PRIVACY POLICY OF THE LARDO.COM.PL WEBSITE

Date of last update: September 11, 2026

    1. General Provisions
    This Privacy Policy sets out the rules for the processing of personal data in connection with the use of the Website.
    The controller of personal data is: Lardo Sp. z o.o., ul. Grunwaldzka 5, 14-240 Dąbrówno, Poland, Tax Identification Number (NIP): 7412153283.
    For matters regarding personal data protection, the Controller can be contacted at: biuro@lardo.com.pl.
    The Controller processes personal data in accordance with applicable personal data protection laws, in particular the GDPR.


    2. Definitions
    Controller – Lardo Sp. z o.o.
    Website – the website available at Lardo.com.pl along with its subpages and functionalities.
    User – any person using the Website or contacting the Controller.
    Policy – this Privacy Policy.
    GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.


    3. What Personal Data Do We Process?
    The scope of processed data depends on how the Website is used.
    The Controller may process in particular: name and surname, email address, phone number, content of correspondence with the Controller, IP address, device information, operating system and browser details, information regarding Website activity, as well as information collected via cookies and similar technologies.
    The Controller applies the data minimization principle and processes data only to the extent adequate and necessary to achieve the specified purposes.


    4. Purposes and Legal Grounds for Data Processing
    Contact and inquiry handling: Data may be processed to conduct communication via email and the contact form. The legal basis for processing is the Controller’s legitimate interest pursuant to Art. 6(1)(f) of the GDPR or taking steps prior to entering into a contract pursuant to Art. 6(1)(b) of the GDPR.
    Analytics and Website development: With the User’s consent, data may be used to compile statistics, analyze Website usage, and improve its performance.
    Establishment, exercise, or defense of claims: Data may be processed to establish, pursue, or defend against legal claims and to demonstrate the proper performance of the Controller’s duties pursuant to Art. 6(1)(f) of the GDPR.
    Legal obligations: The Controller may process data to comply with statutory legal obligations pursuant to Art. 6(1)(c) of the GDPR.


    5. Systems, Providers, and Data Transfers
    To ensure the functioning of the Website, the Controller uses the services of external technology providers.
    Data may be processed using, among others, the WordPress platform, which powers the Website, and Google Analytics for analytical purposes.
    Personal data may be transferred or entrusted to hosting and IT infrastructure providers, as well as analytical tool providers.
    The Controller limits the scope of disclosed data strictly to the information necessary to achieve the specific purpose.


    6. Data Transfers Outside the European Economic Area
    Some technology providers operate globally, which may involve the transfer of personal data outside the European Economic Area (EEA).
    Where such a transfer occurs, the Controller relies on mechanisms provided for by applicable data protection laws, such as an adequacy decision by the European Commission or standard contractual clauses.


    7. Data Retention Period
    Personal data related to handling correspondence and contact form submissions are retained for the time necessary to handle the inquiry, provide a response, or maintain business cooperation.
    Further retention may be justified, in particular, by the need to handle complaints, maintain necessary business records, or establish, pursue, or defend against claims.
    Data processed on the basis of consent are processed until the consent is withdrawn, the purpose of processing ceases, or another circumstance requiring the termination of processing occurs.
    Once the purpose and legal basis for further processing cease to exist, the data are deleted or anonymized, unless their further retention is required by law.


    8. Cookies and Analytical Tools
    The Website uses cookies and similar technologies to ensure proper operation, remember User preferences, compile statistics, analyze traffic, and develop the Website.
    Necessary cookies required for the Website to function properly may be used without User consent to the extent permitted by law.
    Analytical cookies – including those originating from WordPress plugins – that require consent are utilized based on the choices made by the User via the cookie banner.
    Upon their first visit, the User can accept or reject optional cookies.
    The User can manage cookie settings at any time using their web browser settings.
    With the User’s consent, the Controller uses Google Analytics to track statistics and analyze how the Website is used.


    9. Data Security
    The Controller implements appropriate technical and organizational measures to protect personal data, adapted to the nature of the data and the risks involved.
    These measures are designed in particular to safeguard data against unauthorized access, accidental loss, destruction, unauthorized alteration or disclosure, as well as misuse.
    Access to personal data is granted solely to individuals who require it to perform their designated duties.


    10. Rights of Data Subjects
    Data subjects may have the right to: access their data, obtain a copy of the data, rectify incorrect data, request erasure, restrict processing, data portability, object to processing, and withdraw granted consent at any time.
    Where data are processed based on the Controller’s legitimate interest, the data subject may object to such processing under the terms laid down in the GDPR.
    The withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.
    To exercise these rights, the Controller can be contacted at: biuro@lardo.com.pl.


    11. Right to Lodge a Complaint
    If a data subject considers that their personal data are processed in breach of applicable regulations, they have the right to lodge a complaint with the supervisory authority (in Poland: the President of the Personal Data Protection Office – Prezes Urzędu Ochrony Danych Osobowych).


    12. Voluntary Nature of Data Provision
    Providing personal data is generally voluntary.
    However, providing specific details may be required to utilize selected Website functionalities, including processing inquiries via the contact form.
    Failure to provide the required data may prevent the provision of the requested service.


    13. Changes to the Privacy Policy
    This Policy may be updated, in particular to reflect legislative changes or the introduction of new Website functionalities.
    The up-to-date version of the Policy is always accessible on the Website.