Privacy Policy

1. General Provisions.

This Privacy Policy defines the method of collecting, processing, and storing personal data necessary for the provision of electronic services via the website https://www.forsol.pl/ (hereinafter referred to as the "Website").

The Data Controller of the Website Users' personal data (hereinafter referred to as "Users" or "User") is Forsol Sp. z o.o., a company registered in Poland under the KRS (National Court Register) number 0001085917, with its registered office at ul. Święty Marcin 29/8, 61-806 Poznań, Wielkopolskie Voivodeship, Poland (hereinafter referred to as the "Controller").

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").

Data collected by the Controller will be:

• processed lawfully;
• processed for clearly defined purposes and not subjected to further processing incompatible with those purposes;
• factually correct and adequate in relation to the purposes for which it is processed;
• stored no longer than necessary to achieve the purpose of processing.

2. Purpose and Legal Basis of Data Processing.

The Controller processes personal data necessary for the provision, operation, and development of services available through the Website and its individual functionalities.

Personal data will be processed for the following purposes:

• provision of services by electronic means in accordance with the Act of 18 July 2002 on the Provision of Electronic Services, consisting in enabling the use of the Website's functionalities (in particular, sending contact forms and requests for quotations) – based on the necessity for the performance of a contract or to take steps prior to entering into a contract (Article 6(1)(b) GDPR);
• communication with the User in order to handle the submitted inquiry, present a commercial offer, and build reliable business relationships – which constitutes a legitimate interest of the Controller (Article 6(1)(f) GDPR);
• promotion of the Controller's products and services by sending marketing information (newsletters) by electronic means – provided that the User has given voluntary consent to receive such notifications to the specified e-mail address (Article 6(1)(a) GDPR);
• delivering industry and market updates directly related to the commercial activity of the Controller – provided that the User has given a separate consent to receive such information by electronic means (Article 6(1)(a) GDPR);
• for analytical and statistical purposes, consisting in verifying the activity and preferences of Users in order to optimize the content, offer, and functionality of the Website – which constitutes a legitimate interest of the Controller (Article 6(1)(f) GDPR);
• establishment, exercise, or defense of potential claims, based on the legitimate interest of the Controller consisting in the protection of its rights and economic interests (Article 6(1)(f) GDPR).

In each of the above-mentioned cases, providing personal data is voluntary, but remains necessary to process the submitted inquiry, establish contact, or use specific functionalities of the Website.

3. Data Retention Period.

Personal data will be processed for the period necessary to handle the submitted request for quotation, and then for the period required to fulfill legal obligations, or to pursue or defend against potential claims.

Data processed on the basis of consent will be processed until it is withdrawn, whereby the withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

4. Information on Data Disclosure.

Personal data may be disclosed, depending on the purpose of processing, to the following entities:

• entities affiliated with the Controller;
• entities cooperating with the Controller;
• subcontractors, in particular entities providing and maintaining selected IT systems and solutions;
• online payment providers;
• courier/postal service providers;
• law firms.

Personal data processed by the Controller will not be transferred outside the European Economic Area (EEA) or to international organizations, except for cases explicitly required by the entities listed in Section 8 below.

5. Rights of the Data Subjects.

The Website User has the right to:

• access their personal data;
• rectify the data;
• erase the data;
• restrict data processing;
• data portability;
• object to processing based on the legitimate interest of the Controller.

The User has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if they consider that the processing violates their rights and freedoms.

Data processing does not involve automated decision-making, including profiling.

If the User detects any inaccuracies, the Controller will immediately remove or correct them. If the User does not wish to receive ongoing information about the Controller's services, activities, or offers, they should send an e-mail to info@forsol.pl with the subject line: "Unsubscribe".

6. Use of Cookies.

Cookies are small text files saved on the User's device while browsing the Website. Upon the User's consent, these files enable the analysis of website traffic and help optimize its performance. Thanks to cookies, web applications can adapt their functions to the individual preferences and needs of the User by remembering their previous choices and settings.

The User can accept or reject cookies. Most web browsers accept cookies by default, but these settings can be changed to block them completely. Restricting the use of cookies may prevent full use of certain features of the Website. On our Website, analytical cookies are only activated after the User has previously given their consent via the cookie banner.

The Controller collects and processes the following data:

• Data provided voluntarily: when a User sends a request for quotation or an e-mail, the Controller collects their name, company name, and contact details (phone number and e-mail address). This data is processed for the period necessary to handle the correspondence and execute the inquiry, and then for the time required to secure potential claims or fulfill legal obligations.
• Data collected automatically: the Controller automatically collects information about the User's visit to the Website. This data includes, among others, browsing patterns and is used exclusively in an aggregated (statistical) form, which prevents the identification of the User's identity.

Aggregated information is used solely to analyze traffic, improve website content, and optimize the services provided. Specialized analytical tools are used to analyze traffic on the Website. The current list of these tools and processors can be found in Section 8 below.

7. Intellectual Property Rights.

All trademarks, logos, and brand names mentioned on the website are the property of their respective legal owners. Their use is purely informative and does not imply any economic affiliation or endorsement by the holders of these rights. All rights reserved.

8. Third-Party Entities Used by the Controller.

In addition to the categories of recipients listed in Section 4, the Controller uses the services of the following external entities for the proper functioning of the Website. Each provider processes data based on its own privacy policy:

• Google Ireland Limited (Google Analytics 4 service) – used for aggregated traffic analysis. The GA4 tool anonymizes users' IP addresses by default. These cookies are loaded exclusively after prior consent given by the User via the cookie banner.
• Google Ireland Limited (Google Tag Manager service) – a tag management system on the website used to load analytical scripts. This tool by itself does not collect Users' personal data.
• Resend, Inc. (United States) – a service provider for contact form processing, through which submissions reach the Controller's e-mail inbox. It receives the data entered by the User in the form (name, company name, e-mail address, phone number, message content). Data may be transferred to the USA on the basis of the European Commission's adequacy decision (the EU-US Data Privacy Framework program).
• Vercel Inc. (United States) – the hosting infrastructure provider for the Website. As part of normal technical operation, this entity receives standard server logs (IP address, user agent, requested URL). Data may be transferred to the USA on the basis of the European Commission's adequacy decision (the EU-US Data Privacy Framework program).

9. Final Provisions.

The Controller reserves the right to make changes to this Privacy Policy, in particular in the event of technological developments of the Website or changes in the applicable law. Changes are published by posting the new content of the document on this page, while the rights of existing Users will not be restricted.

Any questions, comments, and requests regarding privacy protection and the processing of personal data should be directed directly to the Controller via e-mail at info@forsol.pl or to the correspondence address: Forsol Sp. z o.o., ul. Święty Marcin 29/8, 61-806 Poznań, Poland.