Privacy Policy
Effective date: 24 August 2026
This Privacy Policy explains how ZUST Needles s.c. collects, uses and protects personal data when you visit zust-needles.com, use our contact form or write to us. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Polish data protection law.
1. Data controller
ZUST Needles s.c., registered address: ul. Stare Domki 9/10/1a, 80-857 Gdańsk, Poland; office: ul. Heweliusza 11/1110, 80-890 Gdańsk, Poland; VAT ID PL5833216784.
Email: sales@zust-needles.com · Phone: +48 535 000 668
2. What data we collect and why
- Contact form and email enquiries: name, company, email address, phone number and the content of your message. Purpose: answering your enquiry, preparing quotations and handling orders. Legal basis: steps prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR); for follow-up correspondence – our legitimate interest in maintaining business contacts (Art. 6(1)(f) GDPR).
- Orders and invoicing: company details, tax identification number, delivery address, order history. Purpose: performance of the contract and compliance with accounting and tax obligations. Legal basis: Art. 6(1)(b) and 6(1)(c) GDPR.
- Website analytics: technical data such as IP address, browser type, device, pages visited and time of visit, collected through Google Tag Manager and Google Analytics. Purpose: measuring traffic and improving the website. Legal basis: your consent to analytical cookies (Art. 6(1)(a) GDPR).
- Newsletter: email address. Purpose: sending information about products and technical guides. Legal basis: consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
3. Cookies
The website uses:
- a technical session cookie required by the contact form (quform_session) – necessary for the form to work; stored for the duration of the session;
- analytical cookies of Google Analytics set through Google Tag Manager – only with your consent.
You can delete or block cookies in your browser settings; blocking technical cookies may prevent the contact form from working.
4. Recipients of data
Personal data may be processed on our behalf by our hosting provider (home.pl S.A., Poland), IT and website maintenance providers and accounting services. Analytical data are processed by Google Ireland Limited; data may be transferred outside the European Economic Area under the European Commission’s standard contractual clauses or an adequacy decision. We do not sell personal data.
5. Retention
Enquiries and correspondence: for the time needed to handle the enquiry and then for up to 3 years for the purpose of possible claims. Order and invoicing data: for the period required by tax and accounting law (5 years from the end of the tax year). Analytical data: 14 months. Newsletter data: until consent is withdrawn.
6. Your rights
You have the right to access your data, rectify it, erase it, restrict its processing, transfer it, object to processing based on legitimate interest and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). To exercise your rights, write to sales@zust-needles.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
7. Provision of data
Providing data in the contact form is voluntary but necessary to answer your enquiry. Providing order and invoicing data is required by law and contract.
8. Security
We apply organisational and technical measures appropriate to the risk, including HTTPS encryption of the website and access control to systems in which personal data are processed.
9. Changes
We may update this policy when our services or legal requirements change. The current version is always available on this page together with its effective date.