Privacy policy
Below we explain who processes the personal data provided on fortunaseed.pl, for what purpose and on what legal basis, how long we keep it and what rights data subjects have.
1. Data controller
The controller of personal data is Fortuna Seed sp. z o.o., based in Warsaw, Al. Jerozolimskie 81, 02-001 Warszawa, VAT ID 5253075143, company register number 0001217602.
For all matters concerning personal data you can contact us at kontakt@fortunaseed.pl or in writing at the registered office. The controller has not appointed a data protection officer.
2. What data we process
The scope of data depends on how you get in touch with us.
Enquiry form
We process the data entered in the form: company name, full name, e-mail address, optionally a phone number, delivery country, segment, product grade, planned annual quantity, expected timing and the content of your message. We also record the wording of the consent to commercial contact together with the timestamp of when it was given.
E-mail correspondence and phone contact
We process the data contained in the correspondence — e-mail address, sender details and the content of the message — to the extent necessary to reply.
Server logs
The hosting provider may record standard technical data (IP address, date and time of the request, browser type) to keep the site secure and working correctly.
3. Purposes, legal bases and retention periods
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Answering the enquiry and conducting commercial correspondence | Art. 6(1)(b) GDPR — steps taken at the request of the data subject prior to entering into a contract | until the correspondence ends, then up to 3 years |
| Commercial contact regarding the enquiry submitted | Art. 6(1)(a) GDPR — consent given in the form | until consent is withdrawn |
| Performing the order and meeting tax and accounting obligations | Art. 6(1)(b) and (c) GDPR | 5 years from the end of the tax year the documents relate to |
| Establishing, pursuing and defending claims | Art. 6(1)(f) GDPR — legitimate interest of the controller | until the limitation periods for claims expire |
| Keeping the website secure (server logs) | Art. 6(1)(f) GDPR — legitimate interest of the controller | according to the hosting provider’s policy, usually up to 12 months |
4. Providing data is voluntary
Providing data is voluntary but necessary for us to answer your enquiry. Fields marked with an asterisk in the form are required — without them we cannot prepare a quotation or contact you.
5. Data recipients
Data may be entrusted to entities that provide services to us under data processing agreements:
- providers of the hosting and infrastructure the site runs on,
- providers of e-mail services and of the service that delivers messages from the contact form,
- providers of accounting and legal services — to the extent necessary.
Data is neither sold nor shared with third parties for marketing purposes. Where a service provider processes data outside the European Economic Area, this takes place on the basis of a European Commission adequacy decision or standard contractual clauses.
6. Rights of data subjects
You have the right to:
- access your data and obtain a copy of it,
- rectify (correct) your data,
- erase your data,
- restrict processing,
- data portability — where processing is based on consent or a contract,
- object to processing based on the legitimate interest of the controller,
- withdraw consent at any time — without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights simply write to kontakt@fortunaseed.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
7. No profiling
Data is not used for automated decision-making, including profiling.
8. Cookies and browser storage
The fortunaseed.pl website does not store cookies on your device. We use no analytics or marketing tools and embed no third-party scripts, maps, videos or social plugins. Typefaces are served from our own server, so browsing the site triggers no requests to external services.
The site stores no other data in your browser either — we use neither local storage nor session storage. The language version follows from the page address alone, and the enquiry form transmits data only when you submit it.
If we introduce tools that require consent in the future — for example visit statistics, advertising pixels or embedded external content — we will ask for consent before enabling them and extend this section with a list of the cookies used.
9. Changes to this policy
We update this policy whenever the scope of the data processed or the way the site works changes. The current version is always available at this address.