Privacy notice
DATA PROTECTION POLICY
VMBS.TECH
Last updated: 20 October 2026
§ 1 CONTROLLER
The controller of your personal data is VMBS.TECH – Pavlo Borysovets, a sole proprietorship with its registered office at ul. Zamkowa 20, 83-110 Tczew, Poland (NIP: 6642155204, REGON: 528716050), tel. +48 785 999 338, e-mail: contact@vmbs.tech.
§ 2 WHAT DATA WE PROCESS, WHY AND ON WHAT LEGAL BASIS
1. Inquiries and correspondence (contact form, e-mail, phone): name, e-mail address, phone number, company, project details and any files you send. We use them to answer you and to prepare an offer. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in handling business inquiries).
2. Contracts and settlements: data needed to conclude and perform a contract, issue invoices and keep accounting records. Legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR (legal obligations, e.g. tax and accounting law).
3. Website analytics and cookies: technical data such as IP address, device, browser and pages visited, collected through Wix and, where you consent, Google Analytics. Legal basis: your consent (Art. 6(1)(a) GDPR) for non-essential cookies; strictly necessary cookies are used on the basis of our legitimate interest in running the website securely (Art. 6(1)(f) GDPR). Details are in our Cookies policy.
4. Providing data is voluntary, but without it we cannot answer your inquiry or conclude a contract.
§ 3 RETENTION
1. Inquiry data is kept for 12 months after the last contact, unless a contract is concluded.
2. Contract and accounting data is kept for the period required by law (in Poland, generally 5 years from the end of the tax year) and as long as claims may be pursued.
3. Data processed on the basis of consent is kept until you withdraw it. Analytics data is kept according to the cookie lifetimes described in the Cookies policy.
§ 4 RECIPIENTS AND TRANSFERS
1. We do not sell personal data.
2. Recipients of data may be: providers of website hosting, forms, analytics and e-mail (Wix.com, Google); our accountant; with your knowledge and only as needed for a specific project, manufacturers, architects and other partners involved in it; and public authorities where the law requires.
3. Some providers may process data outside the European Economic Area (e.g. in the USA). In such cases the transfer is based on safeguards such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
§ 5 YOUR RIGHTS
1. You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interest.
2. Where processing is based on consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out before it.
3. To exercise your rights, write to contact@vmbs.tech.
4. You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
5. We do not take decisions about you based solely on automated processing.
§ 6 FINAL PROVISIONS
1. This policy is based on Regulation (EU) 2016/679 (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.
2. We may update this policy. The current version, with its date, is always published on this page.