Below we explain how personal data is processed in connection with the L22 website, correspondence and photometric laboratory services. Laboratory matters are described separately because they involve a broader documentation scope.
Last updated: 19 August 2026.
Data controller
The controller of personal data is Prolight Sp. z o.o. You can contact the controller through the website form or by post at: 3 Maja 183, 05-800 Pruszków, Poland. Contact details of a data protection officer will be provided here if the controller appoints one.
Website and general enquiries
When you submit the form, we process your name, email address, entered topic, message, selected language and technical information required to protect the form. The data is used to reply, manage correspondence and protect the form against abuse.
Processing is based on Article 6(1)(f) GDPR - the controller's legitimate interest in handling correspondence and protecting the website. Where an enquiry is intended to lead to a contract, Article 6(1)(b) GDPR also applies.
Data related to the photometric laboratory
For laboratory matters we may additionally process contact-person details, order and delivery-document data, sample information, technical arrangements, measurement results, reports, correspondence, billing data and the history of the assignment. Sample and result data is personal data only where it can be linked to an identifiable natural person.
The data is processed to prepare a quotation, accept and perform testing, identify the sample, prepare and issue the report, settle the service, maintain required quality-system records and establish, pursue or defend claims. The applicable legal bases are Article 6(1)(b), (c) or (f) GDPR. Legitimate interests include assignment traceability, testing quality and the defence of claims.
Laboratory records are retained for the period required by law, contract, quality-system rules and accreditation requirements, and subsequently for the period needed to protect against claims. They are available only to authorised persons and, where required, auditors, the Polish Centre for Accreditation or competent authorities.
Retention periods
General correspondence is retained for the time needed to handle the matter and then until potential claims become time-barred. Contract, billing and legally required data is retained for the periods prescribed by applicable law. Security-related technical data is retained only as long as necessary to detect abuse and protect the service.
Recipients of data
Data may be received by authorised employees and contractors of Prolight Sp. z o.o. and providers of hosting, email, IT, accounting, legal, courier or audit services, solely to the extent necessary for their tasks. Data may be disclosed to public authorities where required by law. We do not sell personal data.
Technical data, browser storage and Google Maps
The server may keep standard technical logs such as IP address, request date, requested URL and browser information. The website uses localStorage only to remember the light, dark or system theme. The form uses an essential PHP session to limit abuse. We do not use our own analytics tools or marketing cookies.
Google Maps is embedded on the contact page. Loading a map connects your browser to Google, which may receive information including your IP address and device and browser data and may use its own storage mechanisms. This processing is governed by Google as a separate service provider.
Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction or portability of your data and object to processing based on legitimate interests. Where processing in a particular case is based on consent, you may withdraw it without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.
Voluntary provision and automated decisions
Providing data is voluntary, but failure to provide the fields required by the form may prevent us from replying or preparing a quotation. For a laboratory assignment, failure to provide data needed to identify the client, sample or test conditions may prevent performance of the service. We do not make decisions based solely on automated processing and do not profile users.