New • Plants

Privacy Policy of newplants.pl

Last updated: 08.11.2025
Data Controller: New Plants Patrycja Kwiatkowska, ul. Ogrodnicza 28, 93-648 Łódź, Poland, VAT/NIP: PL9820378268
Contact: office@newplants.pl, +48 603 250 083, +48 607 196 128

1) General provisions

1. This Privacy Policy explains how personal data of users of newplants.pl (“Service/Website”) are processed and how cookies are stored and accessed.

2. Personal data are processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and applicable national laws.

2) Controller’s contact details

• Address: ul. Ogrodnicza 28, 93-648 Łódź, Poland

• E-mail: office@newplants.pl

• Phone: +48 603 250 083, +48 607 196 128

3) Scope and sources of data

1. Data voluntarily provided by you: name and surname, e-mail address, phone number, company name, inquiry content and any other data submitted via the contact form or by e-mail/phone.

2. Technical data collected automatically: IP address, timestamps, browser/device identifiers, Website activity (server logs) — used for security, statistics and site maintenance.

3. Data originate from: the contact form, your correspondence or calls, and Website mechanisms (logs, any analytics tools).

4) Purposes and legal bases

We process data for the following purposes:

1. Handling inquiries, preparing quotes/offers – Art. 6(1)(b) GDPR (pre-contract steps) and Art. 6(1)(f) (legitimate interest: communication with clients).

2. Concluding and performing a contract/order – Art. 6(1)(b) GDPR.

3. Accounting, tax and compliance – Art. 6(1)(c) GDPR (legal obligation).

4. Establishing, exercising or defending claims – Art. 6(1)(f) GDPR (legitimate interest).

5. Website security and statistics (logs, abuse prevention) – Art. 6(1)(f) GDPR.

6. Direct marketing of our own services (upon your request or with consent) – Art. 6(1)(a) or Art. 6(1)(f) GDPR.

7. Phone/e-mail contact regarding technical or commercial matters – Art. 6(1)(f) GDPR.

Where processing is based on consent (Art. 6(1)(a) GDPR), you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

5) Data retention

1. Contact form/correspondence data – up to 12 months after the conversation ends unless a contract is concluded.

2. Contractual/billing data – for the period required by law (as a rule 5 years for accounting/tax files).

3. Data processed on the basis of consent – until consent is withdrawn or the purpose is fulfilled.

4. Data necessary for claims – until the limitation period expires.

6) Data recipients

1. Data may be shared with entities supporting the purposes in section 4, in particular: hosting/IT and e-mail providers, accounting office, law firms, couriers and carriers, providers of security/analytics tools (if implemented).

2. Such entities process data under data processing agreements or as separate controllers, in compliance with GDPR.

7) Transfers outside the EEA

1. As a rule, we do not transfer data outside the European Economic Area.

2. If we use tools whose providers store data outside the EEA (e.g., Google), transfers rely on appropriate legal safeguards (e.g., Standard Contractual Clauses – SCC). Details are available in those providers’ privacy policies.

8) Your rights

You have the right to: access your data, rectify them, erase them, restrict processing, data portability, object to processing based on Art. 6(1)(f) GDPR, and to withdraw consent (if used as the legal basis).
You also have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO), Poland (uodo.gov.pl).

9) Cookies and similar technologies

1. The Website may use necessary cookies to ensure proper operation of the site and forms.

2. Analytics/security/marketing (optional): if implemented, the Website may use third-party tools (e.g., Google Analytics, Google reCAPTCHA, Google Maps, Meta Pixel). Before activation, we will request your consent via the cookie banner.

3. You can manage consents via your browser or our cookie preferences panel. Limiting some cookies may affect site functionality.

If you do not currently use GA/reCAPTCHA/Pixel, remove or postpone this point until implementation.

10) Automated decision-making / profiling

We do not make automated decisions producing legal effects concerning you, nor do we perform commercial profiling of Website users.

11) Data security

We apply technical and organisational measures appropriate to the risk, including encrypted connections (SSL/TLS), access control, and data minimisation.

12) Voluntary data provision

Providing data in the contact form is voluntary but necessary to respond, prepare a quote/offer and contact you back.

13) Changes to this Policy

This Policy may be updated due to legal, technological or service scope changes. The current version is always available on the Website with the date shown at the top.