Privacy policy
Who processes the data, for what purpose, for how long and what you can do about it. Without sentences that mean nothing.
1. Data controller
The controller of personal data is:
- Company
- SEMFLEX Łukasz Piotrowski
- Address
- ul. ks. Kazimierza Siemaszki 33/9, 31-207 Krakow, Poland
- VAT ID
- PL9452107304
- REGON
- 364600933
- biuro@semflex.pl
- Phone
- +48 515 131 691
For all matters concerning personal data you can write to biuro@semflex.pl.
2. What data I collect and why
Contact
If you write or call, I process the data you provide yourself: name, e-mail address, phone number, company name and the content of the message. Purpose: replying and, where relevant, preparing a proposal. Legal basis: the legitimate interest of the controller, namely conducting correspondence (Article 6(1)(f) GDPR), and for preparing a proposal, steps taken at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR).
Engagement
While carrying out an engagement I process the data necessary to perform the contract and to issue accounting documents. Legal basis: performance of a contract (Article 6(1)(b) GDPR) and a legal obligation regarding tax settlements (Article 6(1)(c) GDPR).
Visit statistics
The website may use analytics tools that collect data about how the site is used, in aggregate form. Legal basis: the legitimate interest of examining how the website is used.
3. How long I keep the data
- Correspondence: until the matter is closed, and then for the limitation period of any claims
- Contract and accounting data: for the period required by tax law, as a rule 5 years from the end of the year in which the tax obligation arose
- Statistical data: for the period resulting from the settings of the analytics tool
4. Who I share data with
Data may be passed only to entities providing services necessary to run the business: e-mail and hosting providers, the accounting office, and providers of analytics and advertising tools. Each of them processes data on the basis of a contract or a provision of law.
I do not sell personal data and I do not make it available to third parties for commercial purposes.
Some tool providers are based outside the European Economic Area. In that case the transfer takes place on the basis of mechanisms provided for in the GDPR, in particular standard contractual clauses approved by the European Commission.
5. Your rights
In connection with the processing of data you have the right to:
- access your data and receive a copy of it
- rectify data that is incorrect or incomplete
- erase data where there is no basis for further processing
- restrict processing
- data portability
- object to processing based on legitimate interest
- lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland
To exercise these rights it is enough to write to biuro@semflex.pl.
6. Is providing data mandatory
Providing data is voluntary, but without contact details I cannot reply to a message, and without contract and invoice details I cannot carry out an engagement.
7. Cookies
The website may store cookies in your browser. Some of them are necessary for the site to work correctly, the rest serve statistical purposes. Cookie settings can be changed in the browser at any time, including blocking them entirely. Restricting cookies may affect how some features of the site work.
8. Automated decisions
Data is not used to make decisions based solely on automated processing, including profiling, that would produce legal effects concerning the data subject.
9. Changes to this policy
If the scope of data processing changes, I will update this document and publish the new version at the same address.
Last updated: August 2026