Privacy Policy

1. General Information

This Privacy Policy sets out the principles governing the processing and protection of personal data provided by users in connection with their use of the website available at ptcpolish.com (the"Website"”).

The Controller exercises particular care to protect users' privacy and ensure the security of processed personal data.

2. Data Controller

The controller of personal data is PTC POLISH TRADE COMPANY Sp. z o.o., registered office: ul. Chmielna 2/31, 00-020 Warsaw, Poland, Tax ID (NIP): 5252923712, Statistical Number (REGON): 52306436300000, e-mail: biuro@ptcpolish.com, phone: +48 882 101 105(the "Controller”).

3. Scope of Personal Data Processing

Depending on how the Website is used, the Controller may process the following personal data:

User-provided data including information submitted through contact forms or e-mail correspondence, such as: Full name, Company name, E-mail address, Telephone number, Message content, any other information voluntarily provided by the user.
Technical and usage data related to the use of the Website, including: IP address, Cookie identifiers, Browser information, Operating system information, Device information, Approximate location (e.g., city), Website activity data (e.g., pages visited and duration of visits).
Data necessary to ensure Website security and prevent abuse.

4. Source of Personal Data

Personal data may be obtained:

Directly from the user (for example, when completing a form or contacting the Controller by e-mail or telephone);
From devices and systems used to access the Website (including server logs and cookies).

5. Purposes and Legal Bases for Processing

The Controller processes personal data for the following purposes:

Responding to inquiries and communication Legal basis: Article 6(1)(f) f GDPR (legitimate interest in communicating with users and handling inquiries).
Taking steps prior to entering into a contract and performing a contract Legal basis: Article 6(1)(b) b GDPR.
Establishing, pursuing, or defending legal claims Legal basis: Article 6(1) f GDPR.
Marketing of the Controller's own services Legal basis: Article 6(1) f GDPR.
Website analytics and statistics Legal basis: Article 6(1) f GDPR, and where required, the user's consent provided through the cookie consent banner.
Ensuring Website security and preventing misuse Legal basis: Article 6(1) f GDPR.

6. Data Retention Period

Personal data will be retained:

For correspondence and inquiry handling, for as long as necessary to manage the communication and until the limitation period for potential claims expires;
For contract performance, throughout the duration of the contract and thereafter for the period required by applicable laws and limitation periods;
For marketing purposes, until an objection is raised;
Where processing is based on consent, until consent is withdrawn or the data is no longer required;
For technical and log data, for the period necessary for Website administration and security purposes.

7. Recipients of Personal Data

Personal data may be shared with:

Service providers processing data on behalf of the Controller, such as IT service providers, hosting providers, e-mail service providers, and Website maintenance providers;
Providers of tools and services used on the Website, including analytics, form processing, security, and anti-spam tools;
Public authorities and entities authorized under applicable law.

The Controller does not sell users' personal data.

8. Transfers Outside the European Economic Area (EEA)

Depending on the tools and services used by the Controller, personal data may be transferred outside the European Economic Area (EEA), including to countries that may not be subject to an adequacy decision issued by the European Commission.

In such cases, the Controller ensures that appropriate safeguards are in place in accordance with GDPR requirements, including the use of Standard Contractual Clauses (SCCs) adopted by the European Commission. standardowe klauzule umowne przyjęte przez Komisję Europejską.

9. Users' Rights

Users have the following rights with respect to their personal data:

Right of access to personal data and obtain a copy of personal data;
Right to rectification of personal data;
Right to erasure of personal data;
Right to restriction of processing;
Right to object to processing, particularly where processing is based on Article 6(1)(f) GDPR;
Right to data portability, where applicable;
Right to lodge a complaint with the competent supervisory authority, including the President of the Personal Data Protection Office (UODO) in Poland..

Where processing is based on consent, users have the right to withdraw consent at any time.Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10. Voluntary Provision of Data

Providing personal data is voluntary; however, it may be necessary for:

Responding to inquiries;
Preparing offers or quotations;
Entering into and performing contracts.

11. Automated Decision-Making and Profiling

The Controller does not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning users or similarly significantly affect them.

12. Cookies

Detailed information regarding the use of cookies, including the categories of cookies used and methods of managing cookie preferences, is provided in the Cookie Policy.

13. Data Security

The Controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risks associated with the processing of personal data. These measures are designed to protect personal data against unauthorized access, disclosure, loss, destruction, or alteration.

14. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. The current version is always available on the Website.

15. Contact

For any questions relating to personal data processing, please contact biuro@ptcpolish.com or phone: +48 882 101 105.

Last updated: 3rd September 2026.