{"id":987630403,"date":"2026-04-14T17:37:16","date_gmt":"2026-04-14T17:37:16","guid":{"rendered":"https:\/\/guapa.pl\/?page_id=987630403"},"modified":"2026-05-19T09:30:23","modified_gmt":"2026-05-19T09:30:23","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/guapa.pl\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"
<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span>\n
\n
\n

GUAPA CLEAN UP<\/h4>\n<\/div><\/div>\n\n

PRIVACY & Cookies POLICY<\/h1>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n
\n
\n
\n

PRICACY POLICY<\/h2>\n

\u00a0<\/p>\n

GUAPA PRODUKCJA Sp. z o.o.<\/strong>
Krzywaniec, 66-010 Nowogr\u00f3d Bobrza\u0144ski, Poland
VAT No.: PL9730967877 | KRS: 0000343844 | REGON: 080381014
E-mail:\u00a0<\/span>office@guapa.pl<\/a><\/p>\n

<\/h2>\n

1. Definitions<\/h2>\n

1.1. Controller or Guapa<\/strong>\u00a0<\/span>\u2013 Guapa Produkcja Sp\u00f3\u0142ka z ograniczon\u0105 odpowiedzialno\u015bci\u0105, with its registered office at Krzywaniec, 66-010 Nowogr\u00f3d Bobrza\u0144ski, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0000343844, VAT No.: 9730967877, REGON: 08038101400000.<\/p>\n

1.2. Personal Data<\/strong>\u00a0<\/span>\u2013 information about an identified or identifiable natural person, who can be identified by reference to one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural or social identity, including a device IP address, location data, an online identifier, and information collected via cookies and similar technologies.<\/p>\n

1.3. Policy<\/strong>\u00a0<\/span>\u2013 this Privacy Policy, containing information about the processing of Personal Data and the use of cookies and similar tracking technologies within the Website.<\/p>\n

1.4. GDPR<\/strong>\u00a0<\/span>\u2013 Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC.<\/p>\n

1.5. Website<\/strong>\u00a0<\/span>\u2013 the website operated by the Controller at\u00a0<\/span>https:\/\/guapa.pl\/<\/a>, accessible via internet browsers.<\/p>\n

1.6. Shop<\/strong>\u00a0<\/span>\u2013 the Guapa online store available through the Website, through which Guapa sells goods exclusively to business customers (B2B).<\/p>\n

1.7. Customer or User<\/strong>\u00a0<\/span>\u2013 a natural person visiting the Website or making use of its functionality, as well as a representative or employee of a business entity acting on its behalf within a B2B relationship.<\/p>\n

1.8. Device<\/strong>\u00a0<\/span>\u2013 an electronic end-user device through which the User accesses the Website.<\/p>\n

<\/h2>\n

2. General Information<\/h2>\n

2.1.<\/strong>\u00a0<\/span>In connection with the use of the Website, data necessary for the provision of the services offered is collected, together with information about activity on the Website. The Controller attaches particular importance to the proper protection of personal data.<\/p>\n

2.2.<\/strong>\u00a0<\/span>The Controller ensures that all data processing activities are carried out in compliance with applicable law, in particular the GDPR. This Policy is intended to provide complete information about the manner in which personal data is processed and to make available tools enabling the exercise of the rights to which data subjects are entitled.<\/p>\n

2.3.<\/strong>\u00a0<\/span>The Guapa Shop is directed exclusively at business customers. Placing an order in the Shop constitutes a declaration by the Customer that they are acting as a business entity within the meaning of Article 431<\/sup>\u00a0<\/span>of the Civil Code.<\/p>\n

2.4.<\/strong>\u00a0<\/span>Personal Data is processed in accordance with the law, and care is taken to ensure that it remains current and accurate. From time to time, the Controller may send a reminder regarding the need to update data, either by sending a message to the e-mail address provided or by displaying an appropriate notification on the Website after the User has logged in to their account.<\/p>\n

<\/h2>\n

3. How to Contact the Controller?<\/h2>\n

3.1.<\/strong>\u00a0<\/span>For any questions concerning the processing of Personal Data by the Controller, or to exercise the rights to which you are entitled, please contact us by e-mail:\u00a0<\/span>office@guapa.pl<\/a><\/p>\n

3.2.<\/strong>\u00a0<\/span>The Controller endeavours to respond to all data processing enquiries within 30 days of receipt. In the case of complex or numerous requests, this period may be extended by a further 2 months, of which an appropriate notification will be sent in advance.<\/p>\n

<\/h2>\n

4. How Do We Obtain Your Personal Data?<\/h2>\n

4.1.<\/strong>\u00a0<\/span>Personal Data is obtained directly from the user in order to ensure the proper provision of services and the smooth operation of the Website. You provide data to the Controller primarily through:<\/p>\n

    \n
  • dedicated registration and order forms on the Website,<\/li>\n
  • the contact form, or by e-mail and telephone correspondence,<\/li>\n
  • the process of placing orders and arranging deliveries via the Shop,<\/li>\n
  • B2B relationships \u2013 in the course of establishing and maintaining business cooperation.<\/li>\n<\/ul>\n

    4.2.<\/strong>\u00a0<\/span>Personal Data is also collected automatically \u2013 via cookies and similar tracking technologies \u2013 during use of the Website (e.g. while browsing products). Further details are set out in Section 9 of this Policy.<\/p>\n

    4.3.<\/strong>\u00a0<\/span>Within the context of B2B relationships, the Controller may also obtain the contact details of company representatives (first name, surname, job title, e-mail address, telephone number) from publicly available sources, such as the National Court Register, company websites or public professional profiles (e.g. LinkedIn).<\/p>\n

    <\/h2>\n

    5. Is the Provision of Personal Data Mandatory?<\/h2>\n

    5.1.<\/strong>\u00a0<\/span>The provision of personal data is voluntary and not strictly mandatory. It should be noted, however, that in certain cases the provision of data is necessary for the proper performance of services or for the conclusion and execution of a contract, as described in detail below.<\/p>\n

    5.2.<\/strong>\u00a0<\/span>The provision of data designated as mandatory in registration or order forms is required in order to create an account or to fulfil an order. Failure to provide such data will result in the inability to use those services.<\/p>\n

    5.3.<\/strong>\u00a0<\/span>The provision of data for marketing purposes is always voluntary and takes place solely on the basis of consent freely given, which may be withdrawn at any time.<\/p>\n

    <\/h2>\n

    6. How Do We Process Your Personal Data?<\/h2>\n

    Use of the Website<\/h3>\n

    6.1.<\/strong>\u00a0<\/span>Where the Website is used by an unregistered User, Personal Data (including IP address and information collected via cookies) is processed:<\/p>\n

    6.1.1.<\/strong>\u00a0<\/span>For the purpose of providing services by electronic means (making Website content available) \u2013 the legal basis for processing is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR).<\/p>\n

    6.1.2.<\/strong>\u00a0<\/span>For analytical and statistical purposes (analysis of User activity and preferences with a view to improving functionality) \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    6.1.3.<\/strong>\u00a0<\/span>For the purpose of establishing, asserting or defending legal claims \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR), consisting in the protection of its rights and commercial interests.<\/p>\n

    6.1.4.<\/strong>\u00a0<\/span>For marketing purposes \u2013 the applicable rules are described in detail in Section 7 of this Policy.<\/p>\n

    6.2.<\/strong>\u00a0<\/span>User activity on the Website is recorded in system logs. Log data is processed for technical and administrative purposes, for system security requirements, and for analytical and statistical purposes \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    Account Registration and Management<\/h3>\n

    6.3.<\/strong>\u00a0<\/span>Registration of a Customer account on the Website requires the provision of data necessary for its creation and operation (in particular the company name, registered address, VAT number and contact details of the company representative). The provision of data designated as mandatory is required in order to create an account; failure to do so will prevent registration. The provision of all other data is voluntary.<\/p>\n

    6.4.<\/strong>\u00a0<\/span>Personal Data is processed:<\/p>\n

    6.4.1.<\/strong>\u00a0<\/span>For the purpose of providing services relating to the creation and management of the account \u2013 the legal basis for processing is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR); with regard to data provided on a voluntary basis \u2013 consent (Article 6(1)(a) GDPR).<\/p>\n

    6.4.2.<\/strong>\u00a0<\/span>For analytical and statistical purposes \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    6.4.3.<\/strong>\u00a0<\/span>For the purpose of establishing, asserting or defending potential legal claims \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    6.4.4.<\/strong>\u00a0<\/span>For marketing purposes \u2013 the applicable rules are described in Section 7 of this Policy.<\/p>\n

    6.5.<\/strong>\u00a0<\/span>Guapa reserves the right to delete a Customer account in the event of a breach of the Terms and Conditions, or in the event of no activity on the account for a period exceeding 3 years, in accordance with the Shop's Terms and Conditions.<\/p>\n

    Placing Orders<\/h3>\n

    6.6.<\/strong>\u00a0<\/span>The placement of an order involves the processing of personal data. The provision of data designated as mandatory is necessary for the acceptance and processing of an order; failure to provide such data will result in the inability to fulfil the order.<\/p>\n

    6.7.<\/strong>\u00a0<\/span>Personal Data is processed:<\/p>\n

    6.7.1.<\/strong>\u00a0<\/span>For the purpose of fulfilling the order placed \u2013 the legal basis for processing is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR).<\/p>\n

    6.7.2.<\/strong>\u00a0<\/span>For the purpose of fulfilling statutory obligations (tax and accounting) \u2013 the legal basis for processing is a legal obligation (Article 6(1)(c) GDPR).<\/p>\n

    6.7.3.<\/strong>\u00a0<\/span>For analytical and statistical purposes \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    6.7.4.<\/strong>\u00a0<\/span>For the purpose of establishing, asserting or defending legal claims \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    Delivery and Payment Processing<\/h3>\n

    6.8.<\/strong>\u00a0<\/span>Depending on the chosen method of delivery or payment, data necessary for the provision of those services will be transferred to logistics partners and payment service providers (further details are set out in Section 10 of this Policy).<\/p>\n

    Complaints<\/h3>\n

    6.9.<\/strong>\u00a0<\/span>The submission of a complaint involves the processing of personal data. The provision of data in the complaints form is not mandatory, but it is necessary for the proper handling of the complaint.<\/p>\n

    6.10.<\/strong>\u00a0<\/span>Personal Data is processed:<\/p>\n

    6.10.1.<\/strong>\u00a0<\/span>For the purpose of handling the complaint submitted \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR) and, to the extent of statutory obligations, a legal obligation (Article 6(1)(c) GDPR).<\/p>\n

    6.10.2.<\/strong>\u00a0<\/span>For analytical and statistical purposes \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    6.10.3.<\/strong>\u00a0<\/span>For the purpose of establishing, asserting or defending legal claims \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    Contact Form and B2B Communication<\/h3>\n

    6.11.<\/strong>\u00a0<\/span>The Controller provides the ability to make contact via the contact form, by e-mail and by telephone. The use of these channels requires the provision of data necessary to establish contact and to provide a response.<\/p>\n

    6.12.<\/strong>\u00a0<\/span>Personal Data is processed:<\/p>\n

    6.12.1.<\/strong>\u00a0<\/span>For the purpose of handling enquiries and conducting correspondence related to Guapa's business activities \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    6.12.2.<\/strong>\u00a0<\/span>In the context of B2B relationships (preparation of offers, negotiation of terms, maintenance of commercial contacts) \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    6.12.3.<\/strong>\u00a0<\/span>For statistical and analytical purposes \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

    Personalised Products<\/h3>\n

    6.13.<\/strong>\u00a0<\/span>In the case of orders for personalised products (involving the application of logos, graphics or modifications to product parameters), data contained in the technical specifications and graphic materials provided by the Customer is processed solely for the purpose of fulfilling the specific order concerned.<\/p>\n

    6.14.<\/strong>\u00a0<\/span>The Customer bears sole responsibility for holding all rights to the graphic materials and logos supplied. The detailed rules governing this matter are set out in the guapa.pl Shop Terms and Conditions.<\/p>\n

    <\/h2>\n

    7. Marketing<\/h2>\n

    7.1.<\/strong>\u00a0<\/span>Personal Data is processed for the purpose of conducting marketing activities, which may involve:<\/p>\n

      \n
    • displaying marketing content tailored to users' interests (behavioural advertising);<\/li>\n
    • conducting direct marketing of goods and services (sending commercial information by electronic means);<\/li>\n
    • communication by post or telephone.<\/li>\n<\/ul>\n

      Direct Marketing (e-mail, SMS, telephone)<\/h3>\n

      7.2.<\/strong>\u00a0<\/span>Where consent has been given, data may be used to send marketing content to the user via various channels. The legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR) in conjunction with the consent provided.<\/p>\n

      7.3.<\/strong>\u00a0<\/span>Consent may be withdrawn at any time by clicking the unsubscribe link included in each commercial communication, or by contacting the Controller at the address given in Section 3. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.<\/p>\n

      Marketing to B2B Customers<\/h3>\n

      7.4.<\/strong>\u00a0<\/span>As a representative of a business entity that is a contractor of Guapa, you may receive information about products, new offerings and special offers on the basis of the legitimate interest of the Controller (Article 6(1)(f) GDPR). You have the right to object to such processing at any time (further details in Section 12).<\/p>\n

      Push Notifications<\/h3>\n

      7.5.<\/strong>\u00a0<\/span>Where separate consent has been given for push notifications, the user may receive messages on their device or in their browser containing information about Guapa's offers and promotions. Consent may be withdrawn at any time via the browser or device settings.<\/p>\n

      <\/h2>\n

      8. Social Media<\/h2>\n

      8.1.<\/strong>\u00a0<\/span>Personal Data is processed in respect of persons visiting profiles on social media platforms (e.g. LinkedIn, Facebook, Instagram). The processing of data in this regard is carried out under joint controllership with the operators of those platforms, within the scope defined by their respective terms of service and privacy policies.<\/p>\n

      8.2.<\/strong>\u00a0<\/span>Data of persons interacting with the profiles is processed for the purposes of communication, marketing activities and analytics, on the basis of the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

      <\/h2>\n

      9. Cookie Information<\/h2>\n

      What Are Cookies?<\/h3>\n

      9.1.<\/strong>\u00a0<\/span>Cookies are small text files stored on the User's device by the browser when visiting the Website. Cookies facilitate the use of the Website, for example by remembering preferences and session information. The cookies used by the Controller are safe \u2013 they do not carry viruses or malicious software.<\/p>\n

      Types of Cookies<\/h3>\n

      9.2.<\/strong>\u00a0<\/span>We use the following types of cookies:<\/p>\n

      Necessary (technical)<\/strong>\u00a0<\/span>\u2013 essential for the proper functioning of the Website (e.g. keeping the User logged in, managing the shopping cart). These cookies cannot be disabled.<\/p>\n

      Analytical<\/strong>\u00a0<\/span>\u2013 help us understand how Users interact with the Website (anonymous data). They allow us to identify features that require improvement.<\/p>\n

      Personalisation<\/strong>\u00a0<\/span>\u2013 enable analysis of User behaviour and preferences in order to personalise content and product recommendations.<\/p>\n

      Advertising<\/strong>\u00a0<\/span>\u2013 allow the customisation of displayed advertisements to User preferences (behavioural advertising), in cooperation with the Controller's advertising partners.<\/p>\n

      Cookie Retention Period<\/h3>\n

      9.3.<\/strong>\u00a0<\/span>Session cookies \u2013 stored until the browser is closed. Persistent cookies \u2013 stored until deleted by the User or until a specified period has elapsed (as a rule, up to 60 days).<\/p>\n

      Managing Cookies<\/h3>\n

      9.4.<\/strong>\u00a0<\/span>Only necessary cookies are required for the proper functioning of the Website. With regard to all other types of cookies, consent may be given or withdrawn at any time using the cookie management panel available on the Website, or via browser settings.<\/p>\n

      Our Partners \u2013 Cookies<\/h3>\n

      9.5.<\/strong>\u00a0<\/span>Some cookies are placed by external partners. The current list of partners and the categories of cookies used by them is set out below:<\/p>\n\n\n\n\n\n\n\n\n\n\n
      Partner<\/th>\nEntity<\/th>\nCategory<\/th>\nDuration<\/th>\n<\/tr>\n<\/thead>\n
      Google Analytics<\/strong><\/td>\nGoogle Ireland Ltd.<\/td>\nAnalytics<\/td>\nup to 60 days<\/td>\n<\/tr>\n
      Google Ads<\/strong><\/td>\nGoogle Ireland Ltd.<\/td>\nAdvertising<\/td>\nup to 60 days<\/td>\n<\/tr>\n
      Meta (Facebook)<\/strong><\/td>\nMeta Platforms, Inc.<\/td>\nAdvertising<\/td>\nup to 60 days<\/td>\n<\/tr>\n
      Hotjar<\/strong><\/td>\nHotjar Limited<\/td>\nAnalytics<\/td>\nup to 60 days<\/td>\n<\/tr>\n
      Microsoft Ads<\/strong><\/td>\nMicrosoft Corporation<\/td>\nAdvertising<\/td>\nup to 60 days<\/td>\n<\/tr>\n
      LinkedIn<\/strong><\/td>\nLinkedIn Ireland Unlimited<\/td>\nAdvertising<\/td>\nup to 60 days<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      <\/h2>\n

      10. To Whom Do We Disclose Your Personal Data?<\/h2>\n

      10.1.<\/strong>\u00a0<\/span>Personal Data may be disclosed to entities cooperating with us in the provision of services, in particular:<\/p>\n

      Logistics partners and couriers<\/strong>\u00a0<\/span>\u2013 to the extent necessary for the delivery or collection of goods.<\/p>\n

      Payment operators<\/strong>\u00a0<\/span>\u2013 to the extent necessary for the processing of the chosen payment method (bank transfer, advance payment).<\/p>\n

      IT and hosting service providers<\/strong>\u00a0<\/span>\u2013 in particular, entities providing hosting services for the Shop's website and technical infrastructure.<\/p>\n

      Marketing service providers<\/strong>\u00a0<\/span>\u2013 in the scope of sending commercial communications and conducting analytics (e.g. e-mail marketing tools, analytical systems).<\/p>\n

      Accounting firms and legal advisors<\/strong>\u00a0<\/span>\u2013 in the scope of financial, tax and legal services provided to Guapa.<\/p>\n

      Public authorities<\/strong>\u00a0<\/span>\u2013 where required by applicable law (e.g. tax authorities, social security institutions, law enforcement agencies on the basis of appropriate legal decisions).<\/p>\n

      10.2.<\/strong>\u00a0<\/span>Personal Data may be transferred to service providers established outside the European Economic Area (EEA). In each such case, the Controller ensures that the transfer is carried out lawfully and on the basis of appropriate safeguards (e.g. standard contractual clauses adopted by the European Commission). Detailed information about the destination countries and the safeguards applied is available upon request.<\/p>\n

      <\/h2>\n

      11. For How Long Do We Process Your Personal Data?<\/h2>\n

      11.1.<\/strong>\u00a0<\/span>The period of data processing depends on the type of service provided and the purpose of processing:<\/p>\n