Privacy Policy

This policy explains how TECHBIT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ processes personal data in connection with your use of techbit.com.pl, contacting us and submitting a request for a quote.

Draft version last updated: 16 September 2026.

1. Data controller and contact details

The controller of your personal data is TECHBIT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office at ul. Święty Marcin 29/8, 61-806 Poznań, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0000594322, tax identification number (NIP) 7831735535 and statistical identification number (REGON) 363348710.

For matters concerning personal data, you can contact us at zaczynajmy@techbit.com.pl.

2. What data we process

The scope of the data depends on how you use the website:

  • when you browse the website, we may process technical data such as your IP address, device and browser type, the URL of the page visited, the time of your visit, analytics events and information about the consents you have given;
  • when you contact us through a form or by email, we process the data included in your message, in particular your name, email address, telephone number, company name and the content of your enquiry;
  • when you submit the quote request form, we process contact and company details, information about the project, the selected services and order size, as well as the technical documentation you submit, such as BOM, Gerber, Pick and Place or NDA files;
  • when you contact us through a social media platform, we process the data visible in your profile and the content of your correspondence to the extent necessary to handle it.

Providing data is voluntary, but data marked as required is necessary to submit the form, receive a response or obtain a quote.

3. Purposes and legal bases

We process data for the following purposes:

  • responding to enquiries and handling correspondence, on the basis of Article 6(1)(b) of the GDPR where the contact concerns steps prior to entering into a contract, or Article 6(1)(f) of the GDPR where the basis is our legitimate interest in managing communications;
  • preparing a quote, assessing technical documentation and taking steps at your request prior to entering into a contract, on the basis of Article 6(1)(b) of the GDPR;
  • performing a contract, handling settlements and complying with legal obligations, on the basis of Article 6(1)(b) and (c) of the GDPR;
  • ensuring website security, preventing abuse, archiving correspondence and establishing, exercising or defending legal claims, on the basis of Article 6(1)(f) of the GDPR;
  • measuring website usage and improving the website through Google Analytics 4, after obtaining consent, on the basis of Article 6(1)(a) of the GDPR;
  • displaying an embedded Google Maps map, after obtaining the required consent, on the basis of Article 6(1)(a) of the GDPR.

If processing is based on consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Quote request form and AI-assisted documentation analysis

The quote request form sends data to the enquiry management system and Techbit's ERP system. Technical files are transferred through a secure interface that handles quote documentation.

If you give your consent in the quote request form, the technical documentation you submit, such as a bill of materials (BOM), Gerber manufacturing files, a project description or a schematic, may undergo automated analysis to support quote preparation. The analysis may include identifying the structure of the bill of materials, standardising component descriptions and making a preliminary technical assessment of the project. We do not make decisions concerning you that produce legal effects or similarly significantly affect you based solely on automated processing.

Provider. For the analysis, we use language and vision models made available by OpenAI (OpenAI Ireland Ltd / OpenAI, L.L.C.) through its API, under a Data Processing Addendum and standard contractual clauses approved by the European Commission.

Scope. Only the parts of the technical documentation necessary for the analysis are sent to the provider, such as headers and a sample of bill-of-materials rows, component descriptions or images of board layers. We do not send the submitting person's contact details, company details or the contents of non-disclosure agreements (NDAs).

Processing location. Draft version before publication: one of two options must be selected for OpenAI: processing in the United States with the transfer safeguarded by standard contractual clauses, or processing within the European Union. Documentation is stored on Techbit servers located in the European Union, in Germany.

Model training. Data sent to OpenAI is not used to train or improve models. The provider may retain the content of requests for up to 30 days solely to detect abuse, after which the data is deleted.

No consent. If you do not consent to AI analysis, your documentation is not sent to any external AI service provider and the quote is prepared solely by our employees.

Retention period. Files submitted through the form are retained for the duration of handling the quote request and, if a contract is concluded, for the duration of its performance and the period required by law. Temporary copies on the server receiving submissions are automatically deleted within 30 days of being transferred to our system.

Legal basis and withdrawal of consent. The legal basis for processing as part of AI analysis is your consent (Article 6(1)(a) of the GDPR), which you may withdraw at any time by writing to zaczynajmy@techbit.com.pl. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Recipients of data

Data may be shared with entities that support us in maintaining the website and handling enquiries, only to the extent necessary for them to carry out their tasks. These include, in particular:

  • Webflow, as the provider of hosting, website-building tools and form handling;
  • Google group entities providing Google Workspace, Google Tag Manager, Google Analytics 4, Google Search Console and Google Maps services;
  • Usercentrics A/S, the provider of the Cookiebot platform for managing cookie consent;
  • Cloudflare, the provider of Turnstile protection that safeguards forms against abuse;
  • providers of IT infrastructure, email, the ERP system, the interface handling the quote request form and storage of submitted documentation;
  • OpenAI Ireland Ltd / OpenAI, L.L.C., as the provider of language and vision models through its API, only if you choose AI-assisted documentation analysis;
  • entities providing accounting, legal or technical services, where sharing data is necessary to provide those services or protect our rights.

Data may also be disclosed to public authorities where required by applicable law.

6. Transfers of data outside the European Economic Area

Some service providers, in particular Webflow, Google and Cloudflare, operate globally. As a result, data may be processed outside the European Economic Area. Where such a transfer occurs, we use the mechanisms required by the GDPR, such as a European Commission adequacy decision or standard contractual clauses together with additional safeguards where necessary.

You can obtain information about the safeguards used, or a copy of them, by contacting us. For documentation analysis by OpenAI, the processing location depends on the service configuration. Draft version before publication: Techbit should specify whether the analysis takes place in the United States under standard contractual clauses or in the European Union region.

7. How long we retain data

  • we retain data from enquiries and correspondence for the time needed to handle the matter, and then for the period necessary to establish, exercise or defend legal claims;
  • we retain data and documentation from the quote request form for the duration of preparing the offer and conducting discussions and, if a contract is concluded, for the duration of its performance and the period required by law and the applicable limitation periods for claims;
  • we retain data processed to comply with legal obligations for the period specified in the relevant laws;
  • we retain data processed on the basis of a legitimate interest until that interest ceases or an effective objection is made, unless there are overriding grounds for further processing;
  • analytics data in Google Analytics 4 is retained in accordance with the service configuration, currently for up to 14 months for user event data;
  • we retain cookie consent information for the period needed to manage consent and demonstrate that it has been given;
  • the content of requests sent to OpenAI may be retained for up to 30 days solely to detect abuse, after which it is deleted; temporary copies on the server receiving submissions are automatically deleted within 30 days of being transferred to Techbit's system.

The retention periods for individual cookies are specified in the current cookie declaration available on the website.

8. Cookies and online tools

The website uses cookies and similar technologies. Cookiebot is used to manage consent. Necessary technologies may operate without consent if they are essential to the proper and secure operation of the website. Other technologies are activated in accordance with your chosen settings.

  • Webflow provides hosting and the basic operation of the website and forms;
  • Cloudflare Turnstile helps protect forms against automated abuse;
  • Google Tag Manager manages the activation of tags on the website;
  • Google Analytics 4 is activated only after you consent to statistics cookies and helps us measure website usage;
  • Google Maps is activated after you give the consent applicable to that service and allows a map to be displayed on the contact page.

You may change or withdraw your consent at any time using the cookie settings available on the website. You may also restrict cookies in your browser settings, but some website features may then work incorrectly.

9. Your rights

Depending on the legal basis and circumstances of processing, you have the right to:

  • access your data and receive a copy of it;
  • rectification of your data;
  • erasure of your data;
  • restriction of processing;
  • data portability;
  • object to processing based on Article 6(1)(f) of the GDPR;
  • withdraw your consent at any time, where processing is based on it;
  • lodge a complaint with the President of the Polish Personal Data Protection Office.

To exercise your rights, write to zaczynajmy@techbit.com.pl. Before fulfilling your request, we may ask for information necessary to verify your identity.

10. Social media platforms and external links

The website may contain links to Techbit's social media profiles or other external websites. Until you click a link, its mere presence does not cause us to transfer data to those services through an embedded module. After you visit an external service, its operator processes data under its own rules.

If you contact us through a social media profile, we process data to handle messages and activity on the profile, on the basis of Article 6(1)(f) of the GDPR. The platform operator may be a separate data controller.

11. Security and changes to this policy

We apply technical and organisational measures appropriate to the nature of the data and the risks of processing it. Access to data is granted only to individuals and entities that need it to carry out specific tasks.

This policy may be updated when laws, the operation of the website or the tools used change. The date of the current version is shown at the beginning of this document.