Scope and contact
This policy covers the public websites spalberg.eu and beautyelegance.eu and correspondence arising from them. It does not describe the private administration application or a customer account service.
The controller for the processing described here is Spalberg S.C. Address: aleja Marsz. Józefa Piłsudskiego 31/20, 43-600 Jaworzno, Poland. NIP: 6322024104. REGON: 384201933. Contact for personal data matters: office@spalberg.eu.
What information is involved
- Website delivery and security: technical connection information, including IP address, request time, requested resource and browser information, may be processed by the hosting infrastructure. This is distinct from cookies and advertising analytics.
- Correspondence: the sender's email address, name, business role and company, any telephone number provided, the inquiry, attachments and the subsequent exchange. Please provide only information relevant to your inquiry.
- Delivery and abuse prevention: the sending service uses temporary IP-based counters to limit repeated requests. Its technical delivery record contains a request identifier, a SHA-256 digest of the submitted data, enquiry and message identifiers, delivery state and timestamps. This record does not store the message body, contact details or IP address; the enquiry itself is handled in our email service.
- Browser storage: the limited preferences, product references, quantities and technical sending-attempt record listed in the Cookies & Browser Storage information. These records are not used to build a visitor profile.
How an inquiry reaches us
When you click Send enquiry on spalberg.eu, the website sends the entered contact details, company information, delivery country, selected products, quantities, specifications, message and chosen language to our server over an encrypted connection. The server emails the enquiry to office@spalberg.eu using quotes@spalberg.eu as the sender. Your email address is set as the reply address so our team can answer you. Typing into the form or adding products does not send the enquiry.
The confirmation and enquiry reference mean that the mail server accepted the message for delivery. They do not confirm that someone has read it, that an order has been accepted or that delivery to the mailbox has been independently verified. If sending fails or cannot be confirmed, the form keeps your entries so you can review them and decide whether to retry.
Email links on both websites, including beautyelegance.eu, open your email application. If a local email-draft option is offered, you must review and send that draft through your own email service. Your email provider processes it under its own terms and privacy information. A Copy message action writes to your device clipboard only when you click it.
Purposes and legal grounds
Sending an inquiry does not subscribe you to a newsletter or grant general permission for marketing. The public websites do not operate a newsletter signup or advertising tracking service.
- Providing and protecting the websites, diagnosing errors and preventing misuse: our legitimate interest in operating a secure, functioning website, under Article 6(1)(f) GDPR.
- Answering general inquiries and communicating with representatives of businesses: our legitimate interest in handling requested business correspondence, under Article 6(1)(f) GDPR.
- Taking steps requested by an individual before entering into a contract with that individual, or performing that contract: Article 6(1)(b) GDPR, where applicable. This basis is not automatically applied to every employee or representative of a company.
- Keeping records where a legal obligation applies: Article 6(1)(c) GDPR. Establishing, exercising or defending legal claims: Article 6(1)(f) GDPR.
Who may receive the information
Access is limited to people authorised to handle the relevant task and service providers supporting hosting, email and IT maintenance. Infomaniak Network SA provides hosting and email services and processes hosted data on our behalf under its data processing agreement. Advisers may receive information where needed to deal with an obligation or claim. Competent public authorities may receive data when the law requires it.
Infomaniak's data processing agreement is available at Infomaniak data processing agreement. The provider's own processing for managing its customer relationship is distinguished from processing hosted data on our behalf.
Hosting in Switzerland
Our use of Infomaniak involves processing in Switzerland, which is outside the European Economic Area. The European Commission recognises Switzerland as providing an adequate level of protection. Transfers covered by that decision rely on Article 45 GDPR.
Information about adequacy decisions is available at European Commission: adequacy decisions. An external service you choose to contact or use, including your own email provider, is governed by its own privacy information.
How retention is determined
We limit retention according to the purpose of the information. Correspondence is retained while we handle the inquiry and any resulting discussions or business relationship. After that, information is retained only to the extent needed for an applicable record-keeping duty or a concrete need to establish, exercise or defend claims, taking the relevant statutory periods into account.
Retention of technical information is determined by the time needed to operate the service, investigate errors or security incidents and preserve necessary evidence. The nature of the incident and any duty to preserve relevant records are considered; unrelated information should not be retained for a possible incident indefinitely.
Browser storage has the separate durations described in the Cookies & Browser Storage information. You can ask office@spalberg.eu about the retention applicable to your data.
Your rights
Depending on the legal conditions, you can request access to your personal data, a copy, correction, erasure or restriction of processing. You may object to processing based on our legitimate interests on grounds relating to your particular situation. Where the conditions of Article 20 GDPR apply, you may request data portability.
If a particular processing operation is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing. The informational browser-storage notice is not a request for consent to marketing or to all processing described in this policy.
Send requests to office@spalberg.eu. We may request proportionate information to verify your identity where necessary. You may complain to the President of the Polish Personal Data Protection Office (UODO), UODO — Polish data protection authority, or to another competent supervisory authority. Contacting us first is not a condition for making a complaint.
Your choices and automated decisions
Providing information in an inquiry is voluntary, but without a usable contact address and enough information about the request we may be unable to answer it. Technical connection information is needed to deliver the requested website. You can use the public pages without sending an inquiry.
These public websites do not use advertising profiles or make decisions based solely on automated processing that produce legal or similarly significant effects. They do not use analytics or marketing trackers. Links to external websites do not, by themselves, embed those services in our pages.
Policy version
Version: 26 October 2026. We will update this information when the described services or processing change. If a future feature requires consent, it must remain inactive until the necessary consent is obtained.