Privacy policy
Version dated
We explain which information is needed to contact Panel Montage and how data is handled when you use the website.
1. Controller and contact
The controller of data provided to Panel Montage is Panel Montage Sp. z o.o., ul. Polna 22, 72-350 Niechorze, Poland; Tax ID (NIP) 8571942107, Statistical ID (REGON) 541537497, National Court Register (KRS) 0001168990.
For privacy matters, write to [email protected] or the company’s postal address. The purposes and legal bases of processing are described in the GDPR information notice.
2. Form data
Contact, crew availability and quotations: name, email, subject and a description of the matter. You may add a phone number, company name and project documentation. Provide information needed to assess your enquiry; remove unnecessary data about other people from documents.
Work and crew cooperation: contact details, role, experience, availability and a description of previous work; additionally, languages, qualifications, crew size and, voluntarily, a CV or team profile. A CV is not required. Do not send an identity document scan, Polish PESEL identification number, health data or criminal record information.
Data and files are transmitted when you select the submit button. Selecting an attachment alone does not send it to Panel Montage. The form does not save the contents of your submission in browser local storage. Contact by email or telephone is a separate action taken by you.
3. Calculator and materials
The calculator computes an indicative cost on your device. Transferring the result to an enquiry only fills in its content. It does not send calculations or contact details.
Guides and PDFs are available without providing an email address. This website version does not collect newsletter subscriptions. Downloading material, contacting us or applying for work does not constitute marketing consent.
5. Enquiry handling and recipients
We store submissions and attachments in a private Cloudflare database and file store. Only authorised people at Panel Montage can access the dashboard. Files undergo security checks before being made available. Resend sends those people a notification containing the submission number and a dashboard link, without the enquiry text, the candidate’s contact details or CV. This does not create email copies of attachments.
Cloudflare provides hosting, traffic protection, the database and file storage; Resend handles notifications. The selected location for database and file data is the EU. However, the operation of global infrastructure and service providers may involve processing outside the EEA, including in the USA. The providers’ terms set out appropriate transfer mechanisms, including standard contractual clauses where required: Cloudflare — Data Processing Addendum and Resend — Data Processing Addendum. You can obtain a copy of the relevant safeguards by contacting the controller.
The hosting provider receives connection data, including your IP address, needed to deliver the website and prevent abuse. Our form uses a cryptographic hash of the IP address in abuse-prevention counters, which are deleted within 48 hours. We do not store the IP address in the submission or form contents in application logs. The hosting provider’s technical data is subject to its security and data protection policies.
6. Retention and rights
If you give separate, voluntary consent for future recruitment, your application, contact details and attached CV will remain in the candidate database for 24 months from submission, unless you withdraw consent earlier. You may withdraw consent at any time by writing to [email protected]. Withholding it does not affect assessment of your current application. Withdrawal does not affect the lawfulness of earlier processing.
We retain applications for a current recruitment process for 12 months after it closes. Separate consent may allow further retention in the future recruitment database for a maximum of 24 months from submission. We retain enquiries and quotations that do not result in an order for 12 months after discussions close. These periods do not apply to records of concluded contracts or data retained on a separate, documented basis.
After recruitment closes, access to the application serves to document the process and establish, exercise or defend legal claims, based on the controller’s legitimate interests (Article 6(1)(f) GDPR). This does not mean contacting you about new recruitment without separate consent. Withdrawing consent immediately excludes your application from the future recruitment database; the data may still be subject to a separate basis relating to the current or completed recruitment process.
After the applicable period expires, data and attachments are removed from the active system during periodic retention checks. Database backups may retain an earlier state for up to 30 days. They are not used for day-to-day work; during recovery, we reapply the deletion register before making data available. Messages you send directly to our email address and documents downloaded by authorised people must be covered by the same retention policy wherever they are stored.
You may request access, rectification, erasure or restriction of processing. Depending on the legal basis and circumstances, you may also have rights to object, data portability and withdrawal of consent. Details and how to submit a request: Your rights in the GDPR information notice.
7. Document updates
The version date appears at the beginning. Changes to technology or data handling require updated information. This document applies to the website version described, not to all separate Panel Montage systems.