Privacy Policy

1. Data controller

The controller is Almaland sp. z o.o., Krzemowa 1, 62-002 Suchy Las, Poland. For privacy matters contact office@almaland.pl.

2. Personal data we may process

Depending on how you use the website and the purpose of your contact, we may process your name, company or organisation, email address, telephone number, enquiry content and subject, information about a process, material, product, location or certification scope, data voluntarily provided in documents and correspondence, and technical website-use data such as IP address, device, browser, operating system and access time.

3. Purposes and legal bases

• Business enquiries and correspondence – Article 6(1)(f) GDPR; our legitimate interest is communicating with persons interested in Almaland services and handling enquiries properly.
• Pre-contractual steps – Article 6(1)(b) GDPR where the data subject requests steps before entering into a contract.
• Contract performance – Article 6(1)(b) GDPR where processing is necessary to perform a contract with the data subject.
• Legal obligations – Article 6(1)(c) GDPR where processing is required by law, for example tax or accounting rules.
• Website security, fraud prevention and legal claims – Article 6(1)(f) GDPR; our legitimate interest is protecting Almaland systems, information and rights.
• Displaying Google Maps – based on the user's consent under Article 6(1)(a) GDPR; where access to or storage of information on the user's terminal device is involved, the applicable terminal-device rules also apply. Without consent, the map remains blocked.

4. Contact forms and required information

The contact forms require your full name, company, email address and message. Telephone number and enquiry subject are optional.

Company information is required because the forms are primarily intended for B2B enquiries concerning certification, organisational activities and process scope. If required information is not provided, the form cannot be submitted or the enquiry may not be handled properly.

We do not request a separate consent merely to answer an enquiry where the appropriate legal basis is a pre-contractual step or our legitimate interest.

5. Recipients and service providers

Data may be processed by providers supporting Almaland, including hosting, IT infrastructure, email, backup and technical-support providers.

The website is built and hosted using services provided by Webflow, Inc., which acts as a processor for Customer End User personal data collected through the website on Almaland's instructions. Webflow also uses subprocessors in accordance with its current subprocessor list.

Where necessary for a specific certification process, data may also be disclosed to entities participating in the relevant scheme or to competent authorities where required by the applicable agreement, scheme rules or law.

6. Transfers outside the EEA

Webflow, Inc. is based in the United States and states that customer and customer end-user data may be stored in the United States. Webflow states that it relies on approved transfer mechanisms including the EU–U.S. Data Privacy Framework and Standard Contractual Clauses included in its Data Processing Addendum. Information about the safeguards is available at webflow.com/legal/dpa, and the current subprocessor list at webflow.com/legal/subprocessors.

Where personal data is transferred outside the EEA to a jurisdiction without an adequacy decision, appropriate GDPR safeguards are used where required for the transfer.

7. Retention

We retain personal data only for as long as necessary for the relevant purpose. Enquiry correspondence may be retained for the time needed to handle the matter and for an appropriate period connected with potential claims. Cooperation and certification documentation may be retained for periods resulting from law, contracts, applicable scheme rules or the certification body's management-system requirements.

8. Your rights

Subject to the GDPR, you may have rights of access, rectification, erasure, restriction, data portability where applicable, and the right to object to processing based on Article 6(1)(f) GDPR. Where processing is based on consent, consent may be withdrawn at any time without affecting earlier lawful processing.

Requests may be sent to office@almaland.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland or another competent supervisory authority where applicable.

9. Cookies and similar technologies

The website may use cookies or similar mechanisms necessary for correct operation, security and delivery of a service requested by the user. To remember the user's Google Maps choice, we store a local privacy-preference value in the browser. It is used only to restore that choice and does not itself establish a connection to Google. Google Maps is loaded only after consent has been given.

You may also manage cookies through your browser settings.

10. Automated decision-making and profiling

Data submitted through the contact forms is not used by Almaland to make decisions about you solely by automated means that produce legal effects or similarly significantly affect you. Almaland does not profile contact-form users for this purpose.

11. Data security

We use appropriate organisational and technical measures to protect personal data against loss, unauthorised access, disclosure, alteration or destruction. Access is limited to persons and entities that require it for their assigned tasks.

12. External links and services

The website may contain links to third-party websites and services. After leaving our website, the privacy rules of the relevant third-party operator apply.

An interactive Google Maps map is available on the contact page. The map remains blocked until consent to external content is given. After consent, Google Maps may receive technical data such as the IP address and device information and may use cookies or similar technologies in accordance with Google's own privacy rules. Consent can be changed at any time through “Privacy settings” in the website footer.

13. Changes and contact

This Privacy Policy may be updated to reflect legal, technological or organisational changes. The current version is published on this page.

Privacy questions may be sent to office@almaland.pl.