Last updated: 30 May 2026
1. General information
This privacy policy describes how we process personal data and use cookies and similar technologies in connection with the operation of the Polpapier website. It applies to visitors of the website, users of the contact form, persons submitting quotation requests and anyone contacting us using the contact details published on the website.
We ensure that data processing is carried out in accordance with applicable regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as GDPR) and the provisions on storing information and accessing information stored on the end user's device.
2. Data controller
The data controller is POLPAPIER, with its registered address at: Popielewo 37, 78-320 Popielewo, Poland. For matters relating to the protection of personal data, you can contact us by email at polpapier@polpapier.pl or by post at: Popielewo 37, 78-320 Popielewo, Poland.
The controller determines the purposes and means of processing personal data. Data is processed only to the extent necessary to operate the website, respond to enquiries, prepare quotations and ensure the proper functioning of the service.
3. Data submitted via the contact form
Using the contact form, you may voluntarily provide your first and last name, company name, telephone number, email address and the content of your message. The email address, message content and consent to data processing for the purpose of handling the enquiry are required in order for the form to be sent. The remaining fields are optional and serve to facilitate contact or prepare a more accurate response.
Data submitted via the form is processed for the purpose of reviewing the message, responding, conducting further correspondence and preparing commercial information or a quotation matching the content of the enquiry. The legal basis for processing data at this stage is your consent, pursuant to Article 6(1)(a) of the GDPR. If the contact leads to steps taken at your request prior to entering into a contract, the legal basis may also be Article 6(1)(b) of the GDPR.
You may withdraw your consent at any time by sending a message to polpapier@polpapier.pl. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal. Providing data is voluntary; however, without an email address, message and the required consent, we will not be able to process the form.
4. Other forms of contact
If you contact us directly by email or telephone, we may process data contained in the correspondence or provided during the conversation. The scope of data depends on the content of the contact and may include identification data, contact details, company name, position and information regarding the expected product or service.
We use this data for the purpose of responding, conducting correspondence, presenting a quotation or taking steps prior to entering into a contract. Please do not provide data that is not needed to handle the matter, in particular special categories of personal data.
5. Server logs and website security
When using the website, the server may automatically record basic technical information related to the connection, such as IP address, date and time of the request, browser type, operating system, address of the visited subpage and information about any errors. This type of data may be recorded in server logs by the hosting provider.
We use technical information only to the extent necessary to ensure security, diagnose errors, detect abuse and maintain the proper functioning of the website. The legal basis for such processing is the legitimate interest of the controller in securing the service and its users, pursuant to Article 6(1)(f) of the GDPR.
6. Data recipients
Personal data may be entrusted to entities supporting the operation of the website and the handling of correspondence, in particular the hosting provider, email provider and technical service providers. These entities receive data only to the extent necessary to perform their tasks and are expected to process it in accordance with applicable regulations.
If optional technologies are accepted, technical data related to the use of the website may be transferred to Google in connection with the operation of Google Analytics 4 and the embedded Google Maps. Google services may involve the processing of data outside the European Economic Area. Detailed information on data processing rules and the security measures applied can be found in the Google privacy policy.
Data may also be disclosed to authorised public authorities if the obligation to provide it arises from legal provisions or a properly directed request from the competent authority.
7. Data retention period
Data provided in connection with an enquiry is retained for the period necessary to respond and conduct correspondence. If the conversation leads to the conclusion of a contract or fulfilment of an order, the data may be stored for the period required by law and for the time necessary to establish, pursue or defend against potential claims.
If we process data solely on the basis of consent, we will generally delete it after consent is withdrawn, unless further storage is justified by another legal basis. Technical logs are kept for a period appropriate to the purpose for which they were collected, taking into account security needs and the configuration of hosting services.
8. Your rights
In cases provided for by the GDPR, you have the right to request access to your personal data, receive a copy, rectify inaccurate data, complete incomplete data, erase data, restrict processing and request data portability. If processing is based on our legitimate interest, you may also object to such processing.
If the legal basis for processing is consent, you have the right to withdraw it at any time. You may also lodge a complaint with the President of the Personal Data Protection Office if you believe that data is being processed unlawfully. To exercise your rights, contact us at polpapier@polpapier.pl.
9. Cookies and browser local storage
Cookies are small pieces of information stored in the user's web browser. The website may also use similar technologies, such as browser local storage. On your first visit, you may accept or reject optional technologies used for traffic measurement and loading the embedded Google map.
Your choice regarding optional technologies is stored in the browser's local storage. This means the message does not have to appear on every subsequent page load. Storing the decision itself is necessary to respect the selected settings. You may change your decision at any time by selecting "Cookie settings" in the page footer.
You may also restrict or delete cookies in your browser settings. Disabling optional technologies does not prevent you from using the basic functions of the website. However, it may mean that the embedded map is not displayed. In such a case, you can still use the direct link to the map.
10. Google Analytics 4
After consent is given, we activate Google Analytics 4 with a measurement ID assigned to this website. The tool is used to generate statistics such as the number of visits, popularity of individual subpages, time spent on the website or traffic sources. This information helps evaluate which content is useful and where the website's performance could be improved.
Google Analytics may store _ga and _ga_<identifier> cookies, used to distinguish users and sessions. The default retention period for these cookies is up to 2 years. We do not load Google Analytics or use analytical cookies until consent has been obtained. We do not use advertising cookies on this website.
After consent is withdrawn, the website updates the analytics settings and attempts to delete any _ga cookies it has stored. You may also delete cookies yourself in your browser settings. More information about Google's technologies can be found in Google's cookie information.
11. Google Maps
We provide a location map on the contact page. The embedded Google Maps is only loaded after you consent to optional technologies. Until then, the website displays a placeholder and a link to open the location in an external service.
Once the embedded map is loaded, your browser connects to Google's servers. Google may receive technical data such as your IP address, device and browser information, and may use cookies or similar technologies in accordance with its own policies. Details are described in the Google privacy policy.
12. Automated decision-making
We do not make decisions based solely on automated processing that produce legal effects concerning users or similarly significantly affect them. We do not profile users for the purpose of serving advertisements or automatically deciding whether to present or decline a quotation.
13. Changes to the privacy policy
This privacy policy may be updated periodically, in particular in the event of changes to the website's functionality, the use of external services or changes in legal requirements. The current version of the document is published on this page together with the date of the last update.