GAMBIT EUROPE SP. Z O.O. WEBSITE PRIVACY POLICY.

Applicable from: 29 June 2026.

§ 1. General Information

This Privacy Policy sets out the rules for processing the personal data of users using the GAMBIT EUROPE Ltd. website and the rules for the use of cookies.

The Administrator exercises due diligence to ensure the security of personal data and their processing in accordance with Regulation (EU) 2016/679 (GDPR).

§ 2. Data controller

The personal data administrator is:

GAMBIT EUROPE Ltd. ul. Spółdzielcza 3; 99-300 Kutno
KRS: 0001207147; NIP: 7751000234; REGON: 610209386
Tel.: +48 601 335 519; e-mail: gambit@gambiteurope.com

The controller has not appointed a Data Protection Officer. Contact for data protection matters: gambit@gambiteurope.com.

§ 3. Scope of data processed

The administrator may process: name and surname, company name, email address, telephone number, content of messages sent via the contact form, IP address, and technical data of the device and browser necessary for the correct functioning of the website.

§ 4. Purposes and grounds for processing

Data is processed to handle the contact form and conduct correspondence, ensure website security, and for the pursuit or defence of claims. The basis for processing is Article 6(1)(f) of the GDPR, and in the case of inquiries concerning the conclusion or performance of a contract, also Article 6(1)(b) of the GDPR.

§ 5. Recipients of data

Recipients of the data may include the hosting provider, the email provider, an IT support service provider, and entities authorised by law.

§ 6. Transfer of data outside the EEA

The controller does not transfer personal data to third countries or international organisations.

§ 7. Data retention period

Data is stored for the duration of correspondence, and then for the time necessary to secure any claims. Technical data is processed only for the period necessary for the proper functioning of the service.

§ 8. Rights of individuals

The data subject has the right to access their data, rectification, erasure, restriction of processing, objection, data portability (in cases provided for by law), and to lodge a complaint with the President of the Personal Data Protection Office.

§ 9. Voluntary submission of data

Providing the data is voluntary, but necessary to respond to the message sent via the contact form.

§ 10. Profiling

Data is not subject to profiling or automated decision-making.

§ 11. Safety

The administrator applies appropriate technical and organisational measures, including SSL/TLS encryption.

§ 12. Cookies

The service uses only cookies essential for its proper functioning. It does not use analytical or marketing tools. The user can manage cookies in their browser settings.

§ 13. Changes to the Privacy Policy

The Administrator may update this Privacy Policy in the event of changes to the law or service functionality.