Privacy Policy

This Privacy Policy defines the rules for processing and protecting personal data provided by Users in connection with using the ZPH NETEX Podszus website, as well as placing orders and requesting quotes for metal products and manufacturing services.

1. Personal Data Controller

The Controller of your personal data is Zakład Produkcyjno-Handlowy NETEX Podszus, with its registered office in Węgrów, at ul. Żeromskiego 12, 07-100 Węgrów, Poland. Contact regarding personal data protection is possible via:

2. Security Architecture – No Invasive Tracking

Website traffic is monitored only through internal, anonymous server logs to ensure stability, infrastructure security, and protection against attacks (so-called technical logs). We do not use analytical tools based on marketing cookies or remarketing systems.

3. Scope of Data Collected

As part of our business activities, we may process the following categories of personal data:

Data category	Scope of data	Purpose of processing
Identification data	First name, last name, company name, tax ID (NIP)	Customer identification, invoicing
Contact details	Email address, phone number, address	Contact and order fulfillment
Order data	Purchase history, product preferences	Contract performance, after-sales service
Technical data	IP address, browser type, operating system	Traffic analysis, website security

4. Purpose and Legal Basis for Data Processing

Personal data provided by Users in contact forms, quote requests, or orders is processed solely for the following purposes:

• Handling quote requests and conducting business correspondence – the legal basis is Art. 6(1)(f) GDPR (the legitimate interest of the Controller in responding to customer inquiries).
• Order fulfillment, issuing invoices and sales documentation – the legal basis is Art. 6(1)(b) GDPR (necessary for contract performance) and Art. 6(1)(c) GDPR (fulfillment of tax and accounting obligations).
• Potential pursuit of claims or defense against claims – the legal basis is Art. 6(1)(f) GDPR.
• Direct marketing of own products – only after you give separate consent (Art. 6(1)(a) GDPR).

We do not process personal data for marketing purposes without the User's explicit consent.

5. Data Retention Period

Personal data will be processed for the period necessary to achieve the purpose for which it was collected:

• For quote requests – until the correspondence is completed, no longer than 12 months from the last contact.
• For completed orders – for the period required by tax laws (5 years from the end of the calendar year in which the tax obligation arose) and until the statute of limitations for claims expires (usually 6 years).
• Marketing data (with consent) – until consent is withdrawn, no longer than 3 years.

6. Data Recipients

User data is not sold, lent, or shared with third parties for marketing purposes. Data recipients may only include:

• Entities providing hosting and server services on behalf of the Controller (based on data processing agreements).
• Courier and shipping companies – to deliver ordered goods.
• Providers of accounting and legal services.
• Entities authorized by law (e.g., tax authorities, courts).

7. User Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access to your data – you can obtain information about what data we process and receive a copy.
• Right to rectification – you can request correction of incorrect data or completion of incomplete data.
• Right to erasure ("right to be forgotten") – in certain circumstances, you can request deletion of your data.
• Right to restriction of processing – when you contest the accuracy of data or object to processing.
• Right to data portability – you can receive your data in a machine-readable format.
• Right to object – to processing based on the Controller's legitimate interest.
• Right to withdraw consent – at any time, without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint – with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland), if you believe processing violates legal provisions.

To exercise your rights, please contact us via email: biuro@netex.pl or in writing to our registered office address.

8. Cookies

The ZPH NETEX Podszus website uses only essential (technical) cookies that are indispensable for the proper functioning of the site, ensuring security, and enabling the use of basic features (e.g., navigation, language switcher). We do not use cookies for profiling, behavioral analysis, or marketing purposes.

You can change your cookie settings in your browser at any time. Disabling essential cookies may, however, affect the proper functioning of the website.

9. Data Security

We apply appropriate technical and organizational measures to ensure the protection of processed personal data against loss, damage, unauthorized access, or disclosure. Only authorized persons who have been properly trained in information protection have access to the data. The website uses an SSL certificate (HTTPS encryption).

10. Data Transfer outside the EEA

As a rule, we do not transfer personal data outside the European Economic Area (EEA). When using tools from providers outside the EEA (e.g., hosting servers), we ensure an adequate level of protection through standard contractual clauses approved by the European Commission.

11. Changes to the Privacy Policy

The Controller reserves the right to update this Privacy Policy in the event of changes in legal provisions or the development of offered services. We will inform you of any significant changes by posting a notice on the website's home page. The current version of the document will always be available at this address.

This Privacy Policy is effective from January 1, 2026.