PRIVACY POLICY

The detexpol.pl website

Effective: March 19, 2026

§1. General Provisions

This Privacy Policy sets forth the rules governing the processing of personal data collected through the detexpol.pl website (hereinafter: “the Website”) and the rules governing the use of cookies and similar technologies.

This Privacy Policy has been developed in accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation, hereinafter “GDPR”)
  • The Act of May 10, 2018, on the Protection of Personal Data (Journal of Laws 2018, Item 1000, as amended)
  • The Act of July 18, 2002, on the Provision of Electronic Services (Journal of Laws 2002, No. 144, Item 1204, as amended)
  • The Act of July 12, 2024 — the Electronic Communications Act (Journal of Laws 2024, Item 1221), effective as of November 10, 2024, which replaced the Telecommunications Act with regard to regulations concerning cookies and consent to marketing communications

§2. Personal Data Controller

The controller of the personal data collected through the Website is:

DETEXPOL, LLC

74D/20 Liściasta St., 91-357 Łódź

E-mail: bok@detexpol.pl

Website address: https://detexpol.pl/pl/

(hereinafter referred to as “the Controller”)

The controller has not appointed a Data Protection Officer. For any matters regarding the processing of personal data, please contact us at the following email address: studio@detexpol.pl

§3. Scope of Personal Data Collected

3.1. Data provided voluntarily through contact forms

The Website provides two contact forms that Users can use to contact the Administrator. Through these forms, we collect:

  • first and last name
  • email address
  • phone number (optional)
  • company name (optional)
  • message content

Providing the information marked as required is voluntary, but necessary to process your inquiry. If you do not provide the required information, you will not be able to submit the form.

3.2. Data Collected Automatically

When you use the Website, the following data is collected automatically:

  • device IP address
  • Web browser type and version
  • operating system
  • screen resolution
  • date and time of the visit
  • pages visited and time spent on each one
  • source of the visit to the website (referring URL)
  • data collected by cookies (see §7 for details)

§4. Purposes and Legal Basis for Data Processing

a) Handling inquiries submitted via contact forms

We process the data provided in the contact forms in order to respond to the User’s inquiry, conduct business correspondence, and potentially establish a business relationship.

Legal basis: Article 6(1)(f) of the GDPR—the Controller’s legitimate interest in handling inquiries submitted through the Website and building business relationships.

b) Ensuring the proper functioning of the Website

We use automatically collected data (including server logs) to ensure the technical operation of the Website, diagnose problems, prevent security threats, and optimize the Website’s performance.

Legal basis: Article 6(1)(f) of the GDPR—the Controller’s legitimate interest.

c) Statistical analysis of traffic on the Website (Google Analytics)

We use Google Analytics to collect anonymous statistics on how the Website is used, which allows us to tailor the content to Users’ needs.

Legal basis: Article 6(1)(a) of the GDPR—the User’s consent given through the cookie management mechanism (cookie banner), in conjunction with Article 399 of the Electronic Communications Act.

d) Any investigation or defense against claims

In the event of a dispute, personal data may be processed for the purpose of asserting or defending against claims.

Legal basis: Article 6(1)(f) of the GDPR—the Controller’s legitimate interest.

§5. Recipients of Personal Data

Users’ personal data may be disclosed to the following categories of recipients:

  • Web hosting providers – to the extent necessary to maintain and provide technical support for the Website
  • Google Ireland Limited – as part of the Google Analytics service (anonymized/pseudonymized data)
  • IT service providers – entities that provide technical support and website administration services
  • Government agencies— only when the obligation to provide access arises from applicable laws

The Administrator does not sell Users’ personal data or share it with third parties for marketing purposes.

5.1. Transfer of Data Outside the European Economic Area (EEA)

In connection with the use of Google Analytics, data may be transferred to Google Ireland Limited (Ireland, EEA). In the event of further data transfers outside the EEA (e.g., to the U.S.), Google applies appropriate safeguards, including standard contractual clauses approved by the European Commission and the EU-U.S. Data Privacy Framework.

§6. Data Retention Period

Personal data is retained for the period necessary to fulfill the purposes for which it was collected:

  • Contact forms: for a period of 3 years from the last contact or until a valid objection to the processing is filed
  • Enforcement of claims: for the duration of the statute of limitations applicable to claims under the law (generally 3 years; in certain cases, 6 years)
  • Cookies: in accordance with the lifetime of each cookie (see §7 for details) or until they are deleted by the User
  • Server logs: up to 12 months
  • Google Analytics: in accordance with Google’s data retention policy (up to 14 months by default)

§7. Cookies and Similar Technologies

7.1. What Are Cookies?

Cookies are small text files stored on the User’s device when using the Website. They are used to ensure the proper functioning of the website, analyze traffic, and tailor content to Users’ needs.

7.2. Legal Basis for the Use of Cookies

The rules governing the use of cookies are set forth in:

  • Article 399 of the Act of July 12, 2024—Electronic Communications Law (Journal of Laws 2024, Item 1221)—regarding requirements for the storage of information on users’ terminal equipment
  • GDPR Regulation – Regarding the Processing of Personal Data Collected Through Cookies

7.3. Types of Cookies

Essential (technical) cookies

They are used to ensure the proper functioning of the Website (e.g., session maintenance, security). They do not require the User’s consent pursuant to Article 399(3) of the Electronic Communications Act, as they are necessary to provide the service requested by the User.

Analytics cookies (Google Analytics)

They allow us to collect anonymous statistics regarding traffic on the Website. They are used only after obtaining the User’s consent, which is expressed via the cookie banner.

7.4. Consent to Cookies

During their first visit to the Website, Users are informed about the use of cookies via a cookie banner (pop-up window). Users may:

  • Accept all cookies
  • Accept only essential cookies
  • Adjust your settings and consent to the selected cookie categories

Consent is voluntary and may be withdrawn at any time just as easily as it was given—by changing the cookie settings on the Website or in your web browser.

7.5. Cookie Management

You can change your browser’s cookie settings at any time, including blocking cookies from being stored or deleting cookies that have already been stored. Detailed information on managing cookies is available in your browser settings.

Restricting the use of cookies may affect certain features of the Website.

§8. User Rights

Under the GDPR, every User whose personal data is processed has the following rights:

  • Right of access (Article 15 of the GDPR) – you may request information about whether and how we process your data, as well as receive a copy of it
  • Right to rectification (Article 16 of the GDPR) – you may request that incorrect data be corrected or incomplete data be supplemented
  • Right to erasure (Article 17 of the GDPR) – you may request the erasure of your data (“right to be forgotten”) if there are no grounds for its further processing
  • Right to restriction of processing (Article 18 of the GDPR) – you may request that the processing of your data be restricted in certain cases
  • Right to data portability (Article 20 of the GDPR) – you may receive your data in a structured, commonly used, machine-readable format
  • Right to Object (Article 21 of the GDPR) – You may object to the processing of your data based on the Controller’s legitimate interests
  • Right to withdraw consent (Article 7(3) of the GDPR) – You may withdraw your consent to the processing of your data at any time; the withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal

How can you exercise these rights? Simply send a message to: studio@detexpol.pl. The administrator will process the request without undue delay, no later than 30 days after receiving it.

The Right to File a Complaint

The user has the right to file a complaint with the supervisory authority—the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl)—if they believe that the processing of their personal data violates the provisions of the GDPR.

§9. Data Security

The controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, disclosure, or unauthorized use, including:

  • encrypting the connection using the SSL/TLS protocol
  • regular backups
  • Restricted access to personal data, limited to authorized individuals only
  • monitoring the security of server infrastructure
  • using up-to-date software and security patches

§10. Automated Decision-Making and Profiling

The Administrator does not make automated decisions (including profiling) that would have legal consequences for the User or otherwise significantly affect the User.

§11. Changes to the Privacy Policy

The Administrator reserves the right to make changes to this Privacy Policy, particularly in the event of changes to applicable laws or changes in the manner in which personal data is processed.

Users will be notified of any significant changes via an appropriate announcement on the Website. The current version of the Privacy Policy is always available at: detexpol.pl

§12. Contact

If you have any questions regarding the processing of personal data, the exercise of your rights, or this Privacy Policy, please contact us at:

DETEXPOL, LLC

74D/20 Liściasta St., 91-357 Łódź

Email: studio@detexpol.pl

Last updated: March 19, 2026