Privacy Policy

1. Data controller

The data controller is mySPED Izabela Gryglicka with its registered office at ul. Klimczaka 1, 02‑797 Warsaw (entrance A, 2nd floor). Contact details: phone +48 666 357 541, +48 660 403 969; e‑mail biuro@mysped.pl. The business is registered under tax identification number NIP 9511763525 and REGON 362016153.

2. Scope of data collected

While using the website and contact forms we may process the following categories of data:

  • Identification and contact data – first and last name or company name, e‑mail address, phone number, postal address.

  • Query‑related data – information regarding loading and unloading locations, type of cargo, dimensions and weight, and any additional logistic requirements provided in the enquiry form.

  • Technical data – IP address, browser and operating system type, stored in server logs and cookies.

The contact form includes a notice that providing data is voluntary and that it will be processed solely to handle the enquiry.

3. Purposes and legal bases of processing

PurposeLegal basisExplanation
Responding to enquiries and preparing offersArticle 6(1)(b) and (f) of the GDPR – processing is necessary to take steps at the request of the data subject prior to entering into a contract and legitimate interests of the controllerData provided in the forms are used solely to handle the enquiry and provide a response.
Performance of forwarding services and conclusion/execution of transport contractsArticle 6(1)(b) of the GDPRData are processed to organise transport, cargo insurance and logistical services, including transmission to cooperating entities (carriers, customs agents).
Fulfilment of legal obligations (e.g. tax or customs regulations)Article 6(1)(c) of the GDPRThe controller may be obliged to process and disclose data to public authorities.
Marketing of own services (sending newsletters, maintaining client relations)Article 6(1)(a) and (f) of the GDPR – consent of the data subject or legitimate interestIn the case of newsletter subscription, data are processed on the basis of consent, which can be withdrawn at any time.
Ensuring service security, log handling and statisticsArticle 6(1)(f) of the GDPRThe controller has a legitimate interest in keeping visitor statistics and preventing abuse.

4. Data recipients

Data may be disclosed to entities supporting the forwarding services, such as:

  • carriers, logistics operators, shipping agents and customs agencies in connection with transport organisation,

  • IT and hosting providers maintaining the server and IT systems,

  • providers of accounting or legal services,

  • authorised state authorities (e.g. tax or law‑enforcement bodies) when required by law.

Each recipient receives only the data necessary for a specific purpose.

5. Data retention period

Data collected via forms will be stored:

  • for the period necessary to respond to an enquiry and conduct correspondence, and then for no longer than 6 months for archiving purposes,

  • in the case of contract conclusion – for the duration of cooperation and until the expiry of tax and accounting limitation periods (typically 5 years),

  • data processed on the basis of consent (e.g. for marketing) – until the consent is withdrawn.

6. Rights of data subjects

Every data subject has the right to:

  1. access their data and obtain a copy;

  2. rectification of inaccurate data;

  3. erasure of data (the right to be forgotten) where there is no legal basis for further processing;

  4. restriction of processing – for instance, when data are inaccurate;

  5. data portability – with respect to data processed based on consent or contract;

  6. object to data processing based on legitimate interests;

  7. lodge a complaint with the Polish supervisory authority (President of the Personal Data Protection Office) if you believe that your data are processed unlawfully.

7. Cookies

The website uses cookies. Detailed information on the types and use of cookies is provided in the separate Cookie Policy below.

8. Security measures

The controller applies organisational and technical measures to protect data, in particular encryption of the connection (HTTPS protocol), access control to servers and regular software updates. Only authorised persons have access to the data.

9. Contact

For matters concerning the processing of personal data, you may contact the controller at biuro@mysped.pl or by phone +48 666 357 541 and +48 660 403 969.

search engine