Last updated: 29 September 2026. Translation of the Polish version.
The controller of personal data is Debesis Sp. z o.o., ul. Geodetów 176, 05-500 Piaseczno, Poland, KRS 0000418979, NIP (tax ID) 7931624781, REGON 180840298.
Contact: biuro@debesis.pl · Data protection officer: iod@debesis.pl
Postal address: Debesis Sp. z o.o., Customer Service, ul. Słowackiego 36, 37-600 Lubaczów, Poland.
We share data with, among others, IT and hosting providers, analytics and marketing providers (Google Analytics 4 / Google Ads, Meta Platforms Ireland Ltd. – Facebook Pixel), communication providers (Smartsupp) and review services (Google Customer Reviews), as well as payment providers, courier companies, law firms, insurers, accountants and public authorities — in each case only to the extent required by law.
Where data is processed outside the European Economic Area, we rely on the EU-US Data Privacy Framework (if the provider is certified) or on Standard Contractual Clauses (SCC) with supplementary measures.
You have the right of access, to obtain a copy, to rectification, erasure, restriction of processing, data portability and to object (including to direct marketing), and the right to withdraw consent at any time.
You may lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland. Under Art. 77 GDPR you may also contact the supervisory authority in the country where you live or work — in the Netherlands, the Autoriteit Persoonsgegevens.
We do not take decisions based solely on automated processing that produce legal effects for you. Basic marketing segmentation (for example audiences for advertising) is carried out only within the law, on the basis of legitimate interest or consent.
We use functional, analytics (Google Analytics 4), marketing (Google Ads, Facebook Pixel) and communication cookies (Smartsupp). You manage your preferences in the cookie banner.
Providing data is voluntary. Where it is necessary to conclude or perform a contract or to handle an enquiry, we cannot provide services or reply without it. Data processed on the basis of consent is provided voluntarily; without consent the relevant activity (for example the newsletter) does not take place.
We may obtain data from public registers (CEIDG and KRS, the Polish business and court registers), industry portals or partners. Typically this is name, company or position, email address, phone number, address and business profile. We meet the information obligations under Art. 14 GDPR no later than at first contact.
We apply technical and organisational measures appropriate to the risk — access control, encryption in transit, logging, testing and audits — and require the same from our processors.
The current version is always published on this page. Questions and requests: iod@debesis.pl or biuro@debesis.pl.