ℹ️ Note for the website owner: The sections below contain a standard GDPR-compliant privacy policy template. Please review and supplement each section with your specific data (DPA registration number, DPO contact if applicable, specific third-party processors used, retention periods, etc.) before publishing.
1. Data Controller
The controller of your personal data is:
Amex Service Trading Marine Ltd.
Rzemieślnicza 33 Str., 81-855 Sopot, Poland
Phone: (+48 58) 511 34 00
Email: office@amex-marine.com.pl
In matters related to personal data processing, you may contact us at the address above or by sending an email to the address indicated.
2. Scope of Data Collected
We collect and process the following categories of personal data:
- Contact and identification data: first name, last name, company name, country, email address, phone number.
- Communication data: content of messages and inquiries submitted through the contact form, emails, or telephone conversations.
- Technical data: IP address, browser type and version, operating system, pages visited, time and duration of visits (via cookies and server logs).
- Business data: information about the nature of your inquiry, the type of equipment or spare parts requested, and project descriptions provided voluntarily.
3. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
- Handling inquiries and requests: when you contact us via the contact form or email — legal basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual steps), or Article 6(1)(f) GDPR (our legitimate interest in responding to business inquiries).
- Provision of services and fulfilment of orders: processing orders, preparing technical offers, and carrying out contracts — legal basis: Article 6(1)(b) GDPR.
- Marketing communications: sending commercial information about our products and services to existing clients — legal basis: Article 6(1)(f) GDPR (legitimate interest), subject to applicable electronic communications law.
- Legal and regulatory obligations: compliance with applicable laws, accounting, tax and archiving obligations — legal basis: Article 6(1)(c) GDPR.
- Website analytics and cookies: improving the functionality and user experience of our website — legal basis: Article 6(1)(a) GDPR (consent), where required by law.
4. Cookie Policy
Our website uses cookies — small text files stored on your device. We use the following types of cookies:
- Strictly necessary cookies: required for the basic functioning of the website (e.g. session cookies, security cookies). These cannot be disabled.
- Analytical / performance cookies: allow us to understand how visitors interact with the website, which helps us improve its performance. These are only placed with your consent.
- Functional cookies: remember your preferences (e.g. cookie consent status) to improve your experience. These may be placed without consent where strictly necessary.
You can manage your cookie preferences at any time via your browser settings. Disabling certain cookies may affect the functionality of the website. Your consent preference is stored in your browser's local storage under the key amex_cookie_consent.
5. Recipients of Personal Data
Your personal data may be shared with the following categories of recipients:
- Entities processing data on our behalf (processors): hosting providers, IT service providers, email system operators — bound by data processing agreements ensuring GDPR compliance.
- Professional advisors: accountants, lawyers, auditors — where necessary and subject to confidentiality obligations.
- Public authorities: courts, tax authorities, regulatory bodies — only where required by applicable law.
- Group companies: Puck Mechanical Works (PZM Amex), 84-100 Puck, Poland — for purposes of order fulfilment and technical service delivery.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
6. International Data Transfers
We operate as a global business and may, in the course of providing services, transfer personal data to recipients located outside the European Economic Area (EEA). Where such transfers occur, we ensure they are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, or that the recipient country benefits from an adequacy decision. You may request further information about the safeguards in place by contacting us.
7. Retention Periods
We retain personal data for no longer than is necessary for the purposes for which it was collected:
- Contact form inquiries / pre-contractual data: up to 3 years from the date of last contact, or until the limitation period for related claims expires.
- Contractual data and correspondence: for the duration of the contract and up to 10 years thereafter, in accordance with Polish civil and tax law requirements.
- Marketing data: until you withdraw your consent or object to processing, whichever is earlier.
- Cookie and analytics data: as specified in the relevant service provider's terms; typically up to 26 months.
8. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access (Art. 15 GDPR): you may request a copy of the personal data we hold about you.
- Right to rectification (Art. 16 GDPR): you may request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR): you may request deletion of your data in certain circumstances (the "right to be forgotten").
- Right to restriction of processing (Art. 18 GDPR): you may request that we limit the processing of your data in certain circumstances.
- Right to data portability (Art. 20 GDPR): you may request a machine-readable copy of data you have provided to us.
- Right to object (Art. 21 GDPR): you may object to processing based on legitimate interest or for direct marketing purposes.
- Right to withdraw consent (Art. 7(3) GDPR): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at office@amex-marine.com.pl. We will respond within one month of receipt of your request. If you believe we have violated your rights, you also have the right to lodge a complaint with the competent supervisory authority — in Poland, the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw; uodo.gov.pl).
9. Security of Personal Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to, encrypted connections (TLS/HTTPS), access controls, and regular security reviews. We require our processors to maintain equivalent security standards.
10. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision appears at the top of this page. We encourage you to review this page periodically. Continued use of our website after any changes constitutes your acknowledgement of the updated policy.
12. Contact
For all questions, requests, or concerns regarding this Privacy Policy or our data processing practices, please contact:
Amex Service Trading Marine Ltd.
Rzemieślnicza 33 Str., 81-855 Sopot, Poland
📞 (+48 58) 511 34 00
✉ office@amex-marine.com.pl