Name: CSE Poland
Address: Aleja Stanów Zjednoczonych 72, lok. 13A, Warszawa, mazowieckie, 04-036, PL
Telephone: +48 512 800 030
Price range: $$
Rating: 4.8

1Data controller

The controller of your personal data is CSE Poland Sp. z o.o., based in Warsaw, Poland. We decide for what purposes and how the data collected through this website and during the provision of repair services is processed.

Entity: CSE Poland Sp. z o.o.
Address: Aleja Stanów Zjednoczonych 72/13A, 04-036 Warsaw, Poland
KRS: 0001056727
REGON: 526339576
VAT ID (NIP): PL1133107861
Phone: +48 512 800 030
E-mail: kontakt@csepoland.eu

We have not appointed a Data Protection Officer (DPO). For all matters relating to personal data protection, please contact us at kontakt@csepoland.eu or by phone: +48 512 800 030.

2Scope and categories of data

Depending on how you use the website and our services, we may process the following categories of data:

Identification and contact data — first and last name, e-mail address, phone number and, for businesses, company name and invoicing details.
Service order data — order number, device model and type, fault description, repair status, billing and complaint data.
Technical and usage data — IP address, device and browser identifiers, server logs, information about activity on the site (analytics — only with consent).
Cookie data and similar technologies — see the "Cookies…" section below.

3Purposes, legal bases and retention

The table below shows the main processing purposes together with the legal basis (Art. 6 GDPR) and the standard retention period:

Purpose	Legal basis	Retention period
Handling enquiries from forms and contact	Art. 6(1)(b) GDPR (pre-contractual steps) or (f) (legitimate interest — communication)	Up to 12 months from the last contact or until an effective objection
Providing repair services and contracts, billing, complaints	Art. 6(1)(b) (contract), (c) (legal obligation — incl. tax and accounting)	Billing records as a rule 5 years (from the end of the financial year); other data until the limitation periods for claims expire
Establishing, pursuing or defending claims	Art. 6(1)(f) (legitimate interest)	Until the limitation periods for claims expire
Direct marketing of our own services by electronic or telephone means	Art. 6(1)(a) (consent) and e-privacy rules (separate consent required)	Until consent is withdrawn
Traffic analytics (e.g. Google Analytics 4)	Art. 6(1)(a) (consent for analytics cookies)	For the period set in the tool or until consent is withdrawn
Advertising and remarketing (e.g. Google Ads)	Art. 6(1)(a) (consent for advertising cookies)	For the lifetime of the cookies and identifiers or until consent is withdrawn
Security and correct operation of the website	Art. 6(1)(f) (legitimate interest — security, abuse prevention)	In line with the log retention policy (usually up to 12 months)

4Cookies, consent and Google Consent Mode v2

We use cookies and similar technologies, which we group into three categories:

Necessary

Always active

Required for the website to work and for service delivery (security, remembering your consent choices). Without them the site does not function correctly.

Analytics

Consent only

Help us understand how you use the site and improve it (Google Analytics 4). Activated only after you give consent.

Advertising

Consent only

Used to personalise ads and measure their effectiveness (e.g. Google Ads, remarketing). Activated only after you give consent.

Analytics and advertising cookies are activated only after you give consent in the cookie banner. You can change or withdraw your consent at any time in the preferences panel — see the "Manage cookie consent" section below.

We use Google Consent Mode v2, which adjusts the behaviour of Google tags to the consent you have given. When consent is missing, Google receives only anonymised signals instead of identifiers, limiting data processing to the necessary minimum.

You can also manage cookie settings in your browser. Disabling necessary cookies may, however, make the website harder to use.

5Data recipients (processors)

We work with trusted providers. Your data may be entrusted — under data processing agreements — to the following entities and categories of recipients:

Hosting and website maintenance provider — storage of the website and technical data.
CookieScript — consent management platform (CMP) running the cookie banner and the cookie declaration.
Google (Google Ireland Ltd / Google LLC) — analytics and advertising tools: Google Analytics 4, Google Ads, Google Tag Manager.
Gincore — CRM system for handling service orders and the repair status lookup.
Courier companies (DPD, InPost) — pick-up and delivery of equipment if you use shipping.
Payment service providers — payment handling if you use it.
IT and service support providers — system maintenance and security.

We do not sell your data and do not share it with third parties for commercial purposes.

6Transfers outside the EEA

In connection with the use of Google services, data may be transferred to third countries (including the United States). The transfer is based on appropriate safeguards — in particular the European Commission's implementing decision on the EU–US Data Privacy Framework and, where necessary, Standard Contractual Clauses (SCC).

7Your rights

In connection with the processing of your data you have the following rights, which you can exercise at any time:

Access to data Rectification Erasure ("right to be forgotten") Restriction of processing Data portability Objection (incl. to marketing) Withdrawal of consent at any time

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

We respond to requests as a rule within 1 month (extendable by a further 2 months in complex cases). You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO) (uodo.gov.pl).

8Data sources, profiling, obligation to provide data

We obtain data primarily directly from you — through forms, phone and e-mail contact, and your use of the website. We may also receive technical data generated automatically by your device and browser (logs, cookies).

For online advertising we may use marketing profiling (e.g. matching ad content based on your consent for advertising cookies). We do not make decisions that produce legal effects concerning you based solely on automated processing.

Providing data may be a contractual requirement (when you order a service) or voluntary (e.g. contact via the form). Failure to provide certain data may make it impossible to deliver the service or respond to your enquiry.

9Data security

We apply appropriate technical and organisational measures to protect data against loss, theft and unauthorised access, disclosure or modification. These include, among others, encryption of transmission (SSL/TLS), access control, backups and periodic reviews of permissions and processing agreements.

10Children's data

Our services and website are addressed to people over the age of 16. If you are under 16, please obtain the consent of a parent or guardian, or do not use features that require providing data.

11Policy changes and contact

We reserve the right to update this policy — for example following changes in law or in the tools we use. We will announce significant changes on the site, and you will find the date of the last update at the top of this page. For privacy matters, write to us at kontakt@csepoland.eu.

12Manage cookie consent

You can change or withdraw your consent for analytics and advertising cookies at any time. Click the button below to open the preferences panel:

Manage cookie consent

If the button does not work, make sure your browser is not blocking scripts — the consent banner is powered by CookieScript.

13Cookie declaration (list of files)

The current list of cookies detected on our website by the CookieScript scanner is loaded below:

Privacy Policy