Privacy and Cookie Policy

Effective from: 28 September 2026

1. Who is responsible for your data

The controller of your personal data is LCM Lindemann Cutting Machines Sabina Bałos, ul. Ludwika Zamenhofa 19/1, 58-105 Świdnica, Poland, tax ID (NIP) 8842503220, REGON 386282516 (“we”, “us”).

For any data protection questions, email us at kontakt@lindemannmachines.com or call +48 571 505 807.

This policy explains how we process the personal data of people who visit our website lindemannmachines.com, write to us or call us, or buy our machines, and of people whose business contact details are stored in our business contact database.

2. Inquiry form on the website

What data: email address, company name, the machine you selected and your message. Company and message are optional.
Purpose: to answer your inquiry and, if you ask for it, to prepare a quote.
Legal basis: your consent given in the form (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to us. Withdrawal does not affect the lawfulness of processing carried out before.
Retention: up to 12 months after the conversation ends. If you place an order, section 4 applies.

3. Contact by email and phone

What data: name, email address, phone number, company name and whatever you write or tell us.
Purpose: to reply and continue the conversation you asked for.
Legal basis: our legitimate interest in answering messages (Article 6(1)(f) GDPR). Where the conversation concerns a contract with you as a business, also Article 6(1)(b) GDPR.
Retention: up to 12 months after the conversation ends.

4. Customers: orders, delivery, service

What data: company details and contact persons’ data (name, job title, email, phone), invoicing and delivery details, order and service information.
Purposes and legal bases: concluding and performing the contract (Article 6(1)(b) GDPR; for our customers’ employees, our legitimate interest in performing the contract with their employer, Article 6(1)(f) GDPR); tax and accounting obligations (Article 6(1)(c) GDPR); establishing and defending legal claims (Article 6(1)(f) GDPR).
Retention: for the duration of the contract and then until claims become time-barred. We keep accounting records for as long as Polish tax law requires, generally 5 years from the end of the year in which the tax payment deadline expired.

5. Business contact database

This section applies to people whose data we did not obtain from them directly (Article 14 GDPR).

Whose data: people working at companies that may find our machines useful, for example owners and production, purchasing or maintenance managers.
What data: name, job title, company name, business email address and phone number, and the history of our contact.
Purpose: to establish business contact and present our range of cable cutting machines (direct marketing).
Legal basis: our legitimate interest in the direct marketing of our products to businesses (Article 6(1)(f) GDPR). We only process business contact details related to your professional role.
Retention: until you object, and without an objection no longer than 3 years after our last contact. We regularly check that the data is up to date and delete outdated data.

We will only send you offers by email if you agree to it. If you consent to commercial contact, we record your consent together with the date and the way it was given, so that we can demonstrate it. You can withdraw your consent at any time.

After an objection we delete your data from the database. We keep only your email address on a do-not-contact list so that we do not write to you again (Article 6(1)(f) GDPR).

6. Website: cookies and similar technologies

Cookies are small files stored in your browser. The browser’s local storage works in a similar way. Before we store such information on your device, we ask for your consent in the cookie banner. The exception is information that is strictly necessary for the website to work.

Necessary (no consent required). Remembering your choices in the cookie banner (Complianz). Legal basis: our legitimate interest in the proper functioning of the website (Article 6(1)(f) GDPR).

Statistics (with consent). Google Analytics 4 shows us how you use the website: which pages you view, where you come from and how long you stay. The provider is Google Ireland Limited. Google Analytics cookies (starting with _ga) expire after 2 years.

Marketing (with consent).

LeadFlow, our own tool. It stores a random identifier in your browser and records on our server what you do on the website: page views, scrolling, time spent on pages and sections, clicks, forms displayed and repeat visits. From this we estimate what you are interested in. If you submit a form, we may link this information to your inquiry so that we can answer it better. The data is not shared with any other company apart from our hosting provider. We keep it for no longer than 12 months after your last visit.
YouTube: videos embedded on the website. Once you consent, the YouTube player (Google Ireland Limited) may set cookies and send Google information about your visit.
Google Maps: the map on the contact page (Google Ireland Limited), on the same terms.

The legal basis for statistics and marketing is your consent (Article 6(1)(a) GDPR). You can change or withdraw it at any time in the cookie settings on the website.

7. Recipients

hosting and email providers that run our website and mailboxes,
companies that support our marketing and sales, for example in maintaining the contact database and looking after the website,
Google (Analytics, YouTube, Google Maps), if you have consented. Google also processes some of this data for its own purposes, as described in its privacy policy,
for orders: transport companies, our accountants and banks,
public authorities, where required by law.

Service providers that process data on our behalf do so under data processing agreements and only on our instructions.

8. Transfers outside the European Economic Area

Google may also process data in the United States. Such transfers are based on an adequacy decision of the European Commission or on standard contractual clauses approved by the Commission.

9. Your rights

You have the right to:

access your data and receive a copy of it,
have your data corrected,
have your data erased,
restrict processing,
data portability for data we process on the basis of your consent or a contract,
withdraw your consent at any time, with effect for the future,
lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement took place. The authority competent for us is the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

Right to object

Where we process your data on the basis of our legitimate interest (Article 6(1)(f) GDPR), you can object at any time. We always respect an objection to direct marketing and stop processing your data for that purpose. Simply write to kontakt@lindemannmachines.com or reply to our message with the word OBJECT.

We respond to data protection requests without undue delay and within one month at the latest.

10. Do you have to give us your data?

Providing data is voluntary. Without an email address we cannot answer an inquiry sent through the form. For an order, the data is needed to conclude the contract and issue an invoice.

11. Automated decision-making

We do not make decisions that have legal effects on you based solely on automated processing. The interest score from LeadFlow only helps us decide whom to talk to and about what.

12. Security

We use technical and organisational measures to protect data against loss and unauthorised access.

13. Changes

We update this policy when the law or the way we process data changes. The current version is always available on this page.