Last updated: 10.09.2026
1. Who is responsible
The controller is Firma Drewuś Tomasz Sulka, Grzechynia 229, 34-220 Grzechynia, Poland, VAT ID PL5521703209, REGON 122911632. Contact for data matters: biuro@drewus.pl, +48 795 930 066. No data protection officer has been appointed, as there is no legal obligation to do so. Please write to the address above.
2. What data is collected
From the enquiry form: name or company name, e-mail address, optionally phone number and VAT ID, the description of the enquiry, and any files you attach. Automatically on submission: IP address and the time of sending. From correspondence: whatever you write in an e-mail or say on the phone.
No special categories of personal data are collected. Bank details, ID numbers and card details are never requested through this form.
3. Purposes and legal bases
- answering the enquiry and preparing a quote — Art. 6(1)(b) GDPR, steps taken at your request prior to entering into a contract, and for handling the submission itself also (a), your consent - fulfilling an order and issuing a sales document — Art. 6(1)(b) and (c), tax and accounting obligations - protecting the form from abuse, meaning the record of IP address and time — Art. 6(1)(f), legitimate interest - establishing or defending legal claims — Art. 6(1)(f)
4. How long data is kept
- enquiry that did not lead to an order: up to 12 months from the last message - enquiry that led to an order: until settlement is complete; sales documents for 5 years from the end of the year in which the tax became due - IP address from the form: 30 days
5. Who receives the data
- OVH SAS — hosting of the website and mailbox, servers in the European Union - courier company — only when goods are actually shipped - accounting office and tax authorities — when a sales document is issued
Data is not sold and not shared for marketing purposes. It is not transferred outside the European Economic Area. There is no profiling and no automated decision-making.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, objection to processing based on legitimate interest, and data portability. Consent can be withdrawn at any time by a single message to biuro@drewus.pl. Withdrawal does not affect the lawfulness of processing carried out before it.
7. Complaints
You may lodge a complaint with a supervisory authority, in particular the one in your own Member State. The controller's authority is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
8. Is providing data required
Providing data is voluntary. Without an e-mail address or phone number there is no way to reply, and without a description of the part there is no way to prepare a quote.
9. Cookies and statistics
The site sets no cookies of its own and uses no analytics tools or social media plugins. Fonts are served from the same server as the site, so opening the page does not send your IP address to any external provider.
10. Changes
If the scope of processing changes, or a tool that collects data is added, this document will be updated and the date at the top changed.
Firma Drewuś Tomasz Sulka Grzechynia 229, 34-220 Grzechynia, Polska NIP 5521703209, REGON 122911632 biuro@drewus.pl, +48 795 930 066