Privacy Policy
This Privacy Policy sets out the principles governing the processing and protection of personal data of users accessing the website operated by Novisat Sp. z o.o., in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and applicable national laws.
1. Data Controller
The controller of your personal data is Novisat Sp. z o.o., with its registered office in Wrocław, Poland, at Zaporoska 37b street, zip code 53-519 Wrocław, entered into the National Court Register (KRS) under number 0000030402, Tax Identification Number (NIP): PL8992418906, Statistical Number (REGON): 932679450, hereinafter referred to as the “Controller.”
Contact details:
- Email: novisat@novisat.pl
- Postal address: Zaporoska 37b street, 53-519 Wrocław, Poland
- Phone: +48 71 799 09 34
2. Purposes of Data Processing
The Controller processes users personal data only to the extent necessary for the following purposes:
2.1. Responding to enquiries submitted via the contact form
Personal data is processed to respond to enquiries submitted through the contact form and to conduct related correspondence.
Legal basis:
- Article 6(1)(f) GDPR – the Controller's legitimate interest in handling correspondence.
2.2. Correspondence and communication with users
Legal basis:
- Article 6(1)(f) GDPR.
2.3. Website traffic analysis and functionality improvement
Legal basis:
- Article 6(1)(a) GDPR – the data subject's consent.
2.4. Marketing purposes (where consent has been given)
Legal basis:
- Article 6(1)(a) GDPR – the data subject's consent.
3. Categories of Personal Data Processed
The Controller may process, in particular:
- first and last name,
- company name,
- Tax Identification Number (NIP),
- business address,
- delivery address,
- email address,
- telephone number,
- IP address,
- data stored in cookies.
4. Voluntary Provision of Data
Providing personal data is voluntary; however, failure to provide the required data may prevent the Controller from fulfilling the intended purpose, particularly responding to enquiries submitted via the contact form.
5. Recipients of Personal Data
Personal data may be disclosed to entities cooperating with the Controller only to the extent necessary for the provision of services, including in particular:
- hosting and IT service providers,
- accounting firms and legal advisors,
- email marketing and mailing service providers,
- providers of analytics and advertising tools (Google and Meta),
- public authorities and other entities authorised under applicable law.
6. Data Retention Period
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including:
- for the duration of correspondence and handling of enquiries,
- until communication has been completed,
- until an effective objection to processing has been submitted,
- where processing is based on consent, until such consent is withdrawn.
7. Rights of Data Subjects
Data subjects have the right to:
- access their personal data,
- rectify inaccurate or incomplete data,
- request the erasure of their personal data,
- request restriction of processing,
- receive their personal data in a portable format,
- object to the processing of their personal data,
- withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
8. Cookies and Tracking Technologies
The website uses cookies and similar technologies to ensure the proper functioning of the website, analyse website traffic, and optimise its performance.
The Controller may use tools such as:
- Google Analytics,
- Google Ads,
- Meta Pixel (if implemented),
- other analytics and marketing tools provided by third parties.
Users may manage cookies through their web browser settings.
9. Profiling
The Controller may use profiling for marketing and analytical purposes. However, no decisions producing legal effects concerning users, or similarly significantly affecting them, are made solely by automated means.
10. Transfer of Personal Data Outside the European Economic Area (EEA)
In connection with the use of services provided by companies such as Google or Meta, personal data may be transferred outside the European Economic Area in accordance with the transfer mechanisms provided for under the GDPR.
11. Data Security
The Controller applies appropriate technical and organisational measures to protect personal data against loss, destruction, unauthorised access, disclosure, or alteration.
The connection to the website is secured using SSL encryption.
12. Changes to the Privacy Policy
The Controller reserves the right to amend this Privacy Policy in the event of:
- changes in applicable laws,
- technological developments,
- changes to the functionality of the website.
The current version of the Privacy Policy will always be published on the website.
13. No Automated Decision-Making
The Controller does not make decisions based solely on automated processing, including profiling, that produce legal effects concerning users or similarly significantly affect them.
14. Contact Regarding Personal Data Protection
For any matters relating to the processing of personal data, you may contact the Controller:
- e-mail: novisat@novisat.pl
- Postal address: Novisat Sp. z o.o. Zaporoska 37b street 53-519 Wrocław Poland
15. Final Provisions
By using this website, you acknowledge that you have read and accepted this Privacy Policy.