Privacy notice
1. Controller
The controller responsible for personal data processed in connection with MODUBATH is:
Prosteel Group Sp. z o.o.
ul. Kazimierza Morawskiego 5/127
30-102 Kraków, Poland
Represented by Vitali Wilhelm, President of the Management Board (Prezes Zarządu).
Contact for privacy matters:
info@modubath.com
+48 530 939 146
2. Website access and hosting
Accessing this website transmits technical data to the infrastructure delivering it. This includes your IP address, the time and destination of the request, technical browser and device information and, where applicable, the referring page. These data are used to deliver the website, diagnose faults and protect against misuse and attacks.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is maintaining a secure, functioning website. Transmitting connection data is technically necessary for your browser to retrieve the website.
This website uses ChatGPT Sites provided by OpenAI. For customers in the European Economic Area, the relevant provider is OpenAI Ireland Limited. OpenAI uses technical service providers, including Cloudflare for hosting and network infrastructure. Where personal data are processed on our behalf, the applicable data processing agreements govern that processing. Provider details are available in the OpenAI sub-processor list.
Hosting infrastructure may process data outside the European Economic Area, including in the United States. OpenAI’s processing terms provide for adequacy decisions or EU Standard Contractual Clauses for these transfers. Further information about these safeguards is available from our privacy contact and in the OpenAI data processing terms. This website does not promise exclusively European data storage.
Technical data are retained only as long as needed for delivery, operational security, fault analysis and investigation of specific security incidents. Retention depends on the purpose of the relevant logs and any legal obligations; data are then deleted or anonymised.
3. Cookies, fonts and external content
The website code we provide does not set cookies or store information in your browser’s local storage. Language selection is not saved permanently. Images, styling and scripts are delivered with the website, while fonts use those available on your device.
We have not integrated visitor analytics, advertising pixels, social media plugins, embedded videos or external maps. This is separate from technical security mechanisms that the hosting provider may use to deliver the website securely. Our website code does not activate analytics or marketing services requiring consent.
4. Contact by email or telephone
When you contact us, we process your contact details, message and any attachments to respond to your enquiry. Email links open your own email application; clicking a link does not send a message. The enquiry assistant compiles your entries into an email draft within your browser. The details are transmitted to us only when you send the message yourself in your email application. Our website code does not save these entries on a server or in local browser storage. No customer account is offered.
For enquiries concerning a contract with you, the legal basis is Article 6(1)(b) GDPR. Other business enquiries, including correspondence with a company’s representatives, are handled under Article 6(1)(f) GDPR. Our legitimate interest is responding appropriately to enquiries and maintaining business relationships.
Our email service is OVHcloud Zimbra. OVHcloud processes messages to provide the service; according to the provider, Zimbra mailbox data are hosted in France. Within our company, access is limited to people who need it to handle the enquiry.
Providing your data is voluntary. Without a way to contact you, we cannot reply. We retain correspondence until the enquiry is resolved and there is no further relevant business purpose. Where statutory retention obligations apply or information is needed to establish, exercise or defend legal claims, the necessary data are retained until that reason no longer applies.
5. Other recipients and security
Data are disclosed only where necessary for the stated purposes, required by law or covered by your consent. In addition to the IT providers above, recipients may include competent authorities and legal or tax advisers where needed in a particular case. The website is transmitted using HTTPS encryption.
6. Your rights
Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing relies on consent, you can withdraw it at any time for the future. This does not affect the lawfulness of processing before withdrawal.
Right to object: Under Article 21 GDPR, you may object to processing based on Article 6(1)(f) on grounds relating to your particular situation. You may object to direct marketing at any time without giving reasons.
To exercise your rights, contact info@modubath.com. You may also lodge a complaint with a supervisory authority, particularly where you habitually reside, work or believe an infringement occurred. In Poland, this is the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland: Contact UODO.
7. Automated decisions and updates
We do not use this website to make solely automated decisions with legal or similarly significant effects, or to carry out profiling. We will update this notice if the website or processing changes.
Last updated: 25 September 2026.