Privacy policy

With reference to the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 2016 No. 119, p. 1, as amended) (hereinafter referred to as “GDPR”), certain obligations have been imposed on entities processing personal data.

Glossary

For the purposes of this Privacy Policy, the following capitalised terms shall have the meanings set out below:

• “Administrator / We / Us / Our” – ConverterTec Poland Spółka z ograniczoną odpowiedzialnością, with its registered office in Brzegi, ul. Trakt Ojca Św. Franciszka 1, 32-002 Brzegi, entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0000740656, whose registration documents are maintained by the District Court for Kraków-Śródmieście in Kraków, 12th Commercial Division of the National Court Register, NIP: 7010832326, with share capital of PLN 1,500,000.00.
• “Privacy Policy” – This document.
• “Cookie Policy” – The document available at: …
• “Service” – The website available at https://www.convertertec-oem.com.
• “You / Your” – Any person using or intending to use the Service and its functionalities.

The purpose of this Privacy Policy is to explain the principles on which the Administrator, through the Service, collects, uses and protects your personal data, as well as to present your rights in connection with the processing of your personal data by the Administrator.

Please read the following information carefully.

The Administrator exercises due care in selecting and applying appropriate technical and organisational measures to ensure the protection of processed data, including safeguarding data against unauthorised access, disclosure, loss, destruction or unlawful modification, as well as against processing in breach of applicable law. The Administrator maintains ongoing control over the data processing operations and restricts access to data to the greatest possible extent, granting authorisations only where necessary.

If you have any questions regarding the processing of personal data, you can contact the Administrator by email at: rodo-oem@convertertec.com, with “GDPR” in the subject line.

The Administrator has not appointed a Data Protection Officer.

Purpose and Legal Basis of Processing and Retention Period

The purpose, legal basis, scope and retention period of personal data processing vary depending on how you interact with the Service.

The Administrator processes personal data provided by you. Your personal data may also be collected automatically in certain situations through cookies, as described in the Cookie Policy available at the link provided.

Providing personal data is voluntary; however, certain data are necessary for us to grant you access to specific functionalities of the Service. Refusal to provide data will not result in any negative consequences for you, but without such data, the use of some functionalities may be impossible.

Area 1: Contact Form

• Purpose: To respond to your enquiry by email or telephone (including SMS).
• Legal basis: Article 6(1)(b) GDPR – processing necessary to take steps at your request prior to entering into a contract.
• Retention period: Up to 6 months after the end of contact. Data are then automatically deleted.

Area 2: Partially Completed Contact Forms

• Purpose: To improve Service functionality and user experience, prevent data loss, analyse form usability and optimise enquiry processes.
• Legal basis: Article 6(1)(f) GDPR – legitimate interests of the Administrator.
• Retention period: Up to 60 days from entry. Data are then automatically deleted.

Area 3: Recruitment via Forms or Email

• Purpose: To consider your application in the recruitment process.
• Legal basis: Article 6(1)(b) GDPR – for current recruitment; Article 6(1)(a) GDPR – for consent to future recruitment (expressed in your CV).
• Retention period: Up to 6 months (current) or 12 months (future recruitment). Data are then automatically deleted.

Area 4: Newsletter and Marketing

• Purpose: To send commercial and marketing information, including newsletters, offers, articles or event invitations.
• Legal basis: Article 6(1)(a) GDPR – your consent; Article 10 of the Act on Electronic Services – consent for electronic marketing.
• Retention period: Until consent is withdrawn or up to 2 years from last activity. Data are then automatically deleted.

Area 5: Profiling and Advertising Groups

• Purpose: To analyse your activity for personalised marketing, create audience groups in advertising systems (e.g., Google Ads, LinkedIn Ads) and conduct remarketing.
• Legal basis: Article 6(1)(a) GDPR – consent for profiling.
• Retention period: Until consent is withdrawn or up to 2 years from last interaction. Data are then automatically deleted.

Area 6: Webinar or Online Event Registration

• Purpose: To organise and conduct webinars or other events.
• Legal basis: Article 6(1)(a) GDPR – consent for participation and related communications.
• Retention period: Until event settlement. Data are then automatically deleted.

Area 7: Compliance with Legal Obligations

• Purpose: To fulfil legal obligations under tax, accounting and GDPR regulations.
• Legal basis: Article 6(1)(c) GDPR.
• Retention period: As required by applicable law. Data are then automatically deleted.

Area 8: Legitimate Interests of the Administrator

• Purpose: To ensure IT security; statistical and analytical purposes; establish, exercise or defend legal claims; administer social media pages.
• Legal basis: Article 6(1)(f) GDPR.
• Retention period: Until the expiry of limitation periods (generally 6 years). Data are then automatically deleted.

Area 9: Analytics and Statistics

• Purpose: Tools such as Google Analytics, LinkedIn Insight Tag – to analyse traffic and user behaviour for Service improvement and statistics.
• Legal basis: Article 6(1)(a) GDPR – consent for analytics and marketing cookies; Article 6(1)(f) GDPR – legitimate interests for essential technical data.
• Retention period: Until consent withdrawal or according to cookie settings; technical data until session ends. Data are then automatically deleted.

Processing of optional or excessive data occurs based on your decision; the legal basis is your consent (Article 6(1)(a) GDPR).

Your Rights

In connection with the processing of your personal data, you have the right to:

• Access your data and obtain a copy;
• Rectify your data;
• Erase your data or restrict processing;
• Object to processing;
• Data portability;
• Lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

Where processing is based on consent (Article 6(1)(a) GDPR), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. Withdrawal may be effected via a link in the message, browser settings (for cookies), email contact with the Administrator or other available mechanisms. To exercise your rights, contact the Administrator at: rodo-oem@convertertec.com.

Recipients of Your Data

Recipients may include authorised employees of the Administrator, legal service providers, external service providers (e.g., IT, mailing, accounting and tax services), other processors under data processing agreements, and entities authorised by law (courts, public authorities).

Transfers to Third Countries

Personal data will not be transferred to third countries or international organisations.

Profiling and Automated Decision-Making

The Administrator does not make decisions producing legal effects or similarly significant impacts on you. Your data may be processed for marketing profiling purposes, enabling behavioural analysis and personalised content display. This does not affect your legal situation. You have the right to object to profiling if it adversely affects your rights and freedoms.

Changes to the Privacy Policy

The Administrator reserves the right to amend this Privacy Policy where required by law, technological changes to the Service, or to introduce standards exceeding minimum legal requirements. You will be notified of any changes (e.g., via pop-up or email) at least 14 days in advance.

This version (1.0) of the Privacy Policy is effective as of 16 December 2025.