Privacy Policy of the hanpol.eu Website

Effective date: June 11, 2026

1. Data Controller

The data controller is HANPOL FOOD CZEKAJ, HORBULEWICZ SPÓŁKA KOMANDYTOWA, with its registered office at ul. Blachówka 30, 41-935 Bytom, Poland, entered into the Register of Entrepreneurs of the National Court Register (KRS) under number 0000841015, VAT ID (NIP): 6260000678, REGON: 003525915.

The controller can be contacted via email at biuro@hanpol.eu, by phone at (+48) 32 283 01 55, or by post to the registered office address.

2. Scope and Sources of Data

In connection with the use of the website, personal data voluntarily provided by the user may be processed, in particular: name and surname, email address, phone number, company details, and the content of messages sent via the contact form or email.

Additionally, the website may process technical and operational data related to the use of the site, including IP address, device and browser data, approximate location, online identifiers, and information about user activity on the website, to the extent resulting from the use of cookies and Google analytics tools.

Messages sent via the contact form may be stored in the controller’s CMS system to ensure continuity of communication, maintain contact history, and properly organize communication with clients and business partners.

3. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:

  • Responding to messages sent via the contact form, email, or other communication channels.
  • Conducting correspondence related to inquiries, business cooperation, or business relationships.
  • Taking steps prior to entering into a contract and performing a concluded contract.
  • Maintaining contact records and correspondence archives in the CMS system.
  • Analyzing website traffic, creating statistics, improving functionality, and optimizing the website using Google tools.
  • Establishing, pursuing, or defending against claims.
  • Complying with legal obligations.

The legal basis for processing is:

  • Article 6(1)(b) GDPR – processing necessary for the performance of a contract or to take steps prior to entering into a contract.
  • Article 6(1)(c) GDPR – processing necessary to comply with a legal obligation.
  • Article 6(1)(f) GDPR – processing necessary for the purposes of legitimate interests pursued by the controller, such as handling correspondence, maintaining contact history, analyzing website traffic, ensuring website security, and defending against claims.

4. Contact Form and CMS

The website enables users to contact the controller, including via a contact form. 

Data provided through the contact form may be stored in the CMS system supporting the website. This storage serves to handle inquiries, preserve correspondence history, ensure continuity of contact, and protect the controller’s interests related to organizing communication and potential claims.

Providing data is voluntary; however, failure to provide it may make it impossible to respond or handle the inquiry.

5. Google Analytics and Cookies

The website uses cookies and similar technologies necessary for proper functioning, enhancing security, remembering user preferences, and conducting statistical analysis.

The website also uses Google analytics tools, which may collect information about how users interact with the site, such as visited pages, time spent on the site, traffic sources, device and browser data, IP address, and cookie identifiers. This information helps analyze traffic and improve the website.

Where the use of analytical cookies or similar technologies requires user consent, the legal basis is the consent given via the cookie mechanism. Consent may be withdrawn at any time by changing browser settings or consent management tool settings, if implemented.

Users can also manage cookie settings independently in their browser. Restricting cookies may affect the proper functioning of certain website features.

6. Data Recipients

Personal data may be shared with entities supporting the controller in operating the website and conducting business activities, in particular: hosting providers, IT service providers, CMS providers, email service providers, analytics tool providers, legal advisors, accounting entities, and other subcontractors, to the extent necessary to achieve the stated purposes.

Data may also be disclosed to authorized public authorities if required by law.

7. Transfers Outside the EEA

Due to the use of Google tools and other IT solutions provided by international entities, data may be transferred outside the European Economic Area (EEA).

In such cases, the controller ensures appropriate safeguards required by GDPR, in particular based on standard contractual clauses or other legal transfer mechanisms where required.

8. Data Retention Period

Data processed for handling correspondence and inquiries is stored for the time necessary to respond and conclude communication, and subsequently for a period justified by the need to secure information in case of claims or to demonstrate the course of communication.

Data related to contracts is stored for the duration of the contractual relationship and, after its termination, for the period required by law and until the expiry of limitation periods.

Data processed based on consent is stored until the consent is withdrawn, unless the purpose of processing ceases earlier.

9. Data Subject Rights

Data subjects have the right to:

  • Access their data.
  • Rectify their data.
  • Erase their data.
  • Restrict processing.
  • Data portability (where applicable).
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time (if processing is based on consent).
  • Lodge a complaint with the President of the Personal Data Protection Office (UODO).

10. Automated Decision-Making

Personal data is not used for automated decision-making, including profiling, that produces legal effects concerning the user or similarly significantly affects them.

11. Data Security

The controller applies appropriate technical and organizational measures to protect personal data against unauthorized disclosure, loss, destruction, or unlawful processing.

12. Contact Details

For matters related to personal data processing, the controller can be contacted via email at biuro@hanpol.eu or by post at:
HANPOL FOOD CZEKAJ, HORBULEWICZ SPÓŁKA KOMANDYTOWA
ul. Blachówka 30
41-935 Bytom
Poland

13. Changes to the Privacy Policy

This privacy policy may be updated periodically, in particular in the event of changes in legal regulations, website functionality, implementation of new technological tools, or changes in the scope of services provided.

CONTACT

We will be happy to answer all your questions.

Contact us in the way that suits you best. We usually respond to inquiries via the contact form or email within 24 hours.

Privacy policy