1. This Privacy Policy sets out the rules for processing the personal data of individuals using the website operated by 4LS sp. z o.o., in particular website visitors, users of the contact form, and individuals contacting the Controller via the contact details provided on the website.

2. The controller of personal data is 4LS sp. z o.o., with its registered office at ul. Frezjowa 11a, 60-175 Poznań, Poland, VAT ID (NIP) 9721243424, REGON 302387778, KRS 0000455909, hereinafter referred to as the "Controller".

3. In matters concerning the processing of personal data and the exercise of data protection rights, you may contact the Controller by e-mail at This email address is being protected from spambots. You need JavaScript enabled to view it. or in writing at the Controller's registered office address.

4. The Controller processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter the "GDPR".

5. In connection with the use of the contact form, the Controller may process the data provided by the user, in particular first and last name, company name, e-mail address, phone number (if provided), correspondence address, and business activity data. Sending the form may also involve the processing of technical information necessary for its proper delivery and handling, including the address of the page from which the form was sent, the date and time of submission, and technical data related to communication with the website.

6. Providing the data marked in the form as required is necessary to submit an inquiry and to enable the Controller to respond. Providing the remaining data, in particular a phone number, is voluntary.

7. Data submitted via the contact form is processed for the purpose of receiving the inquiry, responding to it, conducting further correspondence, and providing information about the Controller's products or services, if the user has requested such information.

8. Where an inquiry concerns the possibility of concluding a contract, the presentation of an offer, or the taking of other steps at the request of the data subject prior to concluding a contract, the legal basis for processing is Article 6(

1)(b) GDPR. In other cases, related to ordinary correspondence, handling inquiries, communicating with representatives of businesses, and ensuring efficient service for individuals interested in the Controller's business, the legal basis for processing is Article 6(1)(f) GDPR, i.e. the Controller's legitimate interest in conducting communication and handling inquiries.

9. Personal data may also be processed to establish, pursue or defend against claims, where necessary to protect the rights of the Controller or of the data subject. The legal basis for such processing is Article 6(

1)(f) GDPR, i.e. the Controller's legitimate interest in protecting its rights.

10. While using the website, technical data related to the connection with the website may be processed, in particular the device's IP address, the date and time of the connection, the address of the requested resource, information about the web browser, operating system, device type, request headers, and information about errors or security-related events.

11. Technical data may be processed to ensure the proper functioning, availability and security of the website, to diagnose errors, to counteract abuse, and to protect the Controller's IT infrastructure.

12. To the extent that technical data constitutes personal data under the Controller's control, the basis for its processing is Article 6(

1)(f) GDPR, i.e. the Controller's legitimate interest in ensuring the secure, stable and proper functioning of the website.

13. Detailed information on the use of cookies, localStorage and other similar technologies is set out in a separate Cookie Policy.

14. Personal data may be disclosed or entrusted to entities supporting the Controller in operating the website and its business activity, solely to the extent necessary for those entities to provide their specific services. Recipients of data may include, in particular, providers of hosting and internet infrastructure services, providers of solutions used to handle online forms, e-mail providers, IT service providers, analytics service providers, and entities responsible for maintaining, developing or securing the website. Data may also be disclosed to entities providing the Controller with legal, accounting, advisory or audit services, where access to the data is necessary to perform those services.

15. Personal data may be disclosed to competent public authorities, courts or other authorised entities, where an obligation to disclose it arises from applicable law or from a legally binding request of the competent authority.

16. The Controller does not sell the personal data of website users.

17. Personal data is not transferred outside the European Economic Area.

18. Data provided via the contact form is stored for the period necessary to respond to the inquiry and to conduct the related correspondence. If the contact leads to a contract or the establishment of cooperation, the data may be stored for the period necessary to perform that cooperation, and subsequently for the period required by applicable law or until the expiry of the limitation periods for claims related to the cooperation.

19. If an inquiry does not lead to further cooperation, the data is deleted or anonymised once it is no longer necessary for the purpose for which it was obtained, subject to the possibility of its further retention to the extent necessary to establish, pursue or defend against claims.

20. Data processed on the basis of the Controller's legitimate interest may be stored until that interest ceases to apply or until an effective objection is raised by the data subject, unless there are overriding, legally justified grounds for further processing.

21. Data processed on the basis of consent is processed until the consent is withdrawn, the purpose for which it was collected is achieved, or the basis for its processing otherwise ceases to apply, whichever occurs first.

22. The data subject has the right to request rectification of personal data if it is inaccurate, and completion of incomplete data.

23. The data subject has the right to request erasure of personal data in the cases specified in Article 17 GDPR.

24. The data subject has the right to request restriction of the processing of data in the cases specified in Article 18 GDPR.

25. Where the conditions set out in Article 20 GDPR are met, the data subject has the right to data portability.

26. Where processing is based on Article 6(

1)(f) GDPR, the data subject has the right to object at any time to the processing of their personal data for reasons related to their particular situation. Upon receiving an objection, the Controller will cease processing the data covered by the objection, unless it demonstrates the existence of valid, legally justified grounds for further processing that override the interests, rights and freedoms of the data subject, or grounds for establishing, pursuing or defending against claims. Where the basis for processing is consent, the data subject may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on its basis before the withdrawal.

27. Personal data obtained via the website is not used by the Controller to make decisions about the user based solely on automated processing, including profiling, that would produce legal effects concerning the user or similarly significantly affect them, unless the user has first been informed of the introduction of such a mechanism and its legal basis.

28. The Controller may amend this Privacy Policy.

29. A person who considers that their personal data is being processed in breach of the GDPR has the right to lodge a complaint with the competent supervisory authority, which in Poland is the President of the Personal Data Protection Office.

30. A complaint may be addressed to the President of the Personal Data Protection Office, ul. Moniuszki 1A, 00-014 Warszawa, Poland.