01Data controller
The controller of personal data is Aplixcom Solutions spółka z ograniczoną odpowiedzialnością spółka komandytowa, registered office: ul. Józefa Marcika 12, 30-443 Kraków, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000449275, tax ID (NIP) 954-26-62-274, REGON 241123463 (the “Controller”, “we”).
Contact for personal data matters: e-mail info@aplixcom.com (preferably with “Personal data” in the subject line) or a letter to our registered office.
We have not appointed a data protection officer, as we are not required to do so (Art. 37 GDPR).
02Websites covered by this policy
This policy covers all our websites and the correspondence that results from them. Auxiliary domains (e.g. aplixcom.pl, scadames.com) only redirect to the websites listed below.
| Website | Contact form | Visitor statistics | Browser storage |
|---|---|---|---|
| aplixcom.com | yes — sends the enquiry to our server | Google Analytics 4, only with consent | your cookie choice |
| vistagate.pl, vistagate.eu | yes — sends the enquiry to our server | Google Analytics 4, only with consent | your cookie choice |
| scada-mes.pl, scada-mes.com | opens your e-mail program — no data reaches our server | Google Analytics 4, only with consent | your cookie choice and language version |
03What data we process
- Contact form (aplixcom.com, vistagate.pl, vistagate.eu): full name, company name, e-mail address and — if you provide them — phone number, industry, information about machines and the content of the enquiry. The server adds the date of sending, IP address, browser information (User-Agent) and the address of the page from which the form was sent.
- The scada-mes.pl / scada-mes.com form sends nothing — it prepares a message in your e-mail program. We receive only what you send us by e-mail yourself.
- E-mail correspondence and phone calls: data contained in the message or given during the call.
- Technical data on every visit: the hosting server logs the IP address, date and time, requested page address, server response code and browser information.
- Visitor statistics (all websites, only with consent): an identifier stored in Google Analytics cookies, pages visited, visit duration, device and browser type and approximate location (country, city) derived from the IP address.
We do not ask for special categories of data (e.g. health data) — please do not send them. Please do not enter confidential information about your plant (trade secrets) in the form; we sign a non-disclosure agreement before exchanging such information.
04Purposes, legal bases and retention
| Purpose | Legal basis | How long |
|---|---|---|
| Answering the enquiry and further correspondence, including preparing a presentation, demo or offer | Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract; if you write on behalf of a company — Art. 6(1)(f) GDPR (our legitimate interest: answering enquiries and maintaining business contacts) | 12 months from the last contact, unless we conclude a contract |
| Automatic confirmation of receipt, sent to the e-mail address you provided | Art. 6(1)(f) GDPR — confirming that your message has reached us | as above |
| Protecting the form and websites against abuse, diagnosing sending errors | Art. 6(1)(f) GDPR — website security | technical form log: 90 days; server logs: up to 12 months |
| Concluding and performing a contract (licence, deployment, support), if one is concluded | Art. 6(1)(b) GDPR; data of the customer’s contact persons — Art. 6(1)(f) GDPR | for the duration of the contract |
| Accounting and tax obligations | Art. 6(1)(c) GDPR in conjunction with the Polish Accounting Act and Tax Ordinance | 5 years from the end of the calendar year in which the tax payment deadline expired |
| Establishing, pursuing and defending claims | Art. 6(1)(f) GDPR | until the limitation periods expire |
| Informing people who have shown interest about our products | Art. 6(1)(f) GDPR (direct marketing). We send commercial information by e-mail or phone only with your prior consent, in accordance with the Polish Electronic Communications Law | until you object or withdraw consent |
| Visitor statistics on our websites (Google Analytics 4) | Art. 6(1)(a) GDPR — consent; storing and reading cookies is also based on consent (Polish Electronic Communications Law) | until consent is withdrawn; data in Google Analytics — 14 months |
| Loading the Google Tag script before you decide on cookies (see “Cookies and browser storage”) | Art. 6(1)(f) GDPR — correct operation of the website and handling of your cookie choice | on our side only while the file is loaded; Google processes data under its own terms |
Where the basis is our legitimate interest, we assessed before starting the processing that it does not override your interests, rights and freedoms.
05Recipients of data
We share data only to the extent necessary. We do not sell personal data.
- home.pl S.A. (Szczecin, Poland) — website hosting and server logs;
- Microsoft Ireland Operations Limited (Dublin) — Microsoft 365: the info@aplixcom.com mailbox and sending of form messages and confirmations;
- Google Ireland Limited (Dublin) — Google Analytics 4 on all our websites (only with consent) and the Google Tag script (www.googletagmanager.com);
- providers of accounting, legal and IT services to us — when necessary for a given matter;
- public authorities — only where required by law.
Entities processing data on our behalf do so under a data processing agreement (Art. 28 GDPR) or terms of service that contain such provisions.
Fonts, styles and libraries needed to display our websites are loaded from our own server — your browser does not connect to other companies' servers for them. The only exception is the Google Tag script described above.
06Transfers outside the European Economic Area
Microsoft and Google may also process data in the United States (Microsoft Corporation, Google LLC). Transfers are based on the European Commission decision of 10 July 2023 on the adequate level of protection under the EU-US Data Privacy Framework (for certified entities) and on standard contractual clauses (Art. 46(2)(c) GDPR).
Information on safeguards and a copy of the clauses are available at info@aplixcom.com.
08Your rights
- access to your data and a copy of it (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability — where we process data on the basis of a contract or consent (Art. 20 GDPR),
- objection to processing based on our legitimate interest (Art. 21 GDPR); an objection to direct marketing is always honoured,
- withdrawal of consent at any time, without affecting the lawfulness of processing before its withdrawal (Art. 7(3) GDPR),
- a complaint to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl), or to the supervisory authority of your place of residence or work in the EU.
Please send requests to info@aplixcom.com. We reply without undue delay and no later than within one month. We may ask for information needed to confirm your identity.
09Providing data is voluntary
Providing data is voluntary. Without the fields marked with an asterisk we cannot answer your enquiry. Providing the data needed to conclude a contract is a condition of concluding it.
10Automated decisions and profiling
We do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). Visitor statistics are used only to assess which content of the website is being read.
11Security
The websites work only over an encrypted HTTPS connection. Form messages go to the info@aplixcom.com mailbox, which only authorised employees can access. The form’s configuration files and its technical log are blocked from access over the Internet, and the log contains no data of people whose enquiries were sent successfully.
12Changes to this policy
We update this policy when the way we process data, the websites or the law change. The date of the last change is shown at the top of the page. We additionally inform people we correspond with about changes relevant to them by e-mail. Previous versions are available on request. This is a translation; in case of discrepancies the Polish version prevails.
See also: Terms of service