This policy describes how Mushroom Empire Sp. z o.o. (“we”, “us”) processes personal data when you use www.mushroomempire.eu (the “Website”). We process data in line with Regulation (EU) 2016/679 (GDPR) and applicable national law, including the Polish Act on personal data protection where relevant.
1. Data controller
Controller: Mushroom Empire Sp. z o.o., KRS 0001224005, NIP 5372694585, REGON 543990574, registered office: Łózki 59, 21-570 Drelów, Poland. Contact for privacy matters: use the contact options published on the Website (e.g. contact form) or your usual business contact if you already work with us.
2. Purposes and legal bases
- Website operation and security — server logs, basic technical events, fraud/abuse protection (legitimate interests, Art. 6(1)(f) GDPR; where required, Art. 6(1)(b) for pre-contractual steps).
- Contact and business inquiries — data you submit in forms or by email (typically Art. 6(1)(b) for steps prior to a contract, or Art. 6(1)(f) for answering general questions).
- Analytics (optional) — if you consent, we load audience measurement tools (see below). Legal basis: consent, Art. 6(1)(a) GDPR.
3. Cookies and similar technologies
We use cookies and local storage where needed for the cookie banner to remember your choice. Until you choose, non-essential analytics scripts are not loaded.
If you click “Accept analytics”, we may load Google Analytics 4 (Google Ireland Limited) and Vercel Web Analytics (Vercel Inc.) to understand how the Website is used. Those providers may process aggregated or pseudonymous data according to their documentation. You can withdraw consent anytime via “Cookie settings” in the footer.
If you choose “Essential only”, we do not load those analytics tools from this consent mechanism.
4. Recipients and transfers
We use hosting and infrastructure providers (e.g. Vercel for hosting/analytics). Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or other mechanisms recognised under Chapter V GDPR, as applicable.
5. Retention
We keep personal data only as long as needed for the purposes above, including statutory retention (e.g. accounting/tax) where applicable. Analytics data retention follows tool settings and provider policies.
6. Your rights
Depending on the situation, you may have the right to access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal. You may lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO).
7. Changes
We may update this policy; the “Last updated” date will change accordingly.