Privacy Policy

Notice: The Polish version of this Privacy Policy is binding. A full English translation is in progress. Please refer to the Polish version or contact us at [email protected].

Summary of key points

Data Controller: Gurgul Investment sp. z o.o., ul. Polna 3, 44-285 Kobyla, Poland NIP: 6392018818, KRS: 0000812023 Contact: [email protected]

Data processed:

• Form submissions: name, email, phone, VAT-ID, business details
• Technical data: IP address, User-Agent, GDPR consent timestamp

Purposes:

• Processing distributor application (Art. 6(1)(b) GDPR)
• Email verification via Double Opt-In (Art. 6(1)(a) GDPR)
• Direct marketing for confirmed distributors (Art. 6(1)(f) GDPR)

Data processors:

• Cloudflare, Inc. (USA) - hosting, EU-U.S. Data Privacy Framework
• Resend, Inc. (USA) - email delivery, Standard Contractual Clauses
• Supabase, Inc. (data in EU - Frankfurt) - database

Retention periods:

• Unconfirmed submissions: 30 days
• Confirmed submissions without cooperation: 12 months
• Active distributors: until end of cooperation + 6 years (tax law)

Your rights (GDPR): Access, rectification, erasure, restriction, objection, data portability, withdrawal of consent, complaint to the Polish Data Protection Authority UODO.

Contact for data protection inquiries: [email protected]

Full information is available in the Polish version of this document.