Privacy Policy
Who processes your data, for what purpose, for how long, and what rights you have in connection with it. No legal fog — written so you can read it once and understand it.
1. Data controller
The controller of your personal data is Royal Instal System spółka z ograniczoną odpowiedzialnością (a Polish limited-liability company), with its registered office at ul. 11 Listopada 1, 41-300 Dąbrowa Górnicza, Poland, entered in the National Court Register (KRS) under number KRS 0000885782 by the District Court Katowice-Wschód in Katowice, 8th Commercial Division, tax ID (NIP) 6292499296, REGON 388254211.
Contact for personal-data matters: biuro@royal-system.pl, phone +48 794 626 676, or by post to the registered office address.
The company has not appointed a data protection officer — for matters relating to data processing, please contact us directly using the details above.
2. What data we collect and why
| Purpose | Scope of data | Legal basis | Retention period |
|---|---|---|---|
| Responding to an enquiry from the form or e-mail, preparing a quotation | name and surname, phone number, e-mail, site location, content of the enquiry | Art. 6(1)(b) GDPR — steps taken prior to entering into a contract | until the correspondence ends, and then for up to 12 months |
| Performance of a contract for installation, inspection or service | contact details, site address, data for the contract and invoice | Art. 6(1)(b) GDPR — performance of a contract | for the duration of the contract |
| Tax and accounting settlements | data from invoices and settlement documents | Art. 6(1)(c) GDPR — legal obligation | 5 years from the end of the tax year |
| Handling complaints and warranty claims, pursuing claims | contract data, documentation of work performed, correspondence | Art. 6(1)(f) GDPR — legitimate interest | until the limitation period for claims expires |
| Ensuring the security and correct operation of the site | IP address, technical browser data in server logs | Art. 6(1)(f) GDPR — legitimate interest | server logs: typically up to 30 days, depending on the server configuration at the hosting provider |
Providing the data is voluntary, but without a phone number or e-mail address we cannot respond to your enquiry, and without company registration data we cannot conclude a contract or issue an invoice.
3. Who we share the data with
We do not sell the data or disclose it for marketing purposes. Access to it may be granted only to entities that provide services the company needs to operate:
- Website and e-mail hosting provider — OVH SAS, 2 rue Kellermann, 59100 Roubaix, France (server in a data centre within the European Union)
- Accounting office — for accounting documents and settlements
- Equipment suppliers and manufacturers — only where necessary to process a warranty claim or order parts
- Public authorities — where an obligation to disclose data arises from the law
With every entity processing data on our behalf, the company enters into a data-processing agreement in accordance with Art. 28 GDPR.
4. Transferring data outside the European Economic Area
The company does not transfer personal data outside the European Economic Area in connection with its commercial and service activities. The site does not use any third-party services that would process visitors' data in third countries.
5. Your rights
- Access to data — the right to be informed what data we process and to receive a copy of it
- Rectification — correcting inaccurate data or completing incomplete data
- Erasure — where the data is no longer needed for the purpose for which it was collected
- Restriction of processing — suspending processing while a matter is being clarified
- Objection — to processing based on the company's legitimate interest
- Data portability — receiving the data in a machine-readable format
- Withdrawing consent — at any time, where consent was the basis for processing; this does not affect the lawfulness of processing carried out before withdrawal
It is enough to send a request to biuro@royal-system.pl. We respond without undue delay, no later than one month after receiving the request.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, if you believe that the processing of your data infringes the GDPR.
6. Profiling and automated decisions
We do not profile your data and we do not make decisions about you based solely on automated processing. Quotations are prepared by a person, not an algorithm.
7. Cookies and third-party services
The site does not use marketing or advertising cookies and does not store any cookies or local data in the visitor's browser.
The site does not load resources from external servers: fonts (system fonts), scripts, images and videos all come from our own server. Videos on the "Projects" page only load once you click play. Outbound links (e.g. to Google Maps or the manufacturer's site) lead to external services that operate under their own privacy policies.
| Service | What it is used for | What it sees |
|---|---|---|
| Analytics and statistics | not used — the site does not run Google Analytics or any other analytics tool | nothing; we do not profile or track traffic |
8. Data security
The site runs entirely over an encrypted HTTPS connection. Access to the mailbox and customer documentation is granted only to people who need it to carry out their work. Paper documents are kept in a locked room at the company's registered office.
9. Changes to this policy
If the law, the scope of our services or the tools used by the site change, we will update this document and state the new date below. Earlier versions are available on request.
Have a question about your data?
Write to biuro@royal-system.pl or call us — a person answers, not a form.