Privacy policy

This policy explains what personal data we process in connection with the Stockinette website and the handling of business enquiries, for what purposes and on what legal basis we do so, and what rights you have. We apply it in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

Data controller

The controller of your personal data is Janusz Rzęsista, running a business under the name Janusz Rzęsista Firma Handlowa LUNA, ul. Łódzka 308, 25-655 Kielce, Poland, Tax ID (NIP) 959-051-10-30, REGON 290886036. Stockinette is the controller’s trade brand.

For matters relating to personal data, you can contact us by email: biuro@stockinette.pl, by phone: +48 600 031 061 or in writing at our registered address.

What data we process

  • from the contact form: your name or company name, email address, phone number, subject and message;
  • from the “Ask about a material” window and the product page form: your name, email address, optionally your phone number, the name of the material you are asking about and the address of the page from which the enquiry was sent;
  • from email correspondence and phone calls: the data you provide to us, including details of the company you represent;
  • technical data: IP address and browser information recorded in server logs, and data from cookies. To protect the forms against abuse, we use a hash of the IP address, which we store for no longer than one hour.

Purposes and legal bases of processing

  • responding to your enquiry, preparing an offer and sending samples — taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) and, if you write on behalf of a company, our legitimate interest in communicating with customers’ representatives (Article 6(1)(f) GDPR);
  • concluding and performing a contract, including deliveries — Article 6(1)(b) GDPR or, for the data of persons representing a customer, Article 6(1)(f) GDPR;
  • issuing invoices and keeping accounting records — the controller’s legal obligation (Article 6(1)(c) GDPR);
  • establishing, pursuing and defending legal claims — the controller’s legitimate interest (Article 6(1)(f) GDPR);
  • ensuring the security of the website and protecting the forms against spam — the controller’s legitimate interest (Article 6(1)(f) GDPR);
  • processing based on your consent, given for example when submitting a form (Article 6(1)(a) GDPR). You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Do you have to provide your data

Providing your data is voluntary. However, without an email address or phone number we will not be able to reply to your enquiry, and without the data required by law we cannot conclude a contract or issue an invoice.

How long we keep your data

  • enquiries and business correspondence — for the duration of our discussions and cooperation, and then until the relevant limitation periods for claims have expired;
  • accounting records — for 5 years from the end of the calendar year in which the tax payment deadline fell;
  • data processed on the basis of consent — until consent is withdrawn;
  • server logs — for as long as necessary to keep the website secure.

Data recipients

Your data may be shared with entities that provide services to us, only to the extent necessary to perform those services: hosting and email providers, IT service providers, our accounting office, and courier and freight companies handling deliveries. We may also disclose data to public authorities where required by law.

Transfers of data outside the European Economic Area

As a rule, we process data within the European Economic Area. If any of our providers processes it outside the EEA, this takes place on the basis of a European Commission adequacy decision or standard contractual clauses approved by the Commission.

Your rights

  • the right of access to your data and to receive a copy of it (Article 15 GDPR);
  • the right to rectification of your data (Article 16 GDPR);
  • the right to erasure of your data (Article 17 GDPR);
  • the right to restriction of processing (Article 18 GDPR);
  • the right to data portability (Article 20 GDPR);
  • the right to object to processing based on legitimate interest (Article 21 GDPR);
  • the right to withdraw consent at any time, where processing is based on consent.

To exercise these rights, write to biuro@stockinette.pl. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, if you believe that we process your data unlawfully.

Automated decision-making and profiling

We do not make automated decisions about you and we do not profile your data.

Cookies

The rules for using cookies are set out in our cookie policy.

Changes to this privacy policy

We may update this policy, for example following changes in the law or to the website’s features. The current version is always available on this page.

Last updated: 29 September 2026.