Privacy Policy

1. Who is the Data Controller?

The data controller for personal data collected through this website is Pemiha, with a registered place of business at Andrzeja Struga 78, Szczecin, Poland. You can contact us regarding data protection matters at [email protected] or by phone at +48 601 200 600. As a data controller, Pemiha determines the purposes and means of processing your personal data and is responsible for ensuring that processing is lawful, fair, and transparent.

2. What personal data do we collect?

When you use the contact form on this website, we collect the following data that you provide voluntarily: your full name, email address, phone number, and the content of your message. We also collect certain technical data automatically when you visit the site, including your IP address, browser type and version, the pages you visit, the time and date of your visit, and referring URLs. This technical data is collected through standard web server logs and, where applicable, through cookies.

3. On what legal basis do we process your data?

We process your personal data on the following legal bases under Article 6 GDPR:

• Article 6(1)(a) GDPR: your consent, given when you tick the privacy checkbox on the contact form or when you accept non-essential cookies through our cookie consent tool;
• Article 6(1)(b) GDPR: the necessity of processing to take steps at your request prior to entering into a contract, or to perform a contract, where applicable;
• Article 6(1)(f) GDPR: our legitimate interests in maintaining the security of this website, preventing fraud, and administering our systems.

Where we rely on consent as the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. For what purposes is your data used?

Data submitted through the contact form is used exclusively for the purpose of responding to your inquiry. We do not use it for marketing, profiling, or automated decision-making. Technical data collected automatically is used for the purposes of website security monitoring, diagnosing technical problems, and understanding general usage patterns in aggregated, anonymised form. We do not build individual profiles from this technical data.

5. How long do we retain your data?

Personal data submitted via the contact form is retained for as long as necessary to respond to your inquiry and for a reasonable period thereafter in case of any follow-up, not exceeding 12 months from the date of the inquiry, unless a longer retention period is required by law. Technical log data is typically retained for no longer than 90 days. After the applicable retention period, data is securely deleted or anonymised.

6. Do we share your data with third parties?

We do not sell your personal data to third parties. We may share data with trusted service providers who assist in the operation of this website, such as hosting providers and IT support partners, under data processing agreements that require them to maintain the confidentiality and security of your data and prohibit them from using it for their own purposes. These processors are located within the European Economic Area or in countries with adequate data protection as determined by the European Commission. We may also disclose data where required by law, court order, or competent Polish authorities, including the President of the Personal Data Protection Office (UODO).

7. What are your rights under GDPR?

As a data subject, you have the following rights under GDPR, which you may exercise by contacting us at [email protected]:

• The right to access your personal data (Article 15 GDPR);
• The right to rectify inaccurate or incomplete data (Article 16 GDPR);
• The right to erasure ("right to be forgotten") where the legal basis for processing no longer exists (Article 17 GDPR);
• The right to restriction of processing in certain circumstances (Article 18 GDPR);
• The right to data portability in machine-readable format (Article 20 GDPR);
• The right to object to processing based on legitimate interests (Article 21 GDPR);
• The right to withdraw consent at any time without affecting prior lawful processing (Article 7(3) GDPR).

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, website: uodo.gov.pl.

8. How do we protect your data?

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security reviews. No method of electronic transmission or storage is completely secure, but we take reasonable precautions to protect the data in our care.

9. Cookies and tracking technologies

This website uses cookies and similar technologies. Detailed information about the types of cookies used, their purposes, and how to manage them is provided in our separate Cookie Policy, which is accessible from the footer of every page on this website. We use a cookie consent mechanism that allows you to choose which categories of cookies to accept before any non-essential cookies are placed on your device.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or the structure of the website. The date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically. Continued use of the website after a revised policy is published constitutes your acknowledgment of the updated terms.