Privacy Policy

Last Updated: 21 July 2026

This Privacy Policy describes how Lagago Pomoxa (operating at lagago-pomoxa.info, registered address: Partyzantów 1a, Rzeszów, Poland) collects, uses, stores and protects personal data in connection with the operation of this website and the provision of hydroponic system installation and maintenance services.

This policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Ustawa o ochronie danych osobowych, Dz.U. 2018 poz. 1000, as amended).

1. Who We Are

The Data Controller for personal data collected through this website is Lagago Pomoxa, with its registered address at Partyzantów 1a, Rzeszów, Poland. You may contact us regarding data protection matters at: [email protected] or by telephone at +48 17 711 00 22.

2. What Personal Data We Collect

We collect Personal Data only when you actively provide it to us or when it is generated automatically through your use of the website. The categories of data we may collect include:

Contact form submissions: When you use the contact form on this website, we collect your name, email address, telephone number and the content of your message. This data is transmitted directly to our email address via your email client and is not stored on our web server.

Technical data: Standard web server logs may record your IP address, browser type, referring page and the date and time of your visit. This data is used for security and operational purposes and is not used to identify individuals.

Cookie data: If you consent, cookies may collect information about your browsing behaviour on this site. Please refer to our Cookie Policy for full details.

3. Legal Basis for Processing

We process personal data only where a valid legal basis exists under Article 6 GDPR. The relevant bases are:

Article 6(1)(a) — Consent: Where you have given explicit Consent to the processing of your data for a specific purpose, such as the use of non-essential cookies.

Article 6(1)(b) — Contract: Where processing is necessary to take steps at your request prior to entering into a contract, such as responding to an installation enquiry.

Article 6(1)(f) — Legitimate interests: Where processing is necessary for the legitimate interests of Lagago Pomoxa, including website security and fraud prevention, provided those interests are not overridden by your rights and interests.

4. How We Use Your Data

Personal data collected through the contact form is used solely to respond to your enquiry and, where applicable, to progress discussions about a potential service installation. We do not use contact form data for marketing purposes without your separate consent.

Technical data from server logs is used to maintain the security and performance of this website. It is not shared with third parties except where required by law or to protect against security threats.

5. Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected. Contact enquiry data is retained for a period of up to 24 months from the date of last contact, after which it is securely deleted. Technical log data is retained for a maximum of 90 days. Where a service contract is entered into, data related to that contract is retained in accordance with Polish tax and commercial law requirements, which may require retention for up to 5 years from the end of the relevant financial year.

6. Data Sharing and Third Parties

We do not sell, rent or trade personal data to third parties. We may share data with service providers who assist in the operation of this website (such as hosting providers) under data processing agreements that comply with Article 28 GDPR. Any such provider is bound by contractual obligations to process data only on our instructions and to implement appropriate security measures.

We may disclose personal data where required by applicable law, court order or the lawful request of a public authority in Poland or the European Union.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V GDPR, including the use of Standard Contractual Clauses approved by the European Commission or reliance on an adequacy decision.

8. Your Rights

Under the GDPR and applicable Polish law, you have the following rights in relation to your personal data:

Right of access (Article 15 GDPR): You may request confirmation of whether we process your personal data and, if so, a copy of that data.

Right to rectification (Article 16 GDPR): You may request correction of inaccurate or incomplete personal data.

Right to erasure (Article 17 GDPR): You may request deletion of your personal data where the processing is no longer necessary, where you withdraw consent, or where the data has been unlawfully processed.

Right to restriction of processing (Article 18 GDPR): You may request that we restrict processing of your data in certain circumstances.

Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, commonly used and machine-readable format.

Right to object (Article 21 GDPR): You may object to processing based on legitimate interests at any time.

Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law (ordinarily within one calendar month).

9. Complaints

If you believe that your personal data has been processed in a manner that does not comply with the GDPR or applicable Polish law, you have the right to lodge a complaint with the Polish supervisory authority: the Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland. Website: uodo.gov.pl.

10. Security

We implement technical and organisational measures appropriate to the risk of processing, in accordance with Article 32 GDPR. These include the use of HTTPS for data transmission, access controls and regular review of security practices. No transmission over the internet is entirely secure, and we cannot guarantee absolute security of data transmitted to us.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

We use cookies to improve your experience.