Skip to content
Sellora Group

Privacy Policy

Last updated: November 4, 2026

Privacy Policy

Last updated: 4 November 2026

§ 1. DATA CONTROLLER

The controller of your personal data is SELLORA GROUP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (limited liability company), KRS (National Court Register No.): 0001274057, NIP (Tax ID): 5691918110, REGON (Statistical No.): 546000454, share capital of PLN 5,000 fully paid up, with its registered office at ul. Wójtostwo 59/22, 06-500 Mława, Poland, operating the website available at https://sellora.group (hereinafter: the "Website").

Contact with the Controller:

§ 2. PURPOSES AND LEGAL BASIS OF PROCESSING

We process your personal data for the following purposes:

  1. Responding to enquiries submitted via the contact form
    • Legal basis: Art. 6(1)(b) and (f) GDPR (performance of a contract / legitimate interest)
  1. Providing electronic services and operating the Website
    • Legal basis: Art. 6(1)(b) GDPR (necessary for the performance of a contract)
  1. Sending the newsletter and marketing communications
    • Legal basis: Art. 6(1)(a) GDPR (your consent, which you may withdraw at any time)
  1. Marketing, retargeting and analysis of traffic on the Website
    • Legal basis: Art. 6(1)(a) and (f) GDPR (consent / legitimate interest)
  1. Compliance with legal obligations (tax and accounting)
    • Legal basis: Art. 6(1)(c) GDPR (legal obligation)

§ 3. SCOPE OF DATA PROCESSED

Depending on how you use the Website, we may process:

  • Identification data: first and last name, company name, Tax ID (NIP)
  • Contact data: e-mail address, telephone number, correspondence address
  • Technical data: IP address, browser type and version, operating system, time and source of the visit
  • Subscriber data: e-mail address, first name (if provided), communication preferences

§ 4. RECIPIENTS OF DATA

Your data may be disclosed to the following categories of recipients:

  • Hosting and cloud service providers (the Website's technical infrastructure)
  • An accounting firm or law firm (to the extent required by law)
  • Public authorities (only on the basis of applicable law)

Third-party service providers:

  • Google LLC (Google Analytics 4) – traffic analytics; data transferred to the USA on the basis of SCCs
  • Meta Platforms Ireland Ltd. (Facebook Pixel) – marketing and remarketing
  • Microsoft (Microsoft Clarity)
  • Newsletter provider (e.g. Mailchimp / Intuit) – sending e-mail communications
  • Live chat provider – real-time customer support

§ 5. TRANSFERS OF DATA TO THIRD COUNTRIES

Some of our providers (including Google LLC and Meta Platforms) are based outside the European Economic Area, including in the United States. Such transfers take place on the basis of standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR). You have the right to obtain a copy of the safeguards applied – please contact us.

§ 6. DATA RETENTION PERIOD

  • Contact form data: up to 24 months from the last contact
  • Data necessary to perform a contract or order: for the term of the contract plus 3 years (limitation period for civil claims)
  • Data required for tax and accounting purposes: 5 years from the end of the tax year (Art. 74 of the Polish Accounting Act)
  • Newsletter subscriber data: until consent is withdrawn or the subscription is cancelled
  • Data in system and analytics logs: up to 26 months

§ 7. YOUR RIGHTS

Under the GDPR, you have the following rights:

  • Right of access to your data (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR) – the "right to be forgotten"
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal)
  • Right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl

To exercise your rights, please contact us at: [email protected]

We will respond within 30 days (this period may be extended to 90 days in particularly complex cases).

§ 8. DATA SECURITY

We apply appropriate technical and organisational measures to protect your personal data, including TLS/SSL connection encryption, access control to our systems, regular backups and security reviews.

§ 9. CHANGES TO THE PRIVACY POLICY

We reserve the right to update this Policy. The date of the most recent change is always shown at the top of the document. We will inform you of any material changes via a clear notice on the Website or by e-mail.