Privacy notice – website and contact form
This notice forms part of the personal data protection system. Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Controller provides the following information:
§1. Data Controller
The Controller of your personal data is ABM Industry Sp. z o.o., ul. Wincentego Pola 27, 44-100 Gliwice, Poland, NIP PL6312683851, e-mail: kontakt@abmindustry.pl.
§2. Purposes and legal bases of processing
Your personal data is processed in order to handle enquiries submitted to the Controller through the contact form, by e-mail or by telephone, conduct communication relating to an enquiry, take steps aimed at entering into a contract, ensure the proper and secure operation of the website, and establish, pursue or defend possible claims.
The legal basis for processing is, as applicable:
a) Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract or performance of a contract where the enquiry concerns potential or existing cooperation;
b) Article 6(1)(f) GDPR – the Controller’s legitimate interest in communicating with persons who contact the Controller, ensuring the security and proper operation of the website, and establishing, pursuing or defending possible claims;
c) Article 6(1)(a) GDPR – the data subject’s consent, only where the Controller expressly requests such consent, in particular for separate marketing purposes.
§3. Categories of personal data
The Controller may process data provided by the user in the contact form or during another form of contact, in particular:
a) first and last name,
b) e-mail address,
c) telephone number,
d) company name and other business information provided in the enquiry,
e) message content and other data voluntarily provided by the user.
In connection with use of the website, technical data necessary to ensure the security and proper operation of the service may also be processed, including in particular the IP address, date and time of connection, browser information and the requested resource, if such data is recorded in server logs.
§4. Recipients of personal data
Your data may be disclosed to entities providing postal, telecommunications, hosting and IT services to the Controller, subcontractors involved in handling the enquiry or performing cooperation, and other entities authorised to receive the data under applicable law.
§5. Retention period
Data related to an enquiry will be processed for the period necessary to handle the enquiry and conduct communication. If the contact results in a contract with a client, personal data related to entering into and performing the contract will be retained for 6 years after the end of the contract in accordance with the Controller’s Personal Data Retention Policy. If data is processed for establishing business contacts and business communication (traditional marketing) on the basis of Article 6(1)(f) GDPR, it will be retained until one month after an objection is accepted or for no longer than 5 years. In the case of telephone or e-mail marketing based on consent, data will be processed until one month after withdrawal of consent is accepted. Technical data and server logs will be retained for the period necessary to ensure the security and proper operation of the service.
§6. Your rights
1) Right of access under Article 15 GDPR
2) Right to rectification under Article 16 GDPR
3) Right to erasure under Article 17 GDPR
4) Right to restriction of processing under Article 18 GDPR
5) Right to data portability under Article 20 GDPR
6) Right to object under Article 21 GDPR
7) Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
§7. Voluntary provision of data
Providing data in the contact form is voluntary; however, fields marked as required are necessary to submit the form and receive a response. Providing any other data is voluntary.
§8. Automated decision-making, including profiling
The Controller does not process website users’ personal data using automated decision-making processes, including profiling.
§9. Cookies and similar technologies
The engineers.abmindustry.pl website does not currently use optional cookies or similar technologies for analytics or marketing purposes. If solutions requiring user consent are introduced in the future, the Controller will update the information available on the website and implement an appropriate consent mechanism.
To protect the contact form against automated spam and abuse, the Controller uses Cloudflare Turnstile provided by Cloudflare, Inc. The service processes technical data necessary to distinguish users from automated bots. This data is used solely to ensure the security of the form and not for advertising purposes.
§10. How to exercise your rights
Questions and requests relating to personal data processing may be submitted through the contact form available at engineers.abmindustry.pl or by e-mail to kontakt@abmindustry.pl. You may also contact the Controller by post at: ABM Industry Sp. z o.o., ul. Wincentego Pola 27, 44-100 Gliwice, Poland.
The Controller responds without undue delay and no later than within 30 days of receiving a request. You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).