Privacy Policy

Sieruta Attachments ("we", "us", or "our") is the data controller responsible for your personal data. Our contact details: Sieruta Attachments ul. Bohaterów Westerplatte 11 07-410 Ostrołęka, Poland Email: privacy@sieruta.com For data protection inquiries, contact our Data Protection Officer at dpo@sieruta.com.

We collect personal data that you voluntarily provide when: • Requesting a quote or placing an order • Registering products for warranty • Subscribing to our newsletter • Contacting our sales or support teams • Applying for a dealer partnership This includes: name, company name, email, phone number, address, machine/fleet information, and order history. We also collect technical data automatically: IP address, browser type, device information, and pages visited (via cookies and analytics).

We process your personal data for: • Processing quotes and orders (contract performance) • Providing warranty service and product support • Communicating about your orders and inquiries • Sending marketing communications (with your consent) • Improving our website and services (legitimate interest) • Complying with legal obligations (tax, accounting) We will never sell your personal data to third parties.

We process your data based on: • Contract: When necessary to fulfill orders or provide services • Consent: For marketing communications and non-essential cookies • Legitimate Interest: For website analytics and fraud prevention • Legal Obligation: For tax records and regulatory compliance You can withdraw consent at any time by contacting privacy@sieruta.com.

We may share your data with: • Authorized dealers (to fulfill local orders/service) • Shipping carriers (delivery information only) • Payment processors (payment information only) • Cloud service providers (data hosting) • Legal authorities (when required by law) All third parties are contractually bound to protect your data and use it only for specified purposes.

We implement appropriate technical and organizational measures: • SSL/TLS encryption for all data transmission • Encrypted database storage • Access controls and authentication • Regular security audits • Employee data protection training While we strive to protect your data, no method of transmission over the internet is 100% secure.

We retain personal data for: • Order records: 7 years (legal requirement) • Warranty records: Duration of warranty + 2 years • Marketing contacts: Until consent withdrawn • Website analytics: 26 months After retention periods expire, data is securely deleted or anonymized.

Under GDPR, you have the right to: • Access: Request a copy of your personal data • Rectification: Correct inaccurate data • Erasure: Request deletion of your data ("right to be forgotten") • Restriction: Limit how we process your data • Portability: Receive your data in a structured format • Object: Object to processing based on legitimate interest • Withdraw consent: For consent-based processing To exercise these rights, email privacy@sieruta.com. We respond within 30 days.