Privacy Policy
How we process personal data submitted through the contact form
Last updated: 28 July 2026
Data controller
The data controller is Stolplast, Ostrożne 1b, 18-305 Szumowo, Poland. Contact: biuro@stolplast.com.
What data we process
Through the contact form we process: your full name, optionally your company name, phone number, e-mail address, and the content of your message.
In addition, to limit abuse of the form, we store a hashed (irreversibly anonymized) IP address - we do not store the IP address in plain form.
Purpose and legal basis
Data is processed in order to respond to your inquiry (Art. 6(1)(b) GDPR - steps taken prior to entering into a contract) and to protect the form against abuse and spam, which constitutes our legitimate interest (Art. 6(1)(f) GDPR).
Retention period
Contact form data is kept for as long as necessary to handle your inquiry, and, if further business contact follows, for the period required by record-keeping regulations.
The hashed IP address used for rate-limiting is stored only briefly, for a maximum of one hour after the form is submitted.
Data recipients
Data may be shared with providers we use to operate the form: our e-mail delivery provider (Resend) and the database infrastructure provider used for rate-limiting (Supabase). These providers process data only to the extent necessary to deliver these services.
Your rights
You have the right to access your data, rectify it, request its erasure, restrict its processing, request data portability, object to processing, and lodge a complaint with the relevant data protection supervisory authority.
Contact regarding personal data
For any matters concerning the processing of your personal data, you can contact us at biuro@stolplast.com.