☎ +48 500 239 509✉ dlaciebie@extreme-tech.pl

Privacy Policy

Last updated: 25 October 2026

1. Data controller

The controller of personal data collected through the extreme-tech.pl website (hereinafter the “Website”) is EXTREME-TECH Sp. z o.o., with its place of business and address for service at: ul. Wojewódzka 5B, 87-152 Pigża, Poland, NIP (tax identification number): 879-275-96-20, REGON: 529283310, KRS: 0001119308, email address: dlaciebie@extreme-tech.pl, telephone number: +48 500 239 509, hereinafter the “Controller”.

2. Legal basis and security

We respect the rights of data subjects and comply with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter the “GDPR”), the Polish Act of 10 May 2018 on the Protection of Personal Data (hereinafter the “Act”) and other relevant data protection legislation.

Persons authorised to process data have received appropriate training. We have implemented suitable technical and organisational measures to ensure the protection of personal data, as well as procedures ensuring compliance with the GDPR and enabling data subjects to exercise their rights. Where necessary, we cooperate with the supervisory authority, i.e. the President of the Personal Data Protection Office (hereinafter “PUODO”).

3. What data we collect

When you use the Website and contact us, we may process the following data:

  • first name, surname and company name – where you provide them via the contact form, email, post or in a telephone conversation, in order to reply, prepare a quote or provide services,
  • email address – in order to reply to your enquiry, prepare an offer and keep in touch about an order,
  • telephone number – in order to contact you about an enquiry or an order,
  • registered office address or the address where the service is to be performed – where necessary to prepare a quote or perform a service (e.g. machine relocation),
  • NIP (tax identification number) – from businesses and persons requesting an invoice,
  • device IP address and browser identifier – information resulting from the general rules of Internet communication, stored in server logs and used for technical purposes and to ensure the security of the Website,
  • other data – provided by you in the content of a message or in the course of handling particular matters.

4. Purposes of processing and voluntary provision of data

Providing data is voluntary, but necessary for the following purposes:

  • answering your questions and enabling contact (form, email, telephone, post),
  • preparing a quote and an offer, and taking steps prior to entering into a contract,
  • performing concluded contracts, including machine relocation and assembly services, industrial support and parts sales,
  • issuing invoices and fulfilling tax and accounting obligations,
  • establishing, pursuing or defending legal claims,
  • ensuring the security and proper functioning of the Website.

In line with the data minimisation principle, we process only those categories of data that are necessary to achieve the purposes listed above. Each of you decides whether, and to what extent, to share information about yourself.

5. Legal basis for processing

  • Article 6(1)(b) GDPR – processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract (e.g. preparing a quote),
  • Article 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the Controller is subject (e.g. tax and accounting obligations),
  • Article 6(1)(f) GDPR – the legitimate interests of the Controller, i.e. establishing, pursuing or defending legal claims and ensuring the security of the Website,
  • Article 6(1)(a) GDPR – your consent, where no other basis applies (e.g. consent given in the contact form).

6. Data retention period

We process personal data for the period necessary to achieve the stated purposes. Data may be processed for longer where required by law (e.g. tax and accounting regulations) or by the Controller’s legitimate interests, i.e. until the limitation period for claims expires or until the relevant proceedings are concluded, if they were initiated within the limitation period, and also where the service provided is of a continuing nature.

7. Source of data

The source of the personal data processed by the Controller is you, i.e. the data subjects themselves.

8. Cookies

The Website does not use its own cookies to track users or for marketing purposes. The fonts used on the Website are hosted locally. If analytical or marketing tools are introduced in the future, information about them and the way of giving consent will be added to this Policy. You can manage cookies at any time in the settings of your web browser.

9. Recipients of data and entrusting of processing

We do not disclose personal data to third parties without the explicit consent of the data subject. Without such consent, data may be disclosed only to public-law bodies, i.e. public authorities and administration (e.g. tax authorities, law enforcement agencies and other entities authorised under the law).

Personal data may be entrusted for processing to entities that process it on our behalf, under a data processing agreement. These entities process data only within the scope and for the purposes specified in the agreement. This applies in particular to entities:

  • providing hosting and email services for the Website,
  • providing contact form services (if used),
  • providing postal, courier and freight services – in order to deliver consignments,
  • providing other services necessary for the day-to-day operation of the Website and the performance of orders (e.g. accounting and IT).

10. Transfers of data outside the EEA

Your personal data is not transferred to a third country or an international organisation within the meaning of the GDPR. Should such a transfer take place, you will be informed in advance and the Controller will apply the necessary safeguards referred to in Chapter V of the GDPR.

11. Profiling

Personal data is not subject to profiling by the Controller within the meaning of the GDPR.

12. Rights of data subjects

Every person whose data we process has the right to:

  • be informed about the processing of personal data,
  • access their personal data,
  • rectification, completion and updating of data,
  • erasure of data (the right to be forgotten),
  • restriction of processing,
  • data portability,
  • object to the processing of data,
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (where processing is based on consent),
  • not be subject to profiling,
  • lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (PUODO), in accordance with Article 77 of the GDPR.

To exercise these rights, please contact us by email at dlaciebie@extreme-tech.pl or in writing at: EXTREME-TECH Sp. z o.o., ul. Wojewódzka 5B, 87-152 Pigża, Poland.

13. Personal data breaches

Every identified security breach is documented. Where the situation described in the GDPR or the Act occurs, we inform the data subjects and, where applicable, PUODO of the breach.

14. Final provisions

The provisions of this Privacy Policy apply, to the extent possible, accordingly to all persons with whom we have legal relations and in respect of whom we are the data controller. Matters not regulated here are governed by the GDPR and other relevant legal provisions. The privacy policy of the czesci-cnc.pl online shop (available in Polish) applies to data collected in that shop.