Privacy Policy
and Cookies

1. General information

This Privacy Policy sets out the rules for the processing of personal data and the use of cookies and similar technologies in connection with the use of the website westmarhydraulics.pl, hereinafter referred to as the "Website".

We care about the privacy of Website users and the security of the personal data provided to us. Data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR") and the provisions of the Electronic Communications Law.

2. Data controller

The controller of personal data is:

WestMar Hydraulics Kantor, Wieczorek spółka komandytowa
ul. Stanisława Hryniewieckiego 1
70-606 Szczecin, Poland

Tax ID (NIP): 8510010160
REGON: 810467372
KRS: 0000742914

For matters relating to the protection of personal data, please contact:

daneosobowe@westmarhydraulics.pl

or in writing to the Controller's registered address.

3. What data may be processed

In connection with using the Website, we may process in particular:

• first and last name,
• company name,
• e-mail address,
• phone number,
• data contained in the content of a message sent,
• data provided in connection with a quote request, order or service performance,
• data contained in documents submitted in connection with a recruitment process,
• the device's IP address,
• information about the web browser and operating system,
• information about how the Website is used,
• data saved using cookies and similar technologies.

The scope of processed data depends on how the Website is used and on the information voluntarily provided to the Controller.

4. Purposes and legal grounds for processing

4.1. Contact form and inquiries

Data provided via the contact form, e-mail or phone may be processed in order to:

• respond to the inquiry sent,
• prepare commercial information or an offer,
• conduct further correspondence,
• establish the terms of possible cooperation.

The legal basis for processing is:

• Article 6(1)(b) GDPR – if the contact aims at concluding or performing a contract,
• Article 6(1)(f) GDPR – the Controller's legitimate interest in communicating with people interested in the company's activity, products or services.

Providing data is voluntary but may be necessary to receive a reply.

4.2. Performance of contracts, orders and services

Data of clients, business partners and persons representing clients or business partners may be processed in order to:

• prepare and fulfill an order,
• conclude and perform a contract,
• provide services,
• carry out settlements,
• issue accounting documents,
• handle complaints,
• pursue or defend against claims.

The legal basis is, respectively:

• Article 6(1)(b) GDPR – performance of a contract or steps taken prior to its conclusion,
• Article 6(1)(c) GDPR – fulfillment of the Controller's legal obligations,
• Article 6(1)(f) GDPR – the Controller's legitimate interest, in particular securing, establishing and pursuing claims.

4.3. Marketing

If the user gives appropriate consent, their data may be used to send commercial and marketing information using electronic means of communication.

The legal basis for processing personal data may be Article 6(1)(a) GDPR, i.e. the consent of the data subject.

The use of an e-mail address, phone number or other end devices to send commercial information takes place in accordance with the applicable provisions of the Electronic Communications Law.

Consent may be withdrawn at any time, without affecting the lawfulness of actions taken before its withdrawal.

4.4. Recruitment

If application documents are submitted, data may be processed in order to conduct the recruitment process.

Data required by labor law provisions is processed on the basis of applicable law and Article 6(1)(c) GDPR, while additional data provided voluntarily may be processed on the basis of consent – Article 6(1)(a) GDPR.

If a candidate gives separate consent to participate in future recruitment processes, their data may also be used in subsequent recruitments until the consent is withdrawn or for the period indicated in the recruitment information.

4.5. Security and functioning of the Website

While using the Website, technical data may be automatically recorded, in particular:

• IP address,
• date and time of connection,
• device information,
• web browser type,
• operating system type,
• information about requests sent to the server.

This data may be processed to ensure the proper and safe operation of the Website, diagnose errors, prevent abuse and ensure the security of the IT infrastructure.

The legal basis is Article 6(1)(f) GDPR – the Controller's legitimate interest.

5. Data retention period

Personal data is stored only for the period necessary to achieve the purpose for which it was collected.

In particular:

• data related to inquiries and correspondence – for the period necessary to handle the matter, and then for the period necessary to secure any potential claims,
• data related to the performance of contracts and orders – for the term of the contract, and then for the period resulting from tax, accounting and limitation regulations,
• data processed on the basis of consent – until the consent is withdrawn or the purpose of processing ceases,
• data related to marketing – until consent is withdrawn or an effective objection is raised,
• data of job candidates – for the duration of the given recruitment process, and in the case of consent to future recruitments – for the period indicated by the Controller or until the consent is withdrawn,
• technical data and server logs – for the period necessary to ensure the security and proper operation of the Website.

6. Recipients of data

Personal data may be shared with entities cooperating with the Controller, if this is necessary for the proper functioning of the Website or the conduct of business.

These may include in particular:

• hosting and server providers,
• e-mail service providers,
• entities responsible for maintaining and technically supporting the website,
• IT service providers,
• providers of security and anti-spam systems,
• providers of analytical and advertising services – if such tools are used and the user has given the required consent,
• entities providing accounting, legal or advisory services,
• public authorities – if the obligation to disclose data results from legal provisions.

Data is shared only to the extent necessary to achieve the specific purpose.

7. Rights of data subjects

In connection with the processing of personal data, the user may have the following rights:

• the right to access data,
• the right to receive a copy of the data,
• the right to rectify data,
• the right to request erasure of data,
• the right to restrict processing,
• the right to data portability – if the conditions set out in the GDPR are met,
• the right to object to the processing of data,
• the right to withdraw consent at any time, if the processing is based on consent,
• the right to lodge a complaint with the supervisory authority.

To exercise your rights, please contact the Controller at:

daneosobowe@westmarhydraulics.pl

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

8. Complaint to the supervisory authority

If the user believes that their personal data is being processed unlawfully, they have the right to lodge a complaint with:

The President of the Personal Data Protection Office (UODO).

9. Cookies

9.1. What are cookies

The Website uses cookies, i.e. small files saved on the user's device while browsing the website.

Cookies may be used to:

• ensure the proper functioning of the Website,
• ensure security,
• remember user settings,
• support cookie preference management,
• conduct statistics and analyze the use of the Website – after obtaining the required consent,
• conduct marketing and advertising activities – after obtaining the required consent.

9.2. Necessary cookies

Cookies necessary for the proper functioning of the site may be used without the user's additional consent, if they are necessary to provide a service explicitly requested by the user or to ensure the transmission of a communication.

Blocking them may cause certain Website functions to work incorrectly.

9.3. Analytical and marketing cookies

Analytical, advertising and marketing cookies that are not necessary for the proper functioning of the Website may be saved or read after obtaining the user's consent.

The user should have the option to:

• accept all optional cookies,
• reject optional cookies,
• select individual categories,
• change or withdraw their consent at any time.

Withdrawing consent should be as easy as giving it.

10. Google tools

The Website may use services provided by Google, in particular for protecting forms against spam, displaying maps and – if activated – analyzing statistics or marketing activities.

Google reCAPTCHA

Forms on the Website may use the Google reCAPTCHA service, whose task is to protect forms against automatic submission, spam and other abuse.

As part of the service's operation, technical information about the device and the way the site is used, including the IP address, may be processed.

Google Maps

The Website may embed Google maps. In connection with displaying a map, the service provider may receive technical information about the user's device, including the IP address.

Google Analytics and advertising services

If the Website uses Google Analytics analytical tools or Google advertising tools, they are activated in accordance with the choice made by the user in the cookie consent management mechanism.

Optional analytical or marketing tools should not be launched before the required consent has been given.

11. Transfer of data outside the European Economic Area

Some IT or internet service providers may also process data outside the European Economic Area.

If such a data transfer takes place, the Controller uses mechanisms provided for by the GDPR, in particular European Commission adequacy decisions or standard contractual clauses.

12. Managing cookies

The user can manage cookies independently by:

• the consent management mechanism available on the Website,
• the settings of their web browser,
• deleting previously saved cookies,
• blocking the saving of specific categories of cookies.

Restricting the use of necessary cookies may affect certain functionalities of the Website.

Changing browser settings is not always equivalent to withdrawing consent given through the cookie management panel, which is why the Website should allow reopening privacy settings and changing the choice made.

13. Automated decision-making and profiling

Data submitted via the contact form is not used to make decisions about the user based solely on automated processing that would produce legal effects concerning them or similarly significantly affect them.

If analytical or advertising tools are used, they may analyze user activity for statistical purposes or in connection with matching advertising content, in accordance with the consent given.

14. Data security

The Controller applies appropriate technical and organizational measures aimed at protecting processed personal data against unauthorized access, loss, alteration, disclosure or destruction.

The connection to the Website is secured using the encrypted HTTPS protocol.

Access to data is granted only to persons and entities for whom it is necessary to perform their assigned duties.

15. Links to external websites

The Website may contain links to websites operated by other entities.

The Controller is not responsible for the data processing and cookie policies of the owners of those websites. Before using an external service, it is recommended to review its privacy policy.

16. Changes to the Privacy Policy

The Privacy Policy may be periodically updated, in particular in the event of:

• changes in the law,
• changes in the way data is processed,
• implementation of new Website functionalities,
• changes to the analytical, marketing or technical tools used.

The current version of the Privacy Policy is always published on the westmarhydraulics.pl Website.

Last updated: August 13, 2026.