Privacy Policy

1. Data Controller

The controller of personal data is:

2. Scope and purpose of data processing

The website does not use contact forms and does not allow the creation of user accounts.

The “Book a demo” button opens the user's default email client (mailto:). Personal data provided in the course of correspondence, in particular the email address, first and last name and the content of the message, may be processed for the purpose of:

• conducting business correspondence,
• responding to submitted enquiries,
• establishing or maintaining business relationships with potential and existing customers.

3. Legal basis for processing

For data provided in email correspondence, the legal basis for processing is Article 6(1)(f) of the GDPR – the legitimate interest of the Controller consisting in conducting business communication and handling enquiries addressed to the company.

For data processed via analytics tools, the legal basis is the one appropriate to the nature of the given processing and to the user's consent settings.

4. Analytics tools and cookies

The website uses cookies and similar technologies related to the operation of the site and the analysis of its use. In particular, the following are used:

• Google Analytics 4 – for traffic analysis and website usage statistics,
• Microsoft Clarity – to analyse how the website is used, including user interactions with its elements.

Analytics tools are launched solely in accordance with the user's choice made via the cookie consent mechanism. The user may accept or reject analytics cookies and may also change this choice later using the cookie settings available on the website. The website uses Cloudflare services that provide security and bot protection. For this purpose the technical cookie __cf_bm is set; it is strictly necessary for the correct and secure operation of the website, is not used for analytics or marketing purposes and is stored only for a short time (about 30 minutes).

5. Recipients of data

Personal data is not sold or shared with third parties for marketing purposes. Recipients of the data may be technical entities supporting the operation of the website and communication, in particular:

• the hosting provider,
• the email service provider,
• Cloudflare – provider of security, bot protection, CDN and web traffic management services,
• providers of the analytics tools used, in particular Google and Microsoft.

These entities process data in accordance with applicable data protection rules and on the basis of relevant terms of service and, where required, data processing agreements.

6. Data retention period

Data contained in email correspondence is stored for the period necessary to handle the enquiry and conduct the correspondence, and subsequently for the period necessary to establish, pursue or defend against possible claims, or for the period required by law. Data processed by analytics tools is stored in accordance with the settings of those services and their applicable data retention rules.

7. User rights

To the extent provided for by the GDPR, the data subject has the right to:

• access their data and obtain a copy of it,
• rectification of the data,
• erasure of the data,
• restriction of processing,
• data portability,
• object to processing based on a legitimate interest,
• lodge a complaint with the President of the Personal Data Protection Office.

8. Contact

For matters relating to the protection of personal data, you may contact us at:

sales@gpe-systems.pl

9. Changes to the Privacy Policy

The Controller may update this Privacy Policy in the event of changes in the operation of the website, the tools used or applicable legal provisions.