Protecting our users’ privacy is particularly important to JPP Brataniec Sp. z o.o., and we want every customer to know how we process their data. That is why we have prepared this Privacy Policy, which describes how personal data is protected and processed.

JPP Brataniec Sp. z o.o. makes every effort to ensure that customer data is processed to the highest security standards in accordance with the General Data Protection Regulation of 27 April 2016 (OJ EU L 119 of 04.05.2016) (hereinafter: GDPR).

The controller of your personal data in connection with its processing for the purposes listed below is:

JPP Brataniec Sp. z o.o.
 Turza 137, 33-167 Turza, Poland,
Tel. +48 511 732 046,
Email: [email protected]
VAT ID: PL9930694332,
REGON: 524859254,
KRS: 0001027552,

Purposes and legal basis for processing your personal data

We may process personal data for the following purposes:

  1. concluding and performing a contract (Art. 6(1)(a) GDPR) – including verifying creditworthiness and settling the contract – based on data provided by you or data from other sources (the Polish National Court Register KRS, the Central Register and Information on Economic Activity CEIDG, credit reference agencies; in each case the basis for obtaining information is the legislation governing the respective register);
  2. compliance with our legal obligations (Art. 6(1)(c) GDPR), in particular:
    1. fulfilling tax obligations (issuing and settling invoices and other accounting documents);
    2. fulfilling obligations related to exercising the rights set out in the GDPR (including to the extent necessary to identify and verify the requesting person and to respond);
  3. pursuing our legitimate interests (Art. 6(1)(f) GDPR), namely:
    1. establishing, pursuing or defending against claims that may arise in connection with contracts (performance and settlement of a contract, handling complaints) or
      related to fulfilling obligations under the GDPR (to be able to demonstrate compliance);
    2. answering questions sent by email – to an employee’s email address (email correspondence);
    3. enabling contact between employees of the contracting parties who are not themselves parties to the contracts, both at the offer stage and during performance of the contracts;
    4. verifying the identity of employees of business partners, e.g. drivers, couriers;
    5. ensuring the safety of people and protecting property through video surveillance
  4. processing data on the basis of consent (Art. 6(a) GDPR): sending information
    promoting the controller’s business (marketing activities).
    Providing data is voluntary, but it is necessary for the above purposes so that we can
    conclude a contract with you or answer your question.
    Not giving the consent referred to in point 4 does not affect the conclusion of a contract.

Retention period of your personal data

Personal data is processed for the following periods (these are maximum periods):

  1. data processed to conclude and perform a contract – for the duration of the contract and then until mutual claims become time-barred (solely to establish, pursue or defend against claims) on the basis of legitimate interest, or until an effective objection;
  2. data processed to fulfil tax obligations – for the period required by tax law, as a rule 5 years from the end of the calendar year in which the invoice was issued;
  3. data processed to fulfil obligations related to the rights set out in the GDPR – for the time needed to defend against claims (for the limitation period for claims for infringement of personal rights);
  4. data processed to establish, pursue or defend against claims – for the limitation period of claims both against and by the company;
  5. answering questions sent by email – until an effective objection or until mutual claims related to the correspondence, e.g. performance of a contract, become time-barred;
  6. enabling contact between employees of the contracting parties – until an effective objection or until mutual claims related to the correspondence, e.g. performance of a contract, become time-barred;
  7. verifying the identity of employees – until an objection or until mutual claims related to the correspondence, e.g. performance of a contract, become time-barred;
  8. data from video surveillance will be stored for a maximum of 60 days;
  9. sending marketing content and commercial offers – until consent is withdrawn

Sources of your personal data


We usually obtain your data directly from you, e.g. when concluding and performing contracts or answering questions by email. We may also obtain data from publicly available sources such as your company’s website or the website of the company you work for – e.g. name, job title, business phone number and email address (for contact purposes) – from the National Court Register KRS or the CEIDG register (to verify the information you provided, only to the extent stated there), and from publicly available industry portals. Your data may also be
provided to us by your employer – to enable us to contact you under a contract concluded with them or to verify your identity (e.g. if you are a driver collecting our product).

The recipients of your personal data, i.e. entities to which the company may disclose personal
data, will be:

  1. public authorities or other entities authorised to access data to the extent and for the purpose
    specified in specific regulations;
  2. Polish Post and courier companies;
  3. banks, where settlements are necessary;
  4. entities providing services that support the controller’s operations, to the
    extent of the services provided, including IT service providers, auditors, providers
    of accounting services, providers of services supporting recruitment,
    providers of marketing services – such entities process the data
    under a data processing agreement and only on the controller’s instructions;
  5. employees / associates of the controller

Your personal data will not be transferred outside the European Union.

Your rights regarding the processing of personal data

You have the right to access your data, including obtaining a copy, the right to data portability, the right to rectification and erasure, to restriction of processing, and the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
You also have the right to lodge a complaint with the supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO).

In all matters relating to data protection (including objecting, withdrawing consent, reporting a breach of data protection rules or exercising your other rights) you can contact us by email at [email protected] or at our postal address: JPP Brataniec Sp. z o.o. 
Turza 137, 33-167 Turza, Poland, 

Withdrawal of consent

If your personal data is processed on the basis of consent, you may withdraw it at any time. Consent can be withdrawn by email to [email protected] or by post to JPP Brataniec Sp. z o.o.. Turza 137, 33-167 Turza, Poland.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. If consent is withdrawn, the company will assess whether it still has grounds to process the data. In response to your request, you may be asked to provide data needed to verify your identity or additional information needed to handle the request properly.

This Privacy Policy is effective from 01.10.2022.

The Privacy Policy may need to be updated in the future. The latest version will always be available on our website. We will inform you of any change to its content, e.g. changes to the purposes for which we use your personal data or to your rights. The Polish version is binding.