1. Data controller
The controller is Tovago sp. z o.o., Karpia 25/97, 61-619 Poznan, Poland, KRS 0000929188, NIP 7831728245, REGON 361898582. Privacy contact: sales@tovago.pl or the registered office.
2. Purposes and legal bases
We process form and correspondence data to reply, prepare an offer and take pre-contract steps (GDPR Art. 6(1)(b)), or under our legitimate interest in managing business relations (Art. 6(1)(f)). Technical logs such as IP address, date, URL and browser type support security and diagnostics under Art. 6(1)(f). Google Analytics 4 and Google Ads run only after the relevant consent (Art. 6(1)(a)). Data may also be used to establish, pursue or defend claims.
Contact details are voluntary, but without them a reply may be impossible. The public website does not make solely automated decisions producing legal effects.
3. Recipients and transfers
Data may be received by authorised staff and providers of hosting, email, IT, security, legal, analytics and advertising services. After consent, Google Ireland Limited may receive data. Data may be processed outside the EEA under an appropriate safeguard, including an adequacy decision or standard contractual clauses. We do not sell personal data.
4. Retention
Offer correspondence is kept while handled and for up to 3 years afterwards; security logs generally for up to 12 months; consent-based data until withdrawal, expiry of the choice (180 days), or fulfilment of the purpose. Contract and accounting records follow statutory and limitation periods. Evidence of consent may be kept as needed to demonstrate compliance.
5. Your rights
You have rights of access and copy, rectification, erasure, restriction, portability, objection to legitimate-interest processing, and consent withdrawal without affecting earlier processing. You may complain to the Polish DPA. Cookie choices can be changed through the footer.
6. Changes
This policy may be updated when website features, providers or law change. The current version and effective date are always available at this address.