Privacy Policy
Last updated: 14.09.2026
1. Who is responsible for your personal data?
The controller of your personal data is:
SEAES Sp. z o.o.
Spółka z ograniczoną odpowiedzialnością
ul. Marynarki Polskiej 98/201, 80-557 Gdańsk
NIP: 9571142809
Email: info@seaes.eu
Phone: +48 886 677 732
("we", "us", "our").
2. What personal data do we process?
Depending on how you interact with us, we may process:
first and last name;
company name;
email address;
telephone number;
information contained in your enquiry;
information about products or services you are interested in;
correspondence with us;
information necessary to prepare or perform a contract;
invoicing and accounting information where you become a customer;
information relating to your use of our Website, including information collected through Google Analytics and Google Ads where you have provided the relevant consent.
We ask you to avoid sending sensitive or unnecessary personal information through our contact forms.
3. How do we collect your data?
We collect personal data in the following ways:
Directly from you, when you contact us by email or submit an enquiry through one of the contact or enquiry forms on our website.
Through our website forms, including Squarespace Forms and the Website Product Inquiry form provided by Formspark.
When you communicate with us, for example by email, telephone, or other direct means.
When you enter into a business relationship with us, including when you request a quotation, place an order, or purchase our products.
Automatically through website technologies, such as cookies and similar technologies, where permitted by your consent and applicable law. This includes information collected through Google Analytics and Google Ads as described in this Privacy Policy and our Cookie Policy.
We may also receive personal data from other sources where this is necessary for legitimate business purposes or permitted by applicable law.
4. Contact forms and product enquires
We process personal data submitted through the contact and enquiry forms available on our website. This may include your name, company name, telephone number, email address, and the content of your message or product enquiry.
Our website uses Squarespace Forms for contact and enquiry forms available on certain pages of the website. We also use Formspark for the Website Product Inquiry form on our Product Inquiry page.
We process this information to respond to enquiries, provide information about our products and services, prepare quotations where requested, and take steps at your request before entering into a business relationship or contract.
Where processing is necessary to respond to your request or take steps at your request before entering into a contract, the legal basis may be Article 6(1)(b) GDPR.
Where appropriate, we may also rely on our legitimate interests under Article 6(1)(f) GDPR, such as managing business enquiries and maintaining business relationships.
Form submissions may be sent to our business email accounts and may subsequently be entered into our internal business records and customer management system.
Formspark acts as a data processor for form submissions processed through its service. Formspark states that the customer using its service is the data controller for visitor-submitted data and that Formspark processes this data on the customer's behalf.
We retain enquiry information for as long as reasonably necessary to handle the enquiry, communicate with you, maintain a potential or existing business relationship, and meet applicable legal or record-keeping requirements, in accordance with our general data-retention principles.
5. Formspark
Our Product Inquiry form uses Formspark, operated by Trampoline Software SRL, Belgium.
Formspark processes submitted form information on our behalf as a processor.
Formspark's current Data Processing Agreement states that its processing includes collecting, storing, forwarding and displaying form submissions, including email notifications and spam filtering. It also specifies retention periods for submission content, IP addresses and related metadata.
Formspark currently states that:
submission content is retained until the customer deletes it;
submitter IP addresses are retained for 12 months;
approximate location derived from IP addresses is retained for 12 months;
filtered submissions are retained for 12 months.
We do not use Formspark's optional integrations with Zapier, Slack, Google Sheets, Notion or other connected services.
6. Email correspondence
We process personal data contained in email correspondence when you contact us by email or when we communicate with you in connection with an enquiry, quotation, order, business relationship, or other matter. This may include your name, email address, telephone number, company details, the content of messages, attachments, and other information you choose to provide.
Our business email addresses use the @seaes.eu domain and are currently operated using Titan Mail, with Outlook used as an email application/interface.
Titan provides a Data Processing Addendum under which it acts as a processor for customer/end-user data in applicable circumstances. Titan also maintains a list of subprocessors.
We process email correspondence where necessary to respond to enquiries, communicate with customers and business contacts, take steps at your request before entering into a contract, perform a contract, pursue our legitimate business interests, or comply with applicable legal obligations, depending on the circumstances.
We retain email correspondence for as long as reasonably necessary for the relevant communication, business relationship, legal, or record-keeping purposes, in accordance with our general data-retention principles.
7. Business records and 1C
We use 1C software installed on our own computer to maintain internal business records.
Information from enquiries and customer relationships may be entered into our internal 1C system.
We use this information for purposes such as:
managing enquiries;
managing customer relationships;
preparing offers and quotations;
managing orders;
maintaining business records;
performing contracts.
1C is used as an internal business system in our environment and is not used as a public-facing website service.
8. Accounting and Firma
If a purchase is made and accounting or invoicing is required, we may use the services of IFIRMA SA for accounting and invoicing purposes. In this context, personal data contained in invoices and other accounting records may be processed, including identification, contact, and business information necessary for accounting and tax purposes.
The processing is carried out primarily for the performance of our contractual and legal obligations, including accounting and tax obligations. Where IFIRMA processes personal data on our behalf, the processing is governed by the applicable data processing arrangements. IFIRMA provides mechanisms for entering into a data processing agreement with its users.
Accounting and invoicing data are retained for the periods required by applicable accounting and tax laws.
9. Google Analytics
We use Google Analytics 4 (GA4), provided by Google Ireland Limited, to understand how visitors use our website and to improve its content and performance. Our Google Analytics Measurement ID is G-W7TGOSBTS3.
Google Analytics may collect information such as page views, interactions with the website, session information, approximate location, and browser and device information. We have enabled Google Analytics Enhanced Measurement, which may automatically collect certain events such as page views, scrolls, and outbound link clicks.
Google Analytics non-essential cookies are restricted until you provide consent through our cookie banner. If you decline analytics cookies, the Analytics storage setting remains denied. When you accept the relevant cookies, Google Analytics can use analytics cookies and collect analytics data in accordance with your consent. Squarespace communicates your consent choices to Google Analytics through Google's consent mechanisms.
Google Analytics uses cookies such as ga and ga[container-id] to distinguish users and sessions. Google states that when Analytics storage is deactivated through Consent Mode, the Analytics client ID is not stored in the ga cookie.
Google Analytics data is retained according to the data-retention settings configured for our Google Analytics property.
10. Google Ads
We use Google Ads, an online advertising service provided by Google Ireland Limited, to promote our products and services and to measure the effectiveness of our advertising. Our Google Ads identifier is AW-11429437528.
Google Ads may use cookies and similar technologies to measure advertising interactions, conversions, and the effectiveness of our advertising. Depending on the consent provided by the visitor, Google may also use information for advertising personalisation and related advertising purposes. Google states that ad_storage controls advertising-related cookie storage, while ad_user_data and ad_personalization control the use of user data for advertising and personalised advertising.
Non-essential advertising cookies and advertising-related consent signals are restricted until the visitor gives consent through our cookie banner. Our website uses Google's Consent Mode to communicate the visitor's advertising consent choices to Google. If advertising consent is denied, Google restricts advertising-related cookie storage and related use of personal data according to the consent state.
11. Google Merchant Center
We use Google Merchant Center to make information about our products available to Google.
Google may automatically discover product information from our Website. Our Merchant Center account currently contains product information discovered from our Website.
This service is primarily used to provide Google with product information and support the visibility of our products on Google.
12. Social media
Our website may contain links to our social media profiles, including LinkedIn and Instagram. These are ordinary external links and do not embed social-media content or tracking technologies on our website.
When you click a social-media link, you leave our website and access the relevant third-party platform. The processing of personal data by those platforms is governed by their own privacy policies.
13. External links
Our website may contain links to third-party websites and online services. We are not responsible for the privacy practices or content of those third-party websites. When you follow an external link, you leave our website and the processing of personal data is governed by the privacy policy of the relevant third party.
We recommend reviewing the privacy policy of any third-party website before providing personal data.
14. Legal bases for processing
Depending on the circumstances and the purpose of the processing, we process personal data on the following legal bases under Article 6 GDPR:
Performance of a contract or steps prior to entering into a contract – Article 6(1)(b) GDPR: where processing is necessary to respond to your request, provide a quotation, fulfil an order, or take steps at your request before entering into a contract.
Legal obligation – Article 6(1)(c) GDPR: where processing is necessary to comply with legal obligations, including accounting, tax, invoicing, and other applicable legal requirements.
Legitimate interests – Article 6(1)(f) GDPR: where processing is necessary for our legitimate business interests, such as responding to business enquiries, managing and maintaining business relationships, maintaining business records, protecting our website and systems, and establishing, exercising, or defending legal claims, provided that our interests are not overridden by your rights and freedoms.
Consent – Article 6(1)(a) GDPR: where we ask for your consent for a specific processing activity, such as certain non-essential cookies and related analytics or advertising technologies. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
We do not rely on consent where another appropriate legal basis applies. The specific legal basis applicable to a particular processing activity is described in the relevant sections of this Privacy Policy and, where applicable, in our Cookie Policy.
15. Marketing communications
We may use contact details of existing customers and business contacts to provide information about our products, services, and relevant business offerings, where permitted by applicable law and where the necessary consent has been obtained.
We do not currently operate a regular newsletter. If we introduce email marketing or other electronic marketing communications in the future, we will obtain any consent required by applicable law before sending such communications. Where processing is based on consent, you may withdraw your consent at any time. You may also object to direct marketing at any time.
16. How long do we keep your personal data?
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
The retention period depends on the type of data and the purpose for which it is processed. For example:
Contact and product enquiries: retained for as long as necessary to handle the enquiry, communicate with you, and, where applicable, maintain a business relationship.
Customer and business relationship data: retained for as long as necessary to manage the business relationship and to comply with applicable legal, accounting, tax, or other obligations.
Accounting and invoicing records: retained for the period required by applicable accounting and tax laws.
Email correspondence: retained for as long as reasonably necessary for the relevant communication, business relationship, legal, or record-keeping purposes.
Marketing data: retained only for as long as necessary for the relevant marketing purpose or until you object or withdraw consent, where processing is based on consent.
Google Analytics data: retained according to the data-retention settings configured for our Google Analytics property.
When personal data is no longer necessary for the relevant purpose and there is no legal or other valid reason to retain it, we will delete or anonymise it.
17. Who may receive your personal data?
Depending on the circumstances, your personal data may be accessible to:
authorised employees or representatives of SEAES;
Squarespace, as our website platform/provider;
Formspark, for our Product Inquiry form;
Titan Mail, for business email services;
Google, for Google Analytics and Google Ads where applicable;
Google Merchant Center;
iFirma, where accounting/invoicing services are required;
competent public authorities where disclosure is required by law;
professional advisers where necessary.
We do not sell your personal data.
18. International transfers
Some of the service providers we use may process personal data outside the European Economic Area (EEA). Where personal data is transferred to a country outside the EEA, we take steps to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the circumstances, international transfers may be based on an adequacy decision adopted by the European Commission, the EU Standard Contractual Clauses (SCCs), the EU-US Data Privacy Framework, or another lawful transfer mechanism available under the GDPR.
For example, Formspark stores form submission data in the EEA, while certain Formspark subprocessors may process limited data outside the EEA. Formspark states that the applicable transfer safeguard for each subprocessor is identified in its current subprocessor list.
Our business email provider, Titan Mail, may also use subprocessors located outside the EEA. The applicable safeguards and processing arrangements are described in Titan's data processing documentation and current subprocessor list.
Where required by applicable law, we will take additional measures to protect personal data transferred outside the EEA.
19. Your rights under the GDPR
Subject to applicable law, you have the right to:
obtain confirmation as to whether we process your personal data;
access your personal data;
request correction of inaccurate or incomplete data;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
request data portability where applicable;
withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with the relevant data protection supervisory authority.
In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO).
20. Automated Decision-Making and Profiling
We do not use personal data to make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.
21. How to exercise your rights
To exercise your rights or ask questions about our processing of personal data, contact:
SEAES Spółka z ograniczoną odpowiedzialnością
ul. Marynarki Polskiej 98/201, 80-557 Gdańsk
Email: info@seaes.eu
Please provide enough information for us to identify your request and respond appropriately.
22. Security
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Access to business systems containing personal data is limited to authorised persons who need the information for their work.
23. Changes to this Privacy Policy
We may update this Privacy Policy when our business, Website, services, processing activities or legal obligations change.
The latest version will always be published on our Website.
24. Contact
For questions concerning privacy or personal data:
SEAES Spółka z ograniczoną odpowiedzialnością
ul. Marynarki Polskiej 98/201, 80-557 Gdańsk
NIP: 9571142809
Email: info@seaes.eu
Phone: +48 886 677 732