Privacy Policy
1. Identity of the Data Controller
The data controller responsible for processing personal data collected through this website is Havini Xuzoro, operating at Aleja Generała Leopolda Okulickiego 3, Rzeszów, Poland. Contact email: [email protected]. Contact phone: +48 17 853 8242.
This website operates as an informational resource and does not engage in commercial transactions, machine sales, or placement services. Personal data is collected solely to facilitate communication with users and to understand how the site is used.
2. Legal Basis for Processing
Processing of personal data on this site is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, "GDPR"), as implemented and supplemented by the Polish Act on Personal Data Protection (Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych, Dz.U. 2018 poz. 1000).
The legal bases applicable to data processing on this site are as follows:
| Processing Activity | Legal Basis (GDPR Article) | Description |
|---|---|---|
| Contact form enquiries | Article 6(1)(b) | Processing necessary to respond to a request made by the data subject prior to entering into any arrangement |
| Website analytics | Article 6(1)(a) | Processing based on the user's freely given, specific, informed, and unambiguous consent via the cookie banner |
| Cookie preference storage | Article 6(1)(c) | Processing necessary to comply with our legal obligation to record consent |
| Security and fraud prevention | Article 6(1)(f) | Legitimate interest in maintaining the security and integrity of the website |
3. Categories of Personal Data Collected
| Data Type | Source | Purpose | Retention Period |
|---|---|---|---|
| Full name | Contact form | To address communications appropriately | 24 months from last contact |
| Email address | Contact form | To respond to enquiries | 24 months from last contact |
| Phone number | Contact form | Alternative contact method if requested | 24 months from last contact |
| Message content | Contact form | To understand and respond to the enquiry | 24 months from last contact |
| IP address | Server logs | Security and abuse prevention | 90 days |
| Browser and device data | Analytics cookies (with consent) | Understanding how the site is used | As per analytics provider retention policy |
| Cookie preference | Cookie consent interaction | Recording and honouring user consent choices | 12 months or until withdrawn |
4. How We Use Personal Data
Personal data collected through the contact form is used exclusively to respond to the enquiry submitted. We do not use contact form data for marketing purposes, and we do not share it with third parties for commercial purposes.
Where analytics cookies have been consented to, aggregated and anonymised data is used to understand which content is most useful to visitors and to identify technical issues with the site. This data does not identify individual users.
We do not engage in automated decision-making or profiling as defined by Article 22 of the GDPR.
5. Data Sharing and Third Parties
We do not sell personal data to any third party. We do not share personal data for marketing purposes. Data may be shared in the following limited circumstances:
- With hosting and infrastructure providers who process data on our behalf under data processing agreements compliant with GDPR Article 28
- With analytics service providers where consent has been given, under terms that restrict their use of the data
- With competent authorities where required by applicable Polish law or by a binding legal obligation
Any third-party processors are required to implement appropriate technical and organisational measures to protect personal data.
6. International Data Transfers
Where personal data is transferred outside the European Economic Area, such transfers are carried out only where an adequate level of protection is ensured, either through an adequacy decision by the European Commission, through Standard Contractual Clauses approved under Article 46 GDPR, or through another recognised transfer mechanism.
7. Your Rights Under GDPR
As a data subject, you have the following rights under the GDPR and Polish data protection law:
| Right | GDPR Reference | What it means in practice |
|---|---|---|
| Right of access | Article 15 | You may request confirmation of whether we process your data and receive a copy of it |
| Right to rectification | Article 16 | You may request correction of inaccurate personal data |
| Right to erasure | Article 17 | You may request deletion of your personal data where no overriding legal basis for retention exists |
| Right to restriction | Article 18 | You may request that we restrict processing while accuracy or legitimacy is contested |
| Right to portability | Article 20 | Where processing is based on consent or contract, you may receive data in a machine-readable format |
| Right to object | Article 21 | You may object to processing based on legitimate interests |
| Right to withdraw consent | Article 7(3) | Where processing is based on consent, you may withdraw it at any time without affecting prior processing |
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by Article 12 GDPR. You also have the right to lodge a complaint with the Polish supervisory authority, the Urząd Ochrony Danych Osobowych (UODO), at ul. Stawki 2, 00-193 Warsaw, or via uodo.gov.pl.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include encrypted data transmission via HTTPS, access controls, and regular review of security practices.
No method of transmission over the internet or electronic storage is entirely secure. While we take all reasonable steps to protect personal data, we cannot guarantee absolute security.
9. Children's Data
This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that personal data has been submitted by a person under 16, we will delete it promptly.
10. Changes to This Policy
This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. Continued use of the site following any update constitutes acknowledgement of the revised policy.
11. Contact
For any questions or concerns about this Privacy Policy or our data practices, contact us at:
Havini Xuzoro
Aleja Generała Leopolda Okulickiego 3
Rzeszów, Poland
Email: [email protected]
Phone: +48 17 853 8242