Privacy policy

Last updated: [date]

This English text is provided for convenience. In case of any discrepancy, the Polish version prevails.

1. Data controller

The controller of personal data collected through the nalvica.com website is [Nalvica Sp. z o.o., registered office address, NIP, KRS — to be completed]. Contact for data protection matters: [GDPR contact e-mail, e.g. contact@nalvica.com].

2. What data we collect

In connection with the use of the website we may process the following data:

• Data provided in the contact form: first name, last name, e-mail address, phone number, company name, message content.
• Data necessary to conclude and perform a service agreement: company details, contact persons, invoicing details.
• Technical data collected automatically: IP address, device and browser information, cookies — see section 6.
• Traffic source parameters (e.g. which advertisement led to the visit) — used only to analyse the effectiveness of marketing campaigns.

3. Purposes and legal bases of processing

• Responding to an inquiry sent through the contact form — Art. 6(1)(b) and (f) GDPR (steps prior to entering into a contract and the controller's legitimate interest).
• Concluding and performing a service agreement and related accounting — Art. 6(1)(b) and (c) GDPR.
• Sending marketing information by e-mail or phone — only after a separate, optional consent — Art. 6(1)(a) GDPR.
• Analysing traffic and the effectiveness of advertising campaigns (e.g. Google Ads, Google Analytics) — based on consent given through cookie settings — Art. 6(1)(a) GDPR.

4. Retention period

We keep data for as long as necessary to achieve the purpose for which it was collected, and afterwards for the period required by law (e.g. tax regulations) or until consent is withdrawn — whichever is longer.

5. Recipients of data

Data may be transferred to entities supporting our business, in particular: the hosting provider [provider name], the provider of the form-sending tool [provider name or own system], and — only in the form of anonymised or aggregated statistics — providers of analytics and advertising tools (Google Analytics, Google Ads, Meta).

6. Cookies and analytics/advertising tools

The website uses cookies to make the site work. We use them for analytics and advertising performance measurement only after consent is given.

On your first visit we show a banner with two equally weighted options: "Accept" and "Reject". Until consent is given, analytics and advertising tools run in a restricted mode (Google Consent Mode): they store no cookies or identifiers and cannot recognise you. We remember your choice in your browser and you can change it at any time via "Cookie settings" in the footer.

The tools we use:

• Google Tag Manager, ID GTM-N5GSWPQ9. A tag manager that loads the other tools.
• Google Analytics 4, ID G-YXVL6D3M6R. Visit statistics. After consent it stores the _ga and _ga_* cookies, by default for 2 years.

We embed no third-party fonts, maps or videos. Typefaces are served from our own server, so simply opening a page does not pass your IP address to third parties.

7. Rights of data subjects

Every person has the right to access their data, to rectify, erase or restrict its processing, to data portability, to object to processing, and to lodge a complaint with the President of the Personal Data Protection Office (UODO). Consent to processing for marketing purposes may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

8. Voluntary provision of data

Providing data in the contact form is voluntary but necessary to respond to the inquiry.

9. Contact

In matters concerning personal data protection you can contact us at: [e-mail] or in writing at: [registered office address].