Legal

Privacy Policy

Last updated: May 2026

1. Controller

The controller of your personal data is:

2. What data we collect

When you submit a contact or audit request form on this website, we collect:

• First and last name
• Company name
• Business email address
• Phone number (if provided voluntarily)

We do not collect any sensitive personal data (special categories under Article 9 GDPR). We do not use cookies for tracking or analytics purposes on this website.

3. Purpose and legal basis

We process your data for the following purposes:

• Responding to your enquiry — legal basis: Article 6(1)(b) GDPR (steps taken prior to entering a contract) and Article 6(1)(f) GDPR (legitimate interest in responding to business enquiries).
• Sending information about Auritec products and services — only if you have given explicit consent; legal basis: Article 6(1)(a) GDPR.

4. Data retention

We retain your contact data for as long as necessary to handle your enquiry, and for up to 3 years thereafter for the purpose of documenting business correspondence, unless a longer retention period is required by law or you request earlier deletion.

5. Recipients of your data

Your data is not sold or shared with third parties for marketing purposes. We may share your data with:

• Our technical service providers (email hosting, CRM) acting as data processors under appropriate data processing agreements.
• Public authorities, where required by applicable law.

6. Your rights

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten"), where no legal obligation requires us to retain it.
• Restriction — request that we limit processing of your data in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdrawal of consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at marcin@auritec.co. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

7. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction, in accordance with Article 32 GDPR.

8. International transfers

Your data is processed within the European Economic Area. If any transfer outside the EEA is necessary (e.g. through a cloud service provider), we ensure appropriate safeguards are in place in accordance with Chapter V GDPR.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at this URL. Material changes will be communicated to you where required by law.

10. Contact

For any questions regarding this Privacy Policy or the processing of your personal data: