GUAPA CLEAN UP

PRIVACY & Cookies POLICY

PRIVACY & COOKIES POLICY GUAPA.PL

 

1. General Information

This Privacy Policy defines the principles for processing personal data of users of the website https://guapa.pl. The Administrator ensures that data is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Data Controller

The Data Controller is: GUAPA PRODUKCJA Sp. z o.o. Krzywaniec, 66-010 Nowogród Bobrzański, Poland | VAT ID: PL9730967877 | KRS: 0000343844 | REGON: 080381014 Contact | E-mail: office@guapa.pl

3. Data Security (SSL)

The Administrator applies appropriate technical and organizational measures to protect data. The website uses an active SSL certificate, which ensures encryption of data transmitted via forms (e.g., Request a Quote, Newsletter, login), preventing unauthorized access by third parties.

4. Scope and Purposes of Data Processing

We process data provided voluntarily as well as data collected automatically (IP addresses, browser data, server logs). The purposes include:

  • Contract performance and B2B account management: registration, providing customer service, and order fulfillment (Art. 6(1)(b) GDPR).

  • Handling inquiries (forms): contact regarding a quote or product inquiry (Art. 6(1)(f) GDPR – legitimate interest).

  • Marketing and Newsletter: sending commercial information via electronic means (Art. 6(1)(a) GDPR – voluntary consent).

  • Comments and Opinions: managing the comment system and spam protection (Art. 6(1)(a) GDPR).

  • Legal Obligations: fulfilling tax and accounting obligations (Art. 6(1)(c) GDPR).

  • Debt Collection and Claims: securing and pursuing potential claims arising from cooperation (Art. 6(1)(f) GDPR).

5. Data Recipients

Data may be transferred to trusted cooperating entities:

  • Hosting Provider: VAIA Digital AB, Box 15, 683 21 Hagfors, Sweden.

  • Logistics: Courier and shipping companies (delivery of products/samples).

  • Analytics and IT: Google (analytical tools), newsletter systems, and anti-spam filters.

  • Professional Services: Entities providing financial, accounting, and legal services.

  • Public Authorities: State administration bodies (if the obligation results from legal regulations).

  • International Data Transfers: Some data (analytical data) may be transferred to Google LLC, headquartered in the United States. The transfer is carried out on the basis of Standard Contractual Clauses (SCC) approved by the European Commission (Art. 46(2)(c) GDPR).

6. Data Retention Period

  • Inquiries and B2B Accounts: For the duration of cooperation / account ownership and until the expiration of the statute of limitations for potential claims.

  • Newsletter and Comments: Until the consent is withdrawn or the content is deleted by the user.

  • Analytical Data: Up to 26 months (in accordance with GA4 standards).

  • Accounting Records (Invoices): 5 years in accordance with Polish tax regulations.

7. Profiling

We may analyze website usage to tailor our offers (direct marketing). Profiling does not serve the purpose of automated decision-making, does not produce legal effects, and does not significantly affect the user's situation.

8. User Rights

Users have the right to: access, rectify, or erase their data ("right to be forgotten"), the right to restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time. Complaints can be filed with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

9. Cookies

We use cookies for the following purposes:

  • Essential: For correct website functionality, security, and login session management.

  • Analytical and Performance: To monitor website traffic (anonymously).

  • Advertising and Social Media: To tailor offers and enable content sharing. Users can manage cookies using the tool (Cookiebot) available in the corner of the website.

  • Cookie retention periods:

    • Session cookies (temporary): deleted automatically when the browser is closed - used for login and shopping session management.
    • Persistent cookies: stored for a defined period in accordance with administrator settings or browser limits (~400 days) - used for analytical and marketing purposes.

10. Voluntary Provision of Data

Providing personal data is voluntary, however, it is necessary to achieve specific purposes, such as: setting up a B2B account, receiving a newsletter, obtaining a response to a quote inquiry, or fulfilling a delivery.

11. Changes and Updates

This policy may be updated periodically. The current version is available on this subpage.

Last update: 05.05.2026