Privacy Policy

The controller of your personal data is VECTORLENS Sp. z o.o., Rzeszowska 66/2, 39-200 Dębica, Poland (KRS 0001190119, NIP 8722455725, REGON 542524203). You can reach us at info@syntr0p1c.com or +48 668 128 207. No Data Protection Officer has been appointed.

We collect only the data you give us directly:

• Contact form and enquiry data: name, e-mail address, company name, topic and message content.
• Call and correspondence data: the content of e-mails and calls you make to us.
• Contract data: billing details and company registration data when we enter into a contract.

We do not use external trackers, advertising cookies or analytics that profile visitors.

• Handling enquiries and pre-contract correspondence — Art. 6(1)(b) and Art. 6(1)(f) GDPR.
• Performing contracts and providing services — Art. 6(1)(b) GDPR.
• Accounting, tax and legal obligations — Art. 6(1)(c) GDPR.
• Establishing or defending legal claims — Art. 6(1)(f) GDPR.

Enquiry data is kept for up to 2 years from our last contact. Contract and invoice data is kept for the periods required by Polish accounting and tax law (generally 5 years). Data is erased or anonymised once the retention period ends.

We use a small number of IT service providers acting solely on our instructions under data processing agreements: Cloudflare (hosting and network protection) and Microsoft 365 (e-mail). We do not sell, rent or share your data for marketing purposes, and we do not transfer it outside the European Economic Area except under adequacy decisions or standard contractual clauses.

You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object. To exercise any of these rights, write to info@syntr0p1c.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Your data is not used for automated decision-making or profiling within the meaning of Art. 22 GDPR.

We apply appropriate technical and organisational measures: encrypted transport (TLS), access control on a need-to-know basis, and regular review of our processing activities. If a personal data breach creates a risk to your rights, we will notify you and the supervisory authority as required by law.