Privacy and cookie policy.

1. Controller and contact

The controller of personal data for this website is SBS SYSTEM, Konstantynowska 34, 94-303 Łódź, Poland. Contact us at info@SodaBlastSystems.com or +48 696 461 448.

We have appointed a Data Protection Officer. You can contact the officer by post at the same address, marked “Inspektor Ochrony Danych” (Data Protection Officer).

2. Enquiries and replies

We process the details you provide: name, email or phone, optional company and budget, country of use or delivery, optional preferred contact language, model, topic and message. Providing information is voluntary, but we need a way to reply; pricing requests require an email address. Do not include sensitive information or unnecessary information about other people.

Preparing an offer at your request may be necessary to take steps before entering into a contract (GDPR Article 6(1)(b)). Other correspondence, including enquiries from company representatives, is handled on the basis of our legitimate interest in responding and maintaining business relationships (Article 6(1)(f)).

The form sends your enquiry to our server. After security checks, it sends an authenticated email through LH.pl from info@sodablastsystems.com to info@sodablastsystems.pl. If you provide an email address, a copy of your enquiry is sent to it. The receiving mailbox also forwards messages to the operator’s Gmail mailbox. Submitting a form does not subscribe you to a newsletter or give permission for optional marketing. Analytics or advertising consent is not required to contact us.

3. Cookies and similar technologies

Analytics and marketing are separate choices, both off by default. You can accept all, reject optional technologies or save your own preferences. Rejecting them does not restrict access to content or the contact form.

• Essential: your choice is stored in browser local storage under sbs:consent:v1, including categories, version and dates, without form contents. It expires after 180 days, unless you change it, clear browser storage or the consent scope changes.
• Analytics: once configured and with your consent, Google Analytics 4 measures visits and confirmed acceptance of enquiries by the server. Google Tag Manager manages tags; it does not replace consent for their purposes.
• Marketing: once configured and with separate consent, Meta Pixel and TikTok Pixel measure advertising performance and may support audience creation. Providers may associate browser identifiers and events with other information they hold.

Optional processing relies on consent (Article 6(1)(a)). We do not include names, contact details, message contents, countries, preferred languages or other free-text form fields in analytics or advertising events. These tools may nevertheless process identifiers and technical device information; we do not describe this as anonymous data. Automatic matching of contact details is not part of this implementation.

Change your choice in “Cookie settings” in the footer or below. Withdrawing consent stops further tracking and may reload the page if tools were already loaded. It does not invalidate processing carried out before withdrawal.

4. Form security

We limit repeated requests and protect against automated spam. The application stores keyed hashes of IP addresses, submission identifiers and enquiry contents, together with attempt times and statuses, to prevent abuse and duplicate sending. These are not advertising profiles. Records expire within 24 hours and are physically removed on a subsequent request or scheduled cleanup. This security store does not contain raw IP addresses or form contents. The hosting provider may maintain separate technical logs.

Cloudflare Turnstile checks technical signals from the browser and connection to distinguish people from bots. This is an abuse-prevention measure, not consent to analytics or advertising. Website security is based on our legitimate interest (Article 6(1)(f)). See Cloudflare’s Turnstile privacy information. If verification fails, you can contact us by email or phone.

5. Recipients and international transfers

Authorised personnel and hosting and email providers, including LH.pl and Google (Gmail), help us handle enquiries. Cloudflare provides form protection. Providers of configured Google, Meta and TikTok services participate after the relevant consent.

International services may involve processing outside the European Economic Area. We do not promise that all data remains within the European Union. Contact the controller for information about applicable safeguards and how to obtain a copy.

6. Retention

Cookie choices expire after 180 days. Correspondence is kept to handle your enquiry; further retention of contractual or evidential records depends on legal obligations and claims. Retention is determined by the purpose and progress of the correspondence, applicable legal obligations and relevant claim periods. Contact the controller for information about retention in a particular case.

7. Your rights

You can request access, rectification, erasure or restriction of processing. Where the GDPR provides for them, you have rights to data portability and to object to processing based on legitimate interests. You can withdraw consent at any time. Contact info@SodaBlastSystems.com to exercise your rights.

You may complain to a competent supervisory authority, including the Polish President of the Personal Data Protection Office: uodo.gov.pl. The form does not make solely automated decisions with legal or similarly significant effects. Optional advertising profiling is described in the marketing section above.