Taldona
taldona / legal / privacy-policy

Privacy Policy

Last updated: January 2026. This policy applies to all personal data collected and processed by Taldona in connection with the operation of this website and correspondence conducted through it.

1. Data Controller

The data controller for personal data processed in connection with this website is:

Taldona
ul. Marszalkowska 38
02-586 Warsaw, Poland
[email protected]
+48 22 614 37 82

2. Personal Data We Collect

We collect personal data only to the extent necessary to respond to enquiries and operate this website. The categories of personal data we may collect include:

  • Contact data: Name, email address, and telephone number provided through the contact form or direct correspondence.
  • Technical data: IP address, browser type, operating system, and page visit data collected automatically via server logs and analytics tools.
  • Communication data: The content of messages sent through the contact form or by email.
  • Cookie data: Data placed on your device via cookies as described in our Cookie Policy.

3. Legal Basis for Processing

We process personal data under the following legal bases as defined in the General Data Protection Regulation (GDPR):

Legitimate interest (Article 6(1)(f) GDPR)

Processing contact enquiries, operating and securing the website, and retaining correspondence records.

Consent (Article 6(1)(a) GDPR)

Non-essential cookies placed on your device, where your consent has been obtained through the cookie banner.

Compliance with legal obligation (Article 6(1)(c) GDPR)

Retention of records where required by applicable Polish law or EU regulation.

4. How We Use Your Data

Personal data is used solely for the purposes for which it was collected:

  • Responding to enquiries submitted through the contact form or by direct correspondence.
  • Processing requests for formulation documentation or lot record information.
  • Monitoring and improving the performance and security of this website.
  • Complying with applicable legal obligations.

We do not use personal data for automated decision-making or profiling. We do not engage in direct marketing without separately obtained consent.

5. Data Sharing and Third Parties

Personal data is not sold, rented, or shared with third parties for their own marketing purposes. Data may be shared with the following categories of third-party processors acting on our behalf:

  • Web hosting and infrastructure providers who process server log data.
  • Analytics service providers, where consent for analytics cookies has been granted.
  • Professional advisors (legal or financial) where disclosure is necessary.

All third-party processors are bound by data processing agreements requiring them to maintain appropriate security standards consistent with GDPR obligations.

6. Data Retention

Personal data is retained for the minimum period necessary for the purpose for which it was collected:

Data Type Retention Period
Contact form submissions2 years from last contact
Server log data90 days
Analytics data (aggregated)26 months (standard)
Legal correspondenceAs required by applicable law

7. Your Rights

Under the GDPR and applicable Polish data protection law, you have the following rights with respect to your personal data:

  • Right of access: Request confirmation of whether we hold personal data about you and obtain a copy.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of personal data where there is no legitimate reason for its continued processing.
  • Right to restriction: Request restriction of processing in certain circumstances.
  • Right to data portability: Receive personal data you have provided in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw.

8. Security

Appropriate technical and organisational measures are in place to protect personal data against unauthorised access, loss, or alteration. These include encrypted data transmission over HTTPS, access controls on data storage, and periodic review of security practices. No transmission over the internet is entirely secure; while we employ reasonable measures, we cannot guarantee absolute security.

9. Cookies

This website uses cookies. Details of the cookies used, their purpose, and how to manage your preferences are set out in our Cookie Policy. Cookie preferences can be adjusted at any time using the Cookie Settings link in the footer.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. The date of the most recent revision is shown at the top of the page. Continued use of this website following any update constitutes acknowledgement of the revised policy. Material changes will be communicated by a prominent notice on the homepage.

11. Contact

Questions regarding this Privacy Policy should be directed to:

Taldona — Data Enquiries
ul. Marszalkowska 38, 02-586 Warsaw, Poland
[email protected]
Monday — Friday, 09:00 – 18:00