Privacy Policy
Last updated: 1 October 2026
1. Who is responsible
The controller of your personal data is Hydro-Instal T.Sieruta B.Sieruta sp.j., which trades as Sieruta Attachments ("we", "us"). Hydro-Instal T.Sieruta B.Sieruta sp.j. ul. Bohaterów Westerplatte 11 07-410 Ostrołęka, Poland Email: info@sieruta.com Write to info@sieruta.com with any question about your data.
2. What our forms collect
When you ask for a price, a quote, a fitment check, a dealer or OEM partnership, or send a message through a contact form, we receive what you type in. Depending on the form that is your e-mail address, your name, and optionally your company, phone number, country, machine make and model, the attachments you are interested in and your message. With each enquiry we also store which form and page you sent it from, the website that referred you and, if you came through an ad or a tagged link, the campaign tags and the ad click ID. We use this to answer you and to see which pages and ads bring enquiries. This website has no mailing list and no shop: you cannot buy or pay here.
3. Messages we send
After you send an enquiry we e-mail you a confirmation e-mail that says we received it and who will answer. Our sales desk gets an e-mail and a message in Microsoft Teams with your enquiry so someone can answer quickly. After that we write to you only about your enquiry.
4. Who processes your data for us
We use these service providers. Each one processes data only on our instructions: • Microsoft (Microsoft 365, Exchange Online, Teams and Power Automate): sends and stores our e-mail and passes new enquiries to our sales team. • Resend: sends the same e-mails when Microsoft cannot. • Google (Google Analytics and Google Ads): measures visits and ad results, as described in section 6. • Cloudflare: delivers the website and protects it from attacks, so it handles your IP address and the pages you request. The website and our enquiry database run on servers we manage ourselves. Microsoft, Resend, Google and Cloudflare are companies based in the United States, so your data may be processed outside the European Economic Area. We never sell your personal data.
5. Legal basis
• Answering your enquiry and preparing a quote: steps you asked for before a contract (Art. 6(1)(b) GDPR). • Recording where an enquiry came from, measuring page speed and keeping the site secure: our legitimate interest (Art. 6(1)(f) GDPR). • Google Analytics and Google Ads cookies: your consent (Art. 6(1)(a) GDPR), given by pressing OK. • Keeping invoices and contracts: legal obligation (Art. 6(1)(c) GDPR). You can withdraw consent at any time on the cookies page or by writing to info@sieruta.com.
6. Google Analytics and Google Ads
This site uses Google Analytics and Google Ads, run by Google Ireland Ltd. Before you answer the cookie bar, and after you press No thanks, the Google tags still send short messages without cookies: the page, the time, your browser type and, if you came through a Google ad, that ad's click ID. Nothing is stored on your device, and Google uses these messages to estimate visits and ad results in total. If you press OK, Google Analytics and Google Ads also store cookies so we can see which pages and ads bring enquiries. Google never uses your visits here to show you ads. You can change your answer on the cookies page or by writing to info@sieruta.com.
7. Page speed measurement
Each page sends a short Web Vitals report to our own server at /api/rum: how fast the page loaded and reacted, the page address, and the type of device and connection. It contains no name, no e-mail and no cookie ID. Your IP address is used for one minute to stop abuse and is not saved with the report.
8. How long we keep it
We keep an enquiry and the messages about it for 24 months after our last contact with you. If no order follows, we then delete it. If you become a customer, we keep the contract and invoice records for as long as tax and accounting law requires. We keep server logs, including the page speed reports, only as long as we need them to run and fix the website.
9. Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, limit how we use it or hand it to you in a portable format. You can object to processing based on our legitimate interest and withdraw consent at any time. Write to info@sieruta.com. We answer within one month. You can also complain to the Polish data protection authority (UODO, uodo.gov.pl) or the authority in your country.
Data Protection Contact
For any privacy-related questions or to exercise your GDPR rights:
Sieruta Attachments ul. Bohaterów Westerplatte 11 07-410 Ostrołęka, Poland EN ISO 3834-2 · EN 1090-1 CERTIFIED