1. Data controller
The controller of personal data processed in connection with the website is OCELOT Systemy Informatyczne, ul. Łąkowa 7b, 90-562 Łódź, Poland. Polish tax identification number (NIP): 726-100-35-15; business registry number (REGON): 470883679.
For data protection matters, contact biuro@ocelot.com.pl or write to the postal address above. Office telephone: +48 42 230 38 55.
2. Data and purposes
- Contact and enquiries: your email address, message, selected solution and any name, company and telephone details you choose to provide. We use these to respond and correspond with you under Article 6(1)(f) GDPR (our legitimate interest in handling enquiries); where you request a contract on your own behalf, Article 6(1)(b) applies to steps taken at your request before entering into a contract.
- Protected areas: user identifiers, session data and permissions needed to provide authorised access under Article 6(1)(b) GDPR when performing a contract with the user, or Article 6(1)(f) when protecting resources and supporting authorised client representatives.
- Legal duties and claims: information relating to a particular matter may be required to comply with a legal obligation (Article 6(1)(c)) or establish, exercise or defend legal claims (Article 6(1)(f)).
Providing form data is voluntary, but an email address and message are needed to handle your enquiry. Other contact fields are optional. Do not send sensitive data or passwords. Correspondence alone does not constitute consent to marketing.
3. Recipients and external services
To the extent necessary for these purposes, data may be processed by hosting, email and technical support providers acting on our behalf, authorised personnel, and competent authorities where required by law.
Our website and email servers are located in the European Economic Area (EEA). Fonts are served locally. Google Maps and Google analytics are optional services loaded only after separate consent. Enabling them connects your browser to Google, discloses your IP address and technical data and may involve cookies. See Google’s privacy policy.
Without map consent we display an ordinary link to Google Maps. Selecting it opens the external Google service. Hosting and email within the EEA does not mean that all Google processing takes place within the EEA.
4. Retention
We retain project-related contact messages and quotation correspondence relating to those projects for up to 5 years after the project ends. Other messages unrelated to quotations and enquiries that do not lead to a project are deleted within 2 years of receipt.
We retain backups for 5 years.
Data relating to contracts, legal obligations or specific claims requires retention to be determined separately according to its purpose and applicable law. Browser cookie lifetimes are described below.
5. Cookies and analytics
Cookies are small pieces of information stored by your browser. The website uses them to maintain sessions, protect forms and remember settings. Essential session mechanisms enable requested features; blocking them may prevent form submission or use of the file area.
- PHP session and langid: session cookies supporting session state and language selection. Your browser may restore a session according to its settings.
- Google Analytics 4 cookies (_ga and _ga_*): after analytics consent, these support visit measurement. Their lifetime is set to a maximum of 180 days, renewed during use. Analytics processing is based on consent (Article 6(1)(a) GDPR). Google Signals and ad personalisation are disabled.
- ocelotConsent: stores separate analytics and Google Maps choices for 180 days after saving. Old cookiePolicy and cookiePolicyFirstLoad cookies are not treated as consent to these services.
Optional services are not loaded before consent. You can select or clear each option and confirm using Save. Both options are initially selected; services only start after you save your choice. Closing the panel does not grant consent. The “C” button lets you change your choice or withdraw consent at any time. Withdrawing map consent removes the embedded map; withdrawing analytics consent prevents further loading and removes analytics cookies accessible to this website. Withdrawal does not undo earlier data disclosures or delete cookies on Google domains that this website cannot access.
You can also delete or block cookies in your browser settings. Local fonts do not require a connection to Google.
6. Your rights
Subject to the conditions in the GDPR, you can request access to your data and a copy, rectification, erasure or restriction. Data portability applies to automated processing based on consent or a contract. You can object to processing based on legitimate interests on grounds relating to your particular situation; you may object to direct marketing at any time.
Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. Send requests to biuro@ocelot.com.pl. Where necessary, we will request information needed to verify your identity. We normally respond within one month and will explain any permitted extension as required by the GDPR.
You can complain to the President of the Polish Personal Data Protection Office — see uodo.gov.pl — or the competent supervisory authority in the EU.
7. Automation and changes
Technical security measures may automatically block suspicious requests temporarily. Contact our office for clarification of a block. The reviewed website code did not reveal decisions producing legal or similarly significant effects on users within the meaning of Article 22 GDPR.
We update this policy when the website changes. The date at the beginning identifies the version. Our website terms explain the rules for using the site.