Privacy policy
How we collect, use and protect your personal data when you visit this website or contact us. Effective from 1 September 2026.
1. Who we are
The controller of your personal data is Aquatic Ecosystem, with offices at 3000 El Camino Real, Palo Alto, CA 94306, United States, and Lubiejewska 81, 07-300 Ostrów Mazowiecka, Poland.
For any question about this policy or your data, write to info@quincysport.com or call +48 512 975 262.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and, where applicable, the California Consumer Privacy Act (CCPA).
2. What data we collect
We only collect data that you give us or that is technically necessary to serve the website.
- Enquiries — when you e-mail us, call us or use the contact form: your name, company, country, e-mail address, phone number and the content of your message.
- Newsletter — your e-mail address, if you subscribe.
- Server logs — IP address, browser type, date and time of the request, pages visited. Logs are generated automatically by our hosting provider for security and troubleshooting.
- Business contacts — contact details of clients, distributors and partners needed to prepare quotes, contracts and deliveries.
We do not collect special categories of data and we do not knowingly process data of persons under 16.
3. Why we process it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiry and preparing a quote or 3D concept | Art. 6(1)(b) — steps prior to a contract; Art. 6(1)(f) — legitimate interest in responding to you |
| Performing a contract: design, production, delivery, installation, warranty | Art. 6(1)(b) — performance of a contract |
| Sending the newsletter | Art. 6(1)(a) — your consent, which you can withdraw at any time |
| Accounting, tax and legal obligations | Art. 6(1)(c) — legal obligation |
| Keeping the website secure and available (server logs) | Art. 6(1)(f) — legitimate interest |
| Establishing, exercising or defending legal claims | Art. 6(1)(f) — legitimate interest |
Providing your data is voluntary, but without it we cannot answer your enquiry or enter into a contract with you.
4. Who we share it with
We do not sell personal data. We share it only with parties that help us run the business, under contracts that oblige them to protect it:
- our manufacturing partner Credo Invest (Poland), to the extent needed to produce and deliver your order;
- hosting, e-mail and IT service providers;
- couriers and freight forwarders for deliveries;
- accountants, legal advisers and — where legally required — public authorities.
Some providers (for example Google, for Maps and Fonts) are based outside the European Economic Area. In such cases transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
5. How long we keep it
- Enquiries that do not lead to a contract — up to 12 months after our last contact.
- Contract and invoice data — for the period required by tax and accounting law (in Poland 5 years from the end of the tax year) and until the warranty and limitation periods for claims expire.
- Newsletter — until you unsubscribe or withdraw consent.
- Server logs — up to 90 days.
6. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy;
- have inaccurate data rectified;
- have your data erased ("right to be forgotten");
- restrict processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise these rights, e-mail info@quincysport.com. We reply within one month.
You also have the right to lodge a complaint with a supervisory authority — in Poland the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority in your country of residence.
California residents may additionally request information about the categories of personal information we collect and disclose, and may not be discriminated against for exercising their rights. We do not sell or share personal information within the meaning of the CCPA.
7. Cookies and third-party services
This website does not use analytics, advertising or tracking cookies of its own.
- Local storage — we remember that you have closed the cookie notice. This is a technically necessary setting and it stays only in your browser.
- Google Maps — the map on the Contact page is embedded from Google. When it loads, Google receives your IP address and may set its own cookies. Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google privacy policy.
- Google Fonts — typefaces are loaded from Google's servers, which receive your IP address for that request. Same provider as above.
You can block cookies and third-party content in your browser settings; the website will still work, although the map may not display.
8. Security
We protect personal data with appropriate technical and organisational measures: encrypted connections (HTTPS), access limited to authorised staff, and contracts with every processor. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
9. Changes to this policy
We may update this policy when our services or the law change. The current version is always published on this page with its effective date. Material changes will be highlighted here.
Last updated: 1 September 2026