Your privacy matters to us
We care about the security of your personal data and the transparency of our data processing policies. In this section you will find detailed information about what data we collect, how we use it and what rights you have in connection with the use of our site. Read our privacy policy and be assured that your data is safe with us.
Privacy Policy
This website, operating under the domain https://stigal.pl/ (hereinafter collectively referred to as the “Portal”) is operated by STIGAL AUTOMATION Sp. z o.o., Złotniki 19, 59-223 Krotoszyce, NIP: 6912596505, KRS: 0001250611, hereinafter referred to as the Service Provider.
The Privacy Policy sets forth the following rules:
- the processing of personal data by the Data Controller,
- storing user information on the Service Provider’s server in the form of logs.
Personal data may be collected from users through the Portal in the following ways, among others:
- through information voluntarily provided in forms (including, among others, contact forms),
- by the Service Provider saving web server logs.
Respecting the right to privacy of individuals whose data is collected in the course of our business operations, we hereby inform you that this data is processed in accordance with national and European laws and under conditions that ensure its security. To ensure transparency in its data processing activities, the Data Controller sets forth the principles of personal data protection established under Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”). In the course of the website’s operation, Users’ personal data may be processed by two independent entities. Each of these entities acts as a separate controller of personal data within the meaning of the GDPR and processes data exclusively for its own purposes.
STIGAL AUTOMATION, a limited liability company (formerly: STIGAL Marcin Stępień), with its registered office at Złotniki 19, 59-223 Krotoszyce, entered in the National Court Register (KRS) maintained by the District Court for Wrocław-Fabryczna in Wrocław, 9th Commercial Division of the KRS, under number 0001250611, Tax Identification Number (NIP) 6912596505; share capital 750,000.00 PLN.
- The controller of personal data is STIGAL AUTOMATION SP. z o.o., Złotniki 19, 59-223 Krotoszyce.
- For matters related to data processing, you can contact using the above address details or the Personal Data Administrator – ado@stigal.pl.
- As part of its business operations, the Data Controller processes personal data for the following purposes, depending on the specific circumstances:
| Purpose of Processing | Legal basis and data retention period |
|---|---|
| If you contact us—we handle correspondence and inquiries from business partners and non-business partners, including via email and online forms. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract. Article 6(1)(f) of the GDPR as the basis for the Controller’s legitimate interest in responding to reports and inquiries. Personal data will be retained for the duration of preparing and providing responses to the recipients of the messages. However, it will not be retained for longer than 3 years. |
| If you are an employee, contractor, or representative of one of our business partners or suppliers, and your personal data has been provided to us in connection with the performance of a contract. | Article 6(1)(f) of the GDPR as the basis for the Controller’s legitimate interest in performing the contract. In that case, your employer is the source of the data on employees and associates. Personal data will be retained for the duration of the contract and, after its termination, until the expiration of the statute of limitations for claims arising from it, generally no longer than 5 years. |
| If you visit our social media profiles (Facebook, X (Twitter), Instagram), you interact with us—for example, by sending a message or leaving a comment. | Article 6(1)(f) of the GDPR as the basis for the Controller’s legitimate interest in communicating with social media users. Personal data will be retained for the duration of your interaction with our social media platforms, and if you ask a question, for the duration of our response and thereafter until the statute of limitations on claims expires. |
| If you have entered into a contract with us—the conclusion and performance of a contract with a customer or business partner—or if you are preparing to enter into such a contract—taking action at the request of the data subject prior to the conclusion of the aforementioned contracts. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract. Personal data will be retained for the duration of the contract and, after its termination, until the expiration of the statute of limitations for claims arising from it—generally 3 years, up to a maximum of 6 years. Data in KSeF is retained for 10 years. |
| Maintenance of tax or accounting records. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract. Article 6(1)(c) of the GDPR, in conjunction with the provisions of the following laws: the Tax Ordinance, the Corporate Income Tax Act, the Goods and Services Tax Act, the Accounting Act, and the Act on Counteracting Money Laundering and Terrorist Financing, as fulfillment of a legal obligation incumbent upon the Controller. Personal data will be processed for the entire duration of the contract and for the settlement of accounts following its termination, as well as for the period specified by law (generally 5 years—until the statute of limitations on tax liabilities expires). |
| If you receive commercial information from us, including for marketing purposes. | Article 6(1)(a) of the GDPR in conjunction with Article 398 of the Polish Commercial Code – Your consent to the processing of personal data pertains to the purpose of sending commercial information, special offers, promotions, and newsletters regarding the products and services of STIGAL AUTOMATION Sp. z o.o. Personal data will be retained until consent is withdrawn or the purpose no longer applies. |
| Complaints. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party, including the handling of complaints, or to take steps at the request of the data subject prior to entering into a contract. Personal data will be retained for the duration of the contract and, after its termination, until the expiration of the statute of limitations for claims arising from it—generally 3 years, up to a maximum of 6 years. |
| If we are involved in a dispute or are collecting debts. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party. Article 6(1)(f) of the GDPR as the basis for the Controller’s legitimate interest in asserting or defending against claims. Personal data will be retained for the duration of the proceedings concerning the claims being pursued, i.e., until such proceedings are finally resolved, and in the case of enforcement proceedings, until the claims being pursued are fully satisfied. |
STIGAL Limited Liability Company, with its registered office at Złotniki 19, 59-223 Krotoszyce, entered in the National Court Register (KRS) maintained by the District Court for Wrocław-Fabryczna in Wrocław, 9th Commercial Division of the KRS under number 0001186575, Tax Identification Number (NIP) 6912588227; share capital: 50,000.00 PLN.
- The controller of personal data is STIGAL, a limited liability company with its registered office at: Złotniki 19, 59-223 Krotoszyce.
- For matters related to data processing, you can contact using the above address details or the Personal Data Administrator – ado@stigal.pl.
- As part of its business operations, the Data Controller processes personal data for the following purposes, depending on the specific circumstances:
| Purpose of Processing | Legal basis and data retention period |
|---|---|
| If you contact us—we handle correspondence and inquiries from business partners and non-business partners, including via email and online forms. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract. Article 6(1)(f) of the GDPR as the basis for the Controller’s legitimate interest in responding to reports and inquiries. Personal data will be retained for the duration of preparing and providing responses to the recipients of the messages. However, it will not be retained for longer than 3 years. |
| If you are an employee, contractor, or representative of one of our business partners or suppliers, and your personal data has been provided to us in connection with the performance of a contract. | Article 6(1)(f) of the GDPR as the basis for the Controller’s legitimate interest in the performance of the contract. In that case, your employer is the source of the data on employees and associates. Personal data will be retained for the duration of the contract and, after its termination, until the expiration of the statute of limitations for claims arising from it, generally no longer than 5 years. |
| If you visit our social media profiles (Facebook, X (Twitter), Instagram), you interact with us—for example, by sending a message or leaving a comment. | Article 6(1)(f) of the GDPR as the basis for the Controller’s legitimate interest in communicating with social media users. Personal data will be retained for as long as you follow our social media accounts, and if you ask a question, for as long as it takes to respond to it, and thereafter until the statute of limitations on claims expires. |
| If you have entered into a contract with us—the conclusion and performance of a contract with a customer or business partner—or if you are preparing to enter into such a contract—taking action at the request of the data subject prior to the conclusion of the aforementioned contracts. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract. Personal data will be retained for the duration of the contract and, after its termination, until the expiration of the statute of limitations for claims arising from it—generally 3 years, up to a maximum of 6 years. Data in KSeF is retained for 10 years. |
| Maintenance of tax or accounting records. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract. Article 6(1)(c) of the GDPR, in conjunction with the provisions of the following laws: the Tax Ordinance, the Corporate Income Tax Act, the Goods and Services Tax Act, the Accounting Act, and the Act on Counteracting Money Laundering and Terrorist Financing, as fulfillment of a legal obligation incumbent upon the Controller. Personal data will be processed for the entire duration of the contract and for the settlement of accounts following its termination, as well as for the period specified by law (generally 5 years—until the statute of limitations on tax obligations expires). |
| If you receive commercial information from us, including for marketing purposes. | Article 6(1)(a) of the GDPR in conjunction with Article 398 of the PKE—Your consent to the processing of personal data pertains to the purpose of sending commercial information, special offers, promotions, and newsletters regarding the products and services of Stigal Sp. z o.o. Personal data will be retained until consent is withdrawn or the purpose no longer applies. |
| Complaints. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party, including the handling of complaints, or to take steps at the request of the data subject prior to entering into a contract. Personal data will be retained for the duration of the contract and, after its termination, until the expiration of the statute of limitations for claims arising from it—generally 3 years, up to a maximum of 6 years. |
| If we are involved in a dispute or are collecting debts. | Article 6(1)(b) of the GDPR—processing is necessary for the performance of a contract to which the data subject is a party. Article 6(1)(f) of the GDPR as the basis for the Controller’s legitimate interest in asserting or defending against claims. Personal data will be retained for the duration of the proceedings concerning the claims being pursued, i.e., until such proceedings are finally resolved, and in the case of enforcement proceedings, until the claims being pursued are fully satisfied. |
The recipients of your personal data—that is, the entities to which the Data Controller may disclose your personal data—may include:
- government agencies or other entities authorized to access data to the extent and for the purposes specified in specific regulations,
- Poczta Polska and courier companies,
- banks – when it is necessary to process payments,
- law firms,
- entities that provide services to the Controller to support its operations, including, among others, IT service providers, auditing entities, entities providing accounting services, and entities providing marketing services—whereby such entities process data on the basis of a data processing agreement and solely in accordance with the Controller’s instructions.
Any person whose data is processed in situations provided for by law has the following rights:
- the right to access your data and receive a copy of it,
- the right to rectify (correct) your data,
- the right to have personal data erased,
- the right to restrict data processing,
- the right to data portability,
- the right to object,
- the right to withdraw consent to the processing of data; however, such withdrawal does not affect the processing that took place prior to the date of withdrawal.
Any person whose data is processed in situations provided for by law also has the right to file a complaint with the President of the Personal Data Protection Office. For more information on filing a complaint, visit: https://uodo.gov.pl/pl/526/2464.
Your data will be transferred to third countries via:
- Google Analytics – in connection with the use of the Google Analytics tool, data may be transferred to the United States of America (US). The United States has not been recognized by the European Commission as a country providing an adequate level of protection for personal data. The transfer of data is based on standard contractual clauses approved by the European Commission (Article 46 of the RODO). A copy of these clauses can be obtained by contacting the data controller. For detailed information on how Google collects and processes data, please visit: How Google uses the data it collects when you use our partners’ sites and applications, and the Google Analytics Terms and Conditions.
- Microsoft Clarity – in connection with the use of the Microsoft Clarity tool, data may be transferred to third countries, including the United States of America (USA), on the basis of standard contractual clauses approved by the European Commission (Article 46 RODO). A copy of these clauses can be obtained by contacting the data controller. For details on data processing by Microsoft Clarity, please refer to Microsoft’ s Privacy Policy.
Providing personal data is generally voluntary; however, it is necessary to perform a specific processing activity, including: receiving a response to a question sent to the Controller, and entering into and performing a contract with the Controller. Refusal to provide such data will make it impossible to perform the relevant action. If any data is processed based on a legal obligation, providing the data is mandatory. If any data is processed based on consent, providing the data is always voluntary.
Information about certain activities on the Portal is recorded in the form of logs on the Service Provider’s server. The data collected in this manner is used solely for the purpose of administering the Portal. The data collected as described in this section does not allow for the identification of specific individuals. Viewed content is identified by URL addresses. Information about the user’s browser, IP address, and the date and time of access may also be recorded.
Choose the most convenient way to contact us
Have questions about data protection or want to exercise your rights? Contact us by phone or via the form – we will respond to each request and provide the necessary information.
Call directly
Need quick help? Contact our team by phone – we will answer your questions and offer the best solution.
Fill out the application form
Do you prefer written contact? Fill out the short form and our specialists will respond to your request as soon as possible.
