Tartak Wielowieś

§ 1. General Provisions

This Privacy Policy sets out the rules for the processing and protection of personal data of users using the website (hereinafter referred to as the "Service"). The controller of personal data processed in the Service is:

Tartak Wielowieś

Registered office address: ul. Młyńska 1, 44-187 Wielowieś, Poland

NIP (Tax ID): 9690017281

REGON (Business ID): 272412737

E-mail contact: biuro@tartak-wielowies.pl

Phone number: +48 32 233 66 50

(hereinafter referred to as the "Data Controller").

The Data Controller ensures the protection of user privacy and applies appropriate technical and organizational measures to secure processed personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

§ 2. Purpose, Legal Basis, and Scope of Data Processing

Personal data of users is processed solely for purposes related to conducting sawmill business operations and handling inquiries:

- Handling Inquiries and Quotations:

Purpose: Preparing price quotes for timber products (e.g., roof trusses, battens, boards, square timber), verifying technical specifications, and contacting the customer.

Scope of data: Name, surname, e-mail address, phone number, optional timber delivery address, or details of the entity represented.

Legal basis: Art. 6(1)(b) GDPR (actions prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest of the Data Controller – replying to messages). Fulfillment of Orders and Sales

- Agreements:

Purpose: Executing orders for wood products, manufacturing, delivery/transportation of materials to the customer, issuing invoices and receipts.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (tax and accounting obligations).

- Managing Social Media Profiles (e.g., Facebook):

Purpose: Promoting sawmill services, interacting with users via direct messages and comments.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in building brand image and customer relationships).

§ 3. Data Recipients and Sharing Data with Third Parties

The Data Controller applies the principle of non-disclosure of entrusted personal data to third parties, unless it is necessary for the execution of the order or required by applicable law. Access to personal data may only be granted to authorized entities cooperating with the Data Controller under data processing agreements (so-called data processors):

- IT, hosting, and e-mail service providers,

- The accounting firm servicing Tartak Wielowieś,

- Transport and courier companies (solely for delivering sawn timber or wood products to the specified address).

- Entrusted personal data is not shared or sold to external entities for marketing purposes.

- Personal data is not transferred to third countries (outside the European Economic Area).

§ 4. Data Retention Period

Personal data will be stored for the period necessary to fulfill the purposes for which it was collected:

- Data necessary to handle inquiries/quotations: For the duration of the correspondence and for no longer than 12 months from the last contact, unless a contract is concluded.

- Data related to order fulfillment and accounting documentation: For the period required by tax regulations (standardly 5 years from the end of the calendar year in which the settlement occurred).

- Data processed based on consent: Until consent is withdrawn.

§ 5. User Rights

Every user has the right to:

- Access their personal data,

- Rectify (correct) incorrect or incomplete data,

- Request erasure of data ("right to be forgotten") if there are no legal grounds requiring its further storage,

- Restrict data processing,

- Data portability to another controller,

Object to processing based on legitimate interests, Withdraw consent to data processing at any time. To exercise these rights, please contact the Data Controller at: biuro@tartak-wielowies.pl or by mail at: Tartak Wielowieś, ul. Młyńska 1, 44-187 Wielowieś, Poland. Users also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

§ 6. Cookies Policy

The Service uses cookies (small text files saved on the user's end device). We use the following types of cookies:

- Necessary Cookies: Essential for the proper functioning, display, and security of the website.

- Analytical/Statistical Cookies (optional): Help us understand how users interact with the website to optimize its content and layout. Upon your first visit to the Service, a banner informing about the use of cookies is displayed.

- Users can consent to specific categories of cookies. Users can change cookie settings in their web browser or delete them entirely at any time.

§ 7. Final Provisions

The Data Controller reserves the right to make changes to this Privacy Policy. The current version of the Privacy Policy is always available on the Service website.

Date of last update: October 1, 2026