Privacy and cookie policy

1. Data controller

The controller of your personal data is Mikrolit, ul. Lutosławskiego 56, 44-240 Żory, Poland, tax ID (NIP) 615-206-96-09 ("we" or the "Controller").

For any data protection matter you can write to our office address or use the contact form on the website. We have not appointed a data protection officer because we are not required to.

2. Where your data comes from

We receive data directly from you: through the quote request form, by phone or in correspondence. The server hosting the website also records technical data about each visit automatically.

3. What data we process

From the form: full name, phone number, e-mail address (if you give it), town, type and approximate area of the work, and the content of your message.

Technical data: IP address, browser and operating system type, the page visited, and the date and time of the visit. The hosting provider records these in server logs.

We do not ask for special categories of data (for example about health). Please do not include them in your message.

4. Purposes and legal bases

Replying to your enquiry, preparing a quote and arranging a survey, as steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Sending the form on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time, without affecting the lawfulness of earlier processing.

Performing a contract, if one is concluded (Art. 6(1)(b) GDPR), and tax and accounting obligations (Art. 6(1)(c) GDPR).

Keeping the website secure, preventing abuse, and establishing, exercising or defending legal claims, which is our legitimate interest (Art. 6(1)(f) GDPR).

5. Who processes data for us

Vercel Inc. (website hosting and form handling) and the e-mail delivery service Resend. They process data only on our instructions, under data processing agreements.

These providers are based in the United States. Data is transferred outside the European Economic Area on the basis of the European Commission decision on the EU-U.S. Data Privacy Framework or standard contractual clauses approved by the Commission.

Data may also be received by bodies entitled by law, such as tax authorities, and by our accounting office if a contract is concluded.

6. How long we keep data

Enquiries that did not lead to a contract: up to 12 months from the last contact, unless you withdraw consent earlier.

Data related to a contract: for the duration of the contract, then until the limitation period for claims expires and for 5 years from the end of the tax year, as tax law requires.

Server logs: for the period set by the hosting provider, usually no longer than a few weeks.

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on our legitimate interest.

If you believe we process data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Providing data is voluntary

Providing data is voluntary, but without your name, phone number and town we cannot reply to an enquiry sent through the form. You can always call instead.

9. Automated decisions and profiling

We do not make automated decisions about you and do not profile you.

10. Cookies and similar technologies

The website does not set cookies and uses no analytics or advertising tools. Fonts are served from our own server, not from third-party providers.

If we add statistics or marketing tools in the future, we will ask for consent and update this policy.

11. Security

The website works only over an encrypted HTTPS connection. The form is protected against automated submissions, and the phone number is hidden from data-harvesting bots.

12. Changes to this policy

We may update this policy, for example when laws or the way the website works change. The current version is always available on this page, with its effective date at the top.