private label. bulk. expertise.
Privacy policy
PRIVACY POLICY
Last updated: 13.07.2026
This Privacy Policy explains how HANOJU POLSKA SP. Z O.O (“Company”, “we”, “our”, or “us”) collects, uses, stores and protects personal data through the website www.hanoju.pl (the “Website”).
We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Polish data protection laws.
- Data Controller
The controller of your personal data is:
HANOJU POLSKA SP. Z O.O
ul. Warszawska 133, 32-087 Bibice, Poland
KRS: 0000572766, NIP 5130241578, REGON 36232729
Tel: 12 413 86 81
email: info@hanoju.pl.
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.
- What Personal Data We Collect
Depending on how you interact with the Website, we may collect the following categories of personal data:
Contact details
- name
- surname
- company name
- business e-mail address
- business telephone number
- country
- position within the company
Information contained in your enquiry
When submitting a contact form or Private Label enquiry, we process all information voluntarily provided by you, including:
- product enquiries
- packaging preferences
- requested quantities
- technical specifications
- attachments (if applicable)
- correspondence relating to your enquiry.
Technical information
When you visit the Website, certain technical information may automatically be collected, including:
- IP address
- browser type
- operating system
- language settings
- device information
- date and time of access
- log files.
Some of this information is collected through cookies and similar technologies.
- Purposes of Processing
We process personal data for the following purposes:
Responding to enquiries
including responding to contact requests and Private Label enquiries.
Legal basis:
Article 6(1)(b) GDPR (taking steps prior to entering into a contract);
or
Article 6(1)(f) GDPR (our legitimate interest in responding to business enquiries).
Conducting business negotiations
including preparing offers, quotations and commercial documentation.
Legal basis:
Article 6(1)(b) GDPR.
Managing our business relationships
including maintaining communication with existing and prospective business partners.
Legal basis:
Article 6(1)(f) GDPR.
Protecting the Website against abuse
including spam prevention through Google reCAPTCHA.
Legal basis:
Article 6(1)(f) GDPR.
Compliance with legal obligations
where processing is required by applicable laws.
Legal basis:
Article 6(1)(c) GDPR.
- Google reCAPTCHA
The Website uses Google reCAPTCHA to protect contact forms against spam and automated abuse.
Google may collect certain technical information, including IP address, browser information and user behaviour, in accordance with Google’s own privacy documentation.
More information is available in Google’s Privacy Policy and Terms of Service.
- Cookies
The Website uses cookies and similar technologies.
Cookies are used for:
- ensuring proper operation of the Website;
- maintaining security;
- protecting forms against abuse;
- remembering user preferences;
- other purposes described in our Cookie Policy.
Where legally required, non-essential cookies will only be activated after obtaining your consent.
- Recipients of Personal Data
Your personal data may be disclosed to:
- IT service providers;
- website hosting providers;
- e-mail service providers;
- providers of website security services;
- Google Ireland Limited (Google reCAPTCHA);
- legal, accounting and professional advisers where necessary;
- public authorities where required by law.
We do not sell your personal data.
- International Transfers
Where personal data is transferred outside the European Economic Area, such transfer shall take place only where permitted under the GDPR and subject to appropriate safeguards, including Standard Contractual Clauses where applicable.
- Data Retention
Personal data will be retained only for as long as necessary for the purposes for which it was collected.
In particular:
- enquiries will generally be retained for the duration of correspondence and thereafter for the period necessary to establish, exercise or defend legal claims;
- contractual data will be retained for the period required by applicable laws;
- technical logs will be retained for the period necessary to ensure Website security.
Where processing is based on consent, the data will be retained until consent is withdrawn, unless a longer retention period is required by law.
- Your Rights
Subject to the GDPR, you have the right to:
- access your personal data;
- rectify inaccurate data;
- erase your data;
- restrict processing;
- object to processing based on legitimate interests;
- data portability (where applicable);
- withdraw consent at any time (where processing is based on consent);
- lodge a complaint with the competent supervisory authority.
In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (UODO).
- Data Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
- Third-Party Websites
The Website may contain links to third-party websites.
We are not responsible for the privacy practices or content of such external websites.
Users should review the privacy policies of those websites separately.
- Children’s Data
The Website is intended exclusively for business customers.
It is not directed at children, and we do not knowingly collect personal data relating to children.
- Changes to this Privacy Policy
We may amend this Privacy Policy from time to time.
The updated version will always be published on the Website together with the date of the latest revision.
- Contact
If you have any questions concerning this Privacy Policy or the processing of your personal data, please contact:
HANOJU POLSKA SP. Z O.O
Tel: 12 413 86 81
email: info@hanoju.pl