Privacy policy

1. Data controller

The controller of your personal data is ELBIS Sp. z o.o. with its registered office in Bielsko-Biała, ul. Boruty-Spiechowicza 39, 43-300 Bielsko-Biała, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court in Bielsko-Biała, 8th Commercial Division, under KRS number 0000052797, EU VAT PL9372333033, REGON 072698243, share capital PLN 50,000.

Contact for data protection matters: biuro@agdperfekt.pl, tel. +48 500 052 512, or by post to the registered office. We have not appointed a data protection officer, as the law does not require it of us.

2. What data we collect and where from

Only what you enter yourself in the website forms:

• B2B zone form: Polish tax ID (or a Czech or Slovak registration number), company name and address, contact person's name, phone, e-mail and message;
• manufacturer form: brand or company name, e-mail, contact person's name, phone (optional), website address, message and whether you are asking for a review of your brand's e-commerce presence;
• data from the Polish Ministry of Finance VAT taxpayer register: after you enter a Polish NIP, the site retrieves the company's name, address, VAT status, REGON and KRS from this public register so you do not have to retype them; only the NIP number is sent to the ministry's API.

3. Purposes and legal bases

• handling a wholesale account request (contact, company verification, preparing terms, opening an account on the B2B platform): Art. 6(1)(b) GDPR for sole traders, and Art. 6(1)(f) GDPR for people representing companies (our legitimate interest in establishing cooperation with the company you represent);
• replying to a manufacturer or brand enquiry: Art. 6(1)(f) GDPR (responding to a commercial enquiry addressed to us);
• commercial contact in reply to your enquiry: Art. 6(1)(f) GDPR — we reply only to the matter you raised and do not send unsolicited commercial communications;
• defending against and pursuing claims: Art. 6(1)(f) GDPR;
• settlements after a contract is concluded: Art. 6(1)(c) GDPR (tax and accounting law).

4. Recipients

Data goes only to entities that process it on our behalf or to which we must pass it to handle your request:

• Cloudflare, Inc. (USA) — website hosting and the database in which we store form submissions; transfers outside the EEA are safeguarded by the European Commission's standard contractual clauses and the EU-US Data Privacy Framework certification;
• our business e-mail provider;
• Resend, Inc. (USA) — technical delivery of the notification about your submission to our mailbox; transfers outside the EEA are safeguarded by the European Commission's standard contractual clauses;
• the Polish Ministry of Finance — solely for the NIP query to the VAT taxpayer register;
• after an account is opened: the providers of our ERP system and B2B platform, and courier companies for order fulfilment.
• We do not sell data and do not share it with advertisers.

5. Retention

Enquiries that do not lead to cooperation are deleted 12 months after the last contact. Trading partners' data is kept for the duration of cooperation and afterwards for the period required by tax law (5 years from the end of the year) and the limitation of claims.

6. Your rights

You have the right to access, rectify, erase and restrict the processing of your data, to data portability (data processed on the basis of a contract or consent), to object to processing based on our legitimate interest, and to withdraw consent. Send requests to biuro@agdperfekt.pl; we reply within one month. You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or your local supervisory authority.

7. Voluntary provision

Providing data is voluntary, but without a tax ID and contact details we cannot open a wholesale account or reply to your enquiry.

8. Profiling and automated decisions

We do not profile you or make automated decisions about you. The forms have anti-spam protection (a hidden field and completion-time measurement) that collects no personal data.

9. Cookies and browser storage

The site stores no cookies or browser-storage data on your device and uses no advertising tools, so we do not display a cookie banner. We do use Cloudflare Web Analytics: it works without cookies and without identifying individual visitors — it counts aggregate page traffic only. Your language choice is carried by the page address (/, /cs, /en), not by browser storage. The hosting provider processes standard connection logs (IP address, browser, request time) for security and performance. The only exception is the map on the Contact page: it is an embedded Google map (a frame served by Google LLC), so when you view that single page your browser connects to Google, which may set its own cookies under Google’s privacy policy (policies.google.com/privacy). We pass no data of yours to Google beyond what loading the frame itself entails.

10. Online stores and B2B platform

The agdperfekt.pl and mimiadum.cz stores and the elbis.enovab2b.pl B2B platform have their own terms and privacy policies; this policy covers the corporate website only.

11. Changes

We publish new versions on this page with a date; partners will be informed of material changes by e-mail.