Legal & Privacy Document
Effective Date: September 2026
Data Controller: TEP Sp. z o.o.
Registered in Bielsko-Biała, Poland
Regulation (EU) 2016/679 (GDPR)
Privacy Policy
This Privacy Policy outlines how TEP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ ("we", "our", "us"), operating the website Nutrisipria (nutrisipria.id), collects, uses, protects, and discloses information obtained from users ("you") when you visit our website or communicate with us. We are committed to safeguarding your personal data in full compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Polish data protection laws.
01 — Controller
Data Controller Identity
The data controller responsible for the processing of your personal data on this website is:
TEP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Cieszyńska 367, 43-382 Bielsko-Biała, Poland
KRS: 0000574091 | NIP: 5223037557 | REGON: 362445233
Phone: +48 33 812 34 56
Email: [email protected]
02 — Minimization
Information We Collect
We adhere strictly to the principle of data minimization. We only collect personal information that you voluntarily provide when contacting us via our web forms or email:
• Full name (for identification)
• Email address (to reply to your request)
• Phone number (if provided for callback)
• Content of your message or inquiry
• Technical log data (IP address, browser type, timestamp for server security)
03 — Lawfulness
Legal Basis for Processing
Your data is processed under recognized lawful grounds under Art. 6 GDPR:
• Art. 6(1)(b) GDPR: Taking steps at the request of the data subject prior to entering into a contract or answering your inquiries.
• Art. 6(1)(a) GDPR: Your explicit consent given when submitting a contact form.
• Art. 6(1)(f) GDPR: Legitimate interest in maintaining server integrity and security.
• Art. 6(1)(c) GDPR: Compliance with legal and accounting obligations.
04 — Purpose & Protection
How We Use and Store Your Data
We process your personal information solely to fulfill the purpose for which it was provided. We do not sell, rent, or lease your personal information to third parties, nor do we use it for automated decision-making or profiling.
All data is stored on secure servers located within the European Union, utilizing modern technical and organizational measures (encryption in transit via SSL/TLS, firewalls, and restricted administrative access) to prevent unauthorized access, alteration, or disclosure.
Data Retention Periods
• Inquiry correspondence: Retained for the duration necessary to answer your request and for up to 12 months following resolution for customer service reference.
• Contractual and tax records: Retained for the mandatory statutory period required by Polish commercial and accounting regulations (typically 5 years from end of tax year).
• Technical server logs: Retained for a maximum of 30 days for cybersecurity inspection before automatic purging.
Upon expiration of the retention period, data is securely deleted or anonymized.
05 — Your Rights
User Rights Under GDPR
As a data subject residing in the European Economic Area or visiting our platform, you possess comprehensive rights regarding your personal information.
Right of Access (Art. 15 GDPR)
You may request confirmation as to whether we process your data and obtain a copy of your personal data.
Right to Rectification (Art. 16 GDPR)
You have the right to request the correction of inaccurate or incomplete personal information.
Right to Erasure (Art. 17 GDPR)
You may request the deletion of your personal data when it is no longer necessary for its original purpose.
Right to Restriction (Art. 18 GDPR)
You can request the restriction of processing while a verification or contestation is underway.
Right to Object (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.
Right to Complain to Supervisory Authority
You have the right to lodge a complaint with the Polish Data Protection Authority (Prezes Urzędu Ochrony Danych Osobowych - UODO, ul. Stawki 2, 00-193 Warszawa, Poland).
06 — Contact & Inquiries
Exercising Your Privacy Rights
To exercise any of your statutory rights, or if you have questions regarding this Privacy Policy and our data handling practices, please submit a written request to our Data Protection point of contact:
Email: [email protected]
Postal Address: TEP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Cieszyńska 367, 43-382 Bielsko-Biała, Poland.