// Legal
Privacy Policy
// Legal Information
Privacy Policy
Effective from 01.02.2026
I. Personal Data Controller
INVENTRONICS sp. z o.o., with its registered office in Jawor, acts as the personal data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
Registration details:
- Name: INVENTRONICS spolka z ograniczona odpowiedzialnoscia
- Address: ul. Kuziennicza 10D, 59-400 Jawor, Poland
- Tax ID (NIP): PL6951424955
- KRS: 0000149329
- Share capital: PLN 1,450,000
Contact details:
- Email: [email protected]
- Websites: www.inventronics.eu, www.inventronics.com.pl
II. Scope of Application
This Privacy Policy applies to:
- customers and contractors of the Controller in B2B relationships,
- persons designated as contact persons by customers and contractors,
- users of the website and online store,
- persons contacting the Controller by inquiry or form,
- recipients of marketing communication.
III. Purposes and Legal Bases of Processing
The Controller processes personal data for the following purposes:
| # | Purpose of processing | Legal basis | Retention period |
|---|---|---|---|
| 1 | Performance of contracts – conclusion and performance of contracts for the sale of Goods and provision of Services | Art. 6(1)(b) GDPR | Contract term plus limitation period for claims |
| 2 | Responding to inquiries – contact in response to inquiries sent by forms, email or telephone | Art. 6(1)(b) GDPR | Until correspondence is completed or 3 years |
| 3 | Legal obligations – issuing invoices, including KSeF, accounting documentation and tax reporting | Art. 6(1)(c) GDPR | 5 years from the end of the tax year |
| 4 | Direct marketing – informing about the Controller’s products and services | Art. 6(1)(f) GDPR | Until an objection is raised |
| 5 | Analytics – service quality improvement and process monitoring | Art. 6(1)(f) GDPR | 3 years |
| 6 | Defence against claims – establishment, exercise or defence of claims | Art. 6(1)(f) GDPR | Limitation period for claims |
| 7 | Promotion of services – newsletters and electronic advertising | Art. 6(1)(a) GDPR | Until consent is withdrawn |
IV. Categories of Processed Data
Depending on the purpose of processing, the Controller may process the following categories of data:
Identification data:
- first name and surname,
- business position,
- company name.
Contact data:
- business email address,
- business telephone number,
- correspondence address.
Company data:
- tax ID, REGON, KRS,
- registered office address,
- bank account number.
Technical website data:
- IP address,
- cookie identifiers,
- device and browser data.
V. Right to Object
You may exercise the right to object to the processing of personal data at any time, in particular to:
- processing of data for direct marketing purposes,
- processing of data based on the Controller’s legitimate interest.
The Controller will cease processing the data unless it demonstrates compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject.
Contact for objections: [email protected]
VI. Recipients of Data
Personal data may be disclosed to the following categories of recipients:
Processors acting under data processing agreements
- IT and hosting service providers,
- accounting and financial service providers,
- legal service providers,
- cloud system operators and cloud storage providers,
- archiving companies.
Entities acting under applicable law
- tax authorities, including access to KSeF,
- inspection and supervisory authorities,
- courts and law enforcement authorities.
Other recipients
- postal and courier operators,
- payment operators,
- business information offices.
VII. Your Rights Under GDPR
You have the following rights:
| Right | Description |
|---|---|
| Access to data | The right to obtain information about processed data and receive a copy of it. |
| Rectification | The right to correct inaccurate data or complete incomplete data. |
| Erasure | The right to request data deletion, also known as the right to be forgotten. |
| Restriction of processing | The right to request restriction of data processing. |
| Data portability | The right to receive data in a structured format. |
| Objection | The right to object to processing. |
| Withdrawal of consent | The right to withdraw consent at any time. |
| Complaint | The right to lodge a complaint with the President of the Personal Data Protection Office in Poland. |
Exercising your rights: To exercise the above rights, contact us at [email protected].
VIII. Requirement or Voluntary Nature of Providing Data
| Context | Nature | Consequence of not providing data |
|---|---|---|
| Conclusion and performance of a contract | Necessary | Contract cannot be concluded |
| Issuing an invoice | Necessary | Invoice cannot be issued |
| Responding to an inquiry | Necessary | Response cannot be provided |
| Newsletter and marketing | Voluntary | No promotional information will be received |
IX. Transfers of Data to Third Countries
Due to the use of cloud data storage and collaboration tools, personal data may be transferred to the following entities:
| Entity | Scope | Transfer basis |
|---|---|---|
| Google (Google Workspace) | Email, documents, calendar | Standard Contractual Clauses (SCC) |
| Microsoft (Microsoft 365) | Documents, communication | Standard Contractual Clauses (SCC) |
| GitHub (Microsoft) | Code repositories | Standard Contractual Clauses (SCC) |
Data transfers are made on the basis of standard data protection clauses approved by the European Commission (Decision 2021/914), ensuring an appropriate level of personal data protection in accordance with GDPR.
X. Cookies and Tracking Technologies
What are cookies?
Cookies are small text files saved on the user’s device when using a website.
Types of cookies used
| Type | Purpose | Retention period |
|---|---|---|
| Necessary | Correct website operation and security | Session / up to 1 year |
| Analytics | Visit statistics and website improvement, including Google Analytics | Up to 2 years |
| Functional | Remembering user preferences | Up to 1 year |
Managing cookies
You may change cookie settings in your browser at any time, including blocking cookies or deleting saved files. Instructions are available in browser settings.
Note: blocking some cookies may affect website functionality.
XI. Data Security
The Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or modification.
Safeguards include in particular:
- encrypted data transmission (HTTPS/TLS),
- multifactor authentication (MFA),
- role-based access control,
- regular backups,
- employee training in information security,
- security incident monitoring and response.
XII. Changes to this Privacy Policy
The Controller reserves the right to amend this Privacy Policy. Users will be informed about material changes by:
- a notice on the website,
- an email message, for persons whose data we process.
We recommend reviewing the Privacy Policy regularly.
XIII. Contact
If you have questions about personal data processing or exercising GDPR rights, please contact:
INVENTRONICS sp. z o.o.
ul. Kuziennicza 10D
59-400 Jawor, Poland
Email: [email protected]
XIV. Legal Basis of this Document
This Privacy Policy has been prepared in accordance with:
- Articles 13 and 14 GDPR – information obligation,
- Article 6 GDPR – legal bases for processing.