Legal

GDPR information clause

Information clause pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

1. Who is the data controller?

The controller of your personal data is GREEN FUEL TRADING SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with registered office at Jana Matejki 30 / 1, 87-100 Toruń, Polska, entered in the Polish court register (KRS) under number 0001086549, NIP 9562390554, REGON 527720723.

2. How to contact us

For any matter concerning your personal data, please write to sprzedaz@greenft.eu or by post to the controller's registered office.

The controller has not appointed a Data Protection Officer — this is not required under Article 37 GDPR.

3. Purposes of processing

We process your personal data (name, email, phone, message content, company details, enquiry details) for the following purposes:

responding to your commercial enquiry;
preparing an offer and performing any resulting biomass supply contract;
accounting and tax obligations;
direct marketing of our products (only with separate consent);
pursuing or defending claims.

4. Legal basis

Article 6(1)(a) GDPR — your consent given via checkboxes in the form;
Article 6(1)(b) GDPR — pre-contractual steps and contract performance;
Article 6(1)(c) GDPR — legal obligations (Polish Accounting Act, tax law);
Article 6(1)(f) GDPR — legitimate interests (direct marketing, claim handling).

5. Retention period

commercial enquiries without further engagement — up to 12 months from last contact;
contract-related data — for the term of the contract and 5 years after termination;
accounting data — 5 years from the end of the financial year;
marketing consents — until withdrawn.

6. Recipients of data

Your personal data may be shared with the following categories of recipients:

hosting and IT providers (Vercel Inc. — site hosting);
email delivery providers (Resend, Inc.);
accounting office and tax advisers;
law firm in the event of a dispute;
public authorities as required by law.

We do not transfer your data to third countries (outside the EEA) other than under Standard Contractual Clauses adopted by the European Commission.

7. Your rights

right of access and to a copy of your data;
right to rectification;
right to erasure;
right to restriction of processing;
right to data portability;
right to object to processing based on Article 6(1)(f) GDPR;
right to withdraw consent at any time;
right to lodge a complaint with the Polish DPA (ul. Stawki 2, 00-193 Warszawa).

8. Is providing data required?

Providing your data is voluntary but necessary to respond to your enquiry and to prepare an offer. Without it we cannot pursue those purposes.

9. Automated decision-making

Your data is not subject to automated decision-making, including profiling, within the meaning of Article 22 GDPR.

Clause effective from 1 July 2026.