1. General Information
This Privacy Policy defines the rules for processing personal data of users using the Service available at spartus.pl, spartus.info, and all their subdomains.
The controller of personal data processed on the main websites spartus.pl and spartus.info is:
NOV-WELD Sp. z o.o.
ul. Słoneczna 9, 80-297 Miszewko
E-mail: novweld@novweld.pl
The Controller processes data only to the extent necessary to provide services offered on the main website of the Service.
Note regarding subdomains:
Contact forms located on the Service’s subdomains are operated by external commercial partners.
Data submitted through these forms is sent directly to the appropriate partner, who acts as the independent controller of the personal data.
NOV-WELD Sp. z o.o. does not collect, store, or process data submitted through forms on subdomains.
Information about the data controller responsible for the given subdomain is provided directly on that subdomain in the GDPR information clause (below the form or in its information section).
2. Data processing on the main websites spartus.pl and spartus.info
2.1. Contact form
Purpose: responding to the submitted inquiry.
Scope of data: first name, last name, e-mail, phone number (optional), message content.
Legal basis:
– Art. 6(1)(b) GDPR – actions taken at the user’s request prior to entering into a contract,
– Art. 6(1)(f) GDPR – the Controller’s legitimate interest.
Retention period: until the correspondence is completed, but no longer than 12 months.
2.2. Service form (equipment failure report)
Purpose: handling service requests, contacting the user, verifying the reported issue.
Scope: contact data, phone number, device details, description of the defect, attachments.
Legal basis:
– Art. 6(1)(b) GDPR – handling the service request,
– Art. 6(1)(f) GDPR – the Controller’s legitimate interest (after-sales service).
Retention period: duration of the service request + 3 years for evidence purposes.
2.3. Analytics (Google Analytics 4)
Purpose: statistics, traffic analysis, and improving website performance.
Scope: anonymised activity data (IP address is anonymised).
Legal basis: Art. 6(1)(a) GDPR – user consent (cookie banner).
Retention period: according to GA4 configuration – up to 14 months.
Analytics is activated only after consent is given.
3. Data Disclosure
The Service’s subdomains (e.g., partner.spartus.pl, miasto.spartus.pl) are made available to commercial partners and distributors of SPARTUS products.
When a user fills in a contact form located on a subdomain:
• data is sent directly to the partner,
• the partner acts as the independent controller of the data,
• NOV-WELD Sp. z o.o. does not receive or access this data,
• the partner defines the legal bases, purposes, and rules of processing.
Information about the appropriate data controller is presented to the user directly on the relevant subdomain in accordance with Art. 13 GDPR.
4. Data transfer
Data from the main website may be transferred to:
• hosting provider HitMe.pl – infrastructure maintenance,
• Google Ireland Ltd. / Google LLC – for analytics,
• authorised employees and service partners of NOV-WELD.
Data from subdomains is not transferred to NOV-WELD — the partner is the sole controller of such data.
5. Data transfer outside the EEA
Using Google Analytics 4 may result in data being transferred to the USA.
Google applies Standard Contractual Clauses (SCC) and additional safeguards in accordance with Art. 46 GDPR.
6. User rights
Users have the right to:
• access their data,
• rectify their data,
• erase their data,
• restrict processing,
• transfer their data,
• object to processing based on Art. 6(1)(f) GDPR,
• withdraw consent (for analytics).
Complaints may be submitted to the President of the Personal Data Protection Office (UODO).
Providing data in forms on the main website is voluntary but necessary to process the inquiry.
7. Server logs
The server (HitMe.pl) may store:
• IP address,
• date and time of connection,
• browser information,
• referring page (referrer),
• server errors.
These data are used for security and server administration.
8. Cookies
The Service uses cookies:
8.1. Purposes:
• ensuring website functionality,
• storing the user’s consent preferences,
• analytics (after consent).
8.2. Types of cookies:
– necessary,
– analytical (Google Analytics 4).
8.3. Consent banner:
on first visit → accept / reject analytics / settings.
8.4. Browser settings:
the user may limit or delete cookies via browser settings.
9. Form data and security
Forms may record IP addresses and technical browser data — solely for security purposes.
No profiling or automated decision-making is carried out.
10. Summary
The Controller takes steps to protect data through:
• SSL encryption,
• up-to-date technical safeguards,
• GDPR-compliant procedures.
Data from subdomains is sent directly to partners and is not processed by NOV-WELD Sp. z o.o.