Last updated: 6 July 2026
Data controller
The controller of your personal data is WISMAR Sp. z o.o., with its registered office at ul. Młynarska 42/115, 01-171 Warsaw, Poland (NIP 7743218533, REGON 147112647, KRS 0000498870).
For all matters relating to the processing of personal data you can contact us at wismarspzoo@gmail.com or by phone at +48 24 363 45 98.
This policy describes how WISMAR processes the personal data of website visitors and of those who contact us, and fulfils the information obligation under Article 13 of the GDPR.
What data we process
In connection with the use of the website and contact with us, we may process:
- data provided in the contact form: first and last name, e-mail address, phone number and the content of the message
- technical data collected automatically while using the website: IP address, browser type, device information and data from cookies
Purposes and legal bases of processing
We process your data for the following purposes and on the following legal bases:
- responding to an enquiry and conducting correspondence - based on our legitimate interest (Article 6(1)(f) GDPR), and where the enquiry aims at concluding a contract, in order to take steps prior to entering into it (Article 6(1)(b) GDPR)
- performance of a concluded contract or provision of ordered services - Article 6(1)(b) GDPR
- fulfilment of legal obligations incumbent on the controller, including tax and accounting obligations - Article 6(1)(c) GDPR
- pursuing or defending against claims - Article 6(1)(f) GDPR
Data recipients
Trusted entities that support us in running our business, acting on our behalf and in accordance with concluded data processing agreements, may have access to the data:
- the provider of hosting and technical infrastructure of the website (Velic)
- providers of IT and e-mail services
- the accounting office and entities providing accounting and legal services
- state authorities entitled to obtain data on the basis of applicable law
- providers of embedded maps and external content
Data retention period
We retain data for as long as necessary to achieve the purposes for which it was collected:
- correspondence data - for the duration of handling the matter and then until any claims become time-barred
- contract-related data - for the duration of the contract and the period resulting from tax and accounting regulations (as a rule 5 years)
- data processed on the basis of consent - until the consent is withdrawn
Your rights
In connection with the processing of data, you have the following rights:
- the right to access your data and obtain a copy of it
- the right to rectify (correct) your data
- the right to erasure of your data
- the right to restrict processing
- the right to data portability
- the right to object to processing based on our legitimate interest
- the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal
You also have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) - if you consider that the processing of your data infringes the law.
Voluntary provision of data
Providing data is voluntary; however, to the extent necessary to respond to an enquiry or to conclude and perform a contract, failure to provide it will make it impossible to achieve those purposes. We do not make decisions solely on an automated basis that would produce legal effects concerning you (no profiling in this sense).
Anonymous visit statistics
We keep our own anonymous website traffic statistics: we measure the number of page views and the approximate number of visitors. We do not use cookies for this and we do not store your IP address - we use an irreversible daily technical hash that makes it impossible to identify a person and does not allow tracking you between pages or across days. For this reason the measurement does not require consent, and its basis is our legitimate interest in maintaining and improving the website - Article 6(1)(f) GDPR.
Transfer of data outside the EEA
We do not transfer your personal data outside the European Economic Area.
Changes to the privacy policy
The policy may be updated periodically to reflect changes in the law or in how the website operates. The current version is always available on this page.
