Privacy policy

This policy explains how we process personal data when you visit www.sap4u.pl or contact us through the contact form. We process personal data in line with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the applicable Polish law.

1. Data controller

The controller of your personal data is SAP4U Group Sp. z o.o., al. Marsz. Józefa Piłsudskiego 74/320, 50-020 Wrocław, Poland, entered in the National Court Register under KRS 0000834741, NIP 8982256945, REGON 385821253 (“we”, “us”).

You can contact us about personal data through the contact form or by post at the address above. We have not appointed a data protection officer.

2. What data we process and why

Contact form and correspondence

When you send us a message, we process your name, email address, company name (if you provide it), the content of your message and any further correspondence. We use this data to reply to your enquiry and, if you ask for it, to prepare an offer.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries and communicating with business contacts (Art. 6(1)(f) GDPR).

Server logs and security

When you visit the website, our server automatically records technical data such as your IP address, the date and time of the request, the page requested and your browser type. We use this data only to keep the website running securely, for example to detect abuse and to limit the number of messages sent from one address.

Legal basis: our legitimate interest in the security of the website (Art. 6(1)(f) GDPR).

3. Cookies and analytics

This website does not use cookies, analytics or advertising tools, and it does not load content from third-party services. Fonts are served from our own server.

The website contains links to LinkedIn. If you follow them, LinkedIn processes your data under its own privacy policy.

4. Who receives your data

We share personal data only with service providers that process it on our behalf and under a data processing agreement: our hosting provider and our email provider. We may also disclose data to public authorities when the law requires it.

We do not sell personal data and we do not use it for automated decision-making or profiling.

5. Transfers outside the European Economic Area

We store and process your data within the European Economic Area. If a transfer outside the EEA ever becomes necessary, we will make sure it is protected by appropriate safeguards, such as the European Commission’s standard contractual clauses.

6. How long we keep your data

• Enquiries and correspondence: for as long as needed to handle your enquiry, and then for up to 12 months, unless the contact leads to a contract. In that case we keep the data for the period required to establish, pursue or defend legal claims.
• Server logs: for up to 30 days.
• Rate-limit records (IP address only): for 10 minutes, in memory.

7. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy of it,
• have inaccurate data corrected,
• have your data erased,
• restrict processing,
• data portability,
• object at any time to processing based on our legitimate interest, for reasons relating to your particular situation.

To exercise these rights, contact us as described in section 1. You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.

8. Is providing data required?

Providing your data is voluntary. Without your name, email address and message, however, we cannot reply to your enquiry.

9. Changes to this policy

We may update this policy when our website or the law changes. The current version is always available on this page, with the date of the last update shown at the top.