Privacy policy
This is an English translation provided for information only. The Polish version of this document is legally binding — read the Polish version. Contracts are concluded under Polish law.
[SUBJECT TO LEGAL REVIEW] Working draft. Requires review for compliance with the GDPR (Article 13), including the legal bases, retention periods and the list of data recipients.
Data controller
The controller of your personal data is [COMPANY NAME] sp. z o.o., [ADDRESS], email [EMAIL].
What data we process and why
| Purpose | Data | Legal basis | Period |
|---|---|---|---|
| Quote requests and orders | full name, company, Polish tax ID (NIP), email, phone, address, photos of the board, device models | Article 6(1)(b) GDPR (contract / pre-contractual steps) | requests without an order: 24 months; orders: as required by tax law (5 years) |
| Consumer unit documentation (GPSR) | serial number, configuration, unit documents | Article 6(1)(c) GDPR (legal obligation) | 10 years from sale |
| Marketing (newsletter, review requests) | Article 6(1)(a) GDPR (consent) | until consent is withdrawn | |
| Analytics and advertising | cookie identifiers, configurator events | consent (cookies) | as set out in the cookie policy |
Recipients of data
Hosting provider (EU), payment provider [PROVIDER], email service provider, courier company (for shipments), accounting office. Google (GA4, Ads) only after you consent to cookies.
Your rights
Access, rectification, erasure, restriction, data portability, objection, withdrawal of consent, and the right to lodge a complaint with the President of the Polish Data Protection Office (UODO). Requests: [EMAIL].
Security
Encrypted connection (HTTPS), files stored outside the public directory, database backups with 30-day retention, hosting in the European Union.