Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

Tubelus
Dawid Weisberg (Owner)
Gołębia 19
44-335 Jastrzębie-Zdrój
Poland
Email: info@tubelus.com

2. Personal Data We Collect

We only collect personal data that you actively provide to us or that is automatically generated by your use of our website.

2.1 Data You Provide

When you submit our contact form, we collect:

• Full name
• Email address
• Message subject (optional)
• Message content

Providing your name and email address is necessary to respond to your enquiry. All other fields are optional.

2.2 Data Collected Automatically

When you visit tubelus.com, our web server automatically records:

• IP address (anonymised where technically possible)
• Browser type and version
• Operating system
• Referring URL
• Pages viewed and time of visit

This data is processed in aggregate form and is not used to identify individual users unless required by law or to investigate a security incident.

3. Purposes and Legal Basis

Purpose	Data Used	Legal Basis (GDPR Art. 6)
Responding to your enquiry	Name, email, message	Art. 6(1)(b) – Contractual necessity / pre-contractual steps
Website security and fraud prevention	IP address, server logs	Art. 6(1)(f) – Legitimate interests
Analytics (aggregated, anonymised)	Usage data	Art. 6(1)(a) – Consent (cookie banner)
Compliance with legal obligations	As required	Art. 6(1)(c) – Legal obligation

We do not use your personal data for automated decision-making or profiling, and we do not send marketing communications.

4. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Contact form submissions: retained for up to 24 months from the date of submission, or until your request is fulfilled and no further follow-up is needed, whichever is earlier.
• Server logs: retained for up to 90 days for security purposes, then deleted or anonymised.
• Cookie preference: stored locally in your browser until cleared; no copy is transmitted to our servers.

5. Sharing of Personal Data

We do not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

• Service providers: Hosting and email service providers acting as data processors, bound by data processing agreements and GDPR-compliant safeguards.
• Legal requirements: Where required by applicable law, a court order, or a competent Polish or EU authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred subject to the same privacy protections described in this policy.

Any third-party service providers we engage are contractually required to process personal data only on our instructions and in accordance with GDPR.

6. Cookies

We use cookies on tubelus.com. For full details of the cookies we use, their purpose, and how you can manage your preferences, please see our Cookie Policy.

7. Your Rights

Under GDPR, you have the following rights in relation to your personal data:

• Right of access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You may ask us to correct inaccurate or incomplete data.
• Right to erasure (Art. 17): You may ask us to delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restriction (Art. 18): You may ask us to restrict processing of your data in certain circumstances.
• Right to data portability (Art. 20): Where processing is based on consent or a contract and carried out by automated means, you may ask to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): You may object to processing based on legitimate interests at any time.
• Right to withdraw consent: Where we rely on your consent as the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@tubelus.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include encrypted transmission (HTTPS/TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Supervisory Authority

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Polish data protection supervisory authority:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2
00-193 Warsaw, Poland
Website: uodo.gov.pl

You also have the right to seek a judicial remedy before a competent court.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be indicated by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the website after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

For any questions, concerns, or to exercise your data rights, please contact us:

Tubelus – Data Enquiries
Gołębia 19, 44-335 Jastrzębie-Zdrój, Poland
Email: info@tubelus.com