Privacy Policy

We respect your privacy. This policy explains what personal data we collect when you visit www.silesialasers.pl, fill in the quote form, contact us or sign a contract with us for equipment rental or a show, why we do it, who we share it with and what rights you have. It meets the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Polish Electronic Communications Law. This is a translation; in case of any discrepancy, the Polish version prevails.

1. Data controller

The controller of your personal data is Silesia Lasers sp. z o.o., ul. Katowicka 151 (Porcelanka), 41-717 Ruda Śląska, Poland, tax ID (NIP) 641-255-86-54, REGON 522636656 (“we”, the “Controller”).

You can contact us about anything related to personal data:

by email: kontakt@silesialasers.pl,
by phone: +48 507 773 209,
by post: at the address above.

We have not appointed a data protection officer – we are not required to.

2. What data we collect and where from

Quote form data: full name, phone number, email address (optional) and information about the event: type, date, town, number of guests, venue (indoor / outdoor), effects you are interested in and your message. We need your name and phone number to prepare a quote and contact you.
Correspondence and calls: if you email or call us, or contact us via WhatsApp or social media – the data you give us (e.g. name, phone number, email address, event details).
Client and contractor data: if you sign a contract with us – also the data needed to perform and invoice it (e.g. company or institution name, address, tax ID) – see section 4 for details.
Technical and statistical data: IP address, browser and device information, pages visited, traffic source (e.g. a Google ad), cookie identifiers – collected automatically as described in section 8.

3. Purposes and legal bases

Preparing a quote, answering your enquiry and contacting you about the event – taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR), and if you write on behalf of a company or institution – our legitimate interest in contacting the client's representative (Art. 6(1)(f) GDPR).
Entering into and performing the contract (preparing and delivering the show) – Art. 6(1)(b) GDPR.
Invoicing, accounting and keeping records – legal obligation (Art. 6(1)(c) GDPR).
Establishing, pursuing or defending claims – our legitimate interest (Art. 6(1)(f) GDPR).
Keeping the website running and secure (technical cookies, abuse prevention) – our legitimate interest (Art. 6(1)(f) GDPR).
Visitor statistics (Google Analytics) – your consent (Art. 6(1)(a) GDPR) given in the cookie banner.
Measuring ad performance and showing ads, including remarketing (Google Ads) – your consent (Art. 6(1)(a) GDPR) given in the cookie banner.
Running our social media profiles and communicating with people who contact us there – our legitimate interest (Art. 6(1)(f) GDPR).

You can withdraw your consent at any time – this does not affect the lawfulness of processing carried out before withdrawal.

4. Clients – equipment rental and show contracts

This section applies to people who sign an equipment rental contract with us (e.g. lasers, haze machines, special effects devices) or a contract for the preparation and delivery of a show or another service, as well as people acting on their behalf or named by them as contacts. We include a link to this policy in our contracts – it constitutes the information required by Articles 13 and 14 GDPR.

What data we process

details of the parties – full name, company or institution name, address, tax ID (NIP), REGON or KRS number, phone number and email address;
details of the client's representatives and contact persons – full name, position or role, phone and email (e.g. the person signing the contract, the event coordinator, the venue representative);
for equipment rental – also the details of the person collecting and returning the equipment and, where the contract requires it to secure the equipment, the series and number of an identity document (we do not copy or scan identity documents), as well as information from the handover and return report: date and time, technical condition of the equipment, photos of the equipment and any damage;
billing details – bank account number, amounts and payment dates, information on the deposit, invoices and any arrears;
event details – venue, date, schedule, technical conditions and information needed for notifications and arrangements (e.g. with the venue manager or the Polish Air Navigation Services Agency);
photos and videos of the show – taken during the show to document it and present our work.

Purposes and legal bases

entering into and performing the contract for rental or for a service – including handing over and collecting equipment and preparing and delivering the show – Art. 6(1)(b) GDPR (where the party to the contract is a natural person, including a sole trader);
contacting the client's representatives and the people named by the client – our legitimate interest in performing the contract with the client (Art. 6(1)(f) GDPR);
securing the rented equipment, confirming the identity of the person collecting it, settling the deposit and pursuing payments and compensation for damage, loss or late return of equipment – our legitimate interest (Art. 6(1)(f) GDPR);
obtaining required permits and making notifications related to the show (e.g. notification to PAŻP, arrangements with the venue manager, emergency services or the organiser of a mass event) – performance of the contract and legal obligations (Art. 6(1)(b) and (c) GDPR);
invoices, tax and accounting – legal obligation (Art. 6(1)(c) GDPR);
handling liability insurance claims and establishing, pursuing or defending claims – our legitimate interest (Art. 6(1)(f) GDPR);
documenting our shows and presenting our work (portfolio, website, social media) – our legitimate interest (Art. 6(1)(f) GDPR). We mainly publish shots of the show, the stage and the audience as a crowd. We only publish the image of specific people as the main subject of a shot (e.g. the bride and groom or wedding guests) with their consent (Art. 6(1)(a) GDPR and Art. 81 of the Polish Copyright Act). The client may at any time object to the publication of material from their event.

Where we get the data from

We receive the data directly from you or from the client who signs the contract with us – e.g. when they name you as a contact person, event coordinator, venue representative or person authorised to collect the equipment. In that case we process your name, contact details and information about your role. The client should inform you that they have shared your data with us and about this policy.

Do you have to provide the data?

Providing the data is a condition for entering into and performing the contract, and invoicing details are required by tax law. Without them we cannot sign the contract, hand over the equipment or deliver the show.

5. Who we share data with

We do not sell your data. We only share it with parties that help us run our business and website, under data processing agreements or as separate controllers:

Wix.com Ltd. – website hosting, content management, the quote form and contact database, email notifications about new enquiries;
Google Ireland Ltd. / Google LLC – email (Google Workspace), Google Tag Manager, Google Analytics, Google Ads, Google Fonts;
Meta Platforms Ireland Ltd. – the Instagram video player (only after you click “Play”);
CookieYes Limited – the tool that collects and stores cookie consents;
Cloudflare, Inc. – content delivery network and website protection used by Wix hosting;
our accountants, IT providers, courier and postal companies – as far as necessary to perform the contract and meet legal obligations;
subcontractors and collaborators (technicians, operators, transport companies) – as far as needed to deliver the show or the equipment, under data processing or confidentiality agreements;
banks and payment service providers – for payments and deposit refunds;
our insurer – if a liability insurance claim is made;
law firms and debt collection agencies – in the event of a dispute or overdue payments;
the Polish Air Navigation Services Agency, venue managers, event organisers and emergency services – when required to deliver the show or by law;
public authorities – only when required by law.

If you contact us via Facebook, Instagram, TikTok, YouTube or WhatsApp, the operators of those services also process your data under their own privacy policies.

6. Transfers outside the European Economic Area

Some of our providers (including Google, Wix, Cloudflare, CookieYes and Meta) may process data outside the EEA, including in the United States, Israel and the United Kingdom. This is based on European Commission adequacy decisions (including the EU–US Data Privacy Framework for certified US companies) or on standard contractual clauses approved by the European Commission. You can obtain a copy of these safeguards by contacting us.

7. How long we keep data

Enquiries and quotes that did not lead to a contract – until the conversation ends, then for 12 months (in case you come back to us or have questions about the quote).
Client data – for the duration of the contract, then until claims become time-barred (generally 6 years, or 3 years for business-related claims, counted from the end of the calendar year).
Equipment handover and return reports, deposit details and details of the person collecting the equipment – until the contract is settled, then until claims become time-barred, including claims for damage to the equipment.
Details of the client's representatives and contact persons – for the duration of the contract, then until claims become time-barred.
Photos and videos of shows – until an effective objection or withdrawal of consent.
Accounting records – 5 years from the end of the year in which the tax payment deadline passed.
Statistical and advertising data (Google Analytics, Google Ads) – no longer than 14 months or until you withdraw consent.
Your choice in the cookie banner – up to 12 months, after which we will ask again.

8. Cookies and similar technologies

Cookies are small files stored in your browser. On your first visit we show a banner where you can accept all cookies, reject them or choose categories. We only set non-essential cookies after you consent – until then Google Analytics and Google Ads work in a limited mode (Google Consent Mode) without storing cookies on your device.

Necessary – keep the website working and secure and remember your banner choice (e.g. cookieyes-consent, __cf_bm). No consent required.
Analytics – Google Analytics 4 (e.g. _ga, _ga_*): show us how many people visit, where they come from and which pages they read. Only with your consent.
Advertising – Google Ads (e.g. _gcl_au and Google cookies): measure whether an ad led to you contacting us (phone call, form) and allow our ads to be shown to people who have visited the website (remarketing). Only with your consent.

You can change your choice at any time: change cookie settings or click the cookie icon in the corner of the screen. You can also delete or block cookies in your browser settings – some features of the website may then work less well. More about how Google uses data: policies.google.com/technologies/partner-sites. You can also opt out of Google Analytics with a browser add-on: tools.google.com/dlpage/gaoptout.

The website contains links to our profiles on YouTube, Instagram, Facebook, TikTok and WhatsApp. These are ordinary links that do not transfer any data until you click them.

Instagram videos. In the section with our videos, the Instagram player only loads when you click “Play”. From that moment Meta Platforms Ireland Ltd. (the operator of Instagram) receives, among other things, your IP address and browser information and may set its own cookies – as described in the Instagram privacy policy. Until you click, no data is sent to Meta.

9. Your rights

In connection with the processing of your data, you have the right to:

access your data and receive a copy,
have your data rectified (corrected),
have your data erased (the “right to be forgotten”),
restrict processing,
data portability – where we process data based on consent or a contract,
object to processing based on our legitimate interest,
withdraw consent at any time – for analytics and advertising cookies.

To exercise these rights, email kontakt@silesialasers.pl. We will reply without undue delay, and within one month at the latest.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or with the supervisory authority in your EU country of residence if you believe we process your data unlawfully.

10. Do you have to provide data?

Providing data is voluntary. However, without your name and phone number (or email address) we cannot prepare a quote or contact you, and without invoicing details we cannot enter into and settle a contract.

11. Automated decision-making and profiling

We do not make decisions about you based solely on automated processing that would have legal effects or similarly significantly affect you. If you consent to advertising cookies, Google may tailor the ads it shows you based on your visits to our website (remarketing).

12. Data security

We use technical and organisational measures appropriate to the risk: the website only works over an encrypted HTTPS connection, only authorised people have access to the data, and we only use providers that ensure an adequate level of data protection.

13. Minors

Our services are aimed at adults, companies and institutions. We do not knowingly collect data from people under 16.

14. Changes to this policy

We update this policy when the law or the way the website works changes (e.g. new tools). The current version is always available on this page.

Effective from 1 October 2026.