Book now

Website orobaltic.pl · Last updated: 03.06.2026

Table of contents

  1. Data controller
  2. What data we process
  3. Purposes and legal bases
  4. Retention period
  5. Data recipients
  6. Transfers outside the EEA
  7. Your rights
  8. Cookies
  9. Analytics tools
  10. Server logs
  11. Security
  12. Changes to the policy

This Privacy Policy sets out the rules for the processing and protection of the personal data of Users of the website available at orobaltic.pl (hereinafter: the “Website”). This document has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter: the “GDPR”) and the Act on the Protection of Personal Data.

1. Data controller

The controller of the personal data of Website Users is:

  • Name: Prime House Sp. z o.o.
  • Registered office address: Ul. Mickiewicza 130a/1
    71-147 Szczecin
  • NIP: 8522702490 · REGON: 527208793
  • Contact e-mail: info@orobaltic.pl
  • Phone: +48 516 166 117

In all matters relating to the processing of personal data, you may contact the Controller using the contact details above.

 

2. What data we process

Depending on how you use the Website, we may process the following categories of data:

  • Data provided in the contact form – first and last name, e-mail address, phone number and the content of the message.
  • Technical data – IP address, browser and operating system type, date and time of visit, data on activity on the Website, collected automatically (see the “Cookies” and “Server logs” sections).

3. Purposes and legal bases of processing

Purpose of processing Legal basis (GDPR)
Handling enquiries sent via the contact form or e-mail Art. 6(1)(f) – legitimate interest of the Controller (providing a reply)
Sending the newsletter (if applicable) Art. 6(1)(a) – User’s consent
Setting up and managing a User account (if applicable) Art. 6(1)(b) – performance of a contract
Processing orders and handling payments (if applicable) Art. 6(1)(b) – performance of a contract
Issuing and storing accounting documents (if applicable) Art. 6(1)(c) – legal obligation
Statistical analysis and improvement of the Website Art. 6(1)(a) / (f) – consent to analytics cookies / legitimate interest
Establishing, asserting or defending claims Art. 6(1)(f) – legitimate interest of the Controller

4. Data retention period

  • Correspondence data – for the time necessary to handle the matter and for [12 MONTHS] after it is concluded.
  • Newsletter subscriber data – until consent is withdrawn (unsubscription) (if applicable).
  • Account data – for the time the account is held and until its deletion (if applicable).
  • Billing data – for the period required by law (as a rule, 5 years) (if applicable).
  • Data processed on the basis of legitimate interest – until an effective objection is raised or the purpose ceases.

5. Data recipients

Personal data may be transferred to entities supporting the Controller in operating the Website, only to the extent necessary and on the basis of appropriate agreements. The recipients may include:

  • hosting / server provider: [zenbox.pl,
  • providers of analytics and marketing tools (if applicable),
  • payment operators and courier companies (if applicable – shop),
  • accounting office and IT service providers,
  • public authorities – where the obligation arises from legal provisions.

6. Transfers of data outside the EEA

As a rule, data is not transferred outside the European Economic Area. If the Website uses tools from providers based outside the EEA (e.g. Google), the transfer of data takes place on the basis of standard contractual clauses approved by the European Commission or other mechanisms ensuring an adequate level of protection in accordance with the GDPR. (Adjust or remove depending on the tools used.)

7. Your rights

In connection with the processing of personal data, you have the following rights:

  • the right to access your data and obtain a copy of it (Art. 15 GDPR),
  • the right to rectification of data (Art. 16 GDPR),
  • the right to erasure of data – the “right to be forgotten” (Art. 17 GDPR),
  • the right to restriction of processing (Art. 18 GDPR),
  • the right to data portability (Art. 20 GDPR),
  • the right to object to processing (Art. 21 GDPR),
  • the right to withdraw consent at any time – without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR).

To exercise your rights, please contact the Controller at info@orobaltic.pl.

You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa) – if you consider that the processing of your data infringes the provisions of the GDPR.

Voluntary nature of providing data: providing data is voluntary, however in some cases (e.g. replying to an enquiry, fulfilling an order) it is necessary to use a given function of the Website.

8. Cookies

The Website uses cookies – small text files saved on the User’s device. We use the following types of cookies:

  • Necessary – essential for the proper functioning of the Website; they do not require consent.
  • Functional – they remember the User’s preferences (if applicable).
  • Analytical – used to analyse traffic and improve the Website; they require consent (if applicable).
  • Marketing – used to personalise ads; they require consent (if applicable).

The User can manage cookies or delete them at any time in their browser settings. Restricting the use of cookies may affect some functions of the Website.

9. Analytics and external tools (if applicable)

The Website may use the following third-party tools:

  • Google Analytics – an analytics service provided by Google Ireland Ltd., used to analyse visit statistics. (Remove if not used.)
  • Meta Pixel (Facebook) – an analytics and marketing tool provided by Meta Platforms Ireland Ltd. (Remove if not used.)
  • Social media plugins – e.g. Facebook, Instagram, LinkedIn. (Remove if not present.)

These tools are activated only after consent has been given to the relevant cookie category. The detailed rules for the processing of data by these entities are set out in their own privacy policies.

10. Server logs

Using the Website involves the automatic recording in the server logs of technical information such as the IP address, browser type, and the time and address of the request. This data is used solely to administer the Website and ensure its security, and is not combined with the data of specific Users for marketing purposes.

11. Data security

The Controller applies appropriate technical and organisational measures to ensure the protection of the personal data processed, including, among others, an encrypted connection (SSL/TLS certificate), access control, and safeguards against unauthorised access, loss or destruction of data.

12. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy, resulting, among other things, from changes in legal provisions or the development of the Website. The current version is published each time at orobaltic.pl together with the date of the last update.

Scroll to Top