PROMAG S.A. PRIVACY POLICY

1. Introduction – what is it all about?

We are glad that you use PROMAG S.A. products or services, visit our websites or social media profiles. We want you to know exactly what data we collect about you, why we do it, and what your rights are in this regard.

This Privacy Policy describes how PROMAG S.A. with its registered office in Poznań (ul. Romana Maya 11, 61-371 Poznań, KRS 0000013278, NIP 778-00-40-905) processes and protects the personal data of customers, contractors, website users, and all persons contacting the company.

We make every effort to ensure that your data is secure, processed in accordance with applicable law, and in a transparent manner. We operate on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

2. Who is responsible for your data?

The administrator of your data is:

PROMAG S.A.
ul. Romana Maya 11, 61-371 Poznań, Poland
tel.: +48 61 655 82 00
e-mail: ochrona_danych_osobowych@promag.pl

You can contact us with any questions regarding privacy or data processing.

3. Why and on what basis do we process your data?

We only process data when it is truly necessary. Depending on the situation, this may be:

• contract implementation

So that we can fulfill your order, deliver goods, perform a service, handle a complaint, or prepare an offer.

• fulfillment of legal obligations

For example, in the areas of accounting, taxes, and document archiving.

• our legitimate interest

That is, among other things:

• keeping in touch with customers,
• improving our products and services,
• marketing activities (e.g., informing about new products),
• protecting the safety of people and property,
• pursuing or defending against claims.

• Your consent

This applies, for example, to subscribing to a newsletter, participating in an event, expressing an opinion, or receiving commercial information. Consent is always voluntary – you can withdraw it at any time and, upon withdrawal, you can request the deletion of your data processed on the basis of your consent.

Providing data is not mandatory but necessary for you to obtain information about the offer or conclude a contract, and then for its performance. Failure to provide this data will make it impossible to achieve the above objectives.

4. What data do we collect?

The scope of data depends on how you contact us or use our services.
We may process, among other things:

• first name, last name, position, company name, address,
• e-mail address, telephone number, IP address,
• data provided voluntarily in contact forms or when registering for events,
• information collected automatically by our websites (e.g., statistical data, analytical data on visits).

5. Who has access to your data?

Data may only be transferred to trusted entities (including processors) that help us operate, e.g.:

• hosting companies and IT tool providers,
• accounting offices, law firms, courier companies,
• service or assembly partners,
• companies affiliated with PROMAG,
• public and supervisory institutions – when required by law.

We never sell your data. We do not transfer it outside the European Economic Area unless we can ensure an adequate level of protection (e.g. through standard contractual clauses).

6. How long do we store data?

We only store data for as long as necessary, i.e.:

• for the duration of the contract and its settlement,
• for the period required by law, e.g. accounting or tax regulations,
• until consent is withdrawn – if processing is based on consent,
• until the end of the limitation period for claims – if processing is based on our legitimate interest (e.g. for the purpose of pursuing or defending claims).

After these periods, the data is securely deleted.

7. Your rights

You may exercise the following rights at any time:

• access to data,
• correction or supplementation,
• deletion (“right to be forgotten”),
• restriction of processing,
• transfer of data to another entity,
• objection to processing (e.g. for marketing purposes),
• withdrawal of consent at any time.

All you need to do is write to us at: ochrona_danych_osobowych@promag.pl

If you believe that your data is being processed in violation of the law, you can also file a complaint with:
The President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warsaw.

8. How do we protect your data?

Data security is our priority. We use modern technical and organizational solutions, such as:

• connection encryption (SSL),
• restricted access to data only for authorized persons,
• firewalls and antivirus systems,
• regular security tests and audits,
• incident response procedures.

The companies we work with are required to apply equally high standards of protection.

9. Cookies and automatically collected data

Our websites use cookies to ensure they function smoothly and are user-friendly. Thanks to cookies, we can, among other things:

• ensure the website functions properly,
• tailor content and advertisements to your needs,
• analyze traffic and improve the website (e.g., thanks to Google Analytics),
• enable multimedia playback (YouTube),
• integrate the website with social media (Facebook, LinkedIn).

You can change your cookie settings in your browser or delete them at any time.
However, restricting cookies may cause some website features to not work properly.

10. Final provisions

We may update this Policy from time to time, for example, when regulations or our processes change.
Each new version will be published on our website with the current effective date.

At PROMAG, we believe that privacy is not only a legal obligation, but also an expression of respect for our customers, partners, and website users. We make sure that your data is secure.

Poznań, 03.11.2025