Privacy and Cookie Policy
1. Data controller
The controller of personal data is Gospodarstwo Rolne Zbożowo-Warzywnicze Jerzy Ptasiński (the “Controller”, “we”, “us”).
Contact address: Łęgi 44, 78-320 Połczyn-Zdrój, Poland.
For matters related to personal data protection, please contact us at: kinga@ptasinski-agro.com.
This English version is provided for information. In case of discrepancies, the Polish version should prevail.
2. Scope of this policy
This policy applies to the website ptasinski-agro.com and to communications made through the contact form, e-mail, telephone or messaging applications where personal data are provided in connection with a business inquiry or B2B cooperation.
The GDPR protects personal data of natural persons. When a company contacts us, we may process data of its contact person, such as name, e-mail address, telephone number, job title and correspondence content.
3. Personal data we process
Depending on the form of contact, we may process: name and surname, company name, job title, e-mail address, telephone number, country, inquiry content, information needed to prepare an offer, correspondence data and basic technical data related to website use, such as IP address, cookie identifiers and browser information.
4. Purposes and legal bases of processing
Purpose of processing | Legal basis |
Responding to inquiries, handling the contact form, e-mail and telephone correspondence | Article 6(1)(f) GDPR – the Controller’s legitimate interest in conducting communication and handling inquiries |
Preparing offers, agreeing cooperation terms, handling samples and commercial documents | Article 6(1)(b) GDPR – steps prior to entering into a contract or performance of a contract; alternatively Article 6(1)(f) GDPR in B2B contacts |
Compliance with tax, accounting and legal obligations | Article 6(1)(c) GDPR – legal obligation incumbent on the Controller |
Defence against claims and pursuing claims | Article 6(1)(f) GDPR – the Controller’s legitimate interest |
Ensuring website security, preventing abuse and technical diagnostics | Article 6(1)(f) GDPR – the Controller’s legitimate interest |
Internet analytics or marketing, if non-essential tools are implemented | Article 6(1)(a) GDPR – user consent; to be confirmed after checking the website configuration |
5. Voluntary provision of data
Providing data is voluntary, but it may be necessary for us to respond to an inquiry, prepare an offer, send product specifications, handle samples or continue business correspondence.
6. Recipients of data
Data may be shared with entities supporting us technically and organisationally, in particular hosting providers, e-mail service providers, IT service providers, website maintenance providers, analytics or security tool providers, as well as persons cooperating with the Controller in handling inquiries, export matters, logistics and commercial documentation.
Data may also be disclosed to public authorities or other authorised entities where required by law.
7. Transfers of data outside the EEA
As a rule, we do not plan to transfer personal data outside the European Economic Area. However, if such transfer becomes necessary in connection with an export inquiry, cooperation with a foreign partner, an IT tool or communication with a contact person outside the EEA, the transfer will take place only in accordance with the GDPR, in particular on the basis of an adequacy decision, standard contractual clauses or another appropriate legal basis.
8. Data retention period
Data related to an inquiry are stored for the period necessary to handle the matter and then for the period justified by the need to defend against or pursue claims.
Data related to a contract, order, invoice or accounting obligation are stored for the period required by law.
Data processed on the basis of consent are stored until consent is withdrawn, unless another legal basis for further processing exists.
9. Rights of data subjects
The data subject has the right to access personal data, rectify data, erase data, restrict processing, data portability, object to processing and withdraw consent where processing is based on consent.
The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office in Poland if they consider that the processing of their personal data violates the GDPR.
10. Automated decision-making and profiling
We do not make decisions concerning users solely by automated means, including profiling that produces legal effects or similarly significantly affects the user.
11. Cookies and similar technologies
The website may use cookies necessary for the proper operation of the website, security and remembering basic user settings.
The website may also use analytics tools, such as Google Analytics, and contact-form security tools, such as reCAPTCHA. Such tools may involve the use of additional cookies or similar technologies. Cookies other than necessary cookies should be used only after obtaining the user’s consent.
The user may change cookie settings in their browser. Restricting certain cookies may affect the operation of the website.
12. Changes to this policy
This policy may be updated from time to time, in particular if website functions, technical tools, data scope or legal requirements change. The current version of the policy is published on the website.