Privacy and cookies

1. Controller and contact

The controller is SBS SYSTEM, Konstantynowska 34, 94-303 Łódź, Poland. Contact: info@sodablastsystems-europe.com, telephone +48 696 461 448. A Data Protection Officer has been appointed. You can write to the same postal address marked “Data Protection Officer”.

2. Enquiries and replies

We process your name, email or phone number, optional company and budget, country of use or delivery, preferred reply language, optional machine model, message and website language. Context from a guide, application, job planner or equipment section is sent only when you add it to the enquiry; you can edit or remove it. Please do not include sensitive or unnecessary information about other people. Providing data is voluntary, but we need a way to reply.

Steps towards a contract at your request may rely on Article 6(1)(b) GDPR. Other correspondence, including questions from company representatives, is handled under our legitimate interest in answering enquiries and maintaining business relationships, Article 6(1)(f).

The form sends data to our server. After security checks, authenticated SMTP at LH.pl sends the message from info@sodablastsystems-europe.com to info@sodablastsystems.pl. The receiving mailbox forwards messages to the operator’s Gmail. Submission does not subscribe you to a newsletter or grant advertising permission. Optional analytics or marketing consent is not required to contact us. If you provide an email address, a copy of your enquiry is sent to it.

3. Your choices, analytics and advertising

Analytics and marketing are separate, off by default. You can accept all, refuse optional technologies or save a category selection. Refusal does not restrict content or the form. The same choice applies to all five language sections on this domain; it is not copied to our other domains.

We store the choice, categories, version and timestamps in localStorage under sbs:consent:v1, without form contents. Both acceptance and refusal are remembered for 12 calendar months. Deleting browser storage or a material change in the purposes may require a new choice. This browser-only record is not a central historical consent log.

With your consent, Google Analytics measures visits and confirmed enquiries. Google Ads measures advertising conversions with separate marketing consent. Optional categories are off by default. Refusal does not restrict content or contact. Google Ads measures confirmed enquiries and advertising attribution. No form contents or automatic contact matching. With marketing consent, Meta Pixel measures visits and confirmed enquiries and helps build advertising audiences. With marketing consent, TikTok Pixel also measures visits and accepted enquiries. Google Tag Manager manages tags; it does not replace consent for their purposes. Optional storage/access requires prior permission and personal-data processing relies on Article 6(1)(a) GDPR. With analytics consent, Microsoft Clarity creates session recordings and click heatmaps. We mask forms. You can withdraw consent in the cookie settings.

Names, contact details, messages, countries, reply languages and edited context are not included in our analytics or advertising events. Providers may nevertheless process device and connection information and identifiers; we do not promise anonymous data. Automatic matching of contact details is not part of this implementation.

You can withdraw consent in Cookie settings at any time. Further tracking stops; if services were already loaded, the page may reload. Withdrawal does not affect the lawfulness of earlier processing.

4. Form security

To prevent spam and repeated submissions, the application stores keyed fingerprints of IP addresses, submission identifiers and content, with timestamps and states. These are for security, not advertising. Records expire within 24 hours and are removed on the next request or scheduled cleanup. This storage contains neither raw IP addresses nor original enquiry text. Hosting may keep separate technical logs.

Cloudflare Turnstile loads when you interact with the form. It assesses browser and connection signals to distinguish automated requests. Website security is based on legitimate interest under Article 6(1)(f) GDPR, not advertising consent. If verification fails, contact us by email or phone.

5. Recipients, transfers and retention

Authorised staff and hosting/email providers, including LH.pl and Google Gmail, handle enquiries. Cloudflare supports active form protection. Configured Google Analytics and Google Ads services participate after the relevant consent.

International services may involve processing outside the European Economic Area. We do not promise exclusively European storage. Ask the controller for information about applicable safeguards and how to obtain a copy.

Correspondence is kept to handle the enquiry; further retention depends on legal obligations and potential claims. Retention is determined by the purpose and progress of the correspondence, applicable legal obligations and relevant claim periods. Contact the controller for information about a particular case. The 12-month choice period and 24-hour security-state lifetime are not retention periods for all correspondence.

6. Your rights

You may request access, rectification, erasure or restriction. Subject to GDPR conditions, you may request portability and object to processing based on legitimate interest. Consent can be withdrawn at any time. Contact info@sodablastsystems-europe.com.

You may complain to a competent supervisory authority, particularly where you live, work or believe a violation occurred. This may include the Polish UODO, Czech ÚOOÚ, Slovak Data Protection Office or the relevant German authority. The form does not make solely automated decisions with legal or similarly significant effects. Potential advertising profiling is described in the marketing section.