Privacy Policy

The controller of your personal data is Glanit, Swędowska 47, Warsaw, Poland (the "Company", "we"). Contact for all data-protection matters: info@glanit.com, +48538652253. This policy applies to the website glanit.com (the "Site") and to the enquiries you send us through it or by e-mail. It is issued under Regulation (EU) 2016/679 (GDPR) and the Polish Act of 10 May 2018 on Personal Data Protection.

a) Enquiries (contact form, e-mail, phone). Name, e-mail, phone, company, job title and anything you put in the message. Purpose: answering your enquiry, preparing a proposal and, where it comes to that, concluding and performing a contract. Legal basis: steps prior to a contract at your request (art. 6(1)(b) GDPR) and our legitimate interest in handling business correspondence (art. 6(1)(f) GDPR). b) Job applications. The data in your CV and message. Purpose: recruitment. Legal basis: art. 6(1)(b) GDPR and, for the data you volunteer beyond what we ask for, your consent (art. 6(1)(a) GDPR), which you may withdraw at any time. c) Technical logs. IP address, browser and device type, pages requested, date and time, referring page. Purpose: security, fault-finding and abuse prevention. Legal basis: legitimate interest (art. 6(1)(f) GDPR). Kept for up to 90 days. d) Analytics cookies — only if you agree in the cookie banner. Aggregated statistics on how the Site is used, collected by Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Legal basis: your consent (art. 6(1)(a) GDPR; art. 399 of the Electronic Communications Law). Details, retention and how to withdraw: Cookie Policy. e) Marketing messages. Only with your separate prior consent. You may withdraw it at any time by writing to info@glanit.com or using the link in a message. We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects on you.

No. Providing data is voluntary, but without contact details we cannot answer an enquiry, and without the data needed for a contract we cannot conclude or perform it.

Your data is processed by our staff and by processors acting on our documented instructions under art. 28 GDPR: hosting and e-mail providers, and — if you consent to analytics cookies — Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We do not sell personal data and we do not share it with third parties for their own marketing. Data may be disclosed to public authorities where the law requires it.

We keep data in the EEA wherever possible. Where a provider processes data outside the EEA (this may apply to analytics), the transfer relies on an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework for certified providers) or on the Commission's Standard Contractual Clauses with supplementary measures. You may ask us at info@glanit.com for a copy of the safeguards used.

Enquiries that do not lead to a contract: up to 12 months from the last exchange. Contract data: for the term of the contract and then for the limitation period of claims and the retention periods required by tax and accounting law. Recruitment data: until the vacancy is closed, or up to 12 months if you agree to be considered for future roles. Technical logs: up to 90 days. Consent-based processing: until you withdraw consent. Cookies: the periods listed in the Cookie Policy.

Under arts. 15–22 GDPR you have the right to: access your data and obtain a copy; have it rectified; have it erased; restrict its processing; receive it in a portable format; object to processing based on legitimate interest, including direct marketing at any time; and withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal). To exercise a right, write to info@glanit.com. We answer without undue delay and at the latest within one month (30 days), extendable by two further months for complex requests, in which case we will tell you. You also have the right to lodge a complaint with a supervisory authority, in particular the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), ul. Stawki 2, 00-193 Warsaw, Poland (https://uodo.gov.pl), or the authority of the EU member state where you live or work.

We apply technical and organisational measures appropriate to the risk: TLS encryption in transit, access control and least privilege, encrypted backups, logging, and staff confidentiality obligations. No method of transmission over the Internet is completely secure; if a breach is likely to result in a high risk to you, we will inform you as required by art. 34 GDPR.

We may update this policy when our processing or the law changes. The current version is always available at glanit.com/privacy-policy with its version date. Material changes are announced on the Site.