RODO / GDPR
Privacy policy
What this site collects, what it does not, and what you can ask us to do about it.
Last updated 21 September 2026
Who the controller is
The controller of your personal data is NEGROCOMMERC sp. z o.o., ul. Aleksandra Fredry 2/7, 30-605 Kraków, Poland, entered in the National Court Register under KRS 0001264031, NIP 6793374803. For any question about your data, write to NEGROCOMMERC@proton.me.
What this site collects
This website is a set of static pages. It runs no analytics, sets no cookies, embeds no tracking pixels and no third-party advertising. Browsing it does not create a profile of you.
The only place data is collected is where you choose to give it. The quote form on the contact page composes an email in your own mail client and sends nothing from the page itself — nothing reaches us until you press send in your own software.
Data we receive when you contact us
- Company name and NIP or EU VAT number
- The name and email address of the person writing
- Whatever you put in the enquiry — quantities, specifications, a delivery postcode, attached drawings
- The ordinary technical headers attached to any email you send us
Our hosting provider keeps standard server logs, including IP addresses, for security and diagnostics. We do not use those logs to identify individuals.
Why we process it, and on what basis
- To answer an enquiry and to prepare and perform a contract — Article 6(1)(b) GDPR.
- To keep accounting and tax records required of us — Article 6(1)(c) GDPR.
- To pursue or defend claims arising from a supply — Article 6(1)(f) GDPR, our legitimate interest.
We do not send marketing email to people who have not asked for it, and we do not sell or rent contact data to anyone.
How long it is kept
- Enquiries that do not become orders — 12 months from the last message.
- Order and account records — 5 years from the end of the tax year, as Polish accounting law requires.
- Claim-related correspondence — until the relevant limitation period ends.
Who else sees it
Only the parties that have to, in order to get material to you: the carrier handling your delivery, our accountants, our email and hosting providers, and — where a claim is made — the manufacturer whose product it concerns. Each is bound by a data processing agreement or by professional confidentiality.
We do not transfer personal data outside the European Economic Area.
Your rights
Under the GDPR you may ask us for access to your data, for it to be corrected or erased, for processing to be restricted, for a portable copy, and you may object to processing based on our legitimate interest. Write to the address above; we answer within one month.
If you think we have handled your data badly, you can complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.
Automated decisions
We do not make automated decisions about you and we do not profile you. Pricing tiers are applied to order volumes, not to people.
Changes
If this policy changes, the date below the title changes with it. Material changes affecting existing accounts are notified by email.