Privacy Policy

Last updated: September 28, 2026

1. General Information

This Privacy Policy sets out the rules for processing personal data in connection with the use of this website. The Controller applies the principles of lawfulness, fairness, transparency, purpose limitation, and data minimization in accordance with the GDPR regulations.

2. Data Controller

The controller of personal data processed through this website is:

Transformatory Sp. z o.o.
Święty Marcin St. 29/8
61-806 Poznań
Poland
VAT ID: PL7831867805

Contact regarding personal data protection: dominik.transformatory@gmail.com

3. Purposes and Legal Bases of Processing

Personal data may be processed for the purpose of:

• handling inquiries and conducting correspondence submitted via the contact form or e-mail;
• taking steps at the request of the data subject prior to entering into a contract;
• performing a contract, where applicable;
• fulfilling legal obligations incumbent on the Controller;
• ensuring the security, stability, and proper operation of the website;
• establishing, exercising, or defending legal claims.

Depending on the specific purpose, the legal basis for processing may be Article 6(1)(b), (c), or (f) of the GDPR.

If processing is based on the Controller's legitimate interest pursuant to Article 6(1)(f) of the GDPR, this interest consists in ensuring website security, handling inquiries, conducting correspondence, and protecting the rights and interests of the Controller.

4. Contact Form and Correspondence

If you use the contact form or contact us via e-mail, we may process the data provided by the user:

• name and surname;
• e-mail address;
• phone number;
• company name, if provided;
• content of the inquiry or correspondence;
• other information voluntarily provided by the user.

Providing data is voluntary, but providing certain information may be necessary to answer or handle the inquiry.

5. Server Logs and Technical Data

When using the website, the server may automatically process technical data necessary to ensure its proper and secure operation:

• IP address;
• date and time of connection;
• addresses of visited pages;
• browser type and version;
• operating system and device information;
• technical information regarding the connection.

This data may be stored in server logs and processed pursuant to Article 6(1)(f) of the GDPR, i.e., the legitimate interest of the Controller consisting in ensuring website security, preventing attacks, diagnosing technical problems, and ensuring service availability.

6. Cookies and Similar Technologies

The website uses technical cookies and similar mechanisms to the extent necessary for the proper operation of the service.

They may serve to ensure basic website functions and remember the selected language version, if required by the applied technical solutions.

The website does not use unnecessary analytical or advertising cookies unless they are clearly indicated and activated only after obtaining the user's appropriate consent.

7. Google Maps

A Google Maps map may be available in the contact section of the website. To protect privacy, the map is not automatically loaded when opening the page.

Connection to Google servers and the transmission of technical data, including the IP address, takes place only after the user actively selects the option to load the map.

In cases required by applicable regulations, map activation takes place based on the user's consent, in accordance with Article 6(1)(a) of the GDPR.

More information on Google's privacy policy can be found in Google's Privacy Policy .

8. Recipients of Personal Data

Personal data may be transferred to entities supporting the Controller in running the website and handling inquiries:

• hosting and server providers;
• e-mail and IT service providers;
• entities providing technical support for the website;
• other entities processing data on behalf of the Controller, if necessary.

These entities process data solely to the extent necessary to provide their services and in accordance with applicable data protection regulations.

9. Data Transfers Outside the European Economic Area

If, in connection with the use of services utilized by the website, personal data is transferred outside the European Economic Area, such transfer takes place solely on terms permitted by the GDPR and with the application of safeguards required by law.

10. Retention Period

Personal data is stored for no longer than necessary to achieve the purpose for which it was collected, taking into account legal obligations regarding data retention.

Data provided via the contact form or e-mail is stored for the period necessary to handle the inquiry and conduct further correspondence, and if necessary, also for the period required to establish, exercise, or defend legal claims.

If legal provisions require longer storage of specific data, such data will be stored for the period resulting from those provisions.

11. Automated Decision-Making and Profiling

Personal data processed via the website is not used to make solely automated decisions toward users that would produce legal effects or similarly significantly affect them.

Profiling of users for such a purpose is not carried out via the website.

12. Rights of Data Subjects

Under the rules set out in the GDPR, the user has the right to:

• access their personal data and receive a copy thereof;
• rectify incorrect or complete incomplete data;
• request the erasure of personal data;
• request restriction of data processing;
• data portability, in cases specified by the GDPR;
• object to data processing based on the Controller's legitimate interest;
• withdraw consent at any time, if processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, please contact the Controller using the contact details provided in this Privacy Policy.

13. Right to Lodge a Complaint

If the user considers that the processing of their personal data violates data protection regulations, they have the right to lodge a complaint with a competent supervisory authority.

14. Changes to the Privacy Policy

The Privacy Policy may be updated in the event of changes in website operation, services used, data processing methods, or applicable legal provisions. The current version of the Privacy Policy is published on this page.