1. Data Controller
The data controller for WestHarvest.eu is the operator of this website, based at ul. Złota 59, 00-120 Warsaw, Poland. Contact: info@westharvest.eu, telephone +48 22 456 78 90.
2. What data is collected
This website collects the following categories of data:
- Server log data: IP address, browser type, referring URL, pages visited, and timestamp. This data is collected automatically by the web server and retained for up to 30 days for security and diagnostic purposes.
- Contact form submissions: Name, phone number, and email address submitted through the contact form on the homepage. This data is used solely to respond to the submitted enquiry and is not shared with third parties.
- Cookies: A single functional cookie is stored to record your response to the cookie consent banner. No tracking or analytics cookies are set without your explicit acceptance.
3. Legal basis for processing
Data processing is conducted on the following legal bases under GDPR Regulation (EU) 2016/679:
- Legitimate interest (Article 6(1)(f)) for server log data used for security purposes.
- Consent (Article 6(1)(a)) for any optional cookies set following banner acceptance.
- Contract performance (Article 6(1)(b)) for contact form data used to respond to specific enquiries.
4. Cookies
This website uses one first-party functional cookie (wh_cookie_consent) to store your cookie banner response. This cookie does not contain personal data and has an expiry of 365 days. It is set only after you interact with the cookie banner on the homepage.
No third-party tracking cookies, advertising cookies, or analytics cookies are set by this website.
5. Data sharing
Data collected through this website is not sold, licensed, or shared with third parties for commercial purposes. Server infrastructure providers may process log data as data processors under appropriate contractual terms. No personal data is transferred outside the European Economic Area.
6. Data retention
Server log data is retained for a maximum of 30 days. Contact form submission data is retained for up to 12 months following the last correspondence and then permanently deleted.
7. Your rights
Under GDPR, you have the following rights regarding personal data processed by this website:
- Right of access — request a copy of the personal data held about you.
- Right to rectification — request correction of inaccurate personal data.
- Right to erasure — request deletion of personal data, subject to legal retention requirements.
- Right to restrict processing — request that processing of your personal data is limited.
- Right to object — object to processing based on legitimate interest.
- Right to data portability — receive personal data in a structured, machine-readable format.
To exercise any of these rights, contact info@westharvest.eu. You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl.
8. Security
This website uses HTTPS encryption for all data in transit. Access to server systems and contact form data is restricted to authorised personnel only.
9. Changes to this policy
This privacy policy may be updated from time to time. The date at the top of this page reflects the most recent revision. Significant changes will be noted on the homepage.