SIE
SIERUTA.COM
Legal

Privacy Policy

Last updated: December 2024 | GDPR Compliant

1. Data Controller

Sieruta Attachments ("we", "us", or "our") is the data controller responsible for your personal data. Our contact details: Sieruta Attachments ul. Bohaterów Westerplatte 11 07-410 Ostrołęka, Poland Email: privacy@sieruta.com For data protection inquiries, contact our Data Protection Officer at dpo@sieruta.com.

2. Data We Collect

We collect personal data that you voluntarily provide when: • Requesting a quote or placing an order • Registering products for warranty • Subscribing to our newsletter • Contacting our sales or support teams • Applying for a dealer partnership This includes: name, company name, email, phone number, address, machine/fleet information, and order history. We also collect technical data automatically: IP address, browser type, device information, and pages visited (via cookies and analytics).

3. How We Use Your Data

We process your personal data for: • Processing quotes and orders (contract performance) • Providing warranty service and product support • Communicating about your orders and inquiries • Sending marketing communications (with your consent) • Improving our website and services (legitimate interest) • Complying with legal obligations (tax, accounting) We will never sell your personal data to third parties.

5. Data Sharing

We may share your data with: • Authorized dealers (to fulfill local orders/service) • Shipping carriers (delivery information only) • Payment processors (payment information only) • Cloud service providers (data hosting) • Legal authorities (when required by law) All third parties are contractually bound to protect your data and use it only for specified purposes.

6. Data Security

We implement appropriate technical and organizational measures: • SSL/TLS encryption for all data transmission • Encrypted database storage • Access controls and authentication • Regular security audits • Employee data protection training While we strive to protect your data, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain personal data for: • Order records: 7 years (legal requirement) • Warranty records: Duration of warranty + 2 years • Marketing contacts: Until consent withdrawn • Website analytics: 26 months After retention periods expire, data is securely deleted or anonymized.

8. Your Rights (GDPR)

Under GDPR, you have the right to: • Access: Request a copy of your personal data • Rectification: Correct inaccurate data • Erasure: Request deletion of your data ("right to be forgotten") • Restriction: Limit how we process your data • Portability: Receive your data in a structured format • Object: Object to processing based on legitimate interest • Withdraw consent: For consent-based processing To exercise these rights, email privacy@sieruta.com. We respond within 30 days.

Data Protection Contact

For any privacy-related questions or to exercise your GDPR rights:

privacy@sieruta.com

Sieruta Attachments
ul. Bohaterów Westerplatte 11
07-410 Ostrołęka, Poland
ISO 3834-2:2021 CERTIFIED