Privacy policy
Effective from 27.10.2026. This policy explains how we process personal data on voltscan.eu and when you contact us by phone, e-mail or WhatsApp, in line with Regulation (EU) 2016/679 (GDPR).
1. Data controller
The controller is As-Serwis Andrzej Siemienik, Objazdowa 14 lok. 13, 43-246 Skoczów, Poland, VAT ID PL5481110005, REGON 072787700 ("we"). Voltscan is our trading name (about us).
For data protection matters contact us by e-mail at [email protected], by phone at +48 504 536 966, or in writing at the controller's address. We have not appointed a data protection officer.
2. What data we process
- Inquiry form: name or contact person, phone number, fault description and, if you provide them, company name, e-mail, machine make and model, error code, machine location, preferred date and photos. With each inquiry we store the IP address, the page language and the date sent.
- Phone, e-mail, WhatsApp: phone number, e-mail address, name, the content of the correspondence and any files sent.
- Carrying out a job: data needed to perform the service and issue an invoice (e.g. the customer's company details).
- Technical and statistical data: IP address, browser and device information, pages visited and events (e.g. clicking the phone number, sending the form) collected through the cookies and tools described in section 7.
Providing data is voluntary, but without your name, phone number and a fault description we cannot answer your inquiry.
3. Purposes and legal bases
- Answering your inquiry, preparing a quote and carrying out the service – Art. 6(1)(b) GDPR (steps prior to entering into a contract and performance of a contract). If you contact us on behalf of a company – Art. 6(1)(f) GDPR (our legitimate interest in communicating with the customer's representative).
- Protecting the form against spam and abuse (IP address, Cloudflare Turnstile verification, automated spam scoring) – Art. 6(1)(f) GDPR. Spam scoring has no legal effect on you: inquiries flagged as suspicious are still stored and we can review them.
- Billing, accounting and tax obligations after a service – Art. 6(1)(c) GDPR.
- Establishing, exercising or defending legal claims – Art. 6(1)(f) GDPR.
- Visitor statistics and measuring how the site performs (Google Analytics 4) – Art. 6(1)(a) GDPR (your consent given in the cookie banner). You can withdraw consent at any time with the "Cookie settings" link in the footer; this does not affect processing before the withdrawal.
4. Recipients
We share data only with providers that help us run the site and handle inquiries, under data processing agreements or their data processing terms:
- our server and e-mail hosting provider (hosting the site, the inquiry database and correspondence);
- Cloudflare, Inc. – content delivery network, site protection and Turnstile verification in the form;
- Google Ireland Ltd. / Google LLC – Google Analytics 4, Google Tag Manager and Google Fonts loaded from Google servers;
- Discord, Inc. – internal notification to our team about a new inquiry (includes the form data and photos);
- WhatsApp Ireland Ltd. (Meta) – if you write to us on WhatsApp;
- providers of accounting and legal services to us – if a job or a dispute arises;
- public authorities – where the law requires it.
We do not sell data or use it for marketing profiling.
5. Transfers outside the European Economic Area
Google, Cloudflare, Discord and Meta may process data in the United States. Transfers rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) for certified companies, or on standard contractual clauses approved by the Commission. You can request a copy of the safeguards at the address in section 1.
6. How long we keep data
- Inquiries that did not lead to a job – up to 24 months after the last contact.
- Data related to a job – while the job is carried out and then until claims become time-barred; accounting records – 5 years from the end of the year in which the tax payment deadline passed (under Polish law).
- Data processed on the basis of legitimate interest – until you successfully object, unless we need it to defend claims.
- Google Analytics statistics – for the period set in the service, no longer than 14 months.
7. Cookies and similar technologies
| Tool | Purpose | Duration |
|---|---|---|
| Site session (voltscan-cms-session, XSRF-TOKEN) | necessary: form operation and protection against CSRF attacks | 120 min |
| lang_preference_set | remembers that you do not want to switch language | 365 days |
| Cloudflare (e.g. __cf_bm) and Turnstile | necessary: security, telling people from bots | up to 30 minutes / during verification |
| Google Analytics 4 (_ga, _ga_*) | visit and event statistics – only with consent | up to 2 years |
| voltscan_consent (cookie and browser storage) | necessary: remembering your choice in the cookie banner | 180 days |
On your first visit we show a banner with two equal buttons: "Accept" and "Reject". Google Analytics statistics cookies are only set after you click "Accept". We use Google Consent Mode v2: before the Google tag loads, every consent type (analytics_storage, ad_storage, ad_user_data, ad_personalization) is set to "denied", and when you accept we only grant statistics (analytics_storage). We do not use advertising cookies. Without consent Google Analytics may only receive anonymous cookieless signals (e.g. that a page was viewed) that cannot identify you. We remember your choice for 180 days; you can change it at any time with the "Cookie settings" link in the footer. If you reject, we remove Google Analytics cookies set earlier.
You can delete or block cookies in your browser settings; blocking necessary cookies may prevent the form from being sent. You can opt out of Google Analytics with the Google Analytics Opt-out browser add-on.
8. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. To exercise these rights, write to [email protected]. You can withdraw consent to statistics cookies at any time with the "Cookie settings" link in the footer.
You also have the right to lodge a complaint with a supervisory authority, in particular the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or the authority in your country of residence.
9. Changes
We update this policy when the tools we use or the way we process data change. The current version is always on this page, with the effective date at the top.