Privacy policy

Privacy policy

As of: October 2026

1. Controller

The controller responsible for processing personal data is S und B Sp. z o.o., Porcelanowa 23, 40-246 Katowice, Poland, KRS 0000833499, NIP 9542813402. For data protection questions please contact kontakt@sundb.pl or +48 666 161 963.

2. Data we process

We process the data you provide via the forms on this website, by e-mail or by phone: name, company, position, e-mail address, phone number, country, the content of your request and uploaded files (e.g. technical drawings, photos, bills of materials). When you visit the website, the server also stores technical data such as IP address, date and time of access and browser information (server log files).

3. Purposes and legal bases

  • Handling enquiries and preparing quotations – Art. 6(1)(b) GDPR (pre-contractual measures at your request).
  • Processing orders – Art. 6(1)(b) GDPR.
  • Communication with contact persons at customers and suppliers – Art. 6(1)(f) GDPR (legitimate interest in business communication).
  • Protecting the forms against spam and abuse (Google reCAPTCHA) and ensuring the security and operation of the website (server log files) – Art. 6(1)(f) GDPR.
  • Visitor statistics (Google Analytics) – Art. 6(1)(a) GDPR (your consent given in the cookie banner).
  • Legal obligations, in particular tax and accounting retention – Art. 6(1)(c) GDPR.

4. Drawings and technical documents

We use submitted drawings and documents exclusively for preparing quotations and processing orders. Where necessary, we share them with the manufacturing plants we work with on production; they are bound to confidentiality. We are happy to sign a non-disclosure agreement on request.

5. Recipients

  • hosting and e-mail provider: heapmail Internet Solutions sp. z o.o., Wałbrzych (Poland),
  • manufacturing and service companies involved in handling enquiries and orders – to the extent necessary,
  • Google Ireland Limited as part of reCAPTCHA (form protection), Google Analytics (visitor statistics) and Google Maps (map on the contact page) – the latter two only with your consent; data may be transferred to Google LLC in the USA on the basis of the European Commission adequacy decision on the EU-US Data Privacy Framework,
  • providers of accounting, legal and IT services – to the extent necessary for their services.

6. Retention

We keep data from enquiries that do not lead to an order for up to 3 years after the last contact. Order-related data is kept for the statutory retention periods (as a rule 5 years after the end of the tax year) and until limitation periods expire. Server log files are deleted automatically after a short time.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You may also lodge a complaint with a supervisory authority – the authority competent for us is the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw); you may also contact the authority in your country of residence.

8. Voluntary provision

Providing your data is voluntary, but without it we cannot handle your enquiry. No automated decision-making or profiling takes place.

9. Cookies and Google Analytics

This website uses technically necessary cookies, e.g. to remember the selected language and your cookie choice, and to protect the forms with reCAPTCHA. No consent is required for these.

With your consent we use Google Analytics 4 (Google Ireland Limited) to see which pages are visited and how we can improve the website. Google Analytics sets cookies (_ga, _ga_*, stored for up to 2 years) and collects, among other things, pages visited, time on site, approximate location (country, city), device and browser. IP addresses are not stored in Google Analytics 4. We keep the statistics for 14 months and do not combine them with data from the forms.

Google Analytics is only activated when you select “Accept” in the cookie banner. You can change or withdraw your consent at any time in the cookie settings (“Manage consent” link at the bottom of the page). Withdrawal does not affect the lawfulness of processing carried out before it.

The Google Maps map (Google Ireland Limited) on the contact page is only loaded after you consent in the cookie banner. Google then receives, among other things, your IP address.