Privacy notice

This page explains what happens to the information you send us through vimaco.pl, who sees it and how long we keep it. It is written to satisfy Article 13 of the GDPR, and to be readable.

Last updated 20 August 2026

1. Who is responsible

The controller of your personal data is:

Company: Vimaco Sp. z o.o.
Registered office: ul. Francuska 105, 21-500 Biała Podlaska, Poland
Registry: KRS 0000789122 · NIP 5372647829 · REGON 383555221
Registry court: Sąd Rejonowy Lublin-Wschód w Lublinie z siedzibą w Świdniku, VI Wydział Gospodarczy Krajowego Rejestru Sądowego
Contact: info@vimaco.pl

We have not appointed a Data Protection Officer. Article 37 of the GDPR does not require one for an operation of this kind. Write to the address above with any question about your data and it will reach the people who can answer it.

2. What we collect, and only that

The enquiry form on this site asks for four things:

Company name
Phone number
Email address
Your message, and whatever you choose to put in it

There is nothing else. This site sets no cookies, runs no analytics, and embeds no third-party trackers, fonts or scripts. Typefaces are served from our own domain rather than from a font provider, so loading the page does not disclose your IP address to anyone but our host.

Our hosting provider keeps standard server logs, which include IP addresses, for security and fault diagnosis. We do not use them to build any profile of you.

3. Why we hold it, and on what legal basis

Purpose: To read your enquiry, answer it, quote for the work and — if you go ahead — to carry it out.
Legal basis: Article 6(1)(b) GDPR: steps taken at your request before entering into a contract, and performance of that contract if one follows.
Server logs: Article 6(1)(f) GDPR: our legitimate interest in keeping the site available and secure.

We will not add you to a mailing list off the back of an enquiry, and we will not send you marketing you did not ask for. Under Polish law that would need your separate, explicit consent, and we do not collect it here.

4. Who else sees it

Your enquiry is handled by our own staff. Two processors are involved in delivering it to us, each bound by a data processing agreement and each acting only on our instructions:

Vercel Inc. — hosting for this website.
Resend — delivery of the enquiry email to our mailbox.

We do not sell personal data, and we do not share it with anyone for their own purposes. Where a processor operates outside the European Economic Area, the transfer rests on the European Commission's Standard Contractual Clauses under Article 46(2)(c) GDPR.

If your enquiry becomes a shipment, the carriers, customs authorities and warehouse operators involved will necessarily receive the data needed to move and clear that shipment. That is a separate matter and will be set out in the contract for the work.

5. How long we keep it

Enquiries that do not lead to work are deleted within {{RETENTION_ENQUIRY}} of the last message between us.

Where an enquiry becomes a commercial relationship, the records are kept for as long as Polish accounting and tax law requires — five years from the end of the tax year in which the invoice was issued — and for as long as any claim arising from the contract could still be brought.

6. Your rights

Under the GDPR you may ask us to:

tell you what we hold about you, and give you a copy (Art. 15);
correct anything inaccurate (Art. 16);
delete it (Art. 17), where no legal duty requires us to keep it;
restrict what we do with it (Art. 18);
send it to you or another controller in a portable form (Art. 20);
stop processing based on legitimate interest (Art. 21).

Write to info@vimaco.pl. We answer within one month, as the GDPR requires, and there is no charge.

If you think we have handled your data badly, you can complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa. You do not have to raise it with us first, though we would rather you did.

7. Is it required?

Giving us this information is entirely voluntary. There is no statutory or contractual obligation to fill in the form. But without a way to reach you we cannot answer the enquiry, which is the only consequence of declining.

8. Automated decisions

We do not make decisions about you by automated means, and we do not profile you.

9. Changes

If this notice changes, the date at the top changes with it. Material changes will be flagged on the page rather than slipped in quietly.