Personal data and contact with PAPAHUNE

The controller of personal data submitted through this website is GlocalPartner Aleksandra Szuszkiewicz, operating the PAPAHUNE brand, NIP (Polish tax identification number): 576 149 35 27; business correspondence address: ul. Pomorska 40, 91-408 Łódź, Poland. Contact: office@papahune.com; telephone: +48 501 084 836. You may use these details to exercise your data protection rights.

We receive information you choose to provide: contact name, e-mail address, organisation (where relevant), country or market, enquiry category, message, and any B2B volume or timing details. Our website and form security systems may also process technical connection information such as IP address, browser information, session identifiers and request timestamps. Please do not submit health data, diagnoses, medical records or other sensitive information through these forms.

• Responding to enquiries, preparing quotations and processing orders: GDPR Article 6(1)(b) when taking steps requested by an individual before a contract or performing a contract; otherwise, including business contact details, Article 6(1)(f) — our legitimate interest in managing enquiries and commercial relationships.
• Accounting and tax compliance: Article 6(1)(c) when applicable.
• Website and form security, spam prevention and legal claims: Article 6(1)(f) — our legitimate interest in protecting the service and our rights.

Submitting an enquiry does not subscribe you to a newsletter or amount to consent to unsolicited e-mail marketing.

Access may be granted to authorised PAPAHUNE personnel and service providers who support the website, including dhosting.pl (hosting), the configured e-mail provider and Cloudflare (Turnstile form protection), as well as IT, legal or accounting service providers where required. We may disclose data to authorities where the law requires it. We do not sell personal information.

Some providers, particularly Cloudflare, may process or access personal information from outside the European Economic Area. Where a transfer takes place, an appropriate GDPR Chapter V mechanism must apply, such as an applicable European Commission adequacy decision or standard contractual clauses depending on the provider and circumstances. Contact us to ask which transfer safeguards apply or how to obtain a copy. See Cloudflare's privacy information.

Enquiry data is retained for as long as necessary to respond, prepare an offer, complete an order or manage an ongoing relationship. Limited records may then be kept where necessary for applicable legal claim limitation periods. Accounting and tax records are retained for statutory periods. Technical session data and service logs are kept as required for form operation and security, with the relevant service configuration and data minimisation principles determining their duration.

The site uses technical session mechanisms required for reliable and secure form operation, including a CSRF token. Cloudflare Turnstile protects the form and may evaluate technical browser signals to identify automated traffic. As of this policy update, the site does not use advertising profiling or newsletter tracking. You can adjust cookies through your browser; disabling essential mechanisms may prevent the form from working.

Subject to the conditions of the GDPR, you have rights to access (Article 15), correction (Article 16), erasure (Article 17), restriction (Article 18), and portability where applicable (Article 20). Where processing is based on legitimate interests, you may object on grounds relating to your particular situation (Article 21). When consent applies to a specific activity, it can be withdrawn without affecting earlier lawful processing. Contact office@papahune.com. You may also complain to the Polish supervisory authority, the President of the Personal Data Protection Office: uodo.gov.pl.

Providing personal data is voluntary, but we may be unable to answer an enquiry or prepare a quotation without contact details and relevant requirements. We do not make solely automated decisions with legal or similarly significant effects within the meaning of GDPR Article 22. Security screening is used to defend against spam.

We may update this policy when our practices, services or legal requirements change. The current English version is available at papahune.com/privacy.html.