Privacy policy
Effective from 17 October 2026.
01 Data controller
Your personal data is controlled by the operator of sanremopolska.pl (“we”). The full details of the controller, including company name, address and tax number, are provided in our reply to every enquiry and on request sent through the contact form.
02 What data we collect
Through the “Free consultation” form we collect the data you provide:
- full name and e-mail address (required),
- phone number, type of venue, coffees per day and message (optional),
- the model selected in the form or in the machine selector.
Together with the enquiry we store the IP address and information about how you reached the site (e.g. which ad or search engine), to protect the form against abuse and to measure our marketing.
After you send the form the enquiry goes to our mailbox and to an enquiry file on the server, and you receive an automatic confirmation by e-mail. We reply by e-mail, and if you give a phone number we may also call you. We do not send newsletters or marketing unrelated to your enquiry.
03 Purpose and legal basis
| Purpose | Legal basis (GDPR) | Retention |
|---|---|---|
| Replying to the enquiry and preparing a quotation | Art. 6(1)(a) consent and (b) steps prior to entering into a contract | Up to 24 months from the last contact or until consent is withdrawn |
| Protecting the form against spam and abuse | Art. 6(1)(f) legitimate interest | Up to 12 months |
| Establishing and pursuing claims | Art. 6(1)(f) legitimate interest | Until the limitation period expires |
04 Who receives the data
Data is stored on the server that hosts the site and sent to us by e-mail. We use a hosting and e-mail provider and, after you consent, Google Ireland Limited (Google Analytics 4, Google Ads) and Meta Platforms Ireland Limited (ad measurement on Facebook and Instagram). Fonts are stored on our server, so opening the site does not send data to Google.
We do not sell data or share it with other companies for marketing. Google and Meta may process data outside the European Economic Area based on a European Commission decision (Data Privacy Framework) or standard contractual clauses.
05 Security
The site uses HTTPS, so form data is encrypted in transit. The enquiry file and server configuration are not accessible from the internet.
06 Cookies
Until you consent we do not store analytics or marketing cookies on your device. We only remember your cookie decision, your theme choice and how you reached the site (browser session storage, cleared when you close the tab). You can change your decision with “Cookie settings” in the footer.
07 Your rights
You have the right to access your data, rectify it, erase it, restrict processing and data portability, and to object to processing based on legitimate interest. You can withdraw consent at any time by sending a message through the form on the site. Withdrawal does not affect the lawfulness of processing before it. You may lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.