Privacy Policy

PRIVACY POLICY SCHOWEX

1. Data Controller

The data controller is:

Schowex Bartosz Marzec

ul. Śniadeckich 20D/7, 35-006 Rzeszów, Poland

Tax ID (NIP): 795-250-58-63

Email: schowexx@gmail.com

(hereinafter referred to as the “Controller” or “Schowex”).

The Controller operates a business providing self-storage rental services and additional services related to property storage.

2. Scope and Purpose of Data Processing

Schowex processes personal data to the extent necessary for:

concluding and executing storage rental agreements,
handling payments, invoicing, and settlements,
conducting correspondence and maintaining contact with the Client,
ensuring the security of the facility through a video surveillance system,
carrying out marketing activities (only with consent),
fulfilling legal obligations imposed on the Controller.

The data processed includes, among others:

first and last name or company name,
residential or business address,
Tax ID (NIP) or personal ID (PESEL),
email address and phone number,
insurance policy data (if required),
payment details and rental history,
data from access control systems and surveillance.

3. Legal Basis for Data Processing

Personal data is processed in accordance with:

Regulation (EU) 2016/679 of the European Parliament and Council (GDPR),
The Act of May 10, 2018 on the Protection of Personal Data,
The Act of July 18, 2002 on the Provision of Services by Electronic Means.

The legal basis for data processing includes:

Art. 6(1)(b) GDPR – performance of a contract or taking steps prior to entering into a contract,
Art. 6(1)(c) GDPR – compliance with legal obligations,
Art. 6(1)(f) GDPR – legitimate interest of the Controller (e.g., property protection, claim enforcement),
Art. 6(1)(a) GDPR – consent of the data subject (for marketing purposes).

4. Video Surveillance

The Schowex facilities are under 24-hour video surveillance to ensure the safety of people and property.

Footage from the cameras is processed exclusively by the Controller and its authorized employees or entities managing the security system.

Recordings are stored for a maximum of 30 days, after which they are automatically deleted, unless they serve as evidence in proceedings conducted by law enforcement authorities.

5. Sharing of Personal Data

Personal data may be shared only with:

entities authorized under the law (e.g., law enforcement authorities, tax offices),
accounting, legal, and IT companies cooperating with the Controller,
payment operators and banks,
insurance companies, if it concerns liability insurance or claims.

Any entity processing data on behalf of the Controller operates under a data processing agreement and is obliged to maintain confidentiality.

6. Data Retention Period

Personal data is retained:

for the duration of the contract and until the statute of limitations for claims expires (usually 6 years),
in the case of surveillance data – for up to 30 days,
for data processed based on consent – until the consent is withdrawn.

After these periods, the data is irreversibly deleted or anonymized.

7. Rights of Data Subjects

Every data subject has the right to:

access their data and receive a copy,
rectify (correct) the data,
erase data (“right to be forgotten”),
restrict processing,
transfer data to another controller,
object to processing,
withdraw consent at any time (if processing is based on consent).

To exercise these rights, please contact the Controller via email: schowexx@gmail.com.

Data subjects also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if they believe that data processing violates the law.

8. Cookies and Server Logs

The website www.schowex.pl may use cookies, which help ensure the proper functioning of the service, analyze traffic, and serve marketing purposes (e.g., Google Analytics). Cookies do not contain personal data and are not used to identify users.

Users can change their cookie settings in their web browser at any time.

Additionally, the server may automatically record technical logs, such as IP address, connection time, and browser type – this data is used solely for statistical and security purposes.

9. Data Security

The Controller implements technical and organizational measures to ensure the protection of personal data appropriate to the risk, including:

connection encryption (SSL),
protection of servers and IT systems,
access and authorization policies,
regular data backups,
procedures for responding to data security breaches.

10. Final Provisions

The Controller reserves the right to make changes to this Privacy Policy, which will be communicated by updating the content on the website. The current version of the Privacy Policy is effective as of October 8, 2025.