PRIVACY AND COOKIES POLICY

1.GENERAL INFORMATION

1.1.This Privacy and Cookies Policy (“Policy”) defines the principles for processing personal data and the rules for using cookies and similar technologies on the website available at https://uprawapasowa.pl (“Website”).

1.2.The controller of personal data processed in connection with the use of the Website is CZAJKOWSKI MASZYNY SP. Z O.O. with its registered office in Sokołowo (Sokołowo 1C, 87-400 Golub-Dobrzyń), entered into the register of entrepreneurs of the National Court Register kept by the District Court in Toruń, VII Commercial Division of the National Court Register, under KRS number 0000622078, NIP 5030079262, REGON 364665016 (“Company”).

1.3.The Company has not appointed a data protection officer – legal provisions do not impose such an obligation on the Company. In all matters concerning personal data, you may contact the Company:

1.3.1.via email: kontakt@uprawapasowa.pl,

1.3.2.by phone at: +48 570 135 960,

1.3.3.by mail at the address: Sokołowo 1C, 87-400 Golub-Dobrzyń.

1.4.Scope of the Policy. The Policy applies to the processing of data of persons using the Website. If you are a Customer or a potential Customer of the Company, its supplier, a person acting on behalf of a Customer or supplier, or a sender or recipient of correspondence with the Company, full information about the processing of personal data is contained in a separate document – Information on personal data processing (information clause), available at https://uprawapasowa.pl/klauzula-informacyjna-RODO-v2609 and delivered as an attachment to the sales agreement.

1.5.The terms used in the Policy mean:

1.5.1.GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;

1.5.2.p.k.e. – Act of 12 July 2024 – Law on Electronic Communications;

1.5.3.User – a natural person using the Website;

1.5.4.cookies – cookies and other technologies that allow for storing information on or accessing information stored in the User's terminal equipment, as referred to in point 4.

2.DATA PROVIDED THROUGH FORMS AND CONTACT CHANNELS ON THE WEBSITE

2.1.The Website allows for the transmission of personal data to the Company in the following manner:

2.1.1.via forms made available on the Website, including the contact form;

2.1.2.via messages sent to the email addresses indicated on the Website, including kontakt@uprawapasowa.pl and praca@uprawapasowa.pl;

2.1.3.via telephone calls to the numbers indicated on the Website.

2.2.Providing data is voluntary. The scope of the provided data is determined each time by the content of the form or the content of the message directed to the Company. Failure to provide data marked as necessary makes it impossible to provide a response to an inquiry.

2.3.Purposes and legal bases for processing data provided in the manner indicated in point 2.1:

2.3.1.responding to an inquiry and conducting ongoing correspondence – based on the Company’s legitimate interest in handling inquiries directed to it and maintaining communication with persons contacting the Company [Art. 6(1)(f) GDPR];

2.3.2.taking steps to enter into an agreement, including the preparation of a commercial offer – if the inquiry concerns the purchase of the Company’s goods or services [Art. 6(1)(b) GDPR], and with regard to a person acting on behalf of an entrepreneur – based on the Company’s legitimate interest in taking such steps [Art. 6(1)(f) GDPR];

2.3.3.conducting recruitment – regarding application documents sent to the address praca@uprawapasowa.pl. The Website does not contain a recruitment form; applications are directed directly to the indicated email address. Data are processed for the purpose of conducting the recruitment process – within the scope of data indicated in Art. 22(1) of the Labor Code – based on the legal obligation incumbent on the Company [Art. 6(1)(c) GDPR], and regarding data provided beyond this list and in the case of spontaneous applications – based on the candidate's consent, expressed by sending the application [Art. 6(1)(a) GDPR];

2.3.4.establishing, pursuing, or defending against claims, as well as for archival and evidentiary purposes – based on the Company’s legitimate interest [Art. 6(1)(f) GDPR].

2.4.Data provided in the manner indicated in point 2.1 are not sold or shared with third parties for the marketing purposes of such entities. They are, however, disclosed to recipients indicated in point 6.

2.5.Sending commercial information to the provided telephone number or email address takes place only after prior consent has been granted, separately for each contact channel [Art. 398 p.k.e.]. Consent may be withdrawn at any time, in a manner as easy as it was given; withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

3.ACTIVITY ON THE WEBSITE AND SERVER LOGS

3.1.Using the Website involves the automatic recording of information about requests directed to the server in the server layer. The following are recorded in particular: the URL address of the viewed resource, the time of the request arrival and the time of sending the response, IP address, information about the User's browser and operating system, information about errors occurring during the processing of HTTPS transactions, and the address of the previously visited page (referer), if the transition to the Website occurred via a link.

3.2.The IP address and other information recorded in the logs may constitute personal data. The Company does not use them to identify Users, nor does it combine them for this purpose with other data. This does not exclude the determination of the User's identity if such an obligation arises from legal regulations or if it is necessary to establish, pursue, or defend against claims.

3.3.Purpose and legal basis: administering the Website, ensuring its proper operation and security, detecting abuse, and creating technical statistics – the Company’s legitimate interest [Art. 6(1)(f) GDPR].

3.4.Server logs are collected and stored by the Website’s hosting operator – LH.pl Pl. Wolności 6/4 61-738 Poznań, acting on behalf of the Company as a processor, based on a personal data processing entrustment agreement that meets the requirements of Art. 28 GDPR.

3.5.The retention period for server logs is: Backups are performed daily and stored for 30 days on an external backup server.

4.COOKIES AND SIMILAR TECHNOLOGIES

4.1.Cookies are IT data, in particular small text files, saved on the User's terminal equipment and read by the Website. They usually contain the name of the website they come from, their storage time, and a unique number. The provisions of this point apply accordingly to other technologies that allow for storing information on or accessing information stored in the User's terminal equipment.

4.2.Consent rule. Storing information on the User's terminal equipment and accessing it is permissible only after the User has been informed about the purpose of such action and has previously granted their consent [Art. 399(1) p.k.e.]. Consent is expressed by an active and unambiguous action of the User in the cookie management panel. Browser settings allowing cookies in the default configuration do not constitute consent.

4.3.Exception. Consent is not required if the storage of or access to information is necessary to transmit a message or is necessary to provide an information society service requested by the User [Art. 399(3) p.k.e.]. This exception covers only the category of files defined in point 4.4 as necessary.

4.4.Categories of cookies used on the Website:

The list was prepared based on the state of the Website as of August 9, 2026. A full and current list of files, including the indication of the domain, type (first-party or third-party), retention period, and data recipient, will be supplemented based on a scan of the Website.

4.5.The division of cookies into session cookies – removed after closing the browser – and persistent cookies – stored for the period indicated in their parameters or until their deletion by the User – is of a technical nature and does not affect the obligation to obtain consent. The obligation to obtain consent is determined solely by the category indicated in point 4.4.

4.6.Consent management. Consent for individual categories of cookies is expressed separately for each of them, in the panel provided upon the first access to the Website. Category switches requiring consent are disabled by default. Until consent is granted, the Website does not run scripts belonging to categories other than necessary.

4.7.Withdrawal of consent. Consent can be withdrawn at any time, without giving a reason and in a manner as easy as it was given – via the “Cookie settings” link available in the footer of every subpage of the Website. Withdrawal of consent results in the cessation of the use of files of a given category and the cessation of data transmission to their recipients. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

4.8.Regardless of the panel referred to in point 4.6, the User may at any time change the settings of their web browser regarding cookies, including blocking or deleting them. Detailed information is contained in the browser's help or documentation. Restricting the use of cookies may affect some functionalities of the Website; however, refusal to grant consent does not block access to the content of the Website.

4.9.Profiling. In the marketing and profiling category, the User's data are subject to profiling, that is, automated processing consisting of the assessment of their interests and preferences in order to display matched advertising materials. The consequence of profiling is displaying to the User advertising materials corresponding to their previous activity on the web. Profiling takes place only based on consent and only within the scope of this category. The Company does not make decisions towards the User based solely on automated processing, including profiling, which would cause legal effects towards them or similarly significantly affect them [Art. 22 GDPR]. Each commercial offer is prepared and approved by an employee of the Company.

5.SOCIAL MEDIA COMPANY PROFILE

5.1.The Company maintains profiles on Facebook, LinkedIn, and YouTube social media platforms. The Website contains links to these profiles, as well as embedded video materials from the YouTube service.

5.2.With regard to data processed in connection with maintaining the profile, including data resulting from profile audience statistics, the Company and the operator of the given social media service are joint controllers of personal data [Art. 26 GDPR]. The essential content of the arrangements between the joint controllers is made available by the operators of these services within their terms and conditions and privacy policies. The Company processes data in this scope for the purpose of maintaining communication with the profile audience, building and maintaining relationships, and promoting its goods, services, and image – based on a legitimate interest [Art. 6(1)(f) GDPR].

5.3.The operator of the given service is responsible for the processing of personal data carried out within the social media services themselves, including the cookies used therein and the transfer of data, under the principles set out in its terms and conditions and privacy policy.

6.RECIPIENTS OF PERSONAL DATA

6.1.Personal data processed in connection with the use of the Website may be disclosed to the following categories of recipients:

6.1.1.the hosting operator of the Website;

6.1.2.the provider of analytical and advertising tools – within the scope of Google Analytics and Google Ads services;

6.1.3.the operator of the YouTube service – within the scope of video materials embedded in the Website;

6.1.4.the operators of the social media services referred to in point 5;

6.1.5.the provider of a tool used to manage consent for cookies;

6.1.6.providers of IT services, including email, customer service systems, and data storage services;

6.1.7.providers of postal, courier, legal, accounting, and insurance services – to the extent necessary for the service provided.

6.2.Data is disclosed to entities acting on behalf of the Company only to the extent necessary for the given service, based on personal data processing entrustment agreements meeting the requirements of Art. 28 GDPR.

6.3.Public authorities, which may receive personal data as part of a specific proceeding conducted in accordance with the law, are not recipients of data within the meaning of the GDPR. The Company discloses data to such authorities to the extent resulting from their lawful request.

7.TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

7.1.As a rule, personal data processed in connection with the use of the Website are processed within the European Economic Area.

7.2.Due to the Company's use of analytical and advertising tools as well as video materials embedded in the Website, a transfer of personal data to the United States of America may occur. The transfer takes place on the basis of the European Commission's implementing decision of July 10, 2023, stating an adequate level of protection for personal data ensured by the EU–US Data Privacy Framework – provided the recipient participates in this program – and in other cases on the basis of standard contractual clauses adopted by the European Commission [Art. 46(2)(c) GDPR].

7.3.Information about the safeguards used and the method of obtaining a copy thereof can be obtained by contacting the Company in the manner indicated in point 1.3.

8.DATA RETENTION PERIODS

8.1.Data saved in cookies – for the duration of the given file storage indicated in point 4.4, but no longer than until the consent is withdrawn or the file is deleted by the User.

8.2.Data saved in server logs – for the period indicated in point 3.5.

8.3.Data from correspondence and inquiries addressed to the Company – until the case is concluded, and subsequently until the expiry of the limitation period for potential claims.

8.4.Data of job candidates – for the duration of the recruitment process to which the application relates, and in the event of consent to participate in future recruitments – until its withdrawal, but no longer than six months.

8.5.Data processed on the basis of consent – until its withdrawal.

8.6.Retention periods for the data of Clients, potential Clients, suppliers, and persons acting on their behalf are defined by the Information on personal data processing referred to in point 1.4.

9.RIGHTS OF THE DATA SUBJECT

9.1.You have the right to:

9.1.1.obtain confirmation as to whether your personal data are being processed, access to this data, and receive a copy thereof;

9.1.2.rectify incorrect data and supplement incomplete data;

9.1.3.erase personal data;

9.1.4.request the restriction of the processing of personal data;

9.1.5.data portability – within the scope of data processed in an automated manner based on consent or a contract;

9.1.6.withdraw consent at any time, whereby the withdrawal of consent does not affect the lawfulness of processing carried out on its basis before the withdrawal;

9.1.7.lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

9.2.The rights referred to in point 9.1 may be exercised by contacting the Company in the manner indicated in point 1.3.

10.RIGHT TO OBJECT

10.1.At any time, you have the right to object to the processing of your personal data for the purposes of direct marketing, including profiling to the extent that the processing is related to such direct marketing. This objection does not require justification – upon its submission, the Company shall cease processing personal data for these purposes.

10.2.Regardless of the right indicated in point 10.1, you have the right to object to the processing of personal data based on the Company's legitimate interest [Art. 6(1)(f) GDPR] – for reasons related to your particular situation.

10.3.The objection is free of charge and can be submitted in any way, in particular by message to the address kontakt@uprawapasowa.pl or by phone at +48 570 135 960.

11.POLICY CHANGES

11.1.The Policy is marked with a version number with an encoded date from which it is effective. This designation is located in the document header.

11.2.The Company reviews the Policy in the event of a change in legal regulations, a change in the scope or purposes of personal data processing, or a change in the tools used on the Website. The Company records the result of the review by changing the version number and the effective date. Previous versions of the Policy, along with an indication of their validity periods, are archived by the Company and made available upon request.