GRAFS Technology
Last updated: April 28, 2025
1. Data Controller
The controller of your personal data is GRAFS Technology, located at:
Hryniewicze 16, 15-378 Białystok, Poland.
Tax ID (NIP): 9661926377
Contact: biuro@grafs.tech, phone: +48 609 743 771.
2. Scope and Purpose of Data Processing
We process your personal data for the following purposes:
- Responding to inquiries sent via contact forms.
- Handling orders, services, and offers.
- Sending newsletters and marketing communications (with your consent).
- Analyzing statistics and improving website functionality (e.g., via cookies).
- Establishing or defending against legal claims.
- Complying with legal obligations.
3. Legal Basis for Processing
We process your data based on:
- Article 6(1)(b) GDPR – processing necessary for the performance of a contract or pre-contractual measures.
- Article 6(1)(c) GDPR – compliance with a legal obligation.
- Article 6(1)(f) GDPR – legitimate interests pursued by the controller.
- Article 6(1)(a) GDPR – your consent (for marketing purposes).
4. Data Recipients
Your data may be shared with:
- IT, hosting, marketing, accounting, and legal service providers.
- Payment operators, couriers, and logistics companies.
- Entities authorized by law.
All entities processing data on our behalf are required to maintain data security and confidentiality.
5. Data Transfers Outside the EEA
As a rule, we do not transfer your personal data outside the European Economic Area (EEA). Should this occur, appropriate safeguards (e.g., standard contractual clauses) will be in place.
6. Data Retention Period
We store your data:
- For the duration of the contract and until claims become time-barred (up to 6 years).
- Until withdrawal of consent (for consent-based processing).
- As required by applicable legal regulations (e.g., tax laws).
7. Your Rights
You have the right to:
- Access your data,
- Rectify your data,
- Erase your data (“right to be forgotten”),
- Restrict processing,
- Data portability,
- Object to data processing,
- Withdraw consent at any time (without affecting prior lawful processing),
- Lodge a complaint with the President of the Personal Data Protection Office (Poland).
8. Cookies
Our website uses cookies to:
- Ensure proper website operation,
- Analyze website traffic (e.g., via Google Analytics),
- Personalize marketing content (with your consent).
You can manage cookies through your browser settings.
9. Automated Decision-Making and Profiling
We do not make decisions based solely on automated processing, nor do we engage in profiling that significantly affects your rights.
10. Data Security Measures
We implement appropriate technical and organizational measures to ensure data security, including encryption and protection against unauthorized access.
11. Changes to the Privacy Policy
We reserve the right to amend this Privacy Policy. Any changes will be published on our website with an updated effective date.
