© 2026 Hanwha Aerospace Europe
Privacy Policy
Hanwha Aerospace Europe sp. z o.o. has developed the Privacy Policy guided by the obligation to ensure the security of personal data that is or may be made available to the Controller for the purposes described in this Privacy Policy. The protection of personal data and any information processed or produced is one of the priorities of Hanwha Aerospace Europe sp. z o.o. with its registered office in Warsaw at 182 Puławska Street (hereinafter referred to as “Hanwha” or “Controller”), therefore Hanwha makes every effort to ensure that the services provided are at the highest level. Notwithstanding the foregoing, we have a sense of special responsibility for the security of your personal data that is processed by us in connection with our business. Taking the above into account, in this Privacy Policy, we inform you about the legal bases for the processing of your personal data, about the ways in which they are collected and used, as well as about the rights of data subjects in connection with the use of our website.
1. What is personal data and its processing?
Personal data is any information relating to an identified or identifiable natural person living. Personal data also includes any information that, when combined with each other, can lead to the identification of a given person.
On the other hand, the processing of personal data means an operation or set of operations which is performed on personal data or on sets of personal data, regardless of whether they are performed by automated or non-automated means (e.g. collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restricting, removing or destroying).
2. When does this Privacy Policy apply?
This Privacy Policy applies in each case in which the controller of the personal data received, collected, transferred, and entrusted is Hanwha Aerospace Europe sp. z o.o. This applies to all cases where Hanwha processes personal data obtained directly from the data subject and where Hanwha has obtained personal data from other sources.
Hanwha fulfils its disclosure obligations in accordance with the requirements of Articles 13 and 14 of the GDPR.
3. Who is the Administrator of your personal data?
The controller of your personal data, and therefore the entity deciding on the purposes and methods of personal data processing, is Hanwha Aerospace Europe sp. z o.o.
Puławska 182, 02-670 Warsaw, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the city of Warsaw, XII Commercial Division of the National Court Register under the number 0001033003, Taxpayer Identification Number: 7011142500, National Business Registry Number: 525198369, share capital in the amount of PLN 20,000,000.
The Administrator can be contacted by sending correspondence to the following address: Puławska 182, 02-670 Warsaw, as well as via e-mail: office@hanwha-aerospace.eu.
Although the Administrator has not appointed a Personal Data Protection Officer, if you would like to ask any questions regarding personal data, please send them to the e-mail address: iodo@hanwha-aerospace.eu or to the correspondence address of the Administrator, i.e. 182 Puławska Street, 02-670 Warsaw.
4. What personal data is processed by Hanwha Aerospace Europe sp. z o.o.?
The Administrator processes only personal data that you provide or make available while browsing our website and using its functionalities. In addition, Hanwha conducts an automated analysis of your website activity. In this regard, it is important to note that the personal data that you provide Hanwha collects voluntarily and is necessary for the use of the functionalities of our website, such as answering questions asked via the contact form. Hanwha only collects data that is necessary for the proper implementation and provision of the services contained in the forms provided on the website in the following scope:
1) contact and address details (such as name and surname, e-mail address).
2) technical and search data on the website, which may be personal data (e.g., IP addresses, cookie IDs, browsing history data, information about the user’s device, etc.).
5. For what purpose is personal data processed and on what legal basis?
The Controller processes personal data for the following purposes and on the following legal grounds:
1) Handling contacts forms
The Administrator provides the possibility of contacting the Controller using the electronic contact form available on the website in selected tabs. The use of the form requires providing personal data necessary to make contact and respond to the inquiry. At the same time, the person using the form can provide other, additional personal data that are not obligatory. In this case, providing additional data is voluntary. Personal data processed to identify the sender and oversee their inquiry sent via the form provided – the legal basis for the processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR). Regarding the personal data provided optionally, the legal basis for the processing is the consent of the person providing the personal data (Article 6(1)(a) of the GDPR).
2) Keeping statistics
The Administrator collects statistical data related to the operation of the website to analyse user activity and their preferences, which is related to improving the functioning of the website. The legal basis for the processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR). Detailed information on the statistics kept on the website in the Cookies Policy.
3) Newsletter service
The Controller collects personal data necessary to send a newsletter containing information about news, services, events concerning Hanwha, which are or may be obtained during direct contact (e.g., by an employee by phone or e-mail). The legal basis for the processing of personal data by the Administrator in the indicated scope is the consent of the person providing personal data (Article 6(1)(a) of the GDPR).
6. During what period is personal data processed? Based on which criteria are the lengths of personal data processing periods determined?
The periods of personal data processing vary and depend on two elements:
1) from the purposes for which they were collected, and
2) from the provisions of applicable law imposing certain obligations on the Administrator in this respect.
In cases where the basis for processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR), then Hanwha Aerospace Europe sp. z o.o. may process personal data until an effective objection to the processing of data is raised in cases.
However, if the legal basis for the processing of personal data is voluntary consent, then Hanwha Aerospace Europe sp. z o.o. may process personal data until the consent is withdrawn.
Notwithstanding the foregoing, the period of personal data processing may be extended if the processing is necessary to establish and pursue claims or defend against claims, and after this time only in the case and to the extent required by law.
7. What are the rights of individuals as subjects of personal data?
In accordance with applicable laws, individuals have the following rights in relation to the processing of personal data by Hanwha Aerospace Europe sp. z o.o.:
1) the right to access your data, including obtaining a copy of your data.
2) the right to request rectification of data.
3) the right to restrict data processing.
4) the right to object (objection to the processing of data in the legitimate interest of the Administrator)
5) the right to delete data (the right to be forgotten).
6) the right to lodge a complaint with the supervisory authority for the protection of personal data, which in Poland is the President of the Office for Personal Data Protection – https://www.uodo.gov.pl/pl (if you have any questions, comments or concerns, Hanwha encourages you to contact us in the manner specified in this Policy before contacting the supervisory authority).
In addition, if the data processed based on your consent, you can exercise your right to withdraw your consent. At the same time, the Administrator indicates that the withdrawal of consent does not affect the lawfulness of the processing that was conducted based on consent before its withdrawal.
To exercise the above rights, you should send correspondence – depending on your choice – to one of the following addresses:
1) e-mail address: iodo@hanwha-aerospace.eu;
2) correspondence address: 182 Puławska Street, 02-670 Warsaw.
8. To which entities do the Administrator share personal data?
Personal data provided by individual persons may transfer to entities processing such personal data on behalf of the Controller, including IT service providers, hosting providers, providers of analytical and mailing tools and marketing agencies. These entities process data based on agreements concluded with the Administrator and only in accordance with their guidelines. In such cases, the Administrator requires third parties to maintain confidentiality and ensure appropriate information security. Notwithstanding the foregoing, the Controller takes steps to verify whether a given entity provides appropriate means of personal data protection before establishing cooperation, as well as during its duration.
Notwithstanding the foregoing, personal data may also made available to entities authorized to obtain them based on applicable law, e.g., law enforcement authorities.
The processing of personal data by the Administrator’s partners takes place based on the voluntary consent expressed. The partners conduct an automated analysis of website activity and use cookies for this purpose.
Since the Controller belongs to the Capital Group in which the parent company has its registered office in South Korea, personal data may transfer to a recipient with its registered office in South Korea. It should be emphasized that the European Commission has adopted a decision stating the adequacy of the level of protection of personal data in South Korea (Article 45 of the GDPR), which means that personal data made available to entities based in South Korea are protected at a level corresponding to European requirements.
9. Social networks
The Controller processes personal data of users visiting the Controller’s profiles in social media (X, LinkedIn). This data processed only in connection with maintaining the profile, including for the purpose of informing Users about the Administrator’s activity and promoting diverse types of events, services, and products. The legal basis for the processing of Personal Data for this purpose is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR), consisting in promoting its own brand.
At the same time, the Administrator informs us that the above-mentioned websites have separate rules and procedures in the field of privacy protection. Detailed information on this subject can be found on selected pages of the indicated websites.
10. Cookies
The Administrator uses cookies as part of the website.
The purposes and rules of using cookies can be found in the Cookies Policy.
11. Automated decision-making
Personal data will not be used for the purpose of automated decision-making, including profiling, in such a way because of automated processing of personal data, any decision could be made that would produce legal effects for the data subject or similarly significantly affect the data subject.
12. Changes to the Privacy Policy
To ensure that the Privacy Policy meets the current requirements set out in the provisions of applicable law, the Administrator reserves the right to make changes at any time. This also applies where this Privacy Policy needs to be amended to reflect new or changed functionalities and services of Hanwha Aerospace Europe’s website.
The Administrator indicates that in the event of changes to the Privacy Policy, a recent version of the Privacy Policy will be published on the website with the indication that it is another version and with the date of its publication and validity.
The revised Privacy Policy is effective from the date of publication unless new consent is required.