Privacy Policy

Privacy Policy

With due regard to the security of your personal data and the highest standards of information protection, OBR CTM S.A. has developed this Privacy Policy. Protecting the privacy of individuals visiting our website is a core value for us, and all actions are undertaken with full responsibility and in compliance with the provisions of the GDPR. Use of our website is safe and transparent, and users may ознакомиться themselves with the principles of data processing and their associated rights.

The controller of personal data is OBR CTM S.A., with its registered office at ul. A. Dickmana 62, Gdynia. In matters related to personal data, you may contact our Data Protection Officer at: inspektor.ochrony.danych@ctm.gdynia.pl. The Controller exercises the utmost care to ensure that technical data related to the operation of the website is processed securely and lawfully.

When using the website, only technical data necessary for its proper functioning is processed, such as IP address, date and time of the visit, device information, and server log data. The website does not contain contact or registration forms — we do not collect personal data such as name, surname, email address, or telephone number. If users follow links to external services (e.g. eRecruiter), any data entered in those systems is processed by their respective operators.

Technical data is processed in order to ensure the proper operation and security of the website. External tools such as Google Analytics 4 and Google Maps are activated only after the user has given voluntary consent via the cookies mechanism. GA4 is used for anonymous analysis of website traffic statistics, while Google Maps enables the display of the Controller’s location.

In connection with the use of Google services, data may be transferred to the United States, where Google LLC is headquartered. Such transfers are carried out in accordance with applicable legal mechanisms, including the EU–US Data Privacy Framework decision and standard contractual clauses. OBR CTM S.A. does not disclose data to other entities except for technical service providers and authorities authorized by law.

Technical data is stored for the period necessary to achieve the purposes indicated above. Server logs are retained for 30 days, Google Analytics statistical data for 24 months, and data related to Google Maps in accordance with Google’s policies.

Each user is entitled to the full range of rights arising from the GDPR, including the right of access to data, rectification, erasure, restriction of processing, objection, and the right to withdraw consent at any time. Users also have the right to lodge a complaint with the President of the Personal Data Protection Office. Details regarding GDPR obligations are described in Personal Data Protection.

The website uses cookies necessary for its operation and—only with the user’s consent—analytical and functional cookies. Detailed rules for their use are set out in the Cookies Policy. The OBR CTM S.A. website is not directed at children and is not intended for the processing of minors’ data. Only a minimal scope of technical data is processed, and additional services such as Google Maps are activated solely upon user consent.

The Controller reserves the right to update this Privacy Policy in the event of changes in applicable law or the introduction of new functionalities or tools used on the website.

Personal Data Request

By sending an email to ctm@ctm.gdynia.pl, you may submit a request to exercise your rights as a data subject under the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. OBR CTM S.A. will respond to each request submitted via the form below without undue delay and no later than one month from the date of receipt.

Data required to process the request: name and surname, national identification number (PESEL), email address, contact telephone number, residential address, and information regarding your relationship with OBR CTM S.A. — whether you are a current or former client, a current or former employee, or a supplier or partner of OBR CTM S.A.

Please indicate one of the following request topics: right of access to data, right to rectification, right to erasure (right to be forgotten), right to restriction of processing, right to data portability, right to object to processing, withdrawal of marketing consent, or other rights arising from the GDPR.