Privacy policy

Last updated: 7 April 2026

1. Data controller

The controller of personal data processed through the dipolpolska.pl website is:

Dipol Polska Sp. z o.o.
ul. Szopena 38, 35-055 Rzeszów, Poland
NIP: 813-35-77-470, KRS: 0000324687, REGON: 180402322
E-mail: biuro@dipolpolska.pl
Phone: +48 17 863 64 79

2. Purpose and legal basis

• Handling enquiries from the contact form — on the basis of Article 6(1)(a) GDPR (consent of the data subject). Consent is given by ticking the relevant box in the contact form.
• Pursuit of the controller’s legitimate interests — on the basis of Article 6(1)(f) GDPR, in particular web analytics (Google Analytics 4) to improve the site, and direct marketing of our own products and services.

3. Scope of data processed

Through the contact form we collect:

• Full name (required)
• E-mail address (required)
• Phone number (optional)
• Name of the institution or company (optional)

In addition, with the user’s consent, we collect analytics data through Google Analytics 4 (anonymous information about how the site is used, such as pages visited, time on site and device type).

4. Recipients of the data

• Postmark (ActiveCampaign, LLC) — e-mail delivery provider. Data is transferred only to the extent needed to deliver the contact form message.
• Google LLC — for Google Analytics 4 (only with the user’s consent) and Google Ads (only with consent to marketing cookies).

Data may be transferred to third countries (the United States) on the basis of standard contractual clauses or equivalent safeguards compliant with the GDPR.

5. Retention periods

• Contact form data — kept for 5 years from the date of the enquiry, or until a deletion request is made, whichever comes first.
• Analytics data (Google Analytics 4) — kept in line with Google’s data retention policy, no longer than 14 months.
• Cookie consent data — kept for 365 days from the moment consent is given or changed.

6. Rights of the data subject

• The right of access (Article 15 GDPR)
• The right to rectification (Article 16 GDPR)
• The right to erasure — the right to be forgotten (Article 17 GDPR)
• The right to restriction of processing (Article 18 GDPR)
• The right to data portability (Article 20 GDPR)
• The right to object (Article 21 GDPR)
• The right to withdraw consent at any time (Article 7(3) GDPR), without affecting the lawfulness of processing carried out before withdrawal
• The right to lodge a complaint with the President of the Personal Data Protection Office in Poland (Article 77 GDPR)

To exercise these rights, please write to biuro@dipolpolska.pl.

7. Data security

The controller applies appropriate technical and organisational measures, including:

• encrypted connections (SSL/TLS),
• protection of the contact form against spam (honeypot, rate limiting),
• access to personal data restricted to authorised persons,
• regular backups.

8. Cookies

The dipolpolska.pl website uses cookies. Details of the types of cookies used, their purposes and how to manage them are set out in our Cookie policy.

9. Changes to this policy

The controller reserves the right to amend this privacy policy. The current version is always available at dipolpolska.pl/en/privacy-policy.

10. Contact

For matters relating to the processing of personal data, please contact the controller by e-mail at biuro@dipolpolska.pl or by phone at +48 17 863 64 79.