Privacy policy

The controller of your personal data is Polski Serwis Wrzecion Spółka z ograniczoną odpowiedzialnością (Polski Serwis Wrzecion Sp. z o.o.), a limited liability company under Polish law, hereinafter “we” or “us”.

• registered office and correspondence address: ul. Wrzosowa 6, Przedmość, 46-320 Praszka, Poland;
• workshop and delivery address: ul. Projektowana 1, 46-320 Przedmość, Poland;
• entered in the register of entrepreneurs of the National Court Register (KRS) kept by the District Court in Opole, 8th Commercial Division of the National Court Register (Sąd Rejonowy w Opolu, VIII Wydział Gospodarczy Krajowego Rejestru Sądowego), under KRS number 0000883805;
• tax ID (NIP) 576 159 02 94, REGON (statistical number) 388159487, share capital PLN 5,000.00;
• e-mail: biuro@pswrzecion.com, phone: +48 608 035 836.

Full company details are available on the Legal notice page.

This policy applies to people who visit the pswrzecion.com website or contact us by e-mail, by phone or via the “Describe the problem” form. It also applies to contact persons at our customers and suppliers, to customers and suppliers who are sole traders, and to people who follow our company page on LinkedIn. Company data (name, tax ID, registered office address) is not personal data unless the business is run by a natural person.

Abbreviations: GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, i.e. the General Data Protection Regulation; PKE — the Polish Electronic Communications Law of 12 July 2024 (ustawa z 12 lipca 2024 r. — Prawo komunikacji elektronicznej); EEA — the European Economic Area (the Member States of the European Union plus Iceland, Liechtenstein and Norway).

For any matters relating to personal data, including if you wish to exercise your rights, please contact us:

• by e-mail: biuro@pswrzecion.com (ideally with the subject line “Personal data”);
• by post: Polski Serwis Wrzecion Sp. z o.o., ul. Wrzosowa 6, Przedmość, 46-320 Praszka, Poland.

We have not appointed a data protection officer — the law does not require one for our business (Article 37 GDPR). We handle personal data matters ourselves, at the addresses given above.

When you browse the website. You do not need to provide any data. The server hosting the website automatically records technical information about every request in its log files. This includes, among other things, the IP address, the date and time, the address of the page requested, the server’s response code and response size, the address of the page you came from (the “Referer”) and details of your browser and operating system (the “User-Agent”). The hosting provider protects the server with a firewall which, on the basis of this information, may block an IP address that sends a very large number of requests resulting in errors.

Similar logs, but without the address of the page you came from, are recorded by our own server that hosts the test version of the website (test.pswrzecion.com). This server also rejects excessive requests from a single IP address.

We do not combine the logs with other data or use them to identify visitors. The website contains no analytics or advertising scripts. The hosting provider may compile aggregate visitor statistics from the logs (e.g. the number of visits to individual pages), which are available only in the administration panel.

When you contact us. We process the data you provide to us: usually your first name and surname, company name, phone number, the e-mail address you write from and the content of your message — e.g. the details from the spindle’s rating plate and a description of the fault. When you call us, we see your phone number. We do not record phone calls.

When we work together on an order. This covers the receipt, diagnostics, repair and return of a spindle, work at the customer’s premises (removal, installation, commissioning) and billing. In this case we process the data of contact persons: first name and surname, business e-mail address and phone number, job title or role, and company name. For shipping we also need the delivery address and the details of the person receiving the consignment. If you are a sole trader, we also process the details of your business needed for the contract, invoice and payment (e.g. name, address, tax ID, bank account number).

Where we obtain data. Most often directly from you. If you work for or represent one of our customers or suppliers, your data may have been passed to us by that company — e.g. when it names you as the contact person for an order, a delivery or on-site work. In that case we usually receive business details: first name and surname, business e-mail address and phone number, job title and company name, and for shipments also the delivery address and the details of the person receiving the consignment.

In such cases, this policy constitutes the information we are required to provide where we have not obtained your data directly from you (Article 14 GDPR). We will provide this information, or a link to it — e.g. in an e-mail footer or in an order acknowledgement — at the latest when we first contact you or, if we do not contact you before then, within one month of receiving the data. If we pass your data to a carrier even earlier, we will inform you at the latest when the data is first disclosed to it (Article 14(3) GDPR).

The “Describe the problem” form on the Contact page neither sends any data to our server nor stores it.

• From the data you enter (spindle manufacturer, model and rotational speed, symptoms, name and company, phone number), it composes a ready-made e-mail to wioleta@pswrzecion.com (sales and customer service). It opens this message in your e-mail program or, if you have set things up that way, in webmail in your browser — in which case your webmail provider may save a draft of the message before it is sent.
• Your data reaches us only when you send this message from your own mailbox. Before sending, you can edit it or decide not to send it at all.
• The message preview works only in your browser. The “Copy text” button copies the text to your device’s clipboard — not to us.
• The e-mail you send passes through your e-mail provider to our company mailbox in the pswrzecion.com domain. Along with the content, we receive your e-mail address.

The e-mail addresses and phone numbers on the website work in a similar way: clicking them opens your e-mail program or calling app, and the website does not send anything in the process.

We process data only for the purposes and on the legal bases set out below. Where the basis is Article 6(1)(f) GDPR, we also state our legitimate interest, i.e. the reason for the processing.

• Responding to enquiries and correspondence (e-mail, phone, form) — Article 6(1)(f) GDPR. Our legitimate interest is to answer questions addressed to the company, prepare quotations and hold discussions with customers. If you enquire about a service on your own behalf — e.g. as a sole trader — the legal basis is Article 6(1)(b) GDPR: steps taken at your request prior to entering into a contract.
• Retaining enquiries that did not result in an order — Article 6(1)(f) GDPR. Our legitimate interest is to be able to respond quickly and refer back to earlier arrangements if you come back to us about the same spindle.
• Concluding and performing contracts — receipt, diagnostics and repair of the spindle, measurement records and reports, work at the customer’s premises, return of the spindle. Where the contract is concluded with you — Article 6(1)(b) GDPR. Where you are a contact person for a customer or supplier — Article 6(1)(f) GDPR. Our legitimate interest is the efficient performance of the contract with the company you represent or work for, and communication with its representatives regarding the order.
• Invoicing, accounting and tax — Article 6(1)(c) GDPR, i.e. compliance with our legal obligations under accounting and tax law, including the Accounting Act (ustawa o rachunkowości), the VAT Act (ustawa o podatku od towarów i usług) and the Tax Ordinance (Ordynacja podatkowa).
• Establishing, exercising or defending legal claims — Article 6(1)(f) GDPR. Our legitimate interest is to be able to demonstrate what was agreed and carried out, and when, e.g. in the event of a complaint or a billing dispute.
• Operation and security of the website (server logs, protection against attacks and abuse) — Article 6(1)(f) GDPR. Our legitimate interest is the proper functioning and protection of the website, e.g. by temporarily blocking IP addresses that send a very large number of requests resulting in errors.
• Company page on LinkedIn — Article 6(1)(f) GDPR. Our legitimate interest is to provide information about the company and its work and to communicate with people interested in it (see Our company page on LinkedIn).
• Displaying the Google map — your consent, given by clicking “Show Google map” (Article 6(1)(a) GDPR; for Google’s cookies, Article 399(1) PKE). You can withdraw your consent by closing or reloading the page and deleting Google’s cookies in your browser. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal (see Google map).

We do not send marketing communications or run a newsletter, and we do not sell data.

Only those members of our staff who need the data for their work have access to it. Data may also be disclosed to:

• our website and e-mail hosting provider — VINAO Sp. z o.o., ul. Styczniowa 4A, 46-320 Praszka, Poland (KRS 0001084972, NIP 576 159 61 73), the company operating the vinao.pl service, whose servers are located in the European Economic Area. It hosts our website and e-mail on its servers and processes data on our behalf, as a processor. The provider also protects its servers with a firewall — to that extent it may process IP addresses and request information for its own purposes, as an independent controller;
• our accountancy firm — Biuro Rachunkowe “Cyfra” Usługi Consultingowe Sp. z o.o., with its registered office at Ożarów 231B, 98-345 Mokrsko, Poland (KRS 0000705917, NIP 576 158 32 71; office in Praszka: ul. Listopadowa 14, 46-320 Praszka). It keeps our accounts and, in doing so, processes data on our behalf, as a processor;
• courier companies and carriers — DHL, InPost, DPD and Raben, when we ship or collect a spindle; they receive the contact person’s details and the delivery address. We transport some spindles ourselves — in that case the data stays with us;
• banks — for payments;
• law firms and tax advisers — where necessary, when we use their services, e.g. in billing matters or disputes;
• public authorities, e.g. bodies of the National Revenue Administration (Krajowa Administracja Skarbowa, KAS) — the head of the tax office and the Head of KAS, who operates the National e-Invoicing System (Krajowy System e-Faktur, KSeF) — as well as courts or the police, only where required by law;
• Google Ireland Limited — only if you click “Show Google map” on the Contact page. We are jointly responsible with Google for loading the map and transmitting data from your browser, while Google carries out any further processing as an independent controller, under its own terms (see Google map).

Courier companies and carriers — when delivering consignments — as well as banks, law firms, tax advisers and public authorities process data as independent controllers.

The website and e-mail run on servers in the European Economic Area. We do not transfer your data outside the EEA ourselves.

Data may, however, be transferred outside the EEA if you load the Google map. For users in the EEA, the service is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), and Google itself may transfer data to Google LLC in the USA. Google LLC participates in the EU–US Data Privacy Framework. The European Commission has determined that companies participating in this framework ensure an adequate level of data protection (Commission Implementing Decision (EU) 2023/1795 of 10 July 2023), so transfers may take place on that basis (Article 45 GDPR). Google also uses standard contractual clauses (Article 46(2)(c) GDPR). Details are set out in the Google Privacy Policy (opens in a new tab).

LinkedIn may also transfer its users’ data outside the EEA under its own terms (see Our company page on LinkedIn).

• Enquiries that did not result in an order — for 12 months from the last contact, unless you successfully object earlier. If an enquiry leads to an order, we keep it in the same way as order-related data.
• Order-related data (correspondence, arrangements, measurement records and reports) — for the duration of the contract and thereafter until the relevant claims become time-barred: for claims under a contract for specific work (umowa o dzieło), which a repair usually is, 2 years from the return of the spindle (Article 646 of the Civil Code, Kodeks cywilny); for claims under the statutory warranty (rękojmia) and the guarantee, until the end of the respective period (our repair guarantee normally lasts 6 months, or 12 months for an additional fee, on the terms agreed when the order is placed) and, if a complaint is made during that period, until it has been resolved and any claims arising from it have become time-barred; for other claims related to business activity, 3 years (Article 118 of the Civil Code). The limitation period ends on the last day of the calendar year. If the limitation period is interrupted or suspended, we keep the data for correspondingly longer, and if proceedings are pending, until they are finally concluded. Documents that constitute accounting records are kept in the same way as invoices.
• Invoices and accounting documents — until the expiry of the limitation period for the tax liability, as a rule 5 years from the end of the calendar year in which the tax payment deadline fell (Article 86 § 1 in conjunction with Article 70 § 1 of the Tax Ordinance; Article 112 of the VAT Act). If the limitation period is suspended or interrupted, we keep them for correspondingly longer. In any event, we keep them for no less than 5 years from the beginning of the year following the financial year in which the transactions were finally settled (Article 74(2) of the Accounting Act).
• Website server logs — for the log rotation period set for our hosting account. They are then deleted.
• Hosting firewall events (IP address, time, reason for the block) — for as long as the hosting provider determines. The IP address block itself usually lasts 24 hours.
• Logs of the test version of the website (test.pswrzecion.com, our own server) — until overwritten by newer entries: the logs have a fixed size limit and the oldest entries are deleted automatically.
• Data visible on our LinkedIn page (e.g. comments) — until you or we delete it.
• Data processed on the basis of our legitimate interest — no longer than until you successfully object (see Right to object).

The website does not store any entries in browser storage (see Cookies and browser storage). We do not store your consent to loading the Google map.

You have the following rights:

• access to your data and to a copy of it (Article 15 GDPR);
• rectification of inaccurate data and completion of incomplete data (Article 16 GDPR);
• erasure of your data, e.g. where it is no longer needed or where you have successfully objected (Article 17 GDPR);
• restriction of processing, e.g. while the accuracy of the data is being verified (Article 18 GDPR);
• data portability, i.e. receiving your data in a commonly used electronic format or having it transmitted to another controller — this applies to data you have provided to us and which we process by automated means on the basis of a contract with you (Article 20 in conjunction with Article 6(1)(b) GDPR);
• withdrawal of consent at any time — this applies to loading the Google map (see Google map). Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal (Article 7(3) GDPR);
• objection to processing based on our legitimate interest — we describe this right separately, in the section Right to object.

To exercise your rights, write to biuro@pswrzecion.com or to our registered office address (see Contact on data protection matters). Exercising your rights is free of charge. We may charge a reasonable fee for further copies of your data (Article 15(3) GDPR) and, where requests are manifestly unfounded or excessive, we may charge a fee or refuse to act on them (Article 12(5) GDPR).

We will respond without undue delay and in any event within one month. In more complex cases, this period may be extended by a further two months — if so, we will let you know. If we are unsure of your identity, we may ask you for additional information to confirm it.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on Article 6(1)(f) GDPR (Article 21(1) GDPR). This applies to:

• responding to enquiries and correspondence, and retaining enquiries that did not result in an order;
• communication with the contact persons of our customers and suppliers in connection with orders;
• establishing, exercising and defending legal claims;
• website logs and security;
• running our company page on LinkedIn.

Once you object, we will stop processing your data for the purpose concerned, unless we demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims.

You can lodge an objection by e-mail to biuro@pswrzecion.com or by post to our registered office address.

If you believe that we process your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (UODO; Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl (opens in a new tab)). If you live or work in another EEA country, or the alleged infringement took place there, you may also contact the data protection authority of that country (Article 77 GDPR).

We would, however, encourage you to contact us first — we will do our best to resolve the matter promptly.

• Providing data in an enquiry is voluntary, but without it we will not be able to respond.
• Providing the data needed to conclude and perform a contract is a condition of concluding it — without it we cannot accept the order.
• Providing invoicing data is a statutory requirement (Article 106e of the VAT Act) — without it we cannot issue an invoice.
• In the “Describe the problem” form, the following fields are required: spindle manufacturer, description of the symptoms, name and company, and phone number. Without them the form will not prepare the message — we would be unable to assess the fault or call you back. Instead of using the form, you can simply call us or send us an e-mail.
• Your browser sends your IP address and other technical data automatically — without them the website could not be displayed.
• Consent to loading the Google map is entirely voluntary. Without it you can still use the whole website, and the workshop address is given on the Contact page.

We do not make decisions about you based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you. Nor do we create profiles of website visitors.

The hosting provider’s firewall may automatically block an IP address that, within a short period, sends a very large number of requests resulting in errors. The block protects the website against attacks. Its only effect is that the website cannot be accessed from that address, usually for 24 hours.

Our website does not set any cookies. We do not use analytics tools (e.g. Google Analytics), advertising pixels or social media plug-ins. We load fonts, scripts, photos and videos from our own server. The only exception is the Google map, which loads only after you click.

In accordance with Article 399 PKE (the Polish Electronic Communications Law of 12 July 2024), we explain what the website stores on your device and what it reads from it:

• Intro animation — it is shown only when you come to the website from elsewhere (e.g. from a search engine, a link or a bookmark). To recognise this, a script checks the address of the previous page, which the browser passes on by itself (document.referrer): if it is one of our pages, the animation is not repeated. We do not store anything on your device in the process.
• Adapting the website to your device — on every page, a script checks the system setting for reducing animations (reduced motion), the pointer type (mouse or touchscreen), the width of the browser window and whether the browser supports WebGL graphics. For the latter, it reads the name of the graphics card (in some browsers, its exact model) to determine whether graphics are hardware-accelerated. On pages with 3D graphics (the home page and the Company page), it also checks the number of processor cores, the approximate amount of memory (RAM) and the screen pixel density in order to adjust the quality of the animation. This information stays in your browser: we do not store it or send it to anyone.
• Browser cache — the browser stores downloaded website files (fonts, scripts, photos) so that subsequent visits are faster. The server tells it how long to keep them: up to one year for files whose names never change, and one week for photos and videos. The server may also store an instruction in the browser that the website should only be opened over a secure HTTPS connection (HSTS). You can clear the cache in your browser settings.
• Clipboard — the website writes text to the clipboard only when you click one of the “Copy” or “Copy text” buttons on the Contact page.

We do not ask for consent to these storage and access operations. They serve solely to make the page you open work and display correctly on your device, and the information is not sent anywhere. We consider that they fall within the exemptions in Article 399(3) PKE: the cache and HSTS serve the transmission of the page (point 1), and the others serve to provide the service you have requested, i.e. the page being displayed (point 2).

You can delete or block site data in your browser settings at any time. The website will continue to work.

Cookies are set only by Google, and only with your consent, i.e. after you click “Show Google map” (see Google map).

On the Contact page, you first see a schematic graphic, prepared by us, showing the workshop address and coordinates (51.0911° N, 18.4370° E). Until you click “Show Google map”, your browser does not connect to Google’s servers and Google receives no data.

When you click, the page loads the map from Google’s servers, together with Google scripts, fonts and images. Your browser then transmits to Google, among other things:

• your IP address;
• information about your browser and device (User-Agent, language);
• the address of our website — only the domain pswrzecion.com, without the address of the specific page.

Google may also store its own cookies or similar data on your device and read data stored there previously (e.g. if you use a Google account).

Your consent. By clicking “Show Google map”, you consent to the map being loaded, to this data being transmitted to Google and to Google storing cookies on your device (Article 6(1)(a) GDPR, Article 399(1) PKE). Your consent applies only to the current page view — we do not store it, so on your next visit the map will again load only after you click. You can withdraw it at any time by closing or reloading the page and deleting Google’s cookies in your browser. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal (Article 7(3) GDPR).

Who is responsible for the data. We are responsible for loading the map and transmitting data from your browser to Google (IP address, browser information, website domain) — to that extent jointly with Google Ireland Limited (Article 26 GDPR). You may address any requests concerning this to us (see Contact on data protection matters). Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible as an independent controller for any further processing of this data — including Google’s cookies, their purposes and retention periods. Google’s rules are set out in the Google Privacy Policy (opens in a new tab). Data may also be transferred to the USA (see Transfers of data outside the EEA).

If you prefer not to connect to Google, use the address or coordinates given on the page — you can enter them into any navigation app.

The “Directions map” and “Open in Google Maps” links (and, with JavaScript disabled, also the “Show Google map” button) open Google Maps in a new tab. From that point on, you are using a Google service under Google’s terms.

In the News section and on the home page, we publish posts from our company page on LinkedIn. Their texts and photos are copied to and stored on our server, so the website does not load anything from LinkedIn — there are no plug-ins, share buttons or tracking codes.

The “Read on LinkedIn” and “LinkedIn ↗” links, as well as the links to Google Maps and the KRS search, open these services in a new tab. Only when you click does such a service receive data from your browser (e.g. your IP address), and as the referring page it sees only the domain pswrzecion.com. From that point on, the terms of the service concerned apply, e.g. the LinkedIn Privacy Policy (opens in a new tab).

We run a company page on LinkedIn. If you follow it, or react to or comment on our posts, we see the data you make available on LinkedIn, e.g. your name, profile photo and profile description, and the content of your comment. We process this data on the basis of Article 6(1)(f) GDPR — our legitimate interest is to provide information about the company and to communicate with people interested in it.

LinkedIn provides us with page statistics only in aggregate form. With regard to these statistics, we are joint controllers with LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland), under the joint controller arrangement set out in the Page Insights Joint Controller Addendum (opens in a new tab) (Article 26 GDPR). LinkedIn is responsible for all other processing of data on its platform, including transfers outside the EEA, under its own privacy policy.

Data visible on our page, e.g. your comments, remains there until you or we delete it. You can exercise your rights regarding this data with us or directly with LinkedIn.

We update this policy whenever the website or the way we process data changes. The current version is always available on this page, and the date next to “Effective from” at the top shows when it took effect.

If we add tools to the website that store information on your device or read information from it (e.g. cookies), we will first describe them here and, where required by law, ask for your consent.