Last updated: 27 September 2026.
1. Data controller
The controller of personal data processed in connection with the use of the specserwis.eu website (hereinafter: the “Website”) is:
SPEC SERWIS Łukasz Chojnacki
Os. Konstytucji 3 Maja 15A/11, 67-100 Nowa Sól
NIP: 9251914908, REGON: 385048400
e-mail: biuro@specserwis.eu, tel. +48 793 345 915
In matters concerning the protection of personal data, you can contact the controller at the above e-mail address or by post.
2. What data we process and where we get it from
We process only data that you provide to us voluntarily:
- Contact form — full name, e-mail address, telephone number (optional), subject or device type, device serial number (optional) and the content of the message.
- Direct contact — data provided in e-mail correspondence or during a telephone conversation.
- Technical data — the IP address of the sender of a form submission (recorded for security and anti-spam purposes) and standard server logs maintained by the hosting provider.
3. Purposes and legal bases of processing
- Handling an enquiry or a service request — including preparing a quotation, booking an inspection or a repair — on the basis of Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract) and Article 6(1)(f) GDPR (the controller's legitimate interest: conducting correspondence with persons contacting the company).
- Protection against spam and abuse (anti-spam verification, recording of IP addresses, submission limits) — on the basis of Article 6(1)(f) GDPR (legitimate interest: the security of the Website).
- Establishing, exercising or defending legal claims — on the basis of Article 6(1)(f) GDPR.
- Website visit statistics (Google Analytics — see points 8 and 9) — solely on the basis of your consent, Article 6(1)(a) GDPR. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before its withdrawal.
- Measuring the effectiveness of our ads and remarketing (Google Ads — see points 8 and 9) — only on the basis of your consent to marketing cookies, Article 6(1)(a) GDPR. You can withdraw this consent at any time, just like your consent to statistics.
4. How long we store data
We store data from the form and from correspondence for the time needed to handle the matter, and then for the limitation period of any claims arising under the law. If an enquiry results in the conclusion of a contract (e.g. a service order), the data will be stored in accordance with tax and accounting regulations.
5. To whom we may disclose data
Data may be entrusted to entities whose services we use in operating the Website — only to the extent necessary for those services to function:
- the hosting and e-mail provider (storing the website and operating the mailbox to which submissions are sent),
- Cloudflare, Inc. — provider of the Turnstile anti-spam mechanism protecting the contact form (and, in the future, also CDN/website protection network services),
- Google Ireland Limited — provider of the Google Analytics statistics tool (only if you consent to analytics cookies) and the Google Ads advertising system (only if you consent to marketing cookies),
- entities authorised under the law.
We do not sell personal data. For marketing purposes we share data only with Google — to the extent described in point 8 (Google Ads) and only with your consent.
6. Transfer of data outside the EEA
Some providers of technical services (e.g. Cloudflare, Google — see point 8) may process data outside the European Economic Area. In such cases, the transfer takes place on the basis of the mechanisms provided for in the GDPR, in particular standard contractual clauses or European Commission adequacy decisions.
7. Your rights
In connection with the processing of personal data, you have the right to:
- access your data and receive a copy of it,
- rectify (correct) your data,
- erase your data,
- restrict processing,
- object to processing based on legitimate interest,
- data portability,
- lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
To exercise your rights, write to biuro@specserwis.eu.
Providing data is voluntary, but necessary to handle your enquiry — without it we will not be able to respond to your submission.
8. External services used by the Website
While browsing the Website, your browser downloads resources from external providers, who may therefore receive your IP address and basic technical data about your browser:
- Google Fonts (Google Ireland Ltd.) — the fonts used on the website,
- cdnjs / Cloudflare — the Font Awesome icon library,
- Cloudflare Turnstile — the anti-spam mechanism of the contact form; as part of the verification, Cloudflare may save technical cookies necessary to distinguish a human from a bot,
- Google Analytics 4 (Google Ireland Ltd.) — website visit statistics (e.g. which pages are read, where visitors come from, which devices they use); loaded only after you consent to analytics cookies. If you also consent to marketing cookies, audiences created in Google Analytics may be used in Google Ads to show our ads (remarketing).
- Google Ads (Google Ireland Ltd.) — measuring the effectiveness of our ads (e.g. whether an enquiry was sent via the form after clicking an ad) and showing our ads to people who have visited the Website (remarketing); loaded only after you consent to marketing cookies.
9. Cookies
The Website uses three types of cookies and similar technologies:
- Necessary — technical cookies of the Cloudflare Turnstile anti-spam mechanism (point 8), needed for the contact form to work, and the record of your choice in the cookie banner stored in your browser (localStorage). They do not require consent.
- Analytics — Google Analytics cookies (
_ga,_ga_*) that help us understand how visitors use the website. We save them only after you tick "Analytics" (or click "Accept all") in the banner. Without this consent, the Google Analytics script is not loaded at all. - Marketing — Google Ads cookies (e.g.
_gcl_au) and cookies saved by Google in its own domains (e.g. google.com, doubleclick.net), used to measure ad effectiveness and for remarketing. We save them only after you tick "Marketing" (or click "Accept all"). Without this consent, the Google Ads tag is not loaded at all.
You can change your decision at any time by clicking "Cookie settings" in the website footer. When you withdraw consent, Google cookies saved in the Website's domain (_ga*, _gcl_*) are deleted and the relevant Google script is no longer loaded; cookies saved by Google in its own domains can be deleted in your browser settings. You can also delete or block cookies in your browser settings.
Google may also process data in the United States — on the basis of the mechanisms described in point 6 (Google LLC participates in the EU-U.S. Data Privacy Framework).
10. Changes to the privacy policy
This policy may be updated, for example in connection with changes in legislation or the development of the Website. The current version is always available at the address where you are reading this document, together with the date of the last update.