Skip to content

Albedo Silver

Privacy policy

The controller of personal data processed through this website is Albedo Pure Silver Connections, Grzegorz Gierszewski, ul. Wiśniowa 59, 85-364 Bydgoszcz, Poland. For privacy questions and requests, write to [email protected] or to this postal address.

This policy concerns the Albedo Silver public website and its contact form. It does not describe a separate application or another service's privacy arrangements.

If you use the contact form, we process your email address and message, together with your name and subject if you choose to provide them. Email and message are required to send a useful enquiry and receive a reply; name and subject are optional. Please do not include sensitive information or other people's personal data unless needed for your enquiry.

We use these details to read, route and answer your enquiry and keep the related correspondence. The legal basis is our legitimate interest in communicating with people who contact us (Article 6(1)(f) GDPR), or taking steps at your request before entering a contract where the enquiry concerns such steps (Article 6(1)(b)). Protecting the form and website from abuse is a legitimate interest under Article 6(1)(f). Optional analytics and external embedded content rely on your consent (Article 6(1)(a)); you can withdraw it as described below. Storing strictly necessary consent preferences supports providing the site and remembering your choices.

Submitting the form sends the enquiry to our server-side endpoint, which verifies a Cloudflare Turnstile token and sends a plain-text email via Resend to the mailbox designated to handle enquiries. The form does not create a database record. This does not mean that email copies, delivery records or security records do not exist. You can also contact us directly by email.

Cloudflare provides website hosting and request handling. Delivering and securing the site involves technical request data, such as an IP address, requested URL, time and browser information. On the contact page, Cloudflare Turnstile loads automatically to detect automated abuse; it is not dependent on optional cookie consent. Turnstile processes technical signals, including IP address and browser characteristics. See Cloudflare's privacy policy and the Turnstile privacy addendum.

These technical operations support our legitimate interest in providing a reliable and secure website (Article 6(1)(f) GDPR). Rejecting optional cookies does not disable hosting, necessary consent storage or contact-page security verification.

With your fresh, informed analytics consent, Google Analytics 4 (GA4) measures visits, page views and sessions to help us improve this website. A previous analytics choice does not authorise Google measurement. We use basic Consent Mode: before consent, the Google tag is not loaded and no analytics or cookieless measurement requests are sent to Google. Do Not Track (DNT) and Global Privacy Control (GPC) also block analytics. Optional consent is not required to browse or contact us.

After consent, Google processes cookie-based browser and session identifiers, page views, visit times, browser/device information and approximate location derived from your IP address. Google states that for EU traffic it derives location and discards the IP address before logging. Page and referrer URLs sent by our configuration contain only the origin and path, without query strings or fragments. We do not send contact form fields, names, email addresses, User-ID or user-provided data to GA4. Enhanced Measurement, advertising features, ad personalisation and Google signals are disabled. See Google's explanation of Analytics processing.

Google Search Console supplies reports about Google Search visibility and indexing. Ownership verification does not install a visitor-tracking script; Search Console is not an additional runtime tracker on this site. See Google's introduction to Search Console.

YouTube and StereoTimes frames are loaded only after functional consent, also subject to the site's DNT/GPC checks. Once enabled, the external provider receives the request and can process data under its own policy. The contact map is different: local Leaflet code automatically requests OpenStreetMap tiles when the contact page loads, without waiting for optional consent. OpenStreetMap Foundation receives the IP address, browser information and referrer associated with those requests. See its privacy policy and tile service policy.

The Facebook shortcut is an ordinary external link, not a Meta tracking widget or SDK. Following it opens Facebook, whose own privacy rules then apply. These legal pages do not load a contact map or contact form.

Data may be accessible to people authorised to handle enquiries and administer the site, hosting and security providers (Cloudflare), the email delivery provider (Resend), and the provider of the mailbox receiving our correspondence. If you consent to analytics, Google Ireland Limited and its subprocessors, including Google LLC, process analytics data to provide GA4; see Google's data processing terms. Enabling external content sends data to the selected provider. Public authorities may receive data where the law requires it.

Some providers process data outside the European Economic Area, including in the United States. EU collection servers do not mean that all subsequent Google processing remains in the EU. Google describes reliance on the EU–US Data Privacy Framework for certified US recipients and standard contractual clauses where required in its transfer safeguards; see also its privacy policy.

Resend states that its data is stored in the United States; choosing an email sending region is not a promise of EU-only storage. Its data processing agreement describes transfer safeguards, including standard contractual clauses where applicable, and its subprocessor list gives further details. Cloudflare describes its processing and transfer arrangements in its customer data processing addendum. The applicable mechanism depends on the provider and processing involved; we do not represent all website data as remaining in Poland or the EU. Contact us for information about safeguards relevant to your data.

We keep correspondence for as long as needed to handle the enquiry and any resulting relationship, meet applicable legal obligations, or establish, exercise or defend legal claims. The appropriate period depends on the purpose, the course of the correspondence and applicable limitation periods; it is not determined by your cookie selection.

CookieYes is configured to remember consent preferences for 365 days, unless you change them or remove browser storage earlier. The local analytics policy marker has no independent automatic expiry and never authorises measurement without a valid analytics choice; details are in the cookies policy.

GA4 user-level and event-level retention is set to 14 months, with resetting user retention on new activity disabled. Google deletes expired data during its monthly deletion process. This setting does not limit retention of standard aggregated reports. GA cookies have a separate lifetime. See Google's retention documentation.

Resend's security information describes 30-day retention of email content and delivery logs on its standard plans. That provider statement is not a deletion deadline for our receiving mailbox. Retention of technical hosting data depends on the relevant service settings and the purpose of processing. You can request details from the controller.

You may request access to your data, rectification, erasure, restriction of processing and, where the legal conditions apply, data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. You may withdraw consent at any time through cookie settings, without affecting the lawfulness of processing before withdrawal. Rights are subject to the conditions and exceptions in the GDPR.

Use cookie settings to review optional choices. Switching analytics off and saving stops further analytics collection and removes this website's GA cookies. Withdrawal also stops further activation of the site's other optional integrations; it does not recall requests already sent or delete data held by Google or other external providers. Browser controls can remove cookies and local storage. For other requests, contact [email protected]; we may need information proportionate to verifying your identity.

You can lodge a complaint with a supervisory authority, in particular the President of the Polish Personal Data Protection Office (UODO). This website does not use your enquiry to make decisions producing legal or similarly significant effects solely by automated means.