Privacy policy

In force from 28 August 2026.

This site belongs to a musical instrument and PA rental company. Below we explain what data
we collect about you, what for, and how long we keep it. We wrote it to be readable.

1. Who is the controller of your data

Polmuz Tomasz Stukan, ul. Szczecińska 38, 81-326 Gdynia, Poland. VAT ID (NIP) 5862161399, REGON 220161550.

Data contact: biuro@wypozyczinstrument.pl, phone +48 797 317 035
(Mon–Fri 9:30–16:00). We have not appointed a data protection officer — for anything concerning
your data, write to the address above.

2. Where we get your data from

From you only — through the enquiry form, by e-mail, by phone or from an order placed in our
shop. We do not buy databases and we do not obtain your data from other sources.

3. What we collect and what for

3.1. Enquiry form

We collect: type of equipment, event date, place, phone number, and if you
provide them — e-mail address and notes. The e-mail and notes are optional.

Purpose: to check whether the equipment is available on your date and to reply to you.

Legal basis: Art. 6(1)(b) GDPR — steps taken at your request before entering into a contract.

The enquiry reaches our mailbox and is also saved in this site’s database, so that it is not
lost if the e-mail fails to arrive.

3.2. Concluding and performing the rental agreement

We collect: name or company name, address, VAT ID (for businesses),
phone number, e-mail address, place and date of the rental.

Purpose: to conclude the agreement, deliver the equipment, issue an invoice and settle the deposit.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and — for invoices and accounting
records — Art. 6(1)(c) GDPR (legal obligation).

3.3. Photographic record of the equipment

When handing the equipment over and taking it back we photograph its condition. The photos
concern the equipment, not people — we do not photograph event participants.
If a person appears in a photo by accident, we treat it as personal data.

Purpose: to be able to show the condition in which the equipment was handed over and returned —
this protects both sides in a dispute about damage.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in establishing and pursuing claims
and defending against them.

3.4. Site statistics and marketing (only with your consent)

If you consent in the banner, we use Google Analytics 4 (ID G-Y6MRC2VBZG),
Meta Pixel (ID 3711776909034923) and Google Ads (ID AW-391228940). Without your consent these tools
do not run at all — no request is sent to Google or Meta.

Purpose: to know how many people visit the site and which pages they read, and to show ads to
people who have already visited us.

Legal basis: Art. 6(1)(a) GDPR — your consent. You may withdraw it at any time using the
“Cookie settings” button at the bottom of the page. Withdrawal does not affect the lawfulness of
processing carried out before it.

Details in our Cookie Policy.

4. How long we keep the data

5. Who we share data with

We do not sell your data and we do not share it with other companies for marketing. We do use
services without which the site and the business could not operate:

• Hosting provider — stores the site, the mailbox and the database.
• Accounting office — for invoices and accounting records.
• Google Ireland Limited — Google Analytics and Google Ads, only with your consent.
• Meta Platforms Ireland Limited — Meta Pixel, only with your consent.
• Payment provider and bank — when settling a transfer.

We may also disclose data to bodies entitled to it under the law and, in the event of a
dispute, to a law firm or a court.

6. Transfers outside the European Economic Area

Google and Meta may transfer data to the United States. This takes place on the basis of the
European Commission adequacy decision (Data Privacy Framework) and standard contractual clauses.
It applies only where you have consented to analytics or marketing cookies. If you do not consent,
no data leaves our server for this purpose.

7. Joint controllership with Meta

For data collected by the Meta Pixel we are a joint controller together with
Meta Platforms Ireland Limited. We are responsible for informing you about the processing and for
obtaining your consent. Meta is responsible for further processing of that data for its own purposes.

Regardless of how responsibilities are divided between us and Meta, you may exercise
your rights against either of us — you can write to us or directly to Meta.

8. Your rights

You have the right to:

• access your data and obtain a copy,
• rectify data that is incorrect,
• erase your data,
• restrict processing,
• data portability for data we process on the basis of a contract or consent,
• object to processing based on our legitimate interest (this covers, among
  others, the photos of equipment condition),
• withdraw consent at any time, without affecting what we lawfully did before.

To exercise any of these rights, write to biuro@wypozyczinstrument.pl.
We reply within one month.

You also have the right to lodge a complaint with the President of the Personal Data
Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw,
Poland, uodo.gov.pl.

9. Do you have to provide your data

Providing data is voluntary, but without it we cannot carry out the order: without a phone
number we cannot call you back, without an address we cannot deliver the equipment, without
invoicing details we cannot issue an invoice.

10. Automated decision-making

No. We do not profile you in a way that produces legal effects for you, and we do not set
prices automatically based on your data. There is one price list for everyone and it is public.

11. Changes to this policy

If we change the way we process data, we will update this document and change the date at the
top. The current version is in force from 28 August 2026.