fIG▶✉
ENChoose language
Polski PLEnglish ENDeutsch DEEspañol ESItaliano IT
☰

Legal documents

Privacy policy

We respect the privacy of Quadralite website users. This policy explains who processes personal data, for what purposes, how long it is retained and what rights data subjects have.

Last updated: 5 September 2026

Data controller

The controller is NEXT77, ul. Bonarka 11, 30-415 Kraków, Poland. Basic website functions do not require personal data. Data is provided voluntarily through forms, applications or services that require identification.

Data we process

Depending on the service, we may process data entered in a form or application, identification, address and contact data, and information about a service request or contract. Providing data is voluntary but may be necessary to handle an enquiry or perform a contract.

Purposes and legal bases

  • Handling enquiries and correspondence — steps requested by the user or the controller’s legitimate interest.
  • Concluding and performing a contract or service — Article 6(1)(b) GDPR.
  • Compliance with legal, accounting and tax obligations — Article 6(1)(c) GDPR.
  • Establishing, pursuing or defending claims — the controller’s legitimate interest.
  • Sending newsletters or marketing information — on the basis of consent where required.

Retention period

Data is retained for the time needed to provide the service or perform the contract and then until applicable limitation or statutory retention periods expire. Consent-based data is retained until consent is withdrawn unless a legal duty requires longer storage. It is then deleted or anonymised.

Data recipients

Data may be entrusted to service providers supporting the controller, including IT and hosting providers, email and form operators, accountants, legal advisers and entities handling requests. They process data under appropriate agreements and the controller’s instructions.

Your rights

  • Access your data and information about its processing.
  • Correct or complete inaccurate data.
  • Erase data where provided by law.
  • Restrict processing.
  • Object to processing based on legitimate interest.
  • Data portability where legal conditions are met.
  • Withdraw consent at any time without affecting earlier lawful processing.

Data transfers and automated decisions

According to the current policy, the controller does not transfer data outside the European Economic Area and does not make decisions based solely on automated processing, including profiling. This information must be updated if external services change.

Security

The controller uses appropriate technical and organisational measures to protect data against loss, unauthorised access, alteration or disclosure. Access is limited to persons and entities that need it.