// Legal document

Privacy Policy

Last updated: 18 July 2026

This Privacy Policy sets out the rules for the processing of personal data and the use of cookies on the website available at dualtec.com.pl.

1. Data controller

The controller of personal data is the DUALTEC Association of Dual-Use Technology Manufacturers, with its registered office in Jasionka (Jasionka 954E, 36-002 Jasionka, Poland), entered in the register of associations of the National Court Register under KRS number 0001114630, NIP (Tax ID) 5170449575, REGON 529100746 (hereinafter: the “Controller” or the “Association”).

The Controller can be contacted on all matters relating to the processing of personal data by email at stowarzyszenie@dualtec.com.pl or in writing at the address of its registered office. The Controller has not appointed a Data Protection Officer; data protection tasks are performed directly by the Controller.

2. Legal bases for processing

Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR) and the Polish Act of 10 May 2018 on the protection of personal data. Depending on the purpose, the legal basis for processing is:

  • Art. 6(1)(a) GDPR – the consent of the data subject (e.g. contact form, newsletter, cookies other than strictly necessary ones);
  • Art. 6(1)(b) GDPR – necessity for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract;
  • Art. 6(1)(c) GDPR – compliance with a legal obligation to which the Controller is subject;
  • Art. 6(1)(f) GDPR – the legitimate interest of the Controller (handling enquiries and correspondence, ensuring security and compiling website statistics).

3. Contact form

Through the contact form we collect the data provided by the user: full name, email address and the content of the message. We process the data solely in order to respond to the enquiry and to conduct further correspondence (Art. 6(1)(a) and (f) GDPR). Providing the data is voluntary but necessary to handle the enquiry.

4. Newsletter

If the user subscribes to the newsletter, we process their email address in order to send information about the activities of the Association and the cluster (Art. 6(1)(a) GDPR – consent). Consent may be withdrawn at any time, e.g. by contacting the Controller or via the unsubscribe link in the message; withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

5. Discord community

The website contains a link to the Association’s Discord server. Joining the server means using the Discord service provided by Discord Inc. under the terms set out in that provider’s privacy policy. The Controller is not responsible for the processing of personal data carried out independently by Discord Inc.

6. Cookies

The website uses cookies — small text files stored on the user’s terminal device. Storing cookies other than strictly necessary ones and gaining access to them requires the user’s consent, in accordance with the Polish Act of 12 July 2024 – Electronic Communications Law. We use:

  • strictly necessary cookies – required for the website to function properly; they do not require consent;
  • functional cookies – remembering the user’s settings and preferences;
  • analytical cookies – used to compile anonymous statistics (see section 7).

Consent to cookies other than strictly necessary ones is given via the cookie banner displayed on the first visit. Consent may be withdrawn or its scope changed at any time, and cookies may be managed in the browser settings, including blocking or deleting them. Restricting the use of cookies may affect some functions of the website.

7. Analytics tools

The website uses Google tools (including Google Analytics via the Site Kit plugin) provided by Google Ireland Limited. These tools automatically collect information about how the website is used (including a truncated IP address, browser and device type, time and duration of the visit, and traffic source) in order to compile statistics and improve the functioning of the website (Art. 6(1)(f) GDPR and consent to analytical cookies). The data are processed in aggregated form and are not used to identify specific individuals.

8. Data recipients and processors

Personal data may be entrusted to entities supporting the Controller, in particular the following categories: hosting service providers, email service providers, and providers of analytics and communication tools (including Google and Discord). These entities process data solely on the basis of a data processing agreement and on the documented instructions of the Controller, to the extent necessary to provide their services. Data may also be disclosed to public authorities entitled to receive them under the law.

9. Transfers of data outside the European Economic Area

As a result of using tools provided by entities based outside the EEA (including Google and Discord), personal data may be transferred to third countries. Such transfers take place on the basis of GDPR-compliant mechanisms, in particular a European Commission decision establishing an adequate level of protection (e.g. the Data Privacy Framework) or standard contractual clauses.

10. Data retention period

We store data for the period necessary to achieve the purposes for which they were collected: contact form data – for the duration of the correspondence and until any claims become time-barred; newsletter data – until consent is withdrawn; analytics data – for the period resulting from the settings of the analytics tools. After these periods the data are deleted or anonymised.

11. Rights of data subjects

Every person has the right to: access their data and receive a copy, rectification, erasure (the “right to be forgotten”), restriction of processing, data portability, to object to processing and to withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal). The data subject also has the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) — if they consider that the processing infringes the GDPR.

12. Profiling and automated decision-making

Users’ personal data are not used for automated decision-making, including profiling, that produces legal effects concerning a person or similarly significantly affects them. Analytics data are processed in aggregated form and are not used to profile individual users.

13. Voluntary provision of data

Providing personal data is voluntary, but in some cases it may be necessary in order to use certain functions of the website (e.g. sending an enquiry via the contact form or subscribing to the newsletter). Failure to provide the data makes it impossible to use these functions.

14. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy, in particular in connection with changes in legislation or in the scope of the services provided. The current version is always published on this page together with the date of the last update.

15. Contact

For matters relating to the protection of personal data, please contact: DUALTEC Association of Dual-Use Technology Manufacturers, Jasionka 954E, 36-002 Jasionka, Poland, email stowarzyszenie@dualtec.com.pl.