Privacy Policy

1. Data controller

The controller is CEprojekt Krzysztof Zdebski, a sole proprietorship registered in the Polish CEIDG register, NIP (tax ID) 8691729882, REGON 120837305, ul. Okocimska 2, 32-800 Brzesko, Poland (registered office, office and address for service). Additional production and warehouse site: Gnojnik 393, 32-864 Gnojnik.

2. Contact

For personal data and privacy matters: e-mail shop@cepack.pl, phone +48 575 832 169 (Monday–Friday 8:00–16:00 CET), or by post to the registered office.

3. Data we process

From the quote request form:

• company name, contact person's name, country, e-mail address (required),
• phone or WhatsApp number (optional),
• selected mailer size, estimated quantity, custom print choice,
• message and uploaded logo or artwork file (optional),
• language version of the page used, submission date and — if present in the page address — source and campaign parameters (UTM),
• confirmation that you have read this policy and — if given — marketing consent with its date and wording version.

4. Purposes and legal bases

Confirming that you have read this policy in the form is not a legal basis for processing.

• handling your inquiry, preparing an offer and pre-contractual steps — Art. 6(1)(b) GDPR, and for routine B2B correspondence with representatives of business partners and organising our service — Art. 6(1)(f) GDPR (legitimate interest),
• establishing, exercising or defending legal claims — Art. 6(1)(f) GDPR,
• protecting the form against abuse (e.g. automated spam) — Art. 6(1)(f) GDPR,
• e-mail marketing of CEpack's own products and services — only with separate, voluntary consent: Art. 6(1)(a) GDPR and consent to receive commercial information by electronic means under Art. 398 of the Polish Electronic Communications Law.

5. Recipients

Data may be shared only with entities supporting us technically and acting on our instructions: providers of hosting and server infrastructure, database and file storage. Data may also be disclosed to public authorities where required by law.

6. Transfers outside the EEA

Some technology providers may process data outside the European Economic Area. In that case, transfers take place only under the mechanisms set out in Chapter V GDPR, such as a European Commission adequacy decision or standard contractual clauses. Information on the safeguards applied is available on request at the address in section 2.

7. Retention

• form data and uploaded files — generally no longer than 24 months from the inquiry or the last contact, unless a concluded contract, legal obligations or the establishment, exercise or defence of claims require longer,
• data processed on the basis of marketing consent — until consent is withdrawn, but no longer than 24 months from giving or renewing consent or from your last activity, unless another legal basis applies.

8. Your rights

• access to your data and a copy of it,
• rectification,
• erasure,
• restriction of processing,
• data portability — where processing is based on a contract or consent and carried out by automated means,
• objection to processing based on Art. 6(1)(f) GDPR,
• withdrawal of consent at any time, e.g. by e-mail to shop@cepack.pl — without affecting the lawfulness of processing before withdrawal,
• lodging a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw) or another competent supervisory authority.

9. Providing data

Providing data is voluntary. However, without the data marked as required we cannot prepare an offer or handle your inquiry. Marketing consent is entirely optional and does not affect your ability to send an inquiry.

10. Automated decisions and profiling

We do not make solely automated decisions or profile individuals based on form data.

11. Cookies and browser storage

The website does not use analytics or marketing tools (e.g. Google Analytics, Meta Pixel) and does not store tracking cookies in your browser. Only mechanisms strictly necessary to display the page and submit the form are used, including a one-time signed anti-spam form token that is not saved in browser storage.

12. Changes

This policy may be updated, e.g. due to changes in law or website features. The current version is always available on this page with its update date.