Privacy Policy of JARPOL

This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with the use of the JARPOL website.

1. Data Controller

The controller of personal data is the company JARPOL, with its registered office at: Jeziorko 5, 26-006 Nowa Słupia, Poland.

In matters regarding data protection, you can contact us via e-mail at: jarpol888@wp.pl or by mail to the company's registered address.

2. Security and Data Minimization

In the interest of the security and privacy of our business partners, our website has been designed in accordance with the principle of data minimization.

The site does not use invasive third-party scripts for profiling Users for marketing purposes.

Website traffic is monitored only at the level of anonymous server logs (e.g., IP address, time, browser information) to ensure the stability and security of the infrastructure and to analyze technical errors – in accordance with the "Green Wall" standard.

3. Scope of Data Processing, Purpose, and Legal Basis

The website is informational and offer-oriented (sale of construction machinery). Personal data may be processed in particular when the User:

• contacts JARPOL via e-mail (e.g., jarpol888@wp.pl),
• contacts us through the telephone numbers provided on the website,
• submits an inquiry regarding machinery (e.g., excavators, loaders, rollers) or leasing services.

Personal data (e.g., first name, last name, company name, e-mail, phone number, and other data provided voluntarily) are processed exclusively for the purpose of:

• answering inquiries and conducting ongoing correspondence – based on Art. 6(1)(f) GDPR (legitimate interest of the Controller consisting in communication with persons interested in the offer),
• taking actions aimed at concluding a sales or leasing agreement and implementing business cooperation – based on Art. 6(1)(b) GDPR,
• fulfilling legal obligations incumbent on the Controller (e.g., tax and accounting regulations) – based on Art. 6(1)(c) GDPR.

4. Data Retention Period

Personal data will be processed for the period necessary for:

• handling the inquiry and conducting business communication,
• the duration of business cooperation,
• after the termination of cooperation – for the period required by law (including for accounting purposes) and until the statute of limitations for potential claims expires.

5. Data Recipients

Users' personal data are not sold or transferred to third parties for marketing purposes.

Recipients of the data may only be:

• entities entitled to receive them on the basis of legal provisions (e.g., state authorities),
• trusted technical service providers (e.g., hosting, IT support) acting on the basis of processing agreements and obliged to maintain confidentiality.

6. User Rights

In connection with the processing of personal data, every User has the right to:

• access their data and receive a copy thereof,
• rectify (correct) their data,
• erase data ("the right to be forgotten") or restrict processing,
• object to processing based on legitimate interest,
• data portability, provided that the processing is carried out by automated means,
• lodge a complaint with a supervisory authority if the User considers that the processing violates GDPR provisions.

7. Cookies

JARPOL's website respects the digital sovereignty of its Users. The service uses only necessary (technical) cookies, which are crucial for the correct display and functioning of the site structure (e.g., remembering basic settings).

We do not use marketing or profiling cookies. The User can change the cookie settings in their web browser at any time.

8. Changes to the Privacy Policy

The Controller reserves the right to make changes to this policy in the event of changes in legal provisions or the technology used on the website. The current content of the policy will always be available on the company's website.