Effective as of 02.08.2025
This document defines the rules for processing personal data and the use of cookies within the website https://anabas.pl/
The joint controllers of personal data (hereinafter: the “Joint Controllers”) are:
Agnieszka Wrona ANABAS – sole proprietorship registered in the Central Register and Information on Economic Activity,
NIP: 679 151 42 81, REGON: 122276377,
address: ul. Jeździecka 11A, 30-698 Kraków,
office address: ul. Myślenicka 95, 30-698 Kraków.
Anabas Sp. z o.o. – in organization,
NIP: 679 333 74 98, REGON: 542317600, KRS: pending registration,
address: ul. Jeździecka 11A, 30-698 Kraków,
office address: ul. Myślenicka 95, 30-698 Kraków.
The Joint Controllers operate jointly under the ANABAS brand and jointly determine the purposes and means of processing personal data. The division of responsibilities between the Joint Controllers is as follows:
Agnieszka Wrona ANABAS – responsible for customer service for individual clients and marketing activities related to the sole proprietorship.
Anabas Sp. z o.o. – responsible for fulfilling orders and projects within the limited liability company.
For matters related to personal data protection, you may contact either Joint Controller at: info@anabas.pl
2.1. Personal data is collected during:
contact via form (legitimate interest – Art. 6(1)(f) GDPR),
activity on the website (legitimate interest – Art. 6(1)(f) GDPR).
2.2. Scope of processed data:
| Purpose of processing | Scope of data | Legal basis | Mandatory/Voluntary | Consequences of not providing data |
|---|---|---|---|---|
| Contact via form | Name, email, message content | Art. 6(1)(f) GDPR | Voluntary | Inability to receive a response |
| Statistics/marketing | IP address, browser data, cookies, analytics data | Art. 6(1)(f) GDPR | Voluntary | Limited site functionality, lack of personalization |
2.3. Transfer of data outside the EEA
Data may be transferred to countries outside the European Economic Area only with appropriate safeguards, such as standard contractual clauses in accordance with GDPR.
Personal data may be transferred to entities processing data on behalf of the Joint Controllers, including:
hosting provider: LH.pl,
analytics services: Google (Analytics), Meta (Pixel),
IT and technical support companies (Social Apes Marketing sp. z o.o.).
These entities process data under data processing agreements in compliance with Art. 28 GDPR.
| Purpose of processing | Retention period |
|---|---|
| Contact via form | Up to 1 year from last contact |
| Statistics/marketing | Up to 3 years or until objection is raised |
Every individual has the right to:
access their data,
rectify their data,
delete their data (“right to be forgotten”),
restrict processing,
data portability,
object to processing,
withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
lodge a complaint with the President of the Personal Data Protection Office (UODO).
To exercise your rights, please contact the Joint Controllers: info@anabas.pl
6.1. Types and purposes of cookies:
| Cookie type | Purpose | Retention period |
|---|---|---|
| Technical (necessary) | Ensuring proper website functionality | Session / up to 1 year |
| Analytical | Statistics, improving website performance (Google Analytics) | Up to 2 years |
| Marketing | Remarketing, personalized ads (Meta Pixel) | Up to 2 years |
6.2. Cookie management:
Users may change cookie settings at any time in their browser. Detailed instructions are available on the support pages of: Chrome, Firefox, Safari, Edge, Opera.
6.3. Cookie consent:
On their first visit, users may give consent to cookies. Consent can be changed or withdrawn at any time.
The Joint Controllers apply technical and organizational measures to ensure the security of processed personal data, including:
SSL encryption,
access to data only by authorized persons,
backup and server monitoring systems,
antivirus protection and firewalls.
Personal data is not subject to automated decision-making that would produce legal effects concerning the user (profiling). If such actions are introduced, the user will be informed and granted the right to object.
9.1. The Joint Controllers reserve the right to make changes to this Privacy Policy.
9.2. Users will be informed of any changes via a notice on the website or by email (if applicable).
9.3. The current version of the document is always available at: https://anabas.pl/en/privacy-policy/
9.4. This Privacy Policy enters into force on 02 August 2025.