Documents
Privacy policy
Website: https://www.brettonfoods.pl
Effective date: 30 September 2026 | Version: 1.0
1. General provisions
1. This Privacy Policy describes how we process personal data of users of the website at https://www.brettonfoods.pl (the “Website”), including contact forms, B2B inquiries, product reports, and the internal reporting channel (whistleblowers).
2. This document has been prepared in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national data protection law.
3. Detailed information on cookies and similar technologies: https://www.brettonfoods.pl/polityka-prywatnosci#pliki-cookies
4. Short information clause for forms: https://www.brettonfoods.pl/polityka-prywatnosci#klauzula-informacyjna
2. Data controller
The controller of personal data is:
Bretton Foods Sp. z o.o.
ul. Brzezińska 5/15
92-103 Łódź, Poland
Tax ID (NIP): 729-27-01-485 | REGON: 101389296 | KRS: 0000416167
EU VAT number: PL7292701485
General contact: export@brettonfoods.pl, tel. +48 530 210 407
Data protection contact: export@brettonfoods.pl (please add “GDPR” in the subject line).
The controller has not appointed a Data Protection Officer (DPO). For GDPR matters, contact the controller using the details above.
3. Scope
This Policy applies to visitors of the Website (Polish and English versions), users of the search function, those downloading materials, and those submitting forms. It does not apply to the administrative panel, which is accessible only to authorised persons on the controller’s side.
4. Categories of data, purposes and legal bases
4.1. Use of the Website (without forms)
- Content delivery and security — IP address, date and time of request, browser, URL, referrer, server logs — Art. 6(1)(f) GDPR — up to 12 months, unless law or claims require longer retention.
- Session and language choice — session identifier, site_locale cookie — Art. 6(1)(f) or (a) — session / up to 12 months.
- Storing consent preferences (cookie banner) — localStorage (bretton_foods_cookie_consent_v1) — Art. 6(1)(a) — until consent is withdrawn or data is cleared in the browser.
- Analytics (Google Analytics 4 / Google Tag Manager) — only after consent in the banner — Art. 6(1)(a).
- Marketing (GTM) — only after consent — Art. 6(1)(a).
Google analytics is not enabled on the internal reporting page ( https://www.brettonfoods.pl/zgloszenia-wewnetrzne ).
The search function processes the query only to display results; queries are not permanently stored in the Website’s public database.
4.2. Contact and business forms
Forms on pages including: https://www.brettonfoods.pl/kontakt , https://www.brettonfoods.pl/b2b , Private Label, Export, product report.
Data: name, e-mail, company, phone, message content, commercial data (market, category, volume, etc.), attachments (max. 10 MB).
Purposes: handling the inquiry, correspondence, B2B offer — Art. 6(1)(b) or (f) — up to 3 years after contact ends or longer if a contract/claim applies; legal obligations — Art. 6(1)(c).
Submissions are sent by e-mail to authorised recipients; they are not permanently stored in the CMS as a submissions database. Anti-spam (IP rate limit, honeypot) — Art. 6(1)(f).
Consent (checkbox) to the Privacy Policy is required: https://www.brettonfoods.pl/polityka-prywatnosci
4.3. Internal reports (whistleblowers)
Named or anonymous mode — https://www.brettonfoods.pl/zgloszenia-wewnetrzne . Legal basis: whistleblower protection law and Art. 6(1)(c) and (f) GDPR. Retention per internal procedure. Transmission by e-mail only; no permanent storage in the CMS.
4.4. External links
- LinkedIn: https://www.linkedin.com/company/bretton-foods
- Directions map (if embedded): Google Maps — https://policies.google.com/privacy
5 . Recipients of data
Authorised employees and contractors; Website hosting provider; e-mail (SMTP) provider; Google (Analytics/GTM) — after consent; legal, accounting and IT providers — under data processing agreements where necessary. The controller does not sell personal data.
6. Transfers outside the EEA
Google services may involve transfers to third countries (e.g. the USA) using GDPR-compliant mechanisms (including standard contractual clauses). Details: https://policies.google.com/privacy
7 . Rights of data subjects
You have the right of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (including via the “Cookies” control on the Website).
Requests: export@brettonfoods.pl (subject: GDPR). Response within one month.
Complaint: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, https://uodo.gov.pl
8. Voluntary nature of providing data
Form data is voluntary but necessary to handle your inquiry. Required fields must be completed to submit a form.
9. Automated decision-making
The controller does not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
10. Security
HTTPS, access control for the admin panel, form anti-spam, analytics disabled on the whistleblower page, confidentiality procedure for internal reports.
11. Children
The Website is B2B-oriented — the controller does not knowingly collect data from children under 16.
12. Changes to this Policy
Updates are published at https://www.brettonfoods.pl/polityka-prywatnosci with the effective date.
14. Cookies and similar technologies
We use a consent banner (the “Cookies” button in the bottom-left corner after a choice is made). Optional cookies require your consent.
Strictly necessary — Laravel session cookie, CSRF token — security, session — no consent (essential).
Functional — site_locale cookie (up to 12 months) — PL/EN language — “Functional” category in the banner.
Consent / local storage — localStorage bretton_foods_cookie_consent_v1 — stores banner choice.
Analytics — GA4 / GTM (Google cookies, e.g. _ga) — statistics — after “Analytics” consent.
Marketing — tools in GTM (if configured) — campaigns — after “Marketing” consent.
By default, Google Consent Mode sets analytics_storage and ad_storage to “denied”. Analytics scripts load only after consent. If GA4/GTM IDs are not configured in the admin panel, apart from session, language and banner storage, Google cookies are not used.
Manage choices: “Accept all”, “Essential only”, “Customise” / “Cookies”.
Google Privacy Policy: https://policies.google.com/privacy | Ad settings: https://adssettings.google.com
15. GDPR information clause (forms)
Controller: Bretton Foods Sp. z o.o. (details as in section 2).
Purpose: handling the submitted form / inquiry / report.
Legal basis: Art. 6(1)(a) (consent), (b) (pre-contract steps), (f) (correspondence), (c) (whistleblowers — statute).
Recipients: authorised staff, hosting, e-mail.
Retention: as in section 4. Rights: as in section 7.
Obligation to provide data: voluntary, but required to submit the form.
Full policy: https://www.brettonfoods.pl/polityka-prywatnosci
Bretton Foods Sp. z o.o. · Privacy policy · Version 1.0 · 30.09.2026