Privacy policy
The website has no contact form and uses no analytics or advertising. Interactive Google Maps is loaded only after the visitor gives voluntary consent; without consent, a local map remains visible and does not connect to Google.
1. Data controller
The controller of personal data is Firma Handlowo-Produkcyjno-Usługowa „ZEN-DREW” Zenon Serafin, Poręby Dymarskie 71, 36-105 Cmolas, Poland, NIP 8140003511, REGON 690219273. The registered business details are available in the Polish CEIDG register.
Privacy enquiries can be sent to zendrew@wp.pl, made by phone at +48 17 283 72 48, or sent by post to the address above. The controller has not appointed a data protection officer.
2. Categories of data
When a person contacts ZEN-DREW by telephone or e-mail, the data they provide may be processed, including their name, company name, telephone number, e-mail address and information required to prepare a quotation or fulfil an order.
The server may automatically record basic technical information needed to deliver and secure the website, such as the IP address, request date and time, requested URL, browser identifier and server response code. This information is not used to profile visitors.
3. Purposes and legal bases
Data is processed to respond to an enquiry, prepare a quotation, take steps before entering into a contract or perform a contract under Article 6(1)(b) GDPR. Data required by accounting and tax rules is processed under Article 6(1)(c) GDPR.
Business correspondence, website security, abuse prevention and the establishment or defence of claims rely on the controller’s legitimate interests under Article 6(1)(f) GDPR.
4. Recipients and hosting
Data may be accessed only by providers supporting the website, hosting and security — in particular Cloudflare, Inc. — as well as the e-mail provider, IT support, accountants or legal advisers where required for a particular matter. After Google Maps consent is given, Google LLC may also receive technical data. Data may be disclosed to authorised public bodies where required by law. The controller does not sell visitor data.
5. Transfers outside the EEA
Cloudflare and Google operate globally, so technical data may be processed outside the European Economic Area. The providers state that they use legally required safeguards for international transfers. Details are available in Cloudflare’s privacy policy and Google’s privacy policy.
6. Retention
Enquiry data is retained for the time required to handle the matter and, where justified, until potential claims become time-barred. Contractual, accounting and tax records are kept for the period required by law. Technical data is retained in line with the hosting provider’s settings and rules, no longer than necessary to protect and operate the website.
7. Cookies and similar technologies
The website uses no analytics tools, advertising pixels or profiling. It stores only the Google Maps decision in the browser’s localStorage under the key zen_drew_google_maps_consent. The record expires after 180 days and prevents the same question from being shown on every page.
No Google Maps resource is requested before consent. After consent, the embedded map may use Google cookies, local storage, server logs and similar technologies. Consent can be changed at any time through “Privacy settings” in the footer. Hosting infrastructure may use technical measures necessary for website security and delivery.
8. Map and external links
Before consent, the website displays a local schematic map and does not connect to Google. After “Allow and show map” is selected, the browser loads embedded Google Maps, which may disclose the visitor’s IP address, browser information and activity data to Google. Withdrawing consent removes the embedded map and restores the local version. The separate “Get directions” link opens Google Maps in a new tab at the visitor’s express request. The CEIDG link also leads to an external service.
9. Data subject rights
Depending on the legal basis and circumstances, a person may request access to, rectification or erasure of their data, restriction of processing or data portability, and may object to processing based on legitimate interests. Google Maps consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal. The controller does not make decisions concerning visitors solely by automated means and does not profile them.
A person who believes that their data has been processed unlawfully may lodge a complaint with the President of the Polish Personal Data Protection Office.
10. Data source and voluntary provision
Data comes directly from the person contacting the business or the organisation they represent. Providing it is voluntary, but without contact details or information required for a quotation, ZEN-DREW may be unable to respond or fulfil an order.
11. Changes to this policy
This policy may be updated if website functionality, service providers or legal requirements change. The current document date is always shown at the beginning of this page.