Privacy Policy

1. Data controller

Global Textiles s.c., Lipowa 20/3, 90-743 Lodz, Poland. VAT-UE: PL7272706723, NIP: 7272706723, REGON: 100370136.

Contact for privacy matters: via the “Contact” form on the site or by mail to the address above with the note “Personal Data / GDPR”. We have not appointed a Data Protection Officer.

2. Scope of data and purposes

We process the data you provide in the contact form or business correspondence, in particular: name, business email, company website, Tax ID (optional), message content, and technical data transmitted automatically (e.g., IP address, timestamps, basic browser information) necessary for security and service continuity.

Purposes and legal bases:

• Handling inquiries, preparing an offer, and pre-contractual steps for B2B cooperation (Art. 6(1)(b) GDPR).
• Ongoing communication and relationship management with business partners – our legitimate interest (Art. 6(1)(f) GDPR).
• Establishment, exercise, or defense of legal claims and archiving correspondence – legitimate interest (Art. 6(1)(f) GDPR).
• Fulfilling legal obligations, including accounting/tax rules if a transaction occurs (Art. 6(1)(c) GDPR).
• Measuring aggregated site traffic via Umami analytics without cookies; data is limited to page views, referrers, device/browser type, approximate location (country based on truncated IP), and timestamps – legitimate interest (Art. 6(1)(f) GDPR). No user profiles or advertising are created.

3. Source of data

We receive data directly from you (form, email, phone). If you provide a Tax ID, we may verify basic company information in public registers (e.g., VIES) to confirm contractor details.

4. Retention

• Inquiries and correspondence: up to 24 months from the last contact or until an objection is upheld.
• Technical logs: up to 12 months for security and service continuity.
• Accounting documents (if a transaction occurs): for the period required by tax law (typically 5 years from the end of the tax year).
• Data processed on the basis of legitimate interest: until a justified objection is accepted, unless another legal basis applies.

5. Data recipients

Data may be shared with trusted service providers acting on our instructions, in particular:

• Hosting, cloud, and IT support providers maintaining the site infrastructure.
• Contact form provider Formspree (USA) as a data processor.
• Umami Analytics (cloud.umami.is, EU-hosted) processing aggregated, non-identifying traffic data on our behalf.
• Email service providers and, where necessary, legal advisors or auditors to handle inquiries or protect our rights.

6. Transfers outside the EEA

Data sent via the contact form may be processed by Formspree Inc. (USA). Transfers rely on Standard Contractual Clauses (SCCs). We minimize the data scope and use encrypted connections.

Analytics data processed by Umami is stored on EU-hosted infrastructure; we do not transfer analytics data outside the EEA for this purpose.

7. Your rights

You have the right to: access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interest. You may also lodge a complaint with your supervisory authority (e.g., the President of the Personal Data Protection Office in Poland). Submit requests via the contact form or by mail to the controller’s address.

8. Providing data

Providing contact data is voluntary but necessary to receive a reply or an offer. Without it we cannot respond to your inquiry.

9. Security

We use TLS encryption, limit access to authorized personnel only, and apply data minimization. We cooperate with providers who ensure appropriate security measures.

10. Cookies

See our Cookies Policy for details on cookies and similar technologies. Our analytics (Umami) works without cookies and honors the browser’s “Do Not Track” signal.

11. Changes

If we update this notice, we will publish the new version with a revised date.