Seba Tech Group

Privacy policy

Privacy Policy

This policy explains who processes your personal data, for what purposes, for how long, and what rights you have.

1. Data controller

The controller of your personal data is Seba Technic Czech spółka komandytowa, with its registered office at ul. Prosta 6, 38-500 Sanok, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0001191549, NIP 6871987857, REGON 542575382 (the “Controller”, “we” or “us”).

For any matters relating to personal data, you can contact us:

  • by e-mail: hr@sebatechgroup.com,
  • by post: at our registered office address, marked “Personal data”.

2. Scope of this policy

This policy covers data processed in connection with your use of the website https://sebatechgroup.com, contacting us by form, e-mail or phone, recruitment, business cooperation, and our social media profiles.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”), the Polish Personal Data Protection Act of 10 May 2018, and the Polish Electronic Communications Law of 12 July 2024.

3. What data we process, why, and for how long

We process the data you provide to us (name, e-mail address, phone number, company name, job title, the content of your message and, in recruitment, the information in your CV). We also collect technical data when you use the website: IP address, device and browser information, and cookies.

Purpose of processingResponding to enquiries sent via the contact form, e-mail or phone
Legal basisArticle 6(1)(f) GDPR (our legitimate interest in handling correspondence); where you ask about our services, Article 6(1)(b) GDPR (steps taken prior to entering into a contract)
Retention perioduntil the matter is resolved, then up to 12 months from the last contact
Purpose of processingPreparing quotations, concluding and performing contracts with clients, suppliers or subcontractors
Legal basisArticle 6(1)(b) GDPR
Retention periodfor the duration of the contract and until any claims become time-barred
Purpose of processingContact with representatives of our business partners
Legal basisArticle 6(1)(f) GDPR (maintaining business relationships)
Retention periodfor the duration of the cooperation or until you object
Purpose of processingRecruitment for an advertised position
Legal basisArticle 6(1)(c) GDPR in conjunction with Article 22¹ of the Polish Labour Code (data required by law); Article 6(1)(a) GDPR (additional data you provide on your own initiative); Article 6(1)(b) GDPR for civil-law contracts
Retention perioduntil the recruitment process ends and, if you are not hired, for up to 3 months in case of any claims
Purpose of processingFuture recruitment processes
Legal basisArticle 6(1)(a) GDPR (your consent)
Retention perioduntil you withdraw consent, but no longer than 12 months
Purpose of processingAccounting and tax obligations
Legal basisArticle 6(1)(c) GDPR in conjunction with accounting and tax legislation
Retention period5 years from the end of the calendar year in which the tax payment deadline expired
Purpose of processingSending information about our services by e-mail
Legal basisArticle 6(1)(f) GDPR (direct marketing of our own services) and consent to electronic communication as required by the Polish Electronic Communications Law
Retention perioduntil you withdraw consent or object
Purpose of processingWebsite statistics and analytics
Legal basisArticle 6(1)(a) GDPR (consent given in the cookie banner)
Retention perioduntil you withdraw consent, but no longer than 14 months
Purpose of processingEstablishing, exercising or defending legal claims
Legal basisArticle 6(1)(f) GDPR
Retention perioduntil the claims become time-barred

Please do not include information about your health, beliefs or other special categories of data in your application documents. If you would like us to consider you for future vacancies, please add the following consent to your CV: “I consent to the processing of my personal data by Seba Technic Czech sp.k. for the purposes of future recruitment processes.”

4. Cookies

Cookies are small text files stored on your device when you use the website. Cookies other than strictly necessary ones are only set after you give your consent in the cookie banner.

TypeStrictly necessary
Purposeoperation and security of the website, remembering your cookie banner choice
Consent requiredno
TypeAnalytics
Purposestatistics on visits and how the website is used
Consent requiredyes
TypeMarketing
Purposemeasuring the effectiveness of advertising and displaying ads on other websites
Consent requiredyes
TypeExternal content
Purposedisplaying maps and videos embedded on the website
Consent requiredyes

You can change or withdraw your consent at any time by clicking “Cookie settings” in the website footer. You can also delete or block cookies in your browser settings, although this may limit some website features.

5. Third-party tools

We use the following tools (active only after you give consent):

  • Google Analytics 4 and Google Tag Manager (Google Ireland Limited): visitor statistics,
  • Google Maps and YouTube (Google Ireland Limited): displaying the location map and videos,
  • LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company): measuring campaign performance,
  • Meta Pixel (Meta Platforms Ireland Limited): measuring campaign performance.

The providers of these tools may also process data for their own purposes, in accordance with their own privacy policies.

6. Social media

We run company profiles on LinkedIn, Facebook and Instagram. We process the data of people who follow our profiles, comment on posts or send us messages on the basis of Article 6(1)(f) GDPR, for the purpose of communication and promoting our services. We keep this data for as long as we run the profile or until the content concerned is deleted.

With regard to profile statistics, we are joint controllers together with the platform operator (Article 26 GDPR). Platform operators process data under their own rules, described in their privacy policies.

7. Who we share data with

We share data only to the extent necessary for the purposes described in section 3. Recipients may include:

  • hosting, e-mail and IT service providers acting on our behalf under a data processing agreement (Article 28 GDPR),
  • our accounting firm, law firms and advisers,
  • providers of analytics and marketing tools, if you have consented to cookies,
  • companies in our group, ST Industrial B.V. (Netherlands) and Seba Solution Inc. (USA), where needed to handle an enquiry or carry out a project in a given country,
  • public authorities, where required by law.

8. Transfers outside the European Economic Area

Some recipients are based in, or have servers in, the United States. We transfer data there only with the safeguards required by the GDPR:

  • a European Commission adequacy decision (EU-US Data Privacy Framework), where the recipient participates in that framework,
  • standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR), including in our relationship with Seba Solution Inc.

You can obtain a copy of these safeguards by writing to the address given in section 1.

9. How long we keep data

The retention periods for each purpose are set out in the table in section 3. Where the same data serves several purposes, we keep it until the longest of those periods expires. After that, we delete or anonymise it.

10. Your rights

You have the right to:

  • access your data and obtain a copy of it (Article 15 GDPR),
  • have your data rectified (Article 16 GDPR),
  • have your data erased (Article 17 GDPR),
  • restrict processing (Article 18 GDPR),
  • data portability (Article 20 GDPR),
  • object to processing based on our legitimate interest, including direct marketing (Article 21 GDPR),
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3) GDPR).

Please send your request to the address given in section 1. We will respond within one month; in complex cases this period may be extended by a further two months, and we will let you know if that happens.

If you believe that we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, or with the data protection authority in the EU Member State where you live or work.

11. Voluntary provision of data and profiling

Providing your data is voluntary, but without it we cannot respond to your enquiry, conclude a contract or carry out recruitment. In recruitment, providing the data required by the Polish Labour Code is a condition of taking part. We do not make decisions based solely on automated processing, including profiling, that would have legal effects for you (Article 22 GDPR).

12. Data security

We apply technical and organisational measures appropriate to the risk, including an encrypted connection to the website (SSL/TLS), access control and data processing agreements with our service providers.

13. Changes to this policy

We update this policy when the law or the tools we use change. The current version is always available on this page.

Last updated: 3 October 2026