Privacy policy
1. Controller
BIOGRAVENA – M. Müller
Leininger Str. 7, 67227 Frankenthal, Germany
Email: info@rynek-zboz-ekologicznych.eu
Website: https://rynek-zboz-ekologicznych.eu
2. Hosting and access data
When you visit the site, technically necessary data such as IP address, time, requested pages, browser and operating system may be processed in server logs to provide and secure the service. The legal basis is Article 6(1)(f) GDPR. The hosting provider is ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Retention depends on operational needs and the deletion periods configured with the hosting provider.
3. Account and profile
During registration and use, we process the account, contact and profile information you enter, in particular username, email address, name, company, address and telephone number. Passwords are stored as hashes. The data is used for sign-in, account management, email confirmation and platform use. The legal basis is Article 6(1)(b) GDPR; security and abuse prevention rely on Article 6(1)(f) GDPR.
4. Offers, requests and contact details
Published listings contain product, quantity, country of the goods, description and optional images. Your phone number is shown only after your express permission and only to signed-in users with a confirmed account. Your name, exact profile address and account email are not automatically published in listings. Please include only information you want to publish in descriptions and images. Listing data is processed to provide the platform under Article 6(1)(b) GDPR. You can withdraw phone-sharing permission in your profile; your listings will then be hidden.
5. Optional certificate information
Certificate numbers and files are optional and are not required for listings. Uploaded documents are not made public and may be accessed by authorised staff for processing. Processing serves the handling you requested of information you submitted voluntarily.
6. Tickets and contact
Enquiries, subjects, messages, processing status and associated account data are stored in the ticket system and handled by authorised staff. Depending on the enquiry, Article 6(1)(b) or (f) GDPR provides the legal basis. Messages and technical sending information may also be stored by the email provider.
7. Newsletter
For newsletters we process email address, name if provided, country, recipient group, source, approval, subscription, confirmation, unsubscribe and sending information. Newsletters are sent to approved contact lists. Each message contains a personal unsubscribe link. Consent can be withdrawn at any time for the future. Importing data from another project does not replace consent. Unsubscriptions are retained as suppression information to prevent further sending. Consent-based newsletter sending relies on Article 6(1)(a) GDPR; suppression and evidence records support compliance with unsubscriptions and proof of proper handling.
8. Sessions, language and PWA
Technically necessary session data secures sign-in and forms. Your selected language is stored. When using the PWA, static files such as styles, scripts and icons are cached locally. Account, ticket and administration pages are not stored by the PWA cache. This software package does not embed external fonts, advertising trackers or external translation services.
9. Recipients and transfers
Authorised staff and hosting and email service providers receive data as needed for operation and processing. Published listings can be read by visitors. Other disclosures require a legal basis. Service providers are engaged under data processing arrangements where required. Entering data into a form does not constitute blanket consent to transfers to arbitrary third countries.
10. Retention
Personal data is retained for as long as required for its purposes or by legal retention or evidence obligations. Afterwards, it is deleted or processing is restricted. This also applies to account, listing, ticket and sending data. Backups may contain data until their scheduled replacement. Unsubscribe suppressions are retained as needed to prevent further messages.
11. Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You can withdraw consent for the future and object to processing based on legitimate interests. You may also complain to a competent data protection supervisory authority. For requests, contact info@rynek-zboz-ekologicznych.eu.
12. Security and changes
The platform uses measures including access restrictions and password hashing. Encrypted transmission requires operation over HTTPS. Complete protection on the internet cannot be guaranteed. This statement will be updated when functions or services change.
For access security and technical statistics, IP addresses are mapped to countries locally. Access from blocked countries is denied. For up to 365 days, statistics store only daily counts by country, recognised bots, server errors and processing times, without full IP addresses or visitor profiles. Data source: DB-IP Lite (CC BY 4.0).