1. Data controller
The controller of your personal data is PIXART, ul. Parkowa 33A, 62-571 Żychlin, VAT ID (NIP) 6653087630 ("the Controller"). For matters concerning personal data, contact us at [email protected].
2. What data we process, for what purpose and on what legal basis
a) Contact form. We process: full name, e-mail address, company name (optional), phone number (optional), and the subject and content of the message. Purpose: responding to your enquiry, preparing a quote and taking steps prior to entering into a contract. Legal basis: Article 6(1)(b) GDPR (pre-contractual steps) and Article 6(1)(f) GDPR (legitimate interest - handling correspondence). If you use the 3D visualizer, the graphic file (logo) you upload and the generated product previews are transferred together with the form - they reach us exclusively by e-mail for the purpose of preparing a quote and are not stored on the website's server.
b) Security and correct operation of the website. We process the IP address, technical browser and device data, server logs and data collected by the anti-bot mechanism (Cloudflare Turnstile) when the form is submitted. Purpose: ensuring security, protection against attacks and spam, diagnostics. Legal basis: Article 6(1)(f) GDPR (legitimate interest - security and integrity).
c) Statistics and analytics (Google Analytics). We process an identifier stored in a cookie, a truncated IP address, device and browser data, and events (e.g. visited pages). Purpose: traffic analysis and improving the website. Legal basis: Article 6(1)(a) GDPR (consent) given via the cookie banner. You can withdraw consent at any time.
3. Voluntariness of providing data
Providing data is voluntary but necessary to respond to an enquiry sent via the form. To send an enquiry, the following are required: full name, e-mail address, subject and message; the other fields (company name, phone) are optional. Consent to analytics is entirely voluntary and does not affect your ability to use the website.
4. Recipients and data processors
For the correct operation of the website, the Controller uses external providers acting as processors:
- Resend, Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA) - e-mail infrastructure required to deliver messages from the contact form. Data entered into the form is processed on the provider's servers located within the European Economic Area (Ireland).
- Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) - hosting of the website (Cloudflare Pages), performance (CDN) and security (protection against DDoS attacks/WAF, anti-bot verification of forms using Cloudflare Turnstile). For this purpose, system logs, browser metadata and IP addresses are processed.
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), together with Google LLC (USA) as an affiliate - the Google Analytics 4 tool used for traffic statistics (active only after consent is given).
Data may also be disclosed to entities authorised under applicable law.
5. Transfers outside the EEA
Some providers (Resend, Cloudflare, Google) are entities based in the USA. Where a transfer of data outside the European Economic Area occurs, it is based on appropriate safeguards: Standard Contractual Clauses (SCC) approved by the European Commission and - for certified providers - the EU-US Data Privacy Framework (DPF). Contact-form data is processed on servers within the EEA (Ireland).
6. Retention period
- Contact-form data - for the time necessary to handle the enquiry and correspondence, then for the limitation period of any potential claims or until an effective objection.
- Logs and security-related data - for the period resulting from the providers' configuration, usually short-term, for diagnostic and security purposes.
- Analytics data - for the period set in the Google Analytics settings and until consent is withdrawn.
7. Your rights
You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest, and - for data processed on the basis of consent - to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You also have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland). To exercise your rights, contact us at [email protected].
8. Cookies
The website uses cookies and similar technologies:
- Necessary (technical) - required for the site to work and for security; they include remembering the chosen theme and language and the operation of Cloudflare Turnstile. They do not require consent.
- Analytics - Google Analytics, used for traffic statistics. Set only after consent is given in the banner; until then analytics runs in a limited mode (Google Consent Mode) without storing cookies.
You manage consent via the banner on your first visit and at any time via the "Cookie settings" link in the site footer. You can also change cookie settings in your browser.
9. Automated decision-making
Your data is not used for automated decision-making producing legal effects, including profiling within the meaning of Article 22 GDPR. The Cloudflare Turnstile mechanism only distinguishes human traffic from bots and does not profile the individual.
10. Changes to this Policy
The Controller may update this Policy. In the event of material changes regarding cookies, users will be asked again for consent. The current version is always available on this page, with the date of the last update.
11. Contact
For matters concerning the protection of personal data, contact us at [email protected].