Privacy policy

1. General information

This privacy policy describes how we process personal data in connection with the use of the website lenort.eu (the “Website”), including the B2B zone intended for trade partners. The Website is addressed to businesses. We primarily process the data of persons who represent partners or act on their behalf: contact persons, employees and associates.

We process data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”) and the provisions of Polish law.

2. Data controller

The controller of personal data is Lenort, a company with its registered office in Kępno, ul. Aleksandra Fredry 3, 63-600 Kępno, Poland, EU VAT No.: PL6191912116, REGON (Statistical No.): 251538593 (the “Controller”, “we”).

In matters concerning personal data, you can contact us:

by e-mail: Show email address,
by post: at the registered office address given above,
by phone: +48 888 970 649.

3. What data we process and for what purpose

3.1. Partner application and B2B account

To create a partner account, you need to complete an application form. In it we collect:

company details: name, NIP / EU VAT number, country, address, website, business profile and an optional company description,
contact person details: first and last name, e-mail address and phone number.

On this basis we verify the application, decide whether to start cooperation, and then create and maintain an account in the B2B zone. Access to prices, product availability and ordering is available exclusively to approved partners.

Legal basis: Article 6(1)(b) GDPR, i.e. steps taken prior to entering into a contract and its performance (with regard to the data of an entrepreneur who is a natural person), and Article 6(1)(f) GDPR, i.e. our legitimate interest in establishing and maintaining trade cooperation with the partner (with regard to the data of persons representing the partner).

3.2. Order fulfilment

When handling orders, we process the data needed to fulfil, settle and deliver them: billing details and delivery address, contact person details, order history and payment status.

Legal basis: Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(c) GDPR (legal obligations, in particular tax and accounting obligations) and Article 6(1)(f) GDPR (our legitimate interest in handling cooperation with the partner).

3.3. Contact

If you contact us by e-mail or phone, we process the data provided in the message or conversation in order to respond and conduct further correspondence.

Legal basis: Article 6(1)(f) GDPR, i.e. our legitimate interest in responding to enquiries and conducting correspondence.

3.4. Commercial information

If you give your consent in the application form, we will send commercial information, such as new products in our range and export offers, to the e-mail address you provided.

Legal basis: Article 6(1)(a) GDPR (consent) in conjunction with the Polish Act on Providing Services by Electronic Means and the Polish Electronic Communications Law. You may withdraw your consent at any time by writing to the address given in section 2. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

3.5. Website security and pursuit of claims

We keep a log of events on the Website, for example logins and changes to accounts and orders. The log may include the IP address, the date and time of the event and the user identifier. We may also process data in order to establish, pursue or defend against claims.

Legal basis: Article 6(1)(f) GDPR, i.e. our legitimate interest in ensuring the security of the Website and protecting our rights.

3.6. Visit statistics

To analyse traffic on the Website, we use Matomo configured without cookies. Matomo collects information about the subpages visited, link clicks, approximate location, device and browser type, and the IP address. The data is used solely to produce aggregate statistics and improve the Website. We do not use it for profiling or advertising.

Legal basis: Article 6(1)(f) GDPR, i.e. our legitimate interest in analysing and improving the operation of the Website.

4. Cookies

The Website uses only cookies that are necessary for its operation, in particular to:

maintain a logged-in user’s session,
handle the cart and place orders,
remember the selected language version,
protect forms against abuse.

We do not use analytics or marketing cookies. We collect visit statistics without cookies (see section 3.6).

You can change your cookie settings in your browser. However, blocking necessary cookies may prevent you from logging in to the B2B zone and placing orders.

5. Data recipients

Data may be transferred to entities that process it on our behalf and solely in accordance with our instructions, in particular:

the hosting provider on whose servers the Website runs,
the entity operating the Matomo statistics server,
IT and e-mail service providers,
an accounting office,
courier, transport and forwarding companies, to the extent necessary to deliver the order,
payment service providers, including banks.

We may also disclose data to public authorities where required by law.

6. Transfer of data outside the European Economic Area

As a rule, we do not transfer personal data outside the European Economic Area. If this becomes necessary when fulfilling an order with delivery outside the EEA, it will take place on the basis of Article 49(1)(b) or (c) GDPR or with appropriate safeguards referred to in Article 46 GDPR.

7. How long we store data

Data from partner applications that have not been approved is stored for up to [12 months] from the date the application was reviewed.
B2B account data is stored for the duration of cooperation and, after it ends, until the limitation period for claims expires.
Data relating to orders and settlements is stored for the period required by tax and accounting regulations, i.e. as a rule 5 years from the end of the calendar year in which the tax payment deadline expired.
Data processed on the basis of consent is stored until the consent is withdrawn.
Correspondence data is stored for as long as necessary to handle it and then until the limitation period for any claims expires.
Entries in the event log are stored for [period, e.g. 12 months].
Data in Matomo statistics is anonymised. Raw visit data is stored for [period, e.g. 13 months].

8. Your rights

In connection with the processing of personal data, you have the right to:

access your data and receive a copy of it,
rectify your data,
erase your data,
restrict processing,
data portability, if we process the data on the basis of consent or a contract and by automated means,
object to processing based on our legitimate interest,
withdraw consent at any time, without affecting the lawfulness of processing before its withdrawal,
lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl) or with the supervisory authority in your country of residence or place of work.

To exercise your rights, contact us as described in section 2.

9. Voluntary provision of data

Providing data is voluntary, but it is necessary to review a partner application, create a B2B account and fulfil orders. Without the data marked as required in the forms, we cannot start cooperation or fulfil an order. Providing data for the purpose of receiving commercial information is entirely voluntary.

10. Automated decision-making

We do not make decisions based solely on automated processing of data, including profiling. Partner applications are verified by our employees.

11. Data security

We apply technical and organisational measures appropriate to the risk, including an encrypted connection (SSL/TLS), access control to data and logging of events on the Website. Only authorised persons have access to partner data.

12. Changes to the privacy policy

This privacy policy may be updated, for example due to changes in legislation or in the Website’s features. The current version is always available on this page.

Last updated: [date].