This Privacy Policy defines the rules for the processing of personal data by ALTMASTER SP. Z O.O. with its registered office at Julianowska 61, 05-500 Józefosław, Masovian Voivodeship, Poland. VAT ID (NIP): 951-00-26-871. Contact with the data controller: [email protected]

1. Data Controller

The controller of personal data is ALTMASTER SP. Z O.O. with its registered office in Józefosław. In matters related to personal data protection, you may contact us via e-mail: [email protected].

2. Legal basis for data processing

Personal data are processed on the basis of:

• the consent of the data subject (Art. 6(1)(a) GDPR),
• necessity for the performance of a contract or actions prior to its conclusion (Art. 6(1)(b) GDPR),
• compliance with a legal obligation imposed on the controller (Art. 6(1)(c) GDPR),
• the legitimate interest of the controller (Art. 6(1)(f) GDPR), including ensuring website security, analytics, and own marketing activities.

3. Purposes of data processing

Personal data may be processed for the following purposes:

• responding to inquiries submitted via contact forms,
• providing logistics, warehousing, and freight forwarding services,
• conducting commercial correspondence and customer service,
• carrying out marketing and remarketing activities (Google Ads, Facebook Pixel),
• analysis of website traffic statistics and website optimization (Google Analytics, Google Tag Manager),
• ensuring website security and proper functioning (technical cookies).

4. Cookies and analytical tools

The website uses cookies to ensure proper operation, traffic analysis, and content personalization. Cookies may also be used by third-party entities such as: Google Analytics, Google Ads, Google Tag Manager, and Facebook Pixel. Users may change cookie settings at any time in their browser or via the consent banner available on the website. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

5. Data recipients

Personal data may be transferred to entities cooperating with the controller, in particular: IT service providers, hosting companies, accounting firms, marketing agencies, transport companies, payment operators, and entities operating analytical and advertising tools (Google, Meta/Facebook). If data are transferred outside the European Economic Area (e.g. to the USA), appropriate safeguards are applied, such as standard contractual clauses approved by the European Commission.

6. Data retention period

Personal data are stored for the period necessary to achieve the purpose for which they were collected, and thereafter for the period required by applicable law (e.g. tax or accounting regulations). Data processed on the basis of consent are deleted after its withdrawal.

7. User rights

Every data subject has the right to:

• access their personal data and obtain a copy thereof,
• rectify (correct) their data,
• delete data (“right to be forgotten”),
• restrict processing,
• data portability,
• object to data processing,
• withdraw consent at any time,
• lodge a complaint with the President of the Personal Data Protection Office (PUODO).

8. Obligation to provide data

Providing personal data is voluntary; however, in some cases it may be necessary to conclude a contract or use certain website functionalities (e.g. contact form).

9. Automated data processing

The controller does not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning the user or similarly significantly affect them.

10. Security measures

The controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or disclosure.

11. Changes to the Privacy Policy

The controller reserves the right to make changes to this Privacy Policy. The current version of the document will always be available on the website. In the event of significant changes, users will be informed in a visible manner on the website. Last updated: October 2025