GDPR — information notice

1. Data controller

The controller is Debesis Sp. z o.o., ul. Geodetów 176, 05-500 Piaseczno. Privacy contact: biuro@debesis.pl.

2. Purposes and legal basis

We process data to handle inquiries, perform contracts, market our services, and ensure security. The legal basis is Art. 6(1)(b) (contract), Art. 6(1)(a) (consent), and Art. 6(1)(f) (legitimate interest).

3. Data scope

Depending on your interaction with the site, we may process identification and contact data, inquiry content, technical data (IP, logs), and cookie preferences.

4. Data recipients

We may share data with service providers acting on our behalf (hosting, analytics, communication tools). They process data under data processing agreements.

5. Retention periods

We keep data only as long as necessary for the purpose and as required by law. Marketing data is processed until consent is withdrawn.

6. Your rights

You have the right to access, rectify, erase, restrict processing, object, and request data portability. You can also withdraw consent at any time.

7. Transfers outside the EEA

If we use providers outside the EEA, we apply appropriate safeguards, including standard contractual clauses.

8. Complaint to the authority

If you believe your data is processed unlawfully, you may lodge a complaint with your supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

9. Updates

We may update this notice to reflect legal or operational changes. The current version is always available on this page.