Legal information

Privacy policy

Last updated: 2026-07-02

This privacy policy describes the rules under which Biomass Global Trading Sp. z o.o. (“we”, the “Controller”) processes personal data of users of the biomassglobaltrading.pl website (the “Site”), in particular of persons who complete the enquiry form.

Note: The original binding version of this policy is written in Polish and interpreted under Polish law. The English text is provided for convenience only.

1. Controller of personal data

The controller of your personal data is:

Biomass Global Trading Sp. z o.o.
Aleja Wincentego Witosa 31 / 46.3, 00-710 Warszawa, Poland
Tax ID (NIP): 5214148808, Registration No. (KRS): 0001217774, REGON: 543756045
Email: kontakt@biomassglobaltrading.pl
Phone: +48 602 485 480

2. Scope of processed data

In connection with the Site we process the following categories of personal data:

Enquiry contact data — full name, company name, email address, phone number, message content, selected product and indicative order volume (where provided).
Technical data — IP address, browser and operating system information, session data, collected automatically for security and statistical purposes.
Data in cookies — see the “Cookies” section below.

3. Purposes and legal bases of processing

We process personal data for the following purposes and on the following legal bases:

Handling the enquiry and commercial contact — basis: Art. 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest of the Controller in handling B2B enquiries).
Conclusion and performance of a commercial contract — basis: Art. 6(1)(b) GDPR.
Compliance with accounting and tax obligations — basis: Art. 6(1)(c) GDPR in connection with applicable tax and accounting law.
Establishing, pursuing or defending legal claims — basis: Art. 6(1)(f) GDPR.
Site statistics and traffic analysis — basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller in improving the Site).

4. Recipients of data

Your data may be shared with the following categories of recipients:

Transactional email provider — Resend (Resend, Inc., USA) — as a processor handling emails generated by the contact form.
Hosting and infrastructure provider — Vercel Inc. (USA / EU) — as a processor hosting the Site.
Accountancy firm, legal counsel, auditors — to the extent necessary for the fulfilment of accounting and legal obligations.
Public and judicial authorities — only in cases provided for by applicable law.

5. Transfers of data outside the EEA

Some of our service providers (Resend, Vercel) are based in the United States. Such transfers take place on the basis of Standard Contractual Clauses (SCC) approved by the European Commission and — where applicable — on the basis of the Data Privacy Framework certification.

6. Data retention period

Data from the enquiry form is kept until the enquiry is handled, and then for the period of statute of limitations for claims (as a rule, 3 years for B2B).
Data related to concluded contracts — for a period of 5 years from the end of the financial year in which the transaction took place (in accordance with the Accounting Act).
Technical and statistical data — up to 24 months from collection.

7. Your rights

Under the GDPR you have the following rights:

right of access to your data and to obtain a copy (Art. 15 GDPR);
right to rectification of inaccurate data (Art. 16 GDPR);
right to erasure (Art. 17 GDPR) — subject to statutory obligations;
right to restriction of processing (Art. 18 GDPR);
right to data portability (Art. 20 GDPR);
right to object to processing based on the legitimate interest (Art. 21 GDPR);
right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (uodo.gov.pl), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise your rights please contact us at kontakt@biomassglobaltrading.pl.

8. Voluntary nature of data provision

Providing data via the contact form is voluntary, but necessary to process your enquiry. Without contact data we will not be able to reply to the enquiry.

9. Cookies

The Site uses only essential technical cookies required for correct operation of the site and the form. We do not use marketing or advertising cookies without a separate consent.

If analytics tools (e.g. Google Analytics) are added in the future, we will ask for your consent in accordance with the applicable telecommunications and e-Privacy law.

10. Automated decision-making and profiling

We do not carry out automated decision-making based on your personal data, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

11. Changes to this policy

We reserve the right to change this policy. We will announce material changes by publishing the updated version on the Site with the date of the latest update.