1. Personal Data Controller

1. The controller of the Users’ personal data is DriveWave Sp. z o.o., with its registered office at ul. Klonowa 17B/3, 03-427 Radnów, NIP 321302313. Any matters related to personal data may be addressed by email to: rodo@drivewave.eu.

2. Scope and Purposes of Data Collection

1. Personal data are collected solely to the extent necessary for the following purposes:
   • enabling contact with the User after completing a form (full name, email address, telephone number);
   • conducting correspondence regarding the offer and the performance of orders;
   • handling any complaints or service-related inquiries;
   • analytics and statistics (anonymous data relating to the use of the Website).

1. Providing personal data is voluntary; however, it is necessary in order to process an inquiry or use selected services.

3. Legal Basis for Processing

Personal data are processed in accordance with the GDPR:

1. for the performance of a contract or actions taken prior to entering into a contract (Article 6(1)(b) GDPR), e.g. responding to inquiries;
2. for compliance with legal obligations incumbent on the Controller (Article 6(1)(c) GDPR);
3. on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR), including statistical analysis and direct marketing;
4. on the basis of consent granted (Article 6(1)(a) GDPR), with regard to marketing activities, where such consent is required.

4. Data Disclosure

1. Personal data may be disclosed to entities cooperating with the Controller in the scope of handling inquiries (e.g. IT service providers), solely to the extent necessary to achieve the purposes of processing.
2. Personal data shall not be transferred to third countries or international organisations unless it is necessary for the performance of a service (e.g. contact with a partner in the United States), in which case the User will be informed in advance.

5. Data Retention Period

1. Personal data are stored for the period necessary to fulfil the purpose for which they were collected, and thereafter until the expiry of potential claims or until consent is withdrawn.

6. User Rights

1. Any person whose data are processed has the right to:
   • access their personal data and receive a copy thereof;
   • rectification (correction) of personal data;
   • erasure of personal data (“the right to be forgotten”), where permitted by law;
   • restriction of processing;
   • data portability to another controller;
   • object to the processing of personal data on grounds relating to their particular situation;
   • withdraw consent at any time (where processing is based on consent);
   • lodge a complaint with the President of the Personal Data Protection Office.

7. Data Security

The Controller applies appropriate technical and organisational measures to ensure the protection of personal data against loss, unauthorised access, or unauthorised processing.

8. Amendments to the Privacy Policy

This Privacy Policy may be updated from time to time. Users will be informed of any significant changes by publication of the updated document in this section.