Privacy policy
1. Data controller
The controller of personal data collected through bergoirrigation.com is DRAGO Spółka z ograniczoną odpowiedzialnością Spółka komandytowa, with its registered office in Gdańsk, ul. Kartuska 370, 80-125 Gdańsk, Poland, entered in the register of entrepreneurs under KRS number 0000779137, NIP (tax ID) 5833348422, REGON 382941531 (the "Controller"). Contact: biuro@drago.pl, tel. +48 58 303 96 24.
The Controller has not appointed a Data Protection Officer - for data protection matters please use the e-mail address above.
2. What data we process
Through the website we process data provided voluntarily in forms: name, e-mail address, phone number, VAT ID (for business enquiries) and the content of your message, and - in the newsletter form - your e-mail address. In addition, for technical and security reasons, the server may record your IP address and basic browser information (server logs); under the GDPR these are also personal data.
3. Purposes and legal bases (Art. 6 GDPR)
- responding to an enquiry sent via the contact form - Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (the Controller's legitimate interest in handling correspondence);
- sending the newsletter - Art. 6(1)(a) GDPR (consent, which may be withdrawn at any time);
- website usage statistics (Google Analytics) - Art. 6(1)(a) GDPR (consent given in the cookie settings);
- security and abuse prevention (server logs) - Art. 6(1)(f) GDPR;
- accounting where cooperation is established - Art. 6(1)(c) GDPR (legal obligation).
4. How long we keep the data
- form enquiries not followed by cooperation - up to 12 months after the correspondence ends;
- data related to potential claims - until they become time-barred under the Polish Civil Code (as a rule, 3 years);
- accounting documents - 5 years, under the Polish Tax Ordinance;
- the newsletter e-mail address - until consent is withdrawn;
- the cookie consent record - until you change it or clear your browser data.
5. Recipients of the data
Data may be entrusted to entities processing it on the Controller's behalf, solely to the extent necessary for the website to operate: the hosting provider and - only after consent to analytics cookies - Google Ireland Ltd. as the provider of Google Analytics. Data may be disclosed to public authorities entitled to it by law.
6. Cookies
Cookies are small text files stored on your device. The website uses a consent mechanism with three categories:
- Essential - necessary for the website to work (including remembering your cookie decision). Always active.
- Analytics - Google Analytics; loaded only with your consent. They help us understand how the website is used.
- Marketing - currently inactive; they will only be enabled if such tools are actually deployed, which will be reflected in this document.
You can change your decision at any time by clicking the cookie icon in the bottom-left corner of the page. You can also delete or block cookies in your browser settings. The website embeds a YouTube video - playing it (after a click) may result in cookies being set by YouTube (Google Ireland Ltd.).
More about data processing by Google: Google Privacy Policy and Google Analytics data retention.
7. Your rights
Under Articles 15-21 GDPR you have the right to: access your data, rectify it, erase it (the "right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal). We handle requests without undue delay, at the latest within one month.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).
8. Voluntary provision of data
Providing your data is voluntary, but necessary to handle your enquiry or send the newsletter.
9. Changes to this policy
This policy may be updated, for example when new website features are deployed. The current version is always available at this address.
10. Legal basis
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) - text on EUR-Lex. Retention periods follow from the Polish Civil Code and the Polish Tax Ordinance respectively.