Privacy Policy for the www.gmsprinkler.pl website

The Data Controller for the website located at www.gmsprinkler.pl is:

GM Sprinkler S.A.
address: ul. Przykoszarowa 33, 03-260 Warsaw
KRS: 0001010826
NIP: 5242809564
REGON: 365529539

hereinafter referred to as the Controller.

The Controller respects the rights of data subjects and processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Personal Data Protection Act, and other relevant data protection regulations.

The Controller implements appropriate technical and organizational measures to ensure the security of processed personal data, specifically protecting data against unauthorized access, loss, alteration, or unlawful processing.

Contact regarding personal data

Any questions, requests, or notifications regarding the processing of personal data may be directed to:

email: [KONTAKT@GMSPRINKLER.PL]
mailing address: ul. Przykoszarowa 33, 03-260 Warsaw

Scope of collected data

Through the website, the Controller may process the following data:

• first and last name,
• company name,
• job title,
• email address,
• phone number,
• data provided in the contact form,
• data related to quote requests,
• data contained in recruitment documents,
• device IP address,
• technical information regarding website usage.

Purposes of data processing

Personal data is processed for the purpose of:

1. handling inquiries sent via contact forms,
2. preparing quotes and conducting business correspondence,
3. executing business cooperation,
4. conducting marketing and informational activities,
5. managing recruitment processes,
6. ensuring the proper functioning of the website,
7. maintaining statistics and analyzing website traffic,
8. establishing or defending against potential claims.

Legal basis for processing

Personal data is processed on the basis of:

• Art. 6(1)(a) GDPR – consent of the data subject,
• Art. 6(1)(b) GDPR – actions aimed at concluding or performing a contract,
• Art. 6(1)(c) GDPR – obligations resulting from legal provisions,
• Art. 6(1)(f) GDPR – legitimate interest of the Controller.

Data retention period

Personal data will be stored for the period necessary to achieve the purposes for which it was collected, and subsequently for the period required by law or until the statute of limitations for potential claims expires.

Data processed on the basis of consent will be stored until such consent is withdrawn.

Data recipients

Personal data may be transferred to entities supporting the Controller, in particular:

• hosting service providers,
• email service providers,
• IT companies,
• analytics system providers,
• entities providing accounting, legal, or administrative services.

These entities process data solely on the basis of appropriate agreements and in accordance with the Controller's instructions.

Transfer of data outside the European Economic Area

In the case of using tools from external providers, data may be transferred outside the European Economic Area only while maintaining the safeguards required by GDPR regulations.

Profiling

User data is not used for automated decision-making that produces legal effects for the user.

User rights

The data subject has the right to:

• access their data,
• receive a copy of the data,
• rectify the data,
• erase the data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent,
• lodge a complaint with the President of the Personal Data Protection Office.

Final provisions

The Controller reserves the right to update this Privacy Policy in the event of legal, technological, or organizational changes.