Privacy Policy

Last updated: 5 October 2026

1. Data controller

The controller of your personal data is E&K Bieniek Sp. z o.o., ul. Dumna 35/1, 43-346 Bielsko-Biała, Poland, NIP (Tax ID) 9372767895 (“we”). For anything related to your personal data, write to konrad@pan-be.com. We have not appointed a data protection officer.

2. What data we process, why, and on what legal basis

  • Contact and plan enquiry forms. When you send a form, we process the data you provide: your name, email address, phone number, message and the selected plan. We do this to reply to your enquiry and prepare an offer (Art. 6(1)(b) GDPR, steps taken at your request before entering into a contract) and otherwise on the basis of our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR). Form messages are delivered to our email inbox; the website does not store them in its database.
  • Spam protection for forms. The forms are protected by Cloudflare Turnstile, which checks that a form is sent by a human. To do so it processes technical data such as your IP address and information about your browser and device. The legal basis is our legitimate interest in protecting the website against abuse (Art. 6(1)(f) GDPR).
  • Visitor statistics (Google Analytics). Only with your consent, we use Google Analytics 4 to see how visitors use the website. Google Analytics processes, among other things, identifiers stored in cookies, information about your device and browser, approximate location and the pages you visit. The legal basis is your consent (Art. 6(1)(a) GDPR and the Polish Electronic Communications Law). Without consent, Google Analytics does not run.
  • Running and securing the website. The server hosting the website records technical data about every request in its logs: IP address, date and time, the page requested and browser information. We process this data in our legitimate interest in keeping the website running and secure (Art. 6(1)(f) GDPR).

3. Cookies and browser storage

The website uses the following cookies and data stored in your browser:

  • panbe_consent: remembers your choice in the cookie banner; strictly necessary; kept for about 6 months.
  • pll_language: remembers the language version of the website; strictly necessary; kept for 1 year.
  • dark mode settings: saved in your browser’s local storage; functional, never sent to us.
  • _ga, _ga_<ID>: Google Analytics cookies; set only after you give consent; kept for up to 2 years.

You can change or withdraw your consent to statistics at any time by clicking “Cookie settings” in the website footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You can also delete or block cookies in your browser settings.

4. Recipients of data

Your data may be received by companies that provide services to us and process data on our behalf:

  • Hostinger International Ltd. — website and email hosting,
  • Google Ireland Ltd. — Google Analytics (only after you give consent),
  • Cloudflare, Inc. — Cloudflare Turnstile (spam protection).

5. Transfers outside the European Economic Area

Google and Cloudflare may also process data in the United States. Both companies participate in the EU-U.S. Data Privacy Framework, for which the European Commission has recognised an adequate level of data protection. They also use standard contractual clauses approved by the European Commission.

6. How long we keep data

  • Form correspondence that did not lead to a contract: 12 months from the last contact.
  • Correspondence related to a contract: for the duration of the cooperation and then until the limitation period for claims expires; accounting documents for the period required by tax law.
  • Statistics in Google Analytics: 2 months.
  • Server logs: according to the hosting provider’s settings, usually no longer than a few weeks.

7. Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing and to data portability, as well as the right to object to processing based on our legitimate interest. Where we process data on the basis of consent, you can withdraw it at any time. To exercise these rights, write to konrad@pan-be.com. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland).

8. Do you have to provide data

Providing data in the form is voluntary, but without an email address or phone number we will not be able to reply to your enquiry.

9. Automated decisions

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

10. Changes to this policy

We may update this policy, for example when the services used by the website change. The current version is always available on this page, and the date of the last change is shown at the top.