Privacy policy

1. Data controller

The controller of your personal data is IZAR Sp. z o.o., ul. Grafitowa 6, 55-010 Radwanice, Poland, entered in the register of entrepreneurs of the Polish National Court Register (KRS) under number 0000777631, tax ID (NIP) 8961586005, REGON 382886720 (“IZAR”, “we”).

For any questions about personal data, email biuro@izar.pl, call +48 71 303 62 09 or write to our registered address.

2. What data we process

Enquiry form. Your name and email address (required) and, if you provide them, your company name, phone number, message and enquiry details (product code, current, quantity, length). With each message we store the language of the page and the address of the page it was sent from.

Correspondence. The data you give us when you email or call us directly.

Technical data. When the form is submitted, the server checks that not too many messages have been sent from the same IP address in a short time. For this purpose it only stores a one-way hash of the IP address with the time of sending, not the address itself; entries older than one hour are deleted the next time the form is used. To filter out spam, the form fetches a one-time token from the server (no cookies) and the server automatically checks the message for typical signs of spam (such as many links); messages identified as spam are neither sent nor kept; we only log the time and the reason they were rejected (no personal data), and doubtful messages reach us marked in the subject line. Like any web server, our hosting provider may record the IP address, date and time, the page requested and browser information in server logs.

3. Purposes and legal bases

• answering your enquiry, preparing a quotation and further correspondence: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and, if you write on behalf of a company, Art. 6(1)(f) GDPR (our legitimate interest in communicating with customers and business partners);
• the consent you tick in the form: Art. 6(1)(a) GDPR; you can withdraw it at any time without affecting the lawfulness of processing before withdrawal;
• visit statistics in Google Analytics (only with your consent in the banner): Art. 6(1)(a) GDPR, details in section 6;
• establishing, exercising or defending legal claims: Art. 6(1)(f) GDPR;
• protecting the form against abuse and keeping the website secure (message limit, server logs): Art. 6(1)(f) GDPR.

We do not send marketing messages without your separate consent. We do not profile you or make automated decisions that have legal effects on you. The form only filters out spam automatically (see the technical data paragraph).

4. How long we keep data

We keep form messages and correspondence for as long as needed to answer and to conduct business discussions. If we enter into a contract, we keep the data for the duration of the contract and then for the period required by law (for example tax law) and until any claims become time-barred. Data processed on the basis of consent is kept until consent is withdrawn. IP address hashes older than one hour are deleted the next time the form is used. Section 6 describes the periods for cookies and Google Analytics.

5. Who receives data

Data may only be received by companies that process it on our behalf: the provider of website hosting and email and companies that maintain our IT systems, under data processing agreements. We may also disclose data to public authorities where the law requires it.

If you consent to statistics, visit data is also received by Google Ireland Limited as the provider of Google Analytics (section 6).

We do not sell data or share it with other companies for marketing purposes.

6. Cookies and Google Analytics

With your consent we use Google Analytics 4 to learn which pages and products interest visitors and what to improve on the website. Without consent, Google Analytics is not loaded and the website works just the same. We ask for consent in a banner on your first visit: the “Accept” and “Reject” buttons carry equal weight, and under “Settings” you can choose each category separately.

What we store in your browser:

The contact form sets no cookies (the message limit works on the server, see section 2). The website uses no other cookies.

How Google Analytics works. Google Analytics stores a random browser identifier in a cookie and uses it to count visits: which pages are opened, for how long, from which country and device, and where the visitor came from (for example a search engine). In doing so, your browser sends Google data such as your IP address, the address of the page and information about your browser and device; according to Google, the IP address is only used to derive an approximate location and is not stored in Google Analytics 4. We use aggregated reports, do not try to identify individual visitors and do not combine this data with data from the form. We do not enable Google’s advertising features: consent for advertising purposes is always denied on this website.

Legal basis. Google Analytics cookies are stored and read, and visit data is processed, only on the basis of your consent: Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej). The izar-consent entry is strictly necessary to remember your choice, so it does not require consent. Consent is voluntary.

Recipient and transfers outside the EEA. Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA. Google LLC participates in the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023.

Duration. The _ga and _ga_<ID> cookies expire 2 years after your last visit (some browsers shorten this), or earlier if you withdraw consent or delete them in your browser. Google Analytics keeps visit data linked to the browser identifier for the period set in our Google Analytics property (data retention setting) and then deletes it automatically. Aggregated reports without identifiers may remain available for longer.

How to change or withdraw consent. Click “Cookie settings” in the footer of any page (or the button below) and switch off “Analytics” or choose “Reject”. The change takes effect immediately, without reloading the page: Google Analytics stops collecting data and the _ga and _ga_<ID> cookies are deleted. Withdrawing consent does not affect the lawfulness of processing before withdrawal. After 12 months we will ask again.

Cookie settings

More about how Google processes data: Google Privacy Policy and how Google uses information from sites that use its services.

External services. Fonts, images and scripts are loaded from our own server. The website does not embed maps, videos or plug-ins from other companies’ servers. Without your consent, your browser only connects to the izar.pl server; after you consent to statistics, it also connects to Google Analytics servers.

Links to Google Maps, OpenStreetMap, LinkedIn and WhatsApp and to the websites of the people who built this site (c3s.pl, czujowski.pl) lead to external services. They only receive data when you click a link; from then on, their own privacy policies apply.

7. Your rights

You have the right to:

• access your data and receive a copy (Art. 15 GDPR);
• rectify your data (Art. 16 GDPR);
• have your data erased (Art. 17 GDPR);
• restrict processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• object to processing based on legitimate interests (Art. 21 GDPR);
• withdraw your consent at any time.

To exercise these rights, email biuro@izar.pl. You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa), or with the supervisory authority in your country of residence.

8. Do you have to provide data?

Providing data is voluntary. However, without your name and email address we cannot answer an enquiry sent through the form.

9. Changes to this policy

We may update this policy, for example when the website’s features change. The current version, with the date of the last change, is always on this page.