Privacy and cookie policy

1. Data controller

The controller of your personal data is P.P.H.U. Janusz Ciosek Wielka Reklama, ul. Popiełuszki 13, 98-300 Wieluń, Poland, e-mail: kontakt@wielkareklama.eu, phone +48 455 455 460.

For any data protection matter write to kontakt@wielkareklama.eu — we reply within 30 days at the latest.

2. What we collect

We only collect what is needed to prepare a quote and fulfil an order:

• form data: full name, company name, e-mail address, phone number, VAT ID and your message,
• the tape configuration set in the configurator together with the calculated price,
• an artwork file, if you choose to upload one,
• your IP address and browser/system type — stored with every quote calculated in the configurator so we can tell whether repeated quotes come from the same person and gauge genuine interest,
• other basic technical visit data (pages visited) — as described in the cookies and analytics sections.

3. Purpose and legal basis

• Preparing a quote and contacting you about an order — Art. 6(1)(b) GDPR (steps prior to and performance of a contract).
• Handling correspondence and defending against potential claims — Art. 6(1)(f) GDPR (our legitimate interest).
• Accounting and tax settlement — Art. 6(1)(c) GDPR (legal obligation).
• Recognising repeated enquiries and gauging interest based on IP address and browser type — Art. 6(1)(f) GDPR (our legitimate interest in qualifying commercial enquiries). You may object to this processing.
• Google Analytics statistics — Art. 6(1)(a) GDPR (your consent, which you may withdraw at any time).

4. How long we keep data

• Enquiries and quotes that did not lead to an order — up to 3 years from the last contact.
• Order data and accounting records — 5 years from the end of the year in which the tax obligation arose.
• Artwork files submitted for a quote — up to 12 months, unless needed to fulfil an order.
• IP address and browser information stored with a quote — 12 months. After that they are deleted automatically and the quote remains in our database with no link to an individual.

5. Who receives the data

Data is shared only with parties without whom we cannot fulfil an order:

• tape suppliers — strictly the scope needed to produce the order (product parameters, quantity, delivery address),
• cyber_Folks S.A., the hosting provider running our server and mail (servers located in Poland),
• the courier company handling delivery,
• our accounting office, for accounting documents,
• Google Ireland Limited — only if you consent to statistics (see section 7).

6. Your rights

You have the right to:

• access your data and receive a copy of it,
• rectify data that is inaccurate or incomplete,
• erasure (the “right to be forgotten”),
• restriction of processing,
• data portability to another controller,
• object to processing based on our legitimate interest,
• withdraw your consent to statistics at any time — without affecting the lawfulness of processing before withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

7. Cookies and similar technologies

The site uses a minimal set of files and browser storage entries:

• tt_sid — a technical file required for the configurator. It links successive price recalculations into a single session so we do not store dozens of copies of the same quote. It expires after 12 hours and is not accessible to scripts (httpOnly). No consent required.
• tt-consent — a local storage entry holding your decision about statistics, so we do not ask on every visit.
• Google Analytics files (_ga, _ga_*) — written only after consent, stored for up to 2 years.

You can change your decision at any time by clearing the site data in your browser — the banner will appear again.

8. Analytics

Google Analytics 4 starts only after you consent. Until then Google Consent Mode v2 runs with all categories denied, which means no cookies or identifiers are stored. Data may be transferred to Google Ireland Limited and further outside the European Economic Area on the basis of standard contractual clauses.

Separately we run Umami, an analytics tool hosted on our own server. It sets no cookies, builds no profiles and shares no data with third parties. It collects aggregate traffic information only, which is why it runs without consent.

9. Security

The connection to the site is encrypted with a TLS certificate. The admin panel and purchasing data are protected by separate authentication and are not reachable from the public part of the site. Files submitted for a quote are stored in a directory that is not directly accessible from the internet.

10. Changes to this policy

If we change the scope of collected data or the tools we use, we will update this document and the date at the top. Please review it before submitting a new enquiry.