Privacy policy

Last updated: 2026-09-17

Who is responsible

The controller of your personal data within the meaning of the GDPR (Regulation (EU) 2016/679) is:

For any question about personal data, write to [email protected].

What we process, and when

When you open a page

Serving a page requires your device to connect to our hosting provider. In doing so the provider processes technical connection data — your IP address, the time of the request, the page requested, the referring page, and your browser's user-agent string — in server and edge logs. This is unavoidable for any website: without your IP address the page cannot reach you. We do not use these logs to build profiles and we do not attempt to identify you from them.

When you contact us

If you email or phone us, we process what you choose to send: your name, your email address or phone number, your company, and the content of your message. We use it only to answer you and to handle the resulting business relationship. Please do not send us special categories of data (health, beliefs, and so on) — we have no need for them.

Legal basis

• Serving the site securely and keeping it available — our legitimate interest, Art. 6(1)(f) GDPR.
• Answering your enquiry — steps prior to entering a contract at your request, Art. 6(1)(b), or our legitimate interest in responding to business correspondence, Art. 6(1)(f).
• Retaining commercial correspondence and invoices where Polish accounting and tax law requires it — legal obligation, Art. 6(1)(c).

Who else sees the data

We do not sell or rent personal data, and we do not disclose it to third parties for their own purposes. The following processors act on our behalf under data processing agreements:

• Cloudflare, Inc. (Cloudflare Pages) — hosting and content delivery — processes connection data in server logs. https://www.cloudflare.com/privacypolicy/

Beyond these, data may be disclosed to our accountants or legal advisers where necessary, or to public authorities where the law requires it.

Transfers outside the EEA

Our hosting provider operates a global network, so connection data may be processed on servers outside the European Economic Area. Those transfers are covered by the European Commission's Standard Contractual Clauses under the provider's data processing agreement.

How long we keep it

• Server and edge logs — retained by the hosting provider for a short period for security and abuse prevention, then deleted.
• Email correspondence — kept for as long as needed to handle your enquiry and the business relationship, then deleted, except where accounting or tax law requires longer.

Your rights

Under the GDPR you have the right to:

• access your personal data and receive a copy of it,
• have inaccurate data corrected,
• have your data erased where the conditions are met,
• restrict processing,
• receive your data in a portable format,
• object at any time to processing based on legitimate interest, including on grounds relating to your particular situation.

To exercise any of these, write to us at the address above. We answer within one month. There is no charge unless a request is manifestly unfounded or excessive.

Complaints

If you believe we have handled your data unlawfully, you may lodge a complaint with the Polish supervisory authority:

Changes to this policy

If what the site does with data changes, this page changes with it — the technical facts stated here are generated from the site's own configuration and checked against the published build, so this document cannot quietly fall out of step with reality. The date at the top shows when the substance last changed.

A note on scope

This policy describes this website. It does not cover the sites of EURAL GNUTTI S.p.A. or other third parties we link to, which have their own policies.