Privacy Policy

This policy explains how we process the personal data of visitors to synthex.pl and of people using our contact form. It reflects the actual technical state of the website.

1. Data controller

The controller of your personal data is Synthex Technologies Sp. z o.o., ul. Gagarina 7/134b, 87-100 Toruń, Poland.

For all matters concerning personal data protection, please contact: odo@synthex.com.pl.

2. Scope and purposes of processing

2.1. Contact form

Through the contact form we collect: name, company name, e-mail address, phone number and the content of your message.

Purpose: establishing and maintaining contact, answering enquiries, preparing quotations.
Legal basis: Article 6(1)(f) GDPR — the controller's legitimate interest in corresponding with people interested in our offer.
Retention period: 2 years from the last contact.
Voluntary nature: providing the data is voluntary, but without it we cannot reply.

2.2. Website statistics

Purpose: analysing how the website is used and improving it.
Tool: Google Analytics 4.
Legal basis: Article 6(1)(a) GDPR — your consent, given through the consent panel. Until consent is given, the tool does not store cookies.
Retention period: as stated by the cookie lifetimes listed in our cookie policy.

2.3. Form abuse protection

Purpose: protecting the contact form against automated spam.
Tool: Google reCAPTCHA.
Legal basis: Article 6(1)(f) GDPR — legitimate interest in protecting the website against abuse.

2.4. Website operation

Our hosting provider processes data contained in server logs (including IP address, date and time of the request, browser type) in order to operate and secure the website — Article 6(1)(f) GDPR.

3. Recipients of the data

Your data may be shared with the following categories of recipients:

nazwa.pl sp. z o.o. — website and e-mail hosting (processor);
Google Ireland Ltd. / Google LLC — website statistics (Google Analytics), form protection (reCAPTCHA) and web fonts (Google Fonts);
OpenStreetMap Foundation — map tiles on the contact page;
CDN providers (jsDelivr, unpkg) — libraries required for the website to work;
consent management provider — handling cookie consent;
entities authorised to obtain data under applicable law.

Connecting to these providers' servers transmits your IP address to them, which is technically necessary to display the content.

4. Transfers outside the EEA

Using Google services may involve transferring data to the United States. Google LLC participates in the EU–U.S. Data Privacy Framework, and standard contractual clauses approved by the European Commission are additionally applied as the basis for such transfers under Article 46 GDPR.

5. Your rights

You have the right to:

access your data and obtain a copy of it;
rectify (correct) your data;
erase your data;
restrict processing;
object to processing based on the controller's legitimate interest (Article 21 GDPR) — this covers, among others, handling correspondence;
data portability — for data processed on the basis of consent;
withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. Cookie consent can be changed or withdrawn at any time through the consent panel available on the website;
lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise these rights, please contact: odo@synthex.com.pl.

6. Automated decision-making

Your data is not used for automated decision-making, including profiling that produces legal effects or similarly significantly affects you.

7. Cookies

The rules for using cookies and similar technologies are described in a separate document: Cookie Policy.

8. Changes to this policy

We update this policy whenever the scope of processed data or the tools we use change. The current version is always available at this address.