Privacy Policy

1. Data controller

The controller of personal data is Supreme Management Sp. z o.o., ul. Domaniewska 47/10, 02-672 Warszawa, Poland; NIP 9542831854; KRS 0000926544; REGON 520184842. Contact: [email protected], +48 662 244 424.

We have not appointed a Data Protection Officer. For any data protection matter write to [email protected].

2. What data we process and where it comes from

You give us the data yourself through the contact form: name, company, email address, phone number (optional), the service you are interested in and the content of your message. We also receive the language version of the site and a note that the Privacy Policy notice was shown on the form when you sent it.

Your IP address and technical device data are processed by Cloudflare to deliver the site and to run the security check on the form. We do not include them in the message we receive.

3. Purposes and legal bases

Answering your enquiry and taking steps at your request before a possible contract: Art. 6(1)(b) GDPR.

Handling business correspondence, including enquiries sent on behalf of a company, and establishing, pursuing or defending claims: our legitimate interest, Art. 6(1)(f) GDPR.

Securing the website and protecting the form from spam and abuse: our legitimate interest, Art. 6(1)(f) GDPR.

4. Voluntary provision of data

Providing data is voluntary, but name, company, email address and message are needed for us to reply, and the form cannot be sent without them. The phone number is optional.

5. Recipients

Your data is processed on our behalf by Cloudflare, Inc. (site hosting, form handling, Turnstile security check), Resend (sending the form message by email) and the IT and email service providers we use. Where necessary it may also be disclosed to our legal or tax advisers and to public authorities if the law requires it. We do not sell personal data.

6. Transfers outside the EEA

Cloudflare and Resend are based in the United States, and Cloudflare processes data across a global network, so your data may be transferred outside the European Economic Area. We rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) where the recipient participates in it, or otherwise on standard contractual clauses (Art. 46(2)(c) GDPR). You can request a copy of these safeguards at [email protected].

7. Retention

We keep the enquiry for as long as needed to handle it and then for up to 12 months after the last contact. If a contract is concluded or a claim arises, we keep the data for the duration of the contract and then until limitation periods or legal retention periods (for example tax rules) expire. Technical data processed by Cloudflare is kept according to that provider's terms.

8. Your rights

You have the right to access your data, to rectify it, to erase it, to restrict processing and to data portability (as provided in the GDPR). You may also object to processing based on our legitimate interest, on grounds relating to your particular situation (Art. 21 GDPR). To exercise your rights, write to [email protected].

You have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warszawa.

9. Automated decisions

We do not make decisions about you by automated means and we do not profile you.

10. Cookies

The site itself does not set cookies and does not use analytics, advertising, social media or tracking tools. It does not load external fonts or scripts, except the Cloudflare Turnstile security check on the contact page. Turnstile may use technical storage on your device that is strictly necessary to protect the form from abuse, which does not require consent. If this changes, we will ask for your consent first.