Privacy policy

1. Data controller

The controller of your personal data is WITEK KRZYSZTOF FIRMA HANDLOWO-USŁUGOWA TEL-SERVICE, ul. Józefa Piłsudskiego 55, 34-520 Poronin, Poland, NIP (tax identification number) 7361232936, REGON (statistical number) 49077328300000, entered in the CEIDG (the Polish Central Register and Information on Economic Activity), operating since 1997. The PeletLab.pl website and the PeletLab brand are run by the controller.

• Contact on personal data matters: kontakt@peletlab.pl
• Contact on B2B partnerships: b2b@peletlab.pl

2. Form for producers and suppliers (B2B)

Data collected

The form on the “For producers” page may include:

• company name, country of production, website address
• name of the contact person, email address, telephone number
• product information: pellet type, wood species, diameter, certificate and certificate number / ENplus ID
• quality control information (if provided): regular quality control, sampling frequency, reference samples
• annual production, monthly volume available, pallet weight, number of pallets per truck
• EXW price, DAP Poland price, currency, private label option, whether a sample can be sent
• any additional text entered in the form
• attachments: product sheet, certificate, laboratory report or other product documents

The personal data relates mainly to the contact person. Fields marked as required are needed for us to respond to the application; all other fields are optional.

Purposes and legal bases

• Responding to the application, assessing the offer, negotiations and steps taken prior to entering into a contract — Article 6(1)(b) GDPR (insofar as the application is submitted by the data subject or on their behalf) and Article 6(1)(f) GDPR, i.e. our legitimate interest in establishing and conducting a business relationship with the business represented by the contact person.
• Performance of the business relationship, if one is established — Article 6(1)(b) or (f) GDPR.
• Compliance with legal obligations, e.g. tax and accounting obligations, where they arise in connection with the business relationship — Article 6(1)(c) GDPR.
• Establishment, exercise or defence of legal claims — Article 6(1)(f) GDPR.

Ticking the box in the B2B form confirms that you have read this policy — it is not consent, and we do not rely on consent as the basis for processing data in the B2B process.

B2B documentation

Technical documentation, reports, certificates and information on production capacity, availability and pricing terms are used primarily to assess a potential business relationship. Commercial terms and documentation received in the course of B2B discussions are not published as commercial information without the supplier's agreement or another legal basis.

3. Sales launch notification

On the “Offer” page you can leave your email address, customer segment (private customer, business, wholesale), your areas of interest and, optionally, your region (voivodeship) or town. We process this data solely to notify you once that sales have opened, on the basis of your consent — Article 6(1)(a) GDPR. You can withdraw your consent at any time by writing to kontakt@peletlab.pl; withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal. We do not run a newsletter.

4. How long we keep data

• B2B applications that did not lead to a business relationship — up to 24 months from the last contact.
• Data relating to a business relationship — for the duration of the relationship, then for the period required by tax and accounting legislation and until the limitation periods for claims have expired.
• Data for the sales notification — until the purpose has been fulfilled or consent is withdrawn, whichever is earlier.
• Technical logs — for the period set out in the website's technical security policy.

5. Recipients of data

Data may be disclosed to entities that provide services to us under contract, and only to the extent necessary for those services: providers of hosting and server infrastructure, email, backups and IT support, and — in a specific matter — also an accounting firm or a law firm. We do not sell data or share it with other companies for marketing purposes.

We do not plan to transfer data outside the European Economic Area. Should this become necessary in connection with a provider's service, it will take place subject to the safeguards required by the GDPR.

6. Technical logs and abuse prevention

The server on which the website runs keeps standard technical logs. These may include the IP address, the date and time of the request, the address of the page visited (URL), the HTTP response status and technical information about the browser (user agent). We use them to ensure security, diagnose errors and prevent abuse — on the basis of Article 6(1)(f) GDPR.

To limit automated and bulk submissions, the website briefly keeps, in the server's memory, a record of the number of submissions from a given IP address. The IP address is not stored with the content of the submission.

7. Cookies and similar technologies

The website does not use marketing cookies, analytics tools or advertising systems, and does not store data in your browser's storage (localStorage). Fonts are served from our own server, without calls to third-party providers. If we introduce statistics or other tools in the future, we will update this policy and — where required — ask for your consent.

8. Your rights

To the extent provided for by the GDPR, you have the right to:

• access your data and obtain a copy of it,
• rectification of your data,
• erasure of your data,
• restriction of processing,
• data portability — where applicable,
• object to processing based on legitimate interest,
• withdraw your consent at any time — where processing is based on consent,
• lodge a complaint with the President of the Personal Data Protection Office (UODO — the Polish data protection authority).

To exercise your rights, write to kontakt@peletlab.pl.

9. Profiling and automated decision-making

We do not make decisions based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you. We do not profile users for marketing purposes.

10. Security

We apply technical and organisational measures appropriate to the risk, including an encrypted connection (HTTPS), restricting access to applications and documents to the people who need it, server security measures and backups. Uploaded documents are not publicly accessible via the website.

11. Changes to this policy

We update this policy whenever the way data is processed on the website changes — for example, when a new form or tool is added. The current version is always available on this page.