Privacy policy
How personal data is processed on EXPRAN’s information website and when handling correspondence.
Updated: 2026-10-21
Controller and contact
The controller for EXPRAN’s activities is EXPRAN sp. z o.o., ul. Fabryczna 3, 26-200 Końskie, Poland; KRS 0000478975, NIP 6581981958, REGON 260723435. Privacy contact: biuro@expran.pl.
Website scope
The website presents the company, product categories, information and contact details. This version has no user accounts, payments, newsletter or ordering. This policy concerns the actual website functions, not the former shop.
Data and purposes
Contact data include first name, optional surname, email, selected subject and correspondence content. They are used to respond and handle the matter. Required fields are marked and needed to submit the form. Do not submit medical information or other people’s data.
Legal bases
Correspondence and website security are based on the controller’s legitimate interests (GDPR Article 6(1)(f)). Requested pre-contractual steps may fall under Article 6(1)(b); statutory obligations are handled under Article 6(1)(c).
Recipients and hosting
Authorised personnel and hosting and email providers help operate the site and correspondence. This version is hosted by Hostinger. Data may be disclosed to authorities where legally required. Processing arrangements and infrastructure locations also depend on provider contracts.
Retention
Correspondence is retained while handling the matter, then as required by law or necessary for legal claims. It is not published on the site. Technical sending-limit records are cleaned on subsequent requests after two hours. Hosting log retention depends on the provider’s configuration and policies.
Cookies and technical data
No advertising analytics or profiling has been added. Images, styles and scripts are served locally. Forms use an essential session identifier to protect submissions; the session cookie ends with the browser session. Servers may log IP and request details. Sending limits use an IP hash, not message content.
Your rights
You may request access, rectification, erasure and restriction, and object to legitimate-interest processing. Portability and withdrawal of consent apply where GDPR conditions are met. Send requests to biuro@expran.pl. You may complain to the Polish UODO or a competent supervisory authority.
Links and security
External and social links lead to sites with their own privacy rules. Connections to this website are encrypted. Forms have validation, anti-automation measures and request limits. No automated decision-making about visitors is used.