Privacy policy
Draft requiring completion before public operation. The data controller details, retention periods and arrangements with service providers must be confirmed by the website owner.
1. Data controller
The controller is [full company name], based at [address], tax identification number [number]. For personal data matters, contact [controller email address].
2. Quote requests
The form collects your company name, full name, email, optional phone number, enquiry and files. We use these to assess your requirements, prepare a quote and contact you. Providing data is voluntary, but fields marked with an asterisk are needed to process your enquiry.
Processing is based on steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). For correspondence with a company representative, the basis is the controller's legitimate interest in handling business correspondence (Article 6(1)(f) GDPR). An enquiry does not subscribe you to marketing.
3. Attachments and recipients
Data and files are stored in the website database and private file storage. Hosting and IT providers may be given access. Documents may be shared with manufacturing partners as needed for quoting or production, without unnecessary contact details.
[To be confirmed: providers, processing locations and grounds for any transfers outside the EEA.] Do not send special category personal data or documents unrelated to the quote.
4. Retention
We retain data for the time needed to handle the enquiry, and subsequently to meet legal duties or legitimate claims-related needs. [To be completed: the specific retention period for unsuccessful enquiries and attachments, and a deletion schedule.]
5. Your rights
You may request access, correction, deletion or restriction of processing. Where applicable, you have rights to data portability and to object. You can withdraw optional analytics consent through privacy settings. You may complain to the President of the Polish Personal Data Protection Office.
6. Analytics and settings
The website remembers your analytics choice in your browser. With consent, we record page visits, clicks, form starts and submissions, attachment additions and engagement. Your browser receives random visitor and session identifiers; a new session starts after 30 minutes of inactivity. We also record device type, referring domain and UTM campaign labels. We do not store complete referring URLs or parameters of pages visited. Events are retained for up to 180 days, with deletion performed as the service runs. Events do not contain file names, enquiries, email addresses or phone numbers. Statistics are available only to the signed-in owner. The number of saved enquiries comes from the form, including when analytics consent is declined. Withdrawing consent stops new event collection and removes browser identifiers. We do not use profiling or automated decision-making.
7. Security
The form checks file size and format, limits submissions and uses anti-spam measures. Files are not made public. The controller should open attachments in a secure environment.
Information about your rights: European Commission — personal data protection. Updated: 29 September 2026.