Privacy Policy

I. General Conditions for Processing Personal Data

The personal data controller is JPM Logistics Sp. z o.o., with its registered office in Sopot, ul. Kujawska 41C / 12, 81-862 Sopot, Poland, entered into the Register of Entrepreneurs maintained by the District Court Gdańsk–Północ in Gdańsk, 8th Commercial Division of the National Court Register, under KRS number 0000589339, VAT ID (NIP): 9581671277 (hereinafter referred to as the “Controller”).

You may contact the Controller in writing at the above address or via email at: kontakt@jpmlogistics.pl

The processing of personal data by the Controller is carried out in compliance with applicable laws, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter: “GDPR”).

The scope and type of data processed depend on the specific purpose of processing (the exact purposes are set out in Section II of this Privacy Policy). Providing personal data is voluntary; however, failure to provide such data may result in the inability to fulfill a specific purpose, e.g., responding to an inquiry. If the provision of personal data is required, the Controller will inform you directly.

The Controller does not process personal data solely by automated means and does not engage in profiling.

II. Legal Bases and Retention Periods for Processing Personal Data

All personal data is processed for specific, explicit, and legally defined purposes. The Controller ensures that no personal data is collected or processed for purposes other than those indicated below.

  1. Performance of a contract or taking steps prior to entering into a contract – processed under Article 6(1)(b) GDPR, in particular for:
    a. providing services in accordance with the concluded agreement;
    b. contacting the data subject in matters related to the service;
    c. taking pre-contractual actions, such as providing an offer upon request.
    Retention period: for the duration of the contract.
  2. Establishing business relations and responding to inquiries – processed under Article 6(1)(f) GDPR based on the Controller’s legitimate interest in responding to queries.
    Retention period: until a valid objection is raised, but no longer than until the end of the calendar year following 3 years from the date the Controller’s response was provided.
  3. Pursuing or securing legal claims and handling complaints – processed under Article 6(1)(f) GDPR based on the Controller’s legitimate interest in protecting legal rights.
    Retention period: for the limitation period applicable to the claim, starting from the moment a claim is pursued or defended.
  4. Marketing activities for the Controller’s or third-party services – processed under Article 6(1)(f) GDPR based on the Controller’s legitimate interest in promoting services and fostering cooperation.
    Retention period: until consent to receive communications is withdrawn, or a valid objection is raised, but no longer than until the end of the calendar year following 3 years from the last contact with the data subject.
  5. Compliance with tax and accounting obligations – processed under Article 6(1)(c) GDPR in connection with applicable tax and accounting laws.
    Retention period: as required by applicable law.

III. Rights of Data Subjects

Where the applicable legal conditions are met, any person whose personal data is processed by the Controller has the right to:

  • access their data and obtain a copy of it;
  • rectify their data;
  • request erasure of their data;
  • restrict processing;
  • transfer their data;
  • object, on grounds relating to their particular situation, to processing based on the Controller’s legitimate interests;
  • object to processing for marketing purposes based on legitimate interests;
  • lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates applicable law (address: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland);
  • withdraw consent where processing is based on consent (withdrawal does not affect the lawfulness of processing carried out before the withdrawal).

IV. Recipients of Personal Data

Personal data may be disclosed to entities authorized by law, including competent judicial authorities.

It may also be shared with trusted recipients, such as carriers and postal service providers, accounting service providers, legal service providers, technical service providers (for IT systems and website maintenance, software or systems provision), and debt collection agencies.

The Controller does not transfer personal data outside the European Economic Area (EEA) or to international organizations.

V. Cookies

V.I. General Information
The Controller uses cookies or similar technologies (collectively “cookies”), which are data files, particularly text files, stored on the end devices of visitors.

Through cookies, the Controller may process information about the user’s device, location, activities on the website (e.g., visit duration), and other data depending on the type of cookie (e.g., interest in a particular advertisement).

V.II. Cookies Used on the JPM Logistics Sp. z o.o. Website
By storage duration, the Controller uses:

  • Session cookies – remain on the user’s device until they leave the website or log out;
  • Persistent cookies – remain for a specified period (defined in parameters) or until manually deleted.

By purpose, the Controller uses:
a. Necessary cookies – essential for the website to function. Cannot be disabled.
b. Statistical cookies – monitor user traffic and behavior, including visit counts.
c. Marketing cookies – used to display and tailor advertisements to user preferences, based on behavior analysis (which may also be linked with behavior on other sites depending on the cookie provider).
d. Functional cookies – store user preferences, such as language, layout, and location.

The Controller uses both first-party cookies (sent directly by the website) and third-party cookies (created and managed by external entities).

V.III. Managing Cookies
All cookies except necessary ones require the user’s consent before being set. Cookies are blocked until such consent is given. Users may change cookie settings at any time on the Controller’s website, withdrawing consent or objecting to non-essential cookies.

Cookie settings may also be adjusted directly in the web browser:
a. Microsoft Edge – https://privacy.microsoft.com/en-us/privacystatement
b. Chrome – https://support.google.com/chrome/answer/95647
c. Opera – https://www.opera.com/help/tutorials/security/cookie/
d. Mozilla Firefox – https://support.mozilla.org/en-US/kb/block-cookies
e. Safari – https://support.apple.com/en-us/HT201265

Restricting cookies may affect the proper functioning of certain website features.