Privacy Policy

How we process personal data submitted through the contact form

Last updated: 28 July 2026

Data controller

The data controller is Stolplast, Ostrożne 1b, 18-305 Szumowo, Poland. Contact: biuro@stolplast.com.

What data we process

Through the contact form we process: your full name, optionally your company name, phone number, e-mail address, and the content of your message.

In addition, to limit abuse of the form, we store a hashed (irreversibly anonymized) IP address - we do not store the IP address in plain form.

Purpose and legal basis

Data is processed in order to respond to your inquiry (Art. 6(1)(b) GDPR - steps taken prior to entering into a contract) and to protect the form against abuse and spam, which constitutes our legitimate interest (Art. 6(1)(f) GDPR).

Retention period

Contact form data is kept for as long as necessary to handle your inquiry, and, if further business contact follows, for the period required by record-keeping regulations.

The hashed IP address used for rate-limiting is stored only briefly, for a maximum of one hour after the form is submitted.

Data recipients

Data may be shared with providers we use to operate the form: our e-mail delivery provider (Resend) and the database infrastructure provider used for rate-limiting (Supabase). These providers process data only to the extent necessary to deliver these services.

Your rights

You have the right to access your data, rectify it, request its erasure, restrict its processing, request data portability, object to processing, and lodge a complaint with the relevant data protection supervisory authority.

Contact regarding personal data

For any matters concerning the processing of your personal data, you can contact us at biuro@stolplast.com.

Privacy Policy | Stolplast