Privacy policy

Data controller

The controller of personal data is Polfa Kutno ECS sp. z o.o. with its registered office in Poznań, ul. Ku Cytadeli 2, 61-722 Poznań, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0000521222, tax ID (NIP) 5223018264, REGON 147397963. The controller can be contacted via the contact form or by post at the registered office address.

What data we process and why

Through the contact form we process the data you provide: your full name, e-mail address, optionally your phone number, the subject and content of your message, as well as technical information about the form submission (IP address, browser type, date and time). We process this data solely to reply to your message and to conduct any further correspondence.

Legal basis

• the consent of the data subject (Article 6(1)(a) GDPR),
• the legitimate interest of the controller in conducting correspondence and protecting the website against abuse (Article 6(1)(f) GDPR).

Retention period

We keep the data for as long as necessary to handle the enquiry, and then for the limitation period of any claims or until consent is withdrawn.

Data recipients

Data may be entrusted to providers of hosting and IT services to us, solely on the basis of data processing agreements. In connection with protecting the form against spam, technical data may be processed by Cloudflare, Inc. (USA) on the basis of standard contractual clauses or an adequacy decision (EU-US Data Privacy Framework). Data on your use of the website is also processed by Google as part of the Google Analytics service (see the “Cookies” section for details).

Rights of data subjects

You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, to object, and to withdraw your consent at any time (without affecting the lawfulness of processing carried out before its withdrawal). You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

Providing the data is voluntary but necessary for us to reply to your message.

Spam protection

The contact form is protected by Cloudflare Turnstile (Cloudflare, Inc.), which verifies that the message is sent by a human. For this purpose Cloudflare processes, among other things, your IP address and browser information. The legal basis for this processing is our legitimate interest in protecting the website against abuse (Article 6(1)(f) GDPR). More information: Cloudflare privacy policy.

Cookies

The website uses strictly necessary cookies required for the contact form to work (CSRF protection) and for spam protection. They do not require consent. We also store your choice regarding analytics cookies in your browser's storage.

We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to collect website visit statistics – e.g. the number of visits, pages viewed, traffic source, approximate location and device type. We use Google Consent Mode: until you give your consent, Google Analytics does not store any cookies or identifiers in your browser and only sends Google basic information about the page view (including the address of the page visited, browser type and the IP address used for approximate location) – on the basis of our legitimate interest in keeping website statistics (Article 6(1)(f) GDPR). Only after you consent does Google Analytics set the _ga and _ga_* cookies for up to 2 years – the legal basis is then your consent (Article 6(1)(a) GDPR). Data may be transferred to Google LLC (USA) on the basis of an adequacy decision (EU-US Data Privacy Framework) and standard contractual clauses. We do not combine this data with data from the contact form and do not use it for advertising purposes. More information: Google privacy policy.

You can withdraw or change your consent at any time by clicking Cookie settings (the link is also in the website footer). You can also delete or block cookies in your browser settings.