← Home page
GDPR · Art. 13

Privacy policy

How Aplixcom Solutions processes personal data on aplixcom.com, scada-mes.pl, scada-mes.com, vistagate.pl and vistagate.eu — information under Art. 13 GDPR and our rules on cookies.

Last updated: 20 October 2026

01Data controller

The controller of personal data is Aplixcom Solutions spółka z ograniczoną odpowiedzialnością spółka komandytowa, registered office: ul. Józefa Marcika 12, 30-443 Kraków, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000449275, tax ID (NIP) 954-26-62-274, REGON 241123463 (the “Controller”, “we”).

Contact for personal data matters: e-mail info@aplixcom.com (preferably with “Personal data” in the subject line) or a letter to our registered office.

We have not appointed a data protection officer, as we are not required to do so (Art. 37 GDPR).

02Websites covered by this policy

This policy covers all our websites and the correspondence that results from them. Auxiliary domains (e.g. aplixcom.pl, scadames.com) only redirect to the websites listed below.

WebsiteContact formVisitor statisticsBrowser storage
aplixcom.comyes — sends the enquiry to our serverGoogle Analytics 4, only with consentyour cookie choice
vistagate.pl, vistagate.euyes — sends the enquiry to our serverGoogle Analytics 4, only with consentyour cookie choice
scada-mes.pl, scada-mes.comopens your e-mail program — no data reaches our serverGoogle Analytics 4, only with consentyour cookie choice and language version

03What data we process

  • Contact form (aplixcom.com, vistagate.pl, vistagate.eu): full name, company name, e-mail address and — if you provide them — phone number, industry, information about machines and the content of the enquiry. The server adds the date of sending, IP address, browser information (User-Agent) and the address of the page from which the form was sent.
  • The scada-mes.pl / scada-mes.com form sends nothing — it prepares a message in your e-mail program. We receive only what you send us by e-mail yourself.
  • E-mail correspondence and phone calls: data contained in the message or given during the call.
  • Technical data on every visit: the hosting server logs the IP address, date and time, requested page address, server response code and browser information.
  • Visitor statistics (all websites, only with consent): an identifier stored in Google Analytics cookies, pages visited, visit duration, device and browser type and approximate location (country, city) derived from the IP address.

We do not ask for special categories of data (e.g. health data) — please do not send them. Please do not enter confidential information about your plant (trade secrets) in the form; we sign a non-disclosure agreement before exchanging such information.

04Purposes, legal bases and retention

PurposeLegal basisHow long
Answering the enquiry and further correspondence, including preparing a presentation, demo or offer Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract; if you write on behalf of a company — Art. 6(1)(f) GDPR (our legitimate interest: answering enquiries and maintaining business contacts) 12 months from the last contact, unless we conclude a contract
Automatic confirmation of receipt, sent to the e-mail address you provided Art. 6(1)(f) GDPR — confirming that your message has reached us as above
Protecting the form and websites against abuse, diagnosing sending errors Art. 6(1)(f) GDPR — website security technical form log: 90 days; server logs: up to 12 months
Concluding and performing a contract (licence, deployment, support), if one is concluded Art. 6(1)(b) GDPR; data of the customer’s contact persons — Art. 6(1)(f) GDPR for the duration of the contract
Accounting and tax obligations Art. 6(1)(c) GDPR in conjunction with the Polish Accounting Act and Tax Ordinance 5 years from the end of the calendar year in which the tax payment deadline expired
Establishing, pursuing and defending claims Art. 6(1)(f) GDPR until the limitation periods expire
Informing people who have shown interest about our products Art. 6(1)(f) GDPR (direct marketing). We send commercial information by e-mail or phone only with your prior consent, in accordance with the Polish Electronic Communications Law until you object or withdraw consent
Visitor statistics on our websites (Google Analytics 4) Art. 6(1)(a) GDPR — consent; storing and reading cookies is also based on consent (Polish Electronic Communications Law) until consent is withdrawn; data in Google Analytics — 14 months
Loading the Google Tag script before you decide on cookies (see “Cookies and browser storage”) Art. 6(1)(f) GDPR — correct operation of the website and handling of your cookie choice on our side only while the file is loaded; Google processes data under its own terms

Where the basis is our legitimate interest, we assessed before starting the processing that it does not override your interests, rights and freedoms.

05Recipients of data

We share data only to the extent necessary. We do not sell personal data.

  • home.pl S.A. (Szczecin, Poland) — website hosting and server logs;
  • Microsoft Ireland Operations Limited (Dublin) — Microsoft 365: the info@aplixcom.com mailbox and sending of form messages and confirmations;
  • Google Ireland Limited (Dublin) — Google Analytics 4 on all our websites (only with consent) and the Google Tag script (www.googletagmanager.com);
  • providers of accounting, legal and IT services to us — when necessary for a given matter;
  • public authorities — only where required by law.

Entities processing data on our behalf do so under a data processing agreement (Art. 28 GDPR) or terms of service that contain such provisions.

Fonts, styles and libraries needed to display our websites are loaded from our own server — your browser does not connect to other companies' servers for them. The only exception is the Google Tag script described above.

06Transfers outside the European Economic Area

Microsoft and Google may also process data in the United States (Microsoft Corporation, Google LLC). Transfers are based on the European Commission decision of 10 July 2023 on the adequate level of protection under the EU-US Data Privacy Framework (for certified entities) and on standard contractual clauses (Art. 46(2)(c) GDPR).

Information on safeguards and a copy of the clauses are available at info@aplixcom.com.

07Cookies and browser storage

We store information on your device only as listed in the table. Each domain has its own browser storage, so you decide on cookies separately on each website.

NameWebsiteTypePurposeDuration
aplixcom_consent_v1all websitesbrowser storage (localStorage), strictly necessary remembering your cookie choice13 months
smp_langscada-mes.pl, scada-mes.combrowser storage (localStorage), strictly necessary remembering the language versionuntil deleted in the browser
_ga, _ga_<identifier>all websitesGoogle analytics cookies, only with consent distinguishing visits and visitors in statisticsup to 2 years

Strictly necessary information does not require consent — without it the website cannot carry out your choice. Analytics cookies are stored only after you click “Accept” or enable the “Analytics” category in the settings. Until you decide, the Google script runs in Consent Mode v2 with consent denied: it stores no cookies and assigns no identifiers, and Google receives only signals without a device identifier.

You can change your decision at any time with the “Manage cookies” button in the website footer. Stored information can also be deleted in your browser settings.

08Your rights

  • access to your data and a copy of it (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability — where we process data on the basis of a contract or consent (Art. 20 GDPR),
  • objection to processing based on our legitimate interest (Art. 21 GDPR); an objection to direct marketing is always honoured,
  • withdrawal of consent at any time, without affecting the lawfulness of processing before its withdrawal (Art. 7(3) GDPR),
  • a complaint to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl), or to the supervisory authority of your place of residence or work in the EU.

Please send requests to info@aplixcom.com. We reply without undue delay and no later than within one month. We may ask for information needed to confirm your identity.

09Providing data is voluntary

Providing data is voluntary. Without the fields marked with an asterisk we cannot answer your enquiry. Providing the data needed to conclude a contract is a condition of concluding it.

10Automated decisions and profiling

We do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). Visitor statistics are used only to assess which content of the website is being read.

11Security

The websites work only over an encrypted HTTPS connection. Form messages go to the info@aplixcom.com mailbox, which only authorised employees can access. The form’s configuration files and its technical log are blocked from access over the Internet, and the log contains no data of people whose enquiries were sent successfully.

12Changes to this policy

We update this policy when the way we process data, the websites or the law change. The date of the last change is shown at the top of the page. We additionally inform people we correspond with about changes relevant to them by e-mail. Previous versions are available on request. This is a translation; in case of discrepancies the Polish version prevails.

See also: Terms of service