Privacy policy

Data controller

The controller of your personal data is Bartłomiej Kawalec, who runs a business under the name FHU Bartłomiej Kawalec, ul. Wapienna, 20-502 Lublin, NIP (tax ID) 946 227 82 08, REGON 431153017 (entered in CEIDG, the Polish register of sole traders). For anything to do with personal data, write to wedki@wedki.pl or call 601 273 635.

We have not appointed a data protection officer; we are not required to.

What data we collect

• Contact form: your name, phone number, email address (if you give one), the type of enquiry and the text of your message.
• Contact by phone and email: the data you give us yourself.
• Orders and invoices: the data needed to conclude and perform a contract and to issue an invoice.
• Technical data: each time you visit the site, the server receives your IP address, the date and time, the address of the page you visit and basic browser data. We use it to run and protect the site.

A message from the form passes through our server to the Arcasto system, which we use to manage the site. The system forwards it straight to our mailbox by email and does not store it in its database; it remembers your IP address only briefly, to limit how many enquiries can be sent from one address. We reply from our own mailbox.

Giving us your data is voluntary, but you can't send the form without a phone number, and without contact details we can't answer your enquiry. We make no automated decisions and do no profiling.

Purpose and legal basis

• Replying to an enquiry, preparing a quote and an offer: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
• Concluding and performing a contract (a made-to-order rod, repair, tuning, sales): Article 6(1)(b) GDPR.
• Accounting and tax obligations: Article 6(1)(c) GDPR.
• Handling complaints, pursuing and defending claims, site security and protecting the form against spam: Article 6(1)(f) GDPR (our legitimate interest).

We don't send marketing information without your separate consent.

How long we keep data

• Enquiries that did not lead to a contract: one year from the last contact.
• Contract data: until the limitation period for claims expires.
• Accounting documents: 5 years from the end of the tax year.
• Technical data: only as long as running and protecting the site requires.

Who we pass data to

We don't sell data. We pass it only to those who help us run the site and handle an order, under data processing agreements or under the law:

• Cloudflare, Inc., the provider of the server the site runs on;
• Cloudflare, Inc., through its Turnstile service, which checks when you send the form that a person is sending it and not a bot. Cloudflare then receives, among other things, your IP address and basic browser data (basis: our legitimate interest in protection against spam, Article 6(1)(f) GDPR);
• Arcasto, the provider of the system that manages the site and passes the form messages on to us;
• Resend, the provider that sends those messages by email (servers in the European Union) and is used by the Arcasto system;
• the provider of our email mailbox;
• an accounting firm and a courier company, if an order goes ahead;
• Google, only if you click “Show map” on the contact page (Google then receives, among other things, your IP address).

Cloudflare, Resend and Google are American companies or belong to American companies, and may also process data in the United States. The basis for such a transfer is a decision of the European Commission on an adequate level of protection (the EU-US Data Privacy Framework) or standard contractual clauses.

Links to our videos on YouTube and to our Facebook profile lead to those services. Once you open them, the privacy rules of Google and Meta apply.

Your rights

You have the right to access your data, to have it corrected, erased, restricted or transferred, and to object to processing based on our legitimate interest. A message to wedki@wedki.pl is enough.

If you believe we process data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

Cookies and browser storage

The site uses no cookies, analytics or advertising tools, and stores nothing in your browser. Fonts, photos and videos sit on our own server, so browsing the site doesn't connect you to other companies' servers.

Turnstile runs in a separate Cloudflare frame, only on the contact page, and is not used for tracking or advertising. It may store in your browser the technical data needed to check that a person is sending the form; this is strictly necessary for sending the message, so we don't ask for consent (Article 399(2) of the Polish Electronic Communications Law).

The Google map on the contact page loads only after you click “Show map”. From that moment Google's rules apply, which may include cookies. You can delete stored data at any time in your browser settings.