Information about personal data

Privacy
and cookies policy

Updated:

We explain how we process data when you use charsznicki-warzywniak.pl and contact our company.

1. Data controller and contact details

The data controller is CHARSZNICKI WARZYWNIAK Prosta Spółka Akcyjna, with its registered office in Miechów-Charsznica, ul. Żarnowiecka 18, 32-250 Charsznica, KRS 0001168922, NIP 6591559468, REGON 541529492.

For data protection matters, you can email kontakt@charsznicki-warzywniak.pl, call 797 487 607 or send a letter to the address above. The company has not appointed a data protection officer.

2. Contact and enquiries

When you contact us by email or phone, we process the data you provide, such as your first and last name, email address, phone number, company details and the content of your enquiry. We use these data to respond and discuss our offer, crop contracts, advice or cooperation.

The legal basis for processing is our legitimate interest in handling correspondence and business contacts — Article 6(1)(f) of the GDPR. If you are an individual asking us to take steps before entering into a contract, or you are a party to a contract, the legal basis for processing in that context is Article 6(1)(b) of the GDPR.

If needed in a specific case, we may use the necessary part of the correspondence to establish, pursue or defend claims. The legal basis is our legitimate interest in protecting the company's rights — Article 6(1)(f) of the GDPR.

Providing data in an ordinary enquiry is voluntary and is not a statutory or contractual requirement. Without contact details, we may be unable to respond. When taking steps before entering into a contract, the absence of necessary data may prevent us from preparing an offer or taking the requested steps. Please provide only the information needed to deal with the matter.

3. Website operation and security

The hosting infrastructure processes technical connection data. Logs may include the IP address, the date and time of the request, the address of the requested resource, the response code, and information about the browser and errors. They are used to make the website available, diagnose problems and protect against abuse. The legal basis is our legitimate interest in ensuring the website's operation and security — Article 6(1)(f) of the GDPR.

The browser sends technical information automatically. Connection data, including the IP address, are needed to send the request and response; the website cannot be displayed without them. The additional information sent, such as the address of the referring page, also depends on the browser settings. Separately, logs are stored to diagnose problems and maintain security.

4. Who may have access to the data

OVHcloud provides hosting for the website, while company email remains with nazwa.pl. These service providers and entities involved in delivering their services may process the data necessary to operate the respective service. People authorised to handle correspondence and provide technical support for the website may also have access to the extent needed for those tasks.

Enquiries sent to the company email are not forwarded to other email services or customer service systems.

5. How long we retain data

We retain correspondence about ordinary enquiries that did not lead to a contract for 12 months from the last contact about the matter.

If some data are needed to establish, pursue or defend specific claims, we retain those data until the applicable limitation periods expire, taking into account the rules governing the relationship concerned. We retain data relating to the performance of contracts and documents that we are required by law to keep for the period determined by the applicable legal obligations and the needs of performing the contract concerned.

The specific periods for retaining and deleting technical logs in the web hosting and email services are currently being verified separately for each service. We will add this information once these periods have been established. The 12-month period described above applies to ordinary enquiries without a contract and does not specify how long logs are retained.

6. Processing outside the EEA

We are verifying whether hosting the website with OVHcloud and operating company email through nazwa.pl involve transferring data outside the European Economic Area. This verification covers processing locations, data recipients and any safeguards for transfers for each service. We will update this document once this information has been established.

7. Your rights

Under the conditions set out in the GDPR, you may request access to your data, rectification, erasure or restriction of processing. If data are processed on the basis of a legitimate interest, you may object on grounds relating to your particular situation. The right to data portability applies when the conditions set out in the GDPR are met, particularly where processing is carried out by automated means on the basis of a contract.

You can send your request to kontakt@charsznicki-warzywniak.pl. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office. Information on how to lodge a complaint is available at uodo.gov.pl.

8. Cookies and automated decisions

The current version of the website does not use analytics or advertising tools, forms, user accounts or externally embedded content. The website's code does not save cookies or data in the browser's local storage. Images and the stylesheet are served from the same domain.

A check of public website responses on the previous nazwa.pl hosting, carried out on 1 October 2026, found no cookies being set by the server for the resources checked. This result applies to the previous hosting; the behaviour of the new OVHcloud hosting requires a separate check. The processing of hosting logs is separate from cookies.

The website itself does not carry out profiling or make automated decisions that produce legal effects or similarly significantly affect visitors.

If the website's features change, we will update the privacy and cookies information. Tools requiring consent will be activated after consent has been obtained.