1. Data Controller

The controller of personal data collected through the AGD Lipiecki website is:

WYTWARZANIE ARTYKUŁÓW Z TWORZYW SZTUCZNYCH “MAREK” DANIEL LIPIECKI
4 Drwali Street, 04-840 Warsaw, Poland
Tax Identification Number (NIP): 9521274839
National Business Registry Number (REGON): 012323171
email: biuro@agdlipiecki.pl

This website presents our product range and serves as a point of contact for wholesale and business enquiries. It does not offer online sales. We do not operate a shopping basket, we do not process orders or payments through this website, and we do not maintain customer accounts.

The Controller ensures that personal data are processed in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (GDPR).

Please note that the business contact details of a company representative – such as a name, business email address or direct telephone number – constitute personal data and are protected accordingly, even where an enquiry is made on behalf of a company.

2. Purposes and Scope of Data Processing

Personal data provided through this website are processed for the following purposes:

• responding to wholesale and business enquiries submitted through the enquiry form or by email,
• conducting business correspondence and pre-contractual negotiations, including the preparation of quotations and commercial offers,
• maintaining ongoing contact with wholesale partners and retail chains,
• sending commercial information, where consent has been given,
• compiling statistics and analysing website traffic,
• ensuring the security and correct operation of the website,
• establishing, exercising or defending legal claims,
• complying with legal obligations, including tax and accounting requirements, where cooperation results in a contract.

The personal data processed may include, among other information: full name, company name, position, business email address, telephone number, country, the estimated scale of cooperation indicated in the enquiry, the content of the message, and technical data such as IP address and browser information.

Providing personal data is voluntary, but the information marked as required in the enquiry form is necessary for us to respond.

3. Legal Bases for Processing Personal Data

Personal data are processed on the following legal bases:

• Article 6(1)(b) of the GDPR – processing necessary in order to take steps at the request of the data subject prior to entering into a contract,
• Article 6(1)(f) of the GDPR – processing necessary for the purposes of the legitimate interests pursued by the Controller, namely conducting business correspondence, maintaining relationships with business partners, direct marketing addressed to businesses, analysing website traffic, ensuring the security of the website, and the establishment, exercise or defence of legal claims,
• Article 6(1)(a) of the GDPR – the user’s consent, for example consent to receive commercial information or to the use of non-essential cookies,
• Article 6(1)(c) of the GDPR – processing necessary for compliance with legal obligations, including accounting and tax obligations, where cooperation results in a contract.

4. Recipients of Personal Data

Personal data may be disclosed to entities that support the operation of the website and our business correspondence, in particular:

• IT, hosting and email service providers,
• providers of website analytics tools,
• suppliers of software and technical support services,
• the Controller’s accounting and legal service providers, where cooperation results in a contract,
• public authorities – only where disclosure is required by law.

Such entities process personal data on the basis of data processing agreements and only in accordance with the Controller’s instructions.

Where personal data are transferred outside the European Economic Area, for example through analytics tools, such transfers take place on the basis of the safeguards provided for in Chapter V of the GDPR, in particular an adequacy decision of the European Commission or standard contractual clauses.

5. Data Retention Periods

• data contained in business correspondence – for the duration of the correspondence and afterwards for the period necessary to establish, exercise or defend legal claims,
• data connected with a concluded contract – for up to six years after the end of the business relationship, corresponding to the applicable limitation period for legal claims,
• tax and accounting data – for the period required by applicable law,
• data processed on the basis of consent – until that consent is withdrawn,
• data processed on the basis of legitimate interests – until an effective objection is raised.

6. Rights of Data Subjects

Every person whose personal data we process has the right to:

• access their personal data and obtain a copy of it,
• have their personal data rectified,
• have their personal data erased, also known as the “right to be forgotten”,
• restrict the processing of their personal data,
• data portability,
• object to processing carried out on the basis of the Controller’s legitimate interests,
• withdraw their consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise any of these rights, please contact the Controller at: biuro@agdlipiecki.pl

Every person also has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

7. Cookies

7.1. What Are Cookies?

Cookies are small text files stored on the user’s device when they visit and use a website. They are not used to identify the user directly, but to recognise the device being used.

7.2. What Types of Cookies Do We Use?

• Strictly necessary cookies – enable the website to function correctly, including the selection of the language version.
• Functional cookies – remember the user’s preferences, such as the selected language or website layout.
• Analytics cookies – allow us to collect statistical information about how visitors use the website, for example through Google Analytics.
• Marketing cookies – enable personalised advertising to be displayed, for example through Google Ads remarketing or Facebook Ads.

Strictly necessary cookies are used on the basis of the Controller’s legitimate interest. All other categories are used only with the user’s consent, which may be withdrawn at any time.

7.3. Managing Cookies

Users can change their cookie settings in their web browser at any time, including blocking cookies or deleting those already stored. However, restricting the use of cookies may affect the functionality of the website.

8. Automated Decision-Making

Users’ personal data are not used for automated decision-making, including profiling within the meaning of the GDPR.

9. Data Security

The Controller implements appropriate technical and organisational measures to protect personal data, including SSL encryption, server security systems and internal control procedures.

10. Final Provisions

• The Controller reserves the right to update this Privacy and Cookie Policy in order to ensure its compliance with applicable law.
• The current version of this document is always available on this website.