Privacy Policy

Effective date: July 2, 2025

I. GENERAL PROVISIONS

This Privacy Policy sets out the rules for processing and protecting personal data provided by Users in connection with their use of the website www.aba-poland.pl.

The administrator of personal data collected through the website www.aba-poland.pl is P.P.H. ABA Sp. z o.o., based in Komorniki (62-052), ul. Poznańska 132, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number: 0000321677, NIP: 7773098909, REGON: 301029338 (hereinafter: the "Administrator" or the "Company").

Contact with the Administrator is possible via:

• Mail: P.P.H. ABA Sp. z o.o., ul. Poznańska 132, 62-052 Komorniki
• Phone: +48 515 359 011 or +48 61 810 77 85
• Email: biuro@aba-poland.pl

II. BASIC DEFINITIONS

1. Administrator – P.P.H. ABA Sp. z o.o.
2. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data
3. Website – the website operated by the Administrator at www.aba-poland.pl
4. User – any natural person visiting the Website or using one or more services or functionalities offered on the Website

III. SCOPE OF DATA COLLECTED

The Administrator may process the following personal data of Users:

1. Data collected via contact forms:

• First and last name
• Company name (optional)
• Email address
• Phone number (optional)
• Message content

2. Data collected automatically:

• IP address
• Browser type
• Operating system
• Date and time of visit
• Pages visited within the Website
• Data collected by cookies and Google Analytics

IV. PURPOSES AND LEGAL BASIS OF DATA PROCESSING

The Administrator processes personal data for the following purposes:

1. Handling inquiries via the contact form (Art. 6(1)(f) GDPR – legitimate interest)
2. Conducting business correspondence (Art. 6(1)(f) GDPR)
3. Analyzing website traffic via Google Analytics (Art. 6(1)(f) GDPR)
4. Marketing own products and services (Art. 6(1)(f) GDPR)
5. Possible establishment, exercise, or defense of claims (Art. 6(1)(f) GDPR)

V. DATA RECIPIENTS

Personal data may be transferred to:

1. Entities providing hosting services
2. Entities providing IT and technical support services
3. Google LLC in connection with the use of Google Analytics
4. State authorities or other entities authorized by law

VI. TRANSFER OF DATA TO THIRD COUNTRIES

In connection with the use of Google Analytics, data may be transferred to Google LLC based in the United States. Google LLC participates in the Privacy Shield program and ensures an adequate level of personal data protection.

VII. DATA RETENTION PERIOD

1. Contact form data: until the end of correspondence, no longer than 3 years from the last contact
2. Analytical data: in accordance with Google Analytics settings (by default 26 months)
3. Data processed for marketing purposes: until an objection is raised

VIII. USER RIGHTS

Each User has the right to:

1. Access data – obtain information about the data being processed
2. Rectify data – correct inaccurate data
3. Delete data (“right to be forgotten”)
4. Restrict processing
5. Data portability
6. Object to data processing
7. Withdraw consent (if processing is based on consent)
8. Lodge a complaint with the President of the Personal Data Protection Office

IX. COOKIES

1. Types of cookies used:

Necessary cookies – enabling the proper functioning of the website

Analytical cookies – used by Google Analytics to analyze website usage

2. Managing cookies:

The User may at any time:

• Block the installation of cookies
• Delete stored cookies
• Change browser settings regarding cookies

Disabling cookies may affect the functionality of the Website.

X. GOOGLE ANALYTICS

The Website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to analyze how Users use the website.

The User may block Google Analytics by installing a browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout

XI. DATA SECURITY

The Administrator applies appropriate technical and organizational measures to ensure the security of personal data, including:

1. Data transmission encryption (SSL)
2. Regular software updates
3. Restricted access to personal data
4. Staff training on data protection

XII. CHANGES TO THE PRIVACY POLICY

The Administrator reserves the right to make changes to the Privacy Policy. Users will be informed of any changes by posting an appropriate notice on the main page of the Website.

XIII. FINAL PROVISIONS

For matters not regulated by this Privacy Policy, the provisions of the GDPR and other applicable Polish laws shall apply.

This Privacy Policy has been in effect since July 2, 2025.