1. Who We Are (Data Controller)
We are the Controller of your personal data. This website (thaumatec.com) is operated by:
● THAUMATEC Sp. z o.o.
● Registered seat: Wrocław, ul. Lelewela 8, 53-505 Wrocław, Poland
● Entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for Wrocław-Fabryczna, 6th Commercial Division of the National Court Register
● KRS: 0000506158 | NIP: 8971798051 | REGON: 022396417
● Share capital: 100 000,00 PLN
Contact for privacy matters: office@thaumatec.com or by phone at +48 698 632 801.
2. GDPR Fundamentals & What is Personal Data?
We believe that the processing of personal data should serve mankind. However, the right to the protection of personal data is not absolute and the benefits of its social function must be balanced in accordance with other fundamental rights using the principle of proportionality.
This Privacy Policy reflects and adheres to the fundamental rights, freedoms, and principles recognized in the Charter of Fundamental Rights of the European Union, including respect for private and family life, protection of personal data, freedom to conduct a business, and others.
Personal data is information about an identified or identifiable natural person (the "data subject"). This includes identifiers such as name, address, contact details, identification numbers, IP address, etc.
3. What Personal Data We Collect
a) Data you provide directly:
● Contact forms and questionnaires, including job applications (name, email, company, phone, message)
● Newsletter sign-ups (email address)
● Content downloads — e.g., brochures, whitepapers (name, email, company, job title)
b) Data collected automatically:
● IP address, browser type, device, operating system
● Pages visited, time on site, referral source, click behaviour (Google Analytics / Google Search Console)
● Interaction with ads and content (LinkedIn Insight Tag)
● Cookies and similar technologies (see Section 9)
4. Purposes and Legal Basis
We collect data for several purposes, including to assist and facilitate our recruitment processes, enable collaboration with our contractors and suppliers, manage relationships with customers and colleagues, improve our service and product offerings, ensure security, and more. Specifically:
● Responding to enquiries submitted via the contact form — Art. 6(1)(a) GDPR (consent) / Art. 6(1)(b) (steps prior to a contract)
● Sending newsletters or marketing communications — Art. 6(1)(a) GDPR (consent)
● Website analytics (Google Analytics) — Art. 6(1)(a) GDPR (consent, via cookie settings)
● Ad delivery and retargeting (LinkedIn) — Art. 6(1)(a) GDPR (consent, via cookie settings)
● Following up on downloaded content and enquiries — Art. 6(1)(f) GDPR (legitimate interest in B2B business development)
● Legal and regulatory compliance — Art. 6(1)(c) GDPR
We do not make automated decisions on the basis of your personal data and we do not use profiling.
5. Who We Share Data With
Like most businesses, we use the services of other entities in our operations. We may share personal data with:
● IT services, payment services, logistics services, and accounting services providers
● Google Ireland Ltd. (Google Analytics) — analytics processing
● LinkedIn Ireland Unlimited Company — ad delivery and retargeting
● Public or private entities, on the basis of a relevant provision of law or a decision of a competent authority
We assure you that we analyse each request for access to personal data very carefully. We do not sell personal data to third parties.
6. International Data Transfers
We generally do not plan to transfer your data to third countries (outside the EU and the EEA). However, some processors (e.g., Google, LinkedIn) may process data outside the European Economic Area, including in the United States. Where this occurs, transfers are safeguarded by Standard Contractual Clauses approved by the European Commission and/or the provider's participation in an approved data-transfer framework.
7. Data Retention
Thaumatec stores data for a period no longer than is necessary to achieve the purposes of its processing:
● Contact form / enquiry data: Up to 5 years or until the purpose is fulfilled.
● Recruitment data: Deleted after a decision is made regarding the employment of a candidate, unless the candidate explicitly consented to further processing for future recruitment.
● Newsletter subscriber data: Stored until you unsubscribe.
● Google Analytics data: Retained per GA4 retention settings (e.g., 14 months).
● Marketing/ad platform data: Retained per the settings of that platform, subject to withdrawal of consent.
8. Your Rights
Under the GDPR, you have the right to request to receive an exported file of the personal data we hold about you. You may also request that we erase any personal data we hold about you (excluding data we are obliged to keep for administrative, legal, or security purposes).
Specifically, your rights include: access your data, rectify inaccurate data, request erasure, restrict processing, data portability, object to processing, and withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, contact us at office@thaumatec.com. If it is not possible to fulfil your request, we will inform you for what reason and on what legal basis your request cannot be fulfilled.
You may also lodge a complaint with the Polish supervisory authority — President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych - UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
9. Cookies
The Service uses cookies. Information stored in the computers of users of the Service helps to tailor services and content to individual needs. This mechanism also facilitates users' access to resources available within the Service. Cookies are not used to collect users' personal data or any other information about them. For the proper functioning of the Service, it is necessary to enable cookies in the browser settings.
What are cookies?
Cookies are small pieces of information stored by your browser. Thanks to cookies, websites are able to remember your preferences. Additional information about managing cookies can be found in your web browser's Help file or on websites such as www.allaboutcookies.org.
What cookies does this website use?
● Technical (necessary) cookies: Required for the website to operate securely and correctly (e.g., accessing secure areas). Always active; cannot be switched off.
● Functional cookies: Allow a website to remember choices you have made in the past.
● Analytics, statistics and marketing cookies: (e.g., Google Analytics and LinkedIn Insight Tag) Collect information about how you use a website or interact with ads. Set only with your consent, and can be switched off at any time in cookie settings.
How can cookies be managed?
If a user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for registration, security, or maintaining user preferences may hinder the use of websites and, in extreme cases, may prevent access to websites altogether. You can also manage or withdraw your consent for analytics and marketing cookies at any time via the cookie settings on this website.
To manage cookie settings, please select your web browser from the list below and follow the instructions provided by the browser vendor:
● Chrome
● Safari
● Firefox
● Opera
● Edge
Mobile devices:
● Android
● Safari (iOS)
Google Analytics
Traffic on the Service's websites may be monitored using Google Analytics statistics. This is done to collect data on how the websites are used and their popularity. By consenting to analytics cookies, you agree to the analysis of your data by Google Analytics for the purposes described above.
LinkedIn Ads
The Service's websites may use the LinkedIn Insight Tag to measure the effectiveness of our advertising campaigns and to show you relevant content on LinkedIn. This is only active if you consent to marketing cookies.
10. Embedded Content and Links to Other Websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content.
Websites belonging to Thaumatec may contain links to other websites. Thaumatec is not responsible for the privacy policies applicable to those websites. We encourage users to review the privacy policies of those websites after leaving our Service. This privacy policy applies only to websites operated by Thaumatec.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on the website.