Privacy & Cookie Policy
Legal Status: 2026
Data Controller Identification
The Data Controller for personal data processed through scanexpert.pl is:
- Company: PPHU JAPIL Jakub Pilarski (trading as Scan Expert)
- Registered Address: ul. Ikara 44, 93-469 Łódź, Poland
- Tax ID (NIP / VAT): PL7272531264
- REGON: 473239499
- Responsible Officer: Jakub Pilarski
- Privacy Contact: e-mail: biuro@scanexpert.pl, tel.: +48 536 297 099
Personal data is processed in full compliance with Regulation (EU) 2016/679 (GDPR / RODO) and applicable data protection legislation.
Purposes & Legal Bases of Processing
Your personal data is processed for the following purposes and legal grounds:
- Inquiry Processing & Quotations: Processing contact name, email address, phone number, and technical specifications submitted via the contact form to provide project estimates and communicate (Art. 6(1)(b) and (f) GDPR).
- Contract Execution: Performing reality capture, BIM modeling, and engineering services (Art. 6(1)(b) GDPR).
- Legal & Tax Obligations: Issuing and archiving VAT invoices and accounting records (Art. 6(1)(c) GDPR).
- Legitimate Interests: Protecting legal claims and rights (Art. 6(1)(f) GDPR).
- Web Analytics: Measuring website traffic anonymously using Google Analytics 4 strictly based on your prior voluntary consent (Art. 6(1)(a) GDPR).
Data Recipients & International Transfers
Personal data may be shared with trusted third-party service providers supporting our business operations:
- Hosting providers, server infrastructure, and email operators.
- Accounting and legal advisory partners.
- Analytics providers (Google Ireland Limited) – only upon explicit consent in the cookie banner.
Transfers Outside the EEA: Analytics data may be transferred to Google servers in the USA under the EU-US Data Privacy Framework and Standard Contractual Clauses (SCC).
Your Rights Under GDPR
As a data subject, you hold the right to:
- Access your data and receive a copy thereof (Art. 15 GDPR).
- Rectify inaccurate or incomplete data (Art. 16 GDPR).
- Erase your data ("right to be forgotten") under Art. 17 GDPR.
- Restrict processing (Art. 18 GDPR).
- Data portability (Art. 20 GDPR).
- Object to processing based on legitimate interests (Art. 21 GDPR).
- Withdraw consent at any time without affecting prior lawful processing.
- Lodge a complaint with a supervisory authority: President of the Personal Data Protection Office (PUODO), Poland.
Retention, Voluntary Provision & Automated Decisions
Retention: Contact inquiries are kept for the duration of correspondence and quoting (up to 12 months), while contractual data is retained for 5 years following the fiscal year-end.
Voluntary Provision: Providing contact details is voluntary, but necessary to receive quotations and engineering support.
Automated Decision-Making: We do not employ automated decision-making or legal-effect profiling.