Privacy policy

This policy explains how we process the personal data of our customers, business partners and their representatives, and of visitors to our website, under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Polish law. Personal data is information about a natural person, such as the name, email address or phone number of a company’s representative.

1. Data controller

The controller of your personal data is Inari Supply sp. z o.o., Al. Jerozolimskie 81 lok. 7.10, 02-001 Warszawa, Poland, NIP (tax ID) 7011333826, KRS 0001269811. For anything concerning personal data, contact us at [email protected] or by phone: +48 572 525 817.

2. What data we process and where it comes from

We process the data we need to work with you, in particular: name, job title, company name and details, email address, phone number, the content of our correspondence, and data from purchase and sale documents (e.g. orders, delivery notes and invoices). When you use the website, the server records technical data such as your IP address.

We receive data directly from you. We obtain the data of our customers’ and partners’ representatives from the customers or partners they represent, or from publicly available sources.

3. Purposes and legal bases

• Answering enquiries, preparing quotes and performing a contract or a purchase/sale order, including contact by phone, email and post, and issuing orders, delivery notes and invoices: Art. 6(1)(b) GDPR.
• Meeting legal obligations, in particular tax and accounting ones: Art. 6(1)(c) GDPR.
• Producing statistics, reports and analyses for our own purposes: our legitimate interest (Art. 6(1)(f) GDPR).
• Establishing, pursuing or defending legal claims: our legitimate interest (Art. 6(1)(f) GDPR).
• Keeping the website running and secure (server logs): our legitimate interest (Art. 6(1)(f) GDPR).

4. We contact you only when you ask

We do not send newsletters or marketing messages. We contact you only in reply to your enquiry and in connection with your order.

5. Recipients

We share data with companies that help us fulfil orders and run our business, e.g. providers of postal, courier, accounting, legal and IT services, including Cloudflare, Inc. (website hosting). Companies that process data on our behalf (e.g. providers of IT, hosting and cloud storage services, and the accounting office we work with under contract) do so under data processing agreements and only on our instructions. We may also disclose data to public authorities where the law requires it.

We do not sell personal data or share it with others for their marketing.

6. Transfers outside the European Economic Area

Data may be transferred outside the European Economic Area where this is needed for services provided to us (e.g. website hosting by Cloudflare, Inc., based in the USA) or to fulfil orders and deliveries to recipients outside the EU. Such transfers are then based on a European Commission adequacy decision (Art. 45 GDPR), standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR) or, where necessary to perform a contract, Art. 49(1)(b) or (c) GDPR. You can ask about the safeguards used by writing to [email protected].

7. Retention

• Data related to a contract or a purchase/sale order: 5 years from the moment the operations, purchase/sale transactions and procedures have been finally completed and the obligations paid, settled or time-barred, and from the expiry of all guarantees and warranties under the contract or order.
• Data used for statistics, reports and analyses: 5 years from the last operation on that data.
• Enquiries that did not lead to a contract: for as long as needed to answer them and continue the correspondence, in line with the storage limitation principle (Art. 5(1)(e) GDPR), and where necessary until any claims become time-barred.

8. Your rights

You have the right to:

• access your data and receive a copy of it,
• have inaccurate or incomplete data rectified,
• have your data erased (the “right to be forgotten”) in the cases set out in the GDPR,
• restrict processing,
• data portability,
• object to processing based on our legitimate interest,
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.

We do not make decisions based solely on automated processing, including profiling, that would have legal or similarly significant effects on you.

9. How to exercise your rights

Send your request to [email protected], call +48 572 525 817 or write to our registered address. We reply without undue delay and within one month at the latest. Where justified, this period may be extended by two further months, and we will let you know. If we have reasonable doubts about the identity of the person making the request, we may ask for the information needed to confirm it. If we refuse a request, we will tell you why.

10. Complaints

If you believe that the processing of your data breaches the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland (uodo.gov.pl). You do not need to contact us first.

11. Cookies and similar technologies

This website does not use cookies or tracking tools. Fonts are served from our own server and the site embeds no third-party content (maps, videos). The only thing stored in your browser (localStorage) is your choice of language.

12. Providing data is voluntary

Providing personal data is voluntary, but without it we cannot answer your enquiry or perform a contract or order. Some data (e.g. for invoices) is required by law.

13. Changes to this policy

We may update this policy, e.g. when the law or the way the website works changes. The current version is always available on this page.