1. Data Controller

The controller of your personal data is PRECIMET H.C.E. Sp. z o.o. with its registered office in Łódź (92-735), ul. Pomorska 555, entered into the National Court Register (KRS) kept by the District Court for Łódź-Śródmieście, 20th Commercial Division, under KRS number 0000587797, NIP: 7282804918, REGON: 363114171, share capital: 101,000.00 PLN (hereinafter "we", "us", "controller").

2. Contact Details

PRECIMET H.C.E. Sp. z o.o.
ul. Pomorska 555
92-735 Łódź, Poland
Contact form: oem.precimet.pl/en/contact
Phone: +48 422 080 402

3. Purposes and Legal Bases of Processing

Purpose	Legal Basis (GDPR)	Categories of Data
Handling quotation / contact requests (form, e-mail, phone), including recording the request in our CRM system	Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures)	First name, last name, company name, e-mail, phone, message content, attachments
Fulfilment of orders and commercial cooperation	Art. 6(1)(b) GDPR (performance of a contract)	Identification data, address data, bank details, order history
Sending commercial information / newsletter (with explicit consent)	Art. 6(1)(a) GDPR (consent)	E-mail, first name, preferences
Handling claims and protection of legal interests	Art. 6(1)(f) GDPR (legitimate interest)	Data necessary to pursue claims
Ensuring website security (server logs, bot protection)	Art. 6(1)(f) GDPR (legitimate interest)	IP address, user agent, visit time, requested resources

4. Recipients of Data

Your data may be disclosed to entities processing data on our behalf under data processing agreements (Art. 28 GDPR), in particular:

hosting and IT service providers (servers, backups, monitoring),
contact form and e-mail delivery providers: Cloudflare, Inc. (receiving the form) and Resend (delivering the message),
the provider of our CRM system, in which we record contact form requests (contact details, company name, message content) in order to handle them and for further cooperation,
accounting / law firms (to the extent necessary for accounting and legal support),
authorities entitled under applicable law (courts, prosecutors, supervisory bodies).

We do not sell or disclose personal data to third parties for marketing purposes without your consent.

5. International Transfers

Contact form data may be transferred to the United States, where Cloudflare, Inc. and Resend are based. Such transfers rely on the mechanisms set out in Chapter V GDPR — the European Commission's adequacy decision on the EU-US Data Privacy Framework or standard contractual clauses (Art. 46(2)(c) GDPR). Apart from this, we do not transfer personal data to third countries or international organisations.

6. Data Retention Periods

Contact form / quotation request data: until the end of commercial negotiations, then for 3 years for record-keeping and potential claims.
Commercial contract / invoice data: 5 years from the end of the calendar year in which the tax payment deadline expired (Art. 86 VAT Act, Art. 74 Tax Ordinance Act).
Server logs / analytics data: 12 months.
Newsletter data: until consent is withdrawn.

7. Your Rights

You have the right to:

access your data (Art. 15 GDPR),
rectification of inaccurate data (Art. 16 GDPR),
erasure ("right to be forgotten") — in cases under Art. 17 GDPR,
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR),
object to processing based on legitimate interest (Art. 21 GDPR),
withdraw consent at any time (if processing based on Art. 6(1)(a) GDPR) — withdrawal does not affect lawfulness of processing before withdrawal.

To exercise the above rights, contact us via the contact form, by phone at +48 422 080 402, or by post at the address in section 2.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, if you consider that the processing of your personal data violates the GDPR.

9. Cookies and Similar Technologies

Our website uses only technically necessary cookies (session, security, language preferences). We do not use analytical cookies (Google Analytics, Matomo, etc.), advertising or tracking cookies without your explicit consent. If we introduce analytical tools in the future, we will ask for consent via a cookie banner.

You can block or delete cookies in your browser settings — this may affect the functioning of the contact form and language switcher.

10. Data Security

We implement appropriate technical and organisational measures (TLS 1.2+ encryption in transit, principle of least privilege, regular software updates, backups) to protect data against unauthorised access, loss, alteration or disclosure.

11. Changes to This Policy

This privacy policy may be updated. The current version is always available at this address. We will inform about material changes on the homepage or by e-mail (if we have your contact).

Effective date: 9 October 2026