Privacy Policy

This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with the use of the website Adamczyk Nursery Farm (drzewkaowocowe) and placing orders, inquiries regarding fruit trees, shrubs and nursery stock.

1. Personal Data Controller

The controller of your personal data is Adamczyk Nursery Farm Leszek Adamczyk, with its registered office in Końskowola, at Nowy Pożóg 45, 24-130 Końskowola, Poland. Contact regarding personal data protection is possible:

2. Security Architecture – No Invasive Tracking

Traffic on the website is monitored only at the level of internal, anonymous server logs to ensure stability, infrastructure security and protection against attacks (so-called technical logs). We do not use analytical tools based on marketing cookies or remarketing systems.

3. Scope of Data Collected

As part of our business activities, we may process the following categories of personal data:

Data Category	Data Scope	Processing Purpose
Identification data	First name, last name, company name, VAT ID	Customer identification, invoicing
Contact data	Email address, phone number, delivery address	Contact and order fulfillment
Order data	Purchase history, variety preferences	Contract performance, after-sales service
Technical data	IP address, browser type, operating system	Traffic analysis, website security

4. Purpose and Legal Basis for Data Processing

Personal data provided by Users in contact forms, inquiries or orders are processed solely for the following purposes:

• Handling inquiries and conducting business correspondence – the legal basis is Art. 6(1)(f) GDPR (legitimate interest of the Controller consisting of responding to customer inquiries).
• Order fulfillment, invoicing and sales documentation – the legal basis is Art. 6(1)(b) GDPR (necessity for contract performance) and Art. 6(1)(c) GDPR (fulfillment of tax and accounting obligations).
• Possible pursuit of claims or defense against claims – the legal basis is Art. 6(1)(f) GDPR.
• Direct marketing of own products – only after you give separate consent (Art. 6(1)(a) GDPR).

We do not process personal data for marketing purposes without the explicit consent of the User.

5. Data Retention Period

Personal data will be processed for the period necessary to achieve the purpose for which it was collected:

• For inquiries – until the correspondence is completed, no longer than 12 months from the last contact.
• For completed orders – for the period required by tax law (5 years from the end of the calendar year in which the tax obligation arose) and until the statute of limitations for claims expires (usually 6 years).
• Marketing data (with consent) – until consent is withdrawn, no longer than 3 years.

6. Data Recipients

User data is not sold, lent or shared with third parties for marketing purposes. Data recipients may only be:

• Entities providing hosting and server services to the Controller (based on data processing entrustment agreements).
• Courier companies and carriers – to deliver ordered trees and shrubs.
• Providers of accounting and legal services.
• Entities authorized by law (e.g., tax authorities, courts).

7. User Rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access to your data – you can obtain information about what data we process and receive a copy of it.
• Right to rectification – you can request correction of incorrect data or completion of incomplete data.
• Right to erasure („right to be forgotten”) – in certain cases, you can request deletion of your data.
• Right to restriction of processing – when you question the correctness of data or object to processing.
• Right to data portability – you can receive your data in a machine-readable format.
• Right to object – to processing based on the legitimate interest of the Controller.
• Right to withdraw consent – at any time, without affecting the lawfulness of processing before its withdrawal.
• Right to lodge a complaint – to the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), if you consider that processing violates the law.

To exercise your rights, please contact us via email: leszek.adamczyk.drzewka@gmail.com or in writing to the company's registered office address.

8. Cookies

The website of Adamczyk Nursery Farm uses only essential (technical) cookies, which are necessary for the proper functioning of the website, ensuring security and enabling the use of basic functions (e.g., navigation, language switch). We do not use cookies for profiling, analyzing user behavior or marketing purposes.

You can change your cookie settings in your browser at any time. Disabling essential cookies may however affect the correct operation of the website.

9. Data Security

We use appropriate technical and organizational measures to protect processed personal data against loss, damage, unauthorized access or disclosure. Only authorized persons who have been properly trained in information protection have access to the data. The website uses an SSL certificate (HTTPS encryption).

10. Data Transfer Outside the EEA

As a rule, we do not transfer personal data outside the European Economic Area (EEA). In the case of using tools from providers outside the EEA (e.g., hosting servers), we ensure an adequate level of protection through standard contractual clauses approved by the European Commission.

11. Changes to the Privacy Policy

The Controller reserves the right to update this Privacy Policy in the event of changes in the law or the development of offered services. Any material changes will be announced by posting a notice on the website's home page. The current version of the document will always be available at this address.

This Privacy Policy is effective from January 1, 2026.