This privacy policy describes how we process the personal data of visitors to our website and people who contact us, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
1. Data controller
The controller of personal data is Zakład Wyprawy Skór „Rosomak”, ul. Opolska 7, 52-010 Wrocław, Poland. For matters relating to personal data, you can contact us by e-mail at rosomak1974@o2.pl or by phone: +48 604 160 840.
2. What data we process and why
- Contact form – name, e-mail address, phone number and message content, in order to reply to your enquiry and continue the correspondence (Art. 6(1)(b) GDPR – steps prior to entering into a contract, and Art. 6(1)(f) GDPR – the controller’s legitimate interest in handling enquiries).
- E-mail and telephone contact – data provided in a message or during a call, in order to handle the enquiry, business cooperation, skin purchase or order fulfilment (Art. 6(1)(b) and (f) GDPR).
- Legal obligations – data necessary to issue accounting documents and settlements if a contract is concluded (Art. 6(1)(c) GDPR).
- Technical data – IP address, browser and device information, recorded automatically in server logs to ensure the security and proper functioning of the website (Art. 6(1)(f) GDPR).
Providing data is voluntary but necessary to reply to your enquiry.
3. Data retention period
- form and correspondence data – for as long as needed to handle the enquiry, and then no longer than 3 years (the limitation period for possible claims);
- data related to contracts and settlements – for the period required by tax and accounting law (as a rule, 5 years from the end of the tax year);
- records of cookie consent – up to 12 months;
- copies of e-mails sent automatically by the website (e.g. form notifications) – in a technical log for 30 days.
4. Data recipients
Data may only be shared with entities that provide services necessary for the operation of the website and communication, in particular: the hosting provider (Hostinger International Ltd.), the e-mail service provider (Grupa Wirtualna Polska – o2 mail) and – where necessary – our accounting office and legal advisers. These entities process data under contracts and only on our instructions. We do not sell personal data.
As a rule, we do not transfer data outside the European Economic Area. If a service provider processes data outside the EEA, this is done on the basis of standard contractual clauses approved by the European Commission or another mechanism provided for in the GDPR.
5. Your rights
Every data subject has the right to:
- access their data and receive a copy,
- rectification (correction) of data,
- erasure of data,
- restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
- lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise these rights, simply write to rosomak1974@o2.pl.
6. Cookies and external services
The website uses only essential cookies – needed for it to work and to remember your choice in the cookie banner. We do not use analytics or marketing cookies, Google Analytics, advertising pixels, external fonts or any other tracking tools. The website does not connect to third-party servers.
The only exception is the Google map on the Contact page: it is loaded from the servers of Google LLC / Google Ireland Ltd. only after you give consent (by clicking “Show map” or accepting in the banner). Google may then set its own cookies and receive, among other things, the IP address of your device. You can withdraw your consent at any time. Legal basis: Art. 6(1)(a) GDPR.
A detailed list of cookies can be found in our cookie policy. You can change your choice at any time using the “Cookie settings” link in the website footer.
7. Automated decision-making
We do not make decisions based solely on automated processing of data, including profiling.
8. Changes to this privacy policy
This privacy policy may be updated. The current version is always available on this page.
Last updated: 31 October 2026