Privacy Policy

The controller of your personal data within the meaning of Regulation (EU) 2016/679 (GDPR) is SEVENLABS Prosta Spółka Akcyjna, with its registered office in Dąbrowa Górnicza, ul. Królowej Jadwigi 23/9, 41-300 Dąbrowa Górnicza, Poland, registered in the National Court Register under KRS 0001218867, NIP 6292520671 (the "Controller").

For all matters relating to the processing of your personal data, you may contact us by email at biuro@sevenlabs.pl or by post to the Controller's registered office.

The Controller has not appointed a Data Protection Officer.

We process the personal data you provide in the contact form available on the Website:

• name (or first and last name, if provided),
• email address,
• the content of your message and any other information you choose to include.

We do not collect data from other sources and we do not collect data automatically for marketing or analytics purposes.

We process your personal data for the following purposes:

• to respond to your inquiry submitted via the contact form and to conduct further correspondence on that matter — on the basis of art. 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a contract) and art. 6(1)(f) GDPR (the legitimate interest of the Controller in handling correspondence),
• to establish, exercise, or defend legal claims — on the basis of art. 6(1)(f) GDPR,
• to comply with legal obligations of the Controller, in particular those arising from tax and accounting law if the contact results in a contract — on the basis of art. 6(1)(c) GDPR.

Your personal data is stored:

• for the duration of the correspondence and for the time necessary to respond to your inquiry,
• subsequently, for the limitation period for any potential claims under the Polish Civil Code (as a rule, 6 years; for claims related to business activity — 3 years),
• in the event of conclusion of a contract — for the duration of that contract and afterwards for the period required by law, in particular tax law (5 years from the end of the calendar year in which the tax payment was due).

In any case, if you successfully object to processing based on art. 6(1)(f) GDPR, the data will be deleted unless the Controller demonstrates the existence of compelling legitimate grounds for further processing.

Recipients of your personal data may only be entities cooperating with the Controller under personal data processing agreements, in particular:

• providers of hosting and IT infrastructure services, including the cloud provider on which the Website is hosted,
• providers of email services through which we conduct correspondence,
• providers of accounting and legal services — to the extent necessary for the Controller to fulfill its legal obligations,
• entities authorized to obtain data on the basis of applicable law.

We do not sell your personal data to third parties or share it for marketing purposes.

In connection with the use of services from providers based outside the European Economic Area (e.g. the United States), your personal data may be transferred to third countries. Such transfers take place only with appropriate safeguards as referred to in art. 46 GDPR, in particular under Standard Contractual Clauses approved by the European Commission, or — in the case of transfers to the U.S. — based on the European Commission's adequacy decision of 10 July 2023 regarding the EU–US Data Privacy Framework.

A copy of the safeguards in use is available upon request from the Controller.

In connection with the processing of your personal data, you have the following rights:

• right of access to your data and to obtain a copy of it (art. 15 GDPR),
• right to rectification of inaccurate data (art. 16 GDPR),
• right to erasure ("right to be forgotten") (art. 17 GDPR),
• right to restriction of processing (art. 18 GDPR),
• right to data portability (art. 20 GDPR),
• right to object to processing — where the basis is the legitimate interest of the Controller (art. 21 GDPR),
• right to withdraw consent at any time, where processing is based on consent (art. 6(1)(a) GDPR); withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

To exercise the above rights, please contact us at: biuro@sevenlabs.pl.

You have the right to lodge a complaint with the supervisory authority — the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) — if you believe that the processing of your personal data violates the GDPR (art. 77 GDPR).

Providing personal data in the contact form is voluntary, but necessary in order for us to respond to your inquiry. If you do not provide the data, we will not be able to process the inquiry through the form; in such case you may contact us directly by email.

The Controller does not engage in automated decision-making, including profiling, as referred to in art. 22 GDPR.

The sevenlabs.pl website does not use cookies for analytics, marketing, or profiling purposes. We do not use web analytics tools (such as Google Analytics), advertising tools, or any technology that tracks users across the web.

The Website only uses the browser's local storage mechanism (localStorage) to remember your selected language version. Detailed information is available in our Cookie Policy.

The Controller applies appropriate technical and organizational measures to ensure the protection of personal data, in particular: TLS encryption of data transmission, restricted access to data limited to authorized persons, and regular updates of the systems used.

The Controller reserves the right to amend this Privacy Policy in the event of changes to applicable law, technology, or the scope of data processed. The current version of the Policy is published on the Website together with the date of last update.

For any matters related to the protection of personal data, please contact the Controller at: biuro@sevenlabs.pl.