Serica
AboutWho we serveCategoriesResultsCareers

GDPR

Privacy policy

Effective date: 23 July 2026

Last updated: 23 July 2026

This Privacy Policy describes how personal data is processed in connection with the use of the Serica Sp. z o.o. website (the “Website”).

1. Data controller

The controller of personal data is Serica Sp. z o.o., with its registered office in Kraków, Kamienna 21, 31-403 Kraków, Poland, entered in the National Court Register (KRS) under number 0000993813, NIP 9452226629, REGON 382946095 (the “Controller”).

For privacy-related matters, please contact us at info@serica.pl or by post at the Controller’s registered address.

The Controller has not appointed a Data Protection Officer.

2. Scope of this Policy

This Policy covers the processing of personal data of Website users, including people who contact the Controller via the email address published on the Website.

This Policy does not cover recruitment processes. Recruitment is handled through an external outsourcing website, and that provider’s own privacy policy applies to candidate data.

3. What data we process

Depending on how you use the Website, we may process:

• technical data related to visits (including IP address, browser type, device information, timestamps and page performance data) - as needed for hosting, security and analytics,

• data you voluntarily provide in email correspondence (such as email address, name, message content and any other information included in the message).

The Website does not run a newsletter or direct marketing based on contact lists collected through the Website.

4. Purposes and legal bases

We process data for the following purposes:

• operating, securing and correctly displaying the Website - Article 6(1)(f) GDPR (legitimate interests),

• analysing Website traffic and performance (Vercel Web Analytics and Vercel Speed Insights) to improve the Website - Article 6(1)(f) GDPR,

• handling correspondence and responding to enquiries sent by email - Article 6(1)(b) GDPR (pre-contractual steps at the request of the data subject) or Article 6(1)(f) GDPR (contacting the Controller),

• establishing, exercising or defending legal claims - Article 6(1)(f) GDPR,

• complying with legal obligations where applicable - Article 6(1)(c) GDPR.

5. Recipients and processors

Data may be entrusted to IT service providers acting on the Controller’s behalf, in particular the hosting and analytics provider - Vercel Inc. (and its group companies), to the extent needed to maintain and monitor the Website.

Data may also be disclosed to public authorities where required by law.

6. Transfers outside the EEA

In connection with Vercel services, data may also be processed outside the European Economic Area (including in the United States).

In such cases, the Controller relies on GDPR transfer mechanisms, in particular standard contractual clauses or other lawful transfer tools used by the service provider.

7. Retention

Technical and analytics data are kept for as long as needed for the purposes for which they were collected, usually no longer than configured by the hosting provider’s tools and logs.

Email correspondence is kept for as long as needed to handle the matter and then for the period arising from the limitation of potential claims, or longer if required by law.

8. Your rights

Under the GDPR, you have the right to access your data, rectify it, erase it, restrict processing, receive data portability, and object to processing based on legitimate interests.

Requests regarding your rights can be sent to info@serica.pl.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw).

9. Cookies and similar technologies

The Website uses Vercel Web Analytics and Vercel Speed Insights. These tools measure traffic and performance and - according to the provider’s documentation - do not use cookies for analytics.

Therefore, with the Website’s current feature set, we do not use a consent banner for marketing cookies or cookie-based analytics.

The hosting provider may process technical data necessary to deliver the service (for example server logs). If additional technologies requiring consent are introduced later, this Policy will be updated and a consent mechanism will be implemented if required.

10. Voluntary nature of providing data

Using the Website does not require creating an account. Providing data in email correspondence is voluntary, but may be necessary for us to respond to your enquiry.

11. Changes to this Policy

The Controller may update this Policy. The current version is always available on the Website together with its effective date.

Back to home