname, email address, company name, phone.

Providing the above personal data is voluntary; however, it is necessary for us to carry out the activities described below.

We process the above personal data:

1. To respond to your inquiry submitted via the contact form. The legal basis for processing is the necessity to take steps at the request of the data subject prior to entering into a contract, even if such contract is ultimately not concluded (Article 6(1)(b) GDPR).
2. For the Controller’s marketing purposes, including offering products and services directly to you (direct marketing), as well as sending newsletters. The legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR).
3. For analytical and statistical purposes, including better matching products and services to customer needs, optimizing our products, improving customer service processes, building knowledge about our customers, and conducting financial analyses of our company. The legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR).
4. For archival (evidentiary) purposes, where processing is necessary for the Controller’s legitimate interest in establishing, exercising, or defending legal claims and documenting facts (Article 6(1)(f) GDPR).
5. For customer satisfaction surveys, where processing is based on the Controller’s legitimate interest in improving the quality of services offered (Article 6(1)(f) GDPR).

Data Retention Period

Personal data is processed for the period necessary to conduct correspondence related to your inquiry. If a contract is concluded between us, your personal data will be processed for the period necessary to perform the contract and thereafter for the purposes and duration required by applicable law, to establish, exercise or defend legal claims, or until your consent is withdrawn, where consent constitutes the legal basis for processing.

Where your personal data is processed for marketing purposes, we will process such data until you object to such processing.

After the retention period expires, personal data will be permanently deleted or irreversibly anonymized.

Recipients of Personal Data

Your personal data may be shared with our trusted business partners and service providers with whom we cooperate for the purposes described above.

The Controller may transfer personal data to entities providing IT, legal, and marketing services to the Controller, based on appropriate data processing agreements or data-sharing arrangements.

Transfers of Data to Third Countries

The Controller does not transfer collected personal data outside Poland, the European Union, or the European Economic Area (EEA), except where data has been collected through the Controller’s website and you have consented to receiving commercial information electronically or accepted cookies. In such cases, personal data may be transferred to a third country, namely the United States of America (USA), in connection with profiling activities carried out using Google Analytics.

Automated Processing of Personal Data

Your personal data may be processed by automated means, including profiling. However, such processing will not produce legal effects concerning you or similarly significantly affect your situation.

Profiling may occur where personal data is collected through the Controller’s website and you have consented to receiving commercial communications electronically or accepted the use of cookies. In such cases, profiling may be based on information including: data concerning provided services, transmission data, location data, information collected through cookies.

Profiling affects the marketing information and offers that you receive from the Controller.

Data Subject Rights

In connection with the processing of your personal data, you are entitled to the following rights: the right of access to your personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object to processing, and, where the processing is based on your consent: the right to withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal.

If you believe that your personal data is being processed unlawfully by the Controller, you have the right to lodge a complaint with the competent supervisory authority, namely the President of the Personal Data Protection Office (UODO).