Privacy Policy

The controller of your personal data is the person conducting business under the name SVISUALS, headquartered at ul. 1 Maja 21, 42-217 Częstochowa, Poland.

• Tax ID (NIP): 5732961049
• Business ID (REGON): 541221713

For matters concerning data protection, you can contact us at: kontakt@svisuals.pl

We collect personal data in the following cases:

a) Account registration in the panel

First and last name, email address, phone number, username. Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Data is stored for the duration of the account and 3 years after its deletion.

b) Orders, commissions and invoicing

Contact details, order details and - for B2B cooperation - data necessary for invoicing: company name, registered address, tax identification number (NIP). Legal basis: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (legal obligation - tax and accounting regulations). We retain invoice data for 5 years from the end of the tax year in which the document was issued, in accordance with the Accounting Act and the Tax Ordinance Act.

c) Equipment rental

First and last name, email address, delivery address, tax identification number (NIP, if applicable), payment data (Stripe). We do not store payment card data - it is processed by Stripe Inc. in accordance with PCI DSS. Legal basis: Article 6(1)(b) GDPR. We retain invoice data for 5 years.

d) Contact form

First name, email address, message content. Legal basis: Art. 6(1)(f) GDPR (legitimate interest – providing a response). Data is stored for up to 12 months from the last contact.

e) Newsletter

Email address. Legal basis: Art. 6(1)(a) GDPR (consent). Data is stored until unsubscribing from the newsletter or withdrawal of consent.

f) B2B cooperation – contact persons' data

Within cooperation with business clients, we may process contact persons' data (first name, last name, business email address, phone number). Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller – maintaining business relations). Data is stored for the duration of cooperation and up to 3 years after its termination.

g) Recruitment

Data contained in the application (CV, cover letter and other documents). Legal basis: Article 6(1)(b) GDPR and Article 6(1)(a) GDPR (consent to processing data beyond the requirements of the Polish Labour Code). We retain the data for 3 months after recruitment ends, unless you consent to longer retention.

With your consent to analytics, we use Vercel Analytics to analyse website traffic. This tool collects aggregated data about visits (number of visits, country, device type) without identifying specific users and without setting tracking cookies.

After consenting to analytics, we also store a pseudonymous identifier of the current session, the first visited subpage, source and campaign parameters, and clicks leading to contact, quotation or purchase. This allows us to check which content and campaigns lead to inquiries and sales.

The Website also uses technical cookies necessary for site operation (e.g. user session, theme preferences) and a necessary privacy choice identifier. Analytics and marketing are chosen independently. After separate marketing consent, we may activate Meta Pixel and send events to Meta Platforms Ireland Limited such as page visit, inquiry submission, payment initiation or purchase. Contact data used for event matching is one-way hashed before sending, and events may include technical data including IP address, ad click identifier and browser information. Meta may use this data to measure and match ads according to its policies. Marketing tools are not activated if consent is declined.

After entering via a partner link and consenting to marketing, we may store the referrer code in the browser memory for up to 30 days. The code is used to assign orders and settle the affiliate programme. Without consent, we do not store new referrals nor read them for new purchases. Refusal does not affect previously accrued commissions.

You can change or withdraw your choice at any time via "Cookie Settings" in the website footer and panel. The choice is remembered for up to 180 days. Refusal does not restrict access to the site or purchase options. This consent does not replace separate consent for newsletters or marketing messages.

You can manage cookies in your browser settings. Disabling technical cookies may limit some Website functions.

Your data may be disclosed to the following entities:

• Supabase Inc. (USA) – database hosting and authentication, based on standard contractual clauses (SCC) compliant with GDPR
• Vercel Inc. (USA) – Website hosting and analytics, based on SCC compliant with GDPR
• Stripe Inc. (USA) - payment processing for equipment rental, based on SCC compliant with the GDPR
• Resend Inc. (USA) - sending e-mail messages (confirmations, notifications), based on SCC compliant with the GDPR
• Meta Platforms Ireland Limited - measurement of advertising effectiveness and event matching after obtaining user consent
• InPost S.A. - delivery data for equipment rental (first name, last name, address or parcel locker number)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Under the GDPR, you have the following rights:

• Access - you may request a copy of your data
• Rectification - you may request correction of inaccurate or incomplete data
• Erasure - you may request deletion of data (the right to be forgotten)
• Restriction of processing - you may request restriction of processing of your data
• Data portability - you may receive your data in a machine-readable format
• Objection - you may object to processing based on legitimate interest
• Withdrawal of consent - if processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise the above rights, please contact us at kontakt@svisuals.pl . We will respond to your request within 30 days.

You also have the right to lodge a complaint with the supervisory authority - in Poland, this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Access to data is limited to authorised persons bound by confidentiality.

Connections to the Website are encrypted using HTTPS/TLS protocol. Data in the database is stored on Supabase servers with row-level security enabled.

Some of our service providers (Supabase, Vercel, Stripe, Resend) are based in the United States. Data transfers are based on standard contractual clauses (SCC) approved by the European Commission, ensuring an adequate level of data protection.

We may update this privacy policy due to changes in law or our services. We will inform about significant changes via a notice on the homepage or an e-mail (if we have your address). The date of the last update is always visible at the top of this document.

If you have any questions regarding this privacy policy or the processing of your personal data, please contact us:

• E-mail: kontakt@svisuals.pl
• Address: ul. 1 Maja 21, 42-217 Częstochowa, Poland
• Tax ID (NIP): 5732961049