Privacy Policy

Last updated: 1 January 2024.

Data Controller

Regional Route Sp. z o.o., ul. Kazimierza Wielkiego 14, 31-047 Krakow, Poland, NIP: PL6762345678 (hereinafter "the Company") is the controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

Data We Collect

When you use the regionalroute.pro website or contact us, we may collect the following categories of personal data:

• Identification data: first name, last name, company name
• Contact data: phone number, email address, postal address
• Shipment data: delivery address, parcel dimensions, weight
• Technical data: IP address, browser type, pages visited, time spent on site
• Financial data: payment information processed via secure third-party providers

Purpose and Legal Basis

We process your personal data for the following purposes:

• Contract performance (Art. 6(1)(b) GDPR) — to process orders, arrange deliveries and manage your account
• Legal obligation (Art. 6(1)(c) GDPR) — to comply with Polish and EU accounting, tax and transport regulations
• Legitimate interest (Art. 6(1)(f) GDPR) — to improve our services, ensure website security and conduct direct marketing to existing clients
• Consent (Art. 6(1)(a) GDPR) — to send newsletters and marketing communications where you have opted in

Retention Period

We retain your personal data only as long as necessary for the purposes described above. Shipment and contract data is retained for 5 years from the date of delivery in accordance with Polish civil law requirements. Financial records are retained for 6 years as required by Polish tax law. Marketing data is retained until you withdraw your consent.

Your Rights

Under the GDPR and Polish data protection law, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — to obtain a copy of the data we hold about you
• Right to rectification (Art. 16 GDPR) — to correct inaccurate data
• Right to erasure (Art. 17 GDPR) — to request deletion of your data subject to legal obligations
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) — particularly to direct marketing
• Right to lodge a complaint with the Polish supervisory authority (UODO), ul. Stawki 2, 00-193 Warsaw

Data Recipients

Your personal data may be shared with: courier subcontractors engaged for delivery services, IT infrastructure providers, payment processors, and accounting and legal advisors. All recipients are bound by data processing agreements and are required to maintain appropriate security standards. We do not sell personal data to third parties.

Cookies

Our website uses cookies to ensure proper functionality, analyze traffic and remember your preferences. You can manage cookie preferences through your browser settings or via our Cookie Policy page. Disabling certain cookies may affect the functionality of the site.

Security

We apply technical and organizational measures to protect your personal data against unauthorized access, loss or destruction. These include SSL/TLS encryption, access controls, secure server infrastructure and regular security audits. In the event of a personal data breach, we will notify the relevant supervisory authority and affected individuals as required by GDPR Art. 33–34.

Contact

For any queries regarding this Privacy Policy or to exercise your data rights, contact us at: [email protected] or by post to our registered address. We will respond within 30 days.