We care about your privacy. Below we explain what personal data we collect through the agromalz.pl website, for what purpose and on what basis we process it, and what rights you have. We prepared this document based on the GDPR, that is Regulation (EU) 2016/679 of the European Parliament and of the Council.
Data Controller
The controller of your personal data is:
- AGRO-MALZ Piotr Malz
- Wocławy 10R, 83-020 Cedry Wielkie
- Tax ID (NIP): 9571008399, Business registry no. (REGON): 386782756
- e-mail: biuro@agromalz.pl
- phone: +48 500 338 717, +48 506 303 816
For all matters concerning personal data you can contact us at the e-mail address above or by post.
Data Protection Officer
We have not appointed a Data Protection Officer. For matters related to data processing, please contact us at the address given above.
What data we process, for what purpose and on what basis
Contact form
When you use the contact form, we process: your first and last name, e-mail address, optionally your phone number and company name, and the content of your message.
- Purpose: responding to your enquiry and conducting correspondence, and, if it leads towards cooperation, taking steps prior to entering into a contract.
- Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (our legitimate interest in handling enquiries and communicating with interested parties).
Newsletter
When you sign up for the newsletter, we process your e-mail address.
- Purpose: sending information about seasonal availability, our offer and news from Agro-Malz.
- Legal basis: Article 6(1)(a) GDPR (your consent) in conjunction with the provisions of the Polish Electronic Communications Act concerning marketing. You can withdraw your consent at any time by clicking the "unsubscribe" link in any message or by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Website security and spam protection
To protect the forms against abuse (spam, bots), we temporarily process your IP address upon submission.
- Purpose: limiting the number of submissions from a single address (rate limiting) and ensuring the security of the service.
- Legal basis: Article 6(1)(f) GDPR (legitimate interest in securing the website). We process the IP address solely in operating memory, for the short time necessary for the protection mechanism to work, and we do not store it permanently.
Data recipients
To provide our services, we use trusted providers who process data on our behalf (processors) under concluded data processing agreements:
- Resend (Resend, Inc.): e-mail handling (sending messages from the form) and the newsletter list.
- Vercel (Vercel, Inc.): hosting and delivery of the website.
- Google (Google Ireland Limited): the embedded Google Maps map on the contact subpage (see Cookie Policy).
- Outofplace: technical support and website maintenance.
We do not sell data or share it with third parties for marketing purposes.
Transfers of data outside the European Economic Area
Some of our providers (e.g. Resend, Google) may process data on servers in the United States. These providers declare that they apply the mechanisms required by the GDPR for transfers of data outside the European Economic Area, such as EU-US Data Privacy Framework certification or standard contractual clauses (SCC).
How long we keep your data
- Correspondence from the form: for the time needed to handle the enquiry and conduct correspondence, and then until any claims become time-barred, no longer than 12 months from the end of correspondence.
- Newsletter: until consent is withdrawn (unsubscription).
- IP address (security): temporarily, without permanent storage.
Your rights
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy of it,
- rectification (correction) of your data,
- erasure of your data,
- restriction of processing,
- object to processing based on legitimate interest,
- data portability,
- withdraw consent at any time (to the extent that processing is based on consent).
To exercise these rights, write to us at the e-mail address given in the "Data Controller" section.
Complaint to the supervisory authority
If you believe that we process your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), the Polish supervisory authority, ul. Stawki 2, 00-193 Warsaw, Poland.
Voluntary nature of providing data
Providing data is voluntary but necessary to use a given feature: without providing your e-mail address we cannot respond to a form enquiry or sign you up for the newsletter.
Profiling and automated decisions
We do not make decisions concerning you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.
Cookies
The rules on the use of cookies and similar technologies are described in a separate document: Cookie Policy.
Changes to the privacy policy
We may update this policy, for example when regulations or the way the website operates change. The current version is always available on this page, and the date of the last update is given at the top of the document.