industries

goliath

news

about

Bertz For Aviation (BFA)

1. Who We Are

Bertz For Aviation (BFA) ("BFA", "we", "us", or "our") is a drone manufacturer based in Poland. BFA is the data controller responsible for the personal data described in this Privacy Policy.

This Privacy Policy explains what personal data we collect through our website and direct correspondence, how we use it, and what rights you have as a data subject under the EU General Data Protection Regulation (GDPR).

Our website and products are directed at business professionals — managers and decision-makers evaluating or purchasing our products — and are not intended for individual consumers or children.

Our full data: BFA Spółka z ograniczoną odpowiedzialnością, registered address: Fabianowska 131, 62-052 Komorniki, Poland, KRS 0001197616, NIP 7773454988, REGON 542871117. We do not have a designated personal data protection officer.

For all matters, please contact us at the address indicated in point 12 of this Privacy Policy

2. Information We Collect

We collect personal data only when you choose to provide it to us.

The personal data we collect is limited to:

Contact form submissions: name, company name, email address, and the content of your message, when you submit our website's contact form.
Direct email correspondence: any personal data you include when you email us directly, such as your name, contact details, and the contents of your message and any attachments.

The personal data provided through this form will be processed by Bertz For Aviation for the purpose of responding to your inquiry. Further information on the processing of personal data is available in our Privacy Policy.

In certain circumstances, BFA may receive personal data from sources other than directly from the individual concerned. Depending on the nature of the business relationship or interaction, personal data may be obtained from:

the individual directly, including through the contact form, email correspondence, telephone communication or other direct contact;
the individual's employer, company or other organization with which the individual is associated;
BFA's existing or prospective business partners, distributors, agents, suppliers or other contractual counterparties;
publicly available sources, including company websites, business registers, professional networking platforms and other publicly accessible business directories;
industry events, trade fairs, conferences and business meetings;
referrals or recommendations from existing business contacts; and
other lawful sources, where obtaining and using the relevant personal data is permitted under applicable data protection laws.

Where BFA obtains personal data from a source other than the individual concerned, BFA will process such data in accordance with applicable data protection laws and, where required by law, will provide the individual with the information required under Article 14 of the GDPR, including information concerning the source of the personal data.

BFA will not intentionally obtain personal data from sources where the collection or use of such data would be prohibited.

3. How We Use Your Information

We use the personal data described above only for the purposes below, each with its legal basis under GDPR Article 6.

Responding to your inquiry and communicating with you

Legal basis: Legitimate interest (Art. 6(1)(f)), or steps taken at your request before entering a contract (Art. 6(1)(b)).

Managing an ongoing business relationship / providing service

Legal basis: Performance of a contract (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)).

Sending marketing communications about our products and services

Legal basis: We may process your personal data for direct marketing purposes on the basis of our legitimate interest (Article 6(1)(f) GDPR), subject to your right to object. Where applicable law requires prior consent to use a particular electronic communication channel for direct marketing, we will only use that channel after obtaining the required consent.

Categories of data by purpose

To provide our services, we process personal data such as:

First name and surname,
e-mail address,
company name and tax identification number (NIP) for business owners.

To respond to inquiries sent to contact addresses, we process personal data such as:

First name and surname (if provided),
e-mail address.

To send e-mail notifications, we process personal data such as:

First name and surname (if provided),
e-mail address.

To comply with obligations arising from tax regulations (Article 6(1)(c) of the GDPR) — such as the requirement to retain accounting records for five years — we process personal data including:

First name and surname,
E-mail address,
Residential address,
Tax Identification Number (NIP) (if provided).

We do not use your personal data for any automated decision-making or profiling.

BFA does not transfer personal data to countries outside the European Economic Area ("EEA"). Personal data processed by BFA is stored and processed within the EEA. BFA does not intend to transfer personal data to recipients located outside the EEA unless such transfer becomes necessary and is carried out in accordance with applicable data protection laws, including the GDPR. If BFA is required to transfer personal data outside the EEA in the future, BFA will ensure that the transfer is carried out in accordance with the requirements of Chapter V of the GDPR and will provide the information required by applicable data protection laws.

4. Cookies and Tracking Technologies

Our website does not use cookies, analytics tools, advertising pixels, or any other tracking technology. No data is collected automatically when you browse our site.

Like other entities, BFA uses "cookies" on its website — short text files saved on the user's computer, phone, tablet, or other device. These files can be read by our system as well as by systems belonging to other entities (e.g., Facebook, Google).

Cookies serve a wide range of functions on the website — mostly useful ones — which we outline below (please contact us if you require further information):

Ensuring security — cookies are used to authenticate users and prevent unauthorized access to the customer panel. They thus serve to protect the user's personal data from unauthorized access;
Influencing website processes and performance — cookies are used to ensure the site operates smoothly and that available features can be utilized; this is achieved, among other things, by remembering settings between visits. They facilitate efficient navigation across the website and its various subpages;
Session state — cookies often store information on how visitors use the website, such as which subpages they view most frequently. They also enable the identification of errors occurring on certain subpages. Cookies used to record the "session state" therefore help improve services and enhance the browsing experience;
Maintaining session state — if a customer logs into their panel, cookies enable the session to be maintained. This means that you do not need to re-enter your login and password every time you navigate to a different subpage, which enhances the convenience of using the website;
Generating statistics — cookies are used to analyze how users interact with the website (e.g., how many people visit the site, how long they stay, which content attracts the most interest, etc.). This allows us to continuously improve the website and tailor its operation to user preferences. We use Google tools, such as Google Analytics, to track activity and generate statistics; in addition to reporting site usage statistics, the Google Analytics pixel — along with some of the cookies described above — may also be used to help display more relevant content to you across Google services (e.g., Google Search) and the wider web;
Using social media features — the website may incorporate social media pixels that allow you to "like" our social media pages while browsing the site, follow company-related events, and access presentation materials regarding our commercial offer. However, enabling these features requires the use of cookies provided by the aforementioned operators.

Importantly, many cookies are anonymous to us; without additional information, we cannot identify you based on them. Your web browser allows the use of cookies on your device by default; therefore, we ask for your consent to use cookies during your first visit. However, if you do not wish for cookies to be used while browsing the website, you may change your web browser settings to completely block the automatic handling of cookies or to require notification each time a cookie is placed on your device. These settings may be changed at any time.

While respecting the autonomy of all website users, we feel obliged to warn that disabling or limiting cookie support may cause significant difficulties in using the website — such as the need to log in on every subpage, longer page loading times, or restricted functionality.

5. Sharing and Disclosure of Information

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. Your information is used internally by BFA only, for the purposes described in Section 3. We may disclose personal data to service providers supporting our business operations, such as IT, hosting, email, CRM, cybersecurity, accounting, legal and other professional service providers, where necessary for the purposes described in this Privacy Policy. Such providers process personal data on our behalf where required by applicable law and under appropriate contractual and security arrangements.

We may disclose personal data where required by law, such as in response to a valid request from a public authority or to comply with a legal obligation.

6. Data Retention

We retain personal data collected through the contact form or email correspondence for as long as necessary to manage our relationship with you and respond to your inquiries, and thereafter for as long as you remain a prospective or active business contact of BFA. In accordance with applicable law, we do not process your personal data indefinitely, but rather for the time necessary to achieve the designated purpose. After this period, your personal data will be irreversibly deleted or destroyed.

Regarding specific personal data processing periods, please be advised that we process personal data for the following durations:

For the duration of the contract — regarding personal data processed for the purpose of concluding and performing the contract;
3 years or 6 years + 1 year — regarding personal data processed for the purpose of establishing, pursuing, or defending claims (the length of the period depends on whether or not both parties are business entities);
6 months — regarding personal data collected during an initial product inquiry where a contract was not immediately concluded;
Until the withdrawal of consent or the achievement of the processing purpose, but for no longer than 5 years — regarding personal data processed based on consent;
Until a valid objection is raised or the processing purpose is achieved, but for no longer than 5 years — regarding personal data processed based on the legitimate interest of the Data Controller or for marketing purposes;
Until the data becomes outdated or ceases to be useful, but for no longer than 3 years — regarding personal data processed primarily for analytical purposes, the use of cookies, and website administration.

We calculate time periods in years starting from the end of the year in which we began processing personal data, in order to streamline the process of deleting or destroying such data. Calculating a separate timeframe for each individual event would entail significant organizational and technical difficulties as well as substantial costs; therefore, establishing a single date for the deletion or destruction of personal data allows us to manage this process more efficiently. Naturally, should you exercise your "right to be forgotten," such cases are handled on an individual basis.

The additional year associated with the processing of personal data collected for the performance of a contract is included because, hypothetically, you might submit a claim just before the statute of limitations expires, the claim might be served with a significant delay, or you might miscalculate the limitation period applicable to your claim.

Providing the information marked as mandatory in the contact form is necessary for us to respond to your inquiry. If you do not provide this information, we may be unable to respond to your request. You may ask us to erase your personal data at any time, as described in Section 8. We will act on such a request unless we have a legitimate and lawful reason to continue processing the data, for example an unresolved legal obligation.

7. Marketing Communications

We may use the contact details you provide, through the contact form or by emailing us, to send you information about BFA's products and services that may be relevant to your business.

You can object to receiving marketing communications, or ask us to stop, at any time and free of charge, by:

Contacting us at [email protected]

Opting out of marketing communications will not affect our ability to respond to any direct inquiry you have sent us.

8. Your Rights Under the GDPR

As a data subject, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your personal data ("right to be forgotten")
Restrict how we process your data
Object to our processing, including for marketing purposes
Data portability, where applicable
Withdraw consent, where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

If you believe your data protection rights have been violated, you also have the right to lodge a complaint with Poland's data protection authority, the Urząd Ochrony Danych Osobowych (UODO), or with the supervisory authority in your own EU member state.

8. Your Rights Under the GDPR

As a data subject, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your personal data ("right to be forgotten")
Restrict how we process your data
Object to our processing, including for marketing purposes
Data portability, where applicable
Withdraw consent, where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

9. Data Security

We take reasonable technical and organizational measures to protect the personal data we hold against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our website and products are intended for business professionals and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. The as-of date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically.