Privacy Policy

This policy is also available in Polish: Polityka prywatności.

JWA Nature is the trading name of Firma Handlowo-Usługowa J.w.A.Wojciech Kujach
Śląska 66, 80-389 Gdańsk · NIP 5910007220 · data-protection contact: [email protected]
Version 2.0 · effective 7 October 2026

In short

No analytics, advertising or tracking. There is no Google Analytics, no Meta Pixel, no remarketing tag and no advertising cookie on this website.
The website sets no cookies of its own, which is why you will not see a cookie banner.
Our Facebook posts load only if you ask for them — until you click, your browser never contacts Facebook.
Anything you send us by email or contact form is used to answer you and nothing else.

1. Who is responsible for your data

The controller (administrator) of personal data processed through www.jwanature.eu is Firma Handlowo-Usługowa J.w.A.Wojciech Kujach, Śląska 66, 80-389 Gdańsk, NIP 5910007220 — the company behind the JWA Nature brand. For any question about this policy or your data, write to [email protected].

2. What this website does — and what it does not do

(a) No analytics or advertising. We do not measure visits, build user profiles or show advertising, and we do not use Google Analytics, the Meta Pixel or comparable technology. You will find none of them in this site's code.

(b) No cookies of our own. The site stores nothing on your device and reads nothing from it (section 4).

(d) Only what you send us. Emails and contact-form messages are the only personal data we deliberately receive (section 6).

3. Hosting and server logs

The website is delivered as static files through Cloudflare's global network (Cloudflare, Inc.). To deliver pages securely and reliably, and to defend against attacks, Cloudflare processes technical data: your IP address, the date and time of the request, the page requested and your browser's user agent. The legal basis is our legitimate interest in operating this website securely (Art. 6(1)(f) GDPR). We do not use this data to identify individuals, and we keep no separate copy of these logs; retention follows Cloudflare's standard periods.

4. Cookies and similar technologies

This website does not store cookies or similar information on your device and does not read any such information. That is why there is no cookie banner here: consent is required only for storage that is not strictly necessary (Art. 399 of the Polish Electronic Communications Act of 12 July 2024, Journal of Laws 2024 item 1221).

The one exception is under your control: if you click to load our Facebook feed, Facebook's plug-in is loaded and may set Facebook's own cookies (section 5). Nothing is loaded before that click.

5. Our Facebook posts (plug-in loaded on demand)

Our pages contain a button: "Show our Facebook posts". Nothing is requested from Facebook until you click it. If you click, your browser connects to Facebook — Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland — which may process your IP address and set cookies in order to display the feed and measure its use. From that moment Meta is an independent controller of that data. We receive no personal data from it — only the aggregate statistics Facebook shows every page owner. Meta's own privacy policy applies (https://www.facebook.com/privacy/policy/). If you prefer not to contact Facebook at all, simply do not click the button; the rest of the site works normally.

6. Contacting us

By email. If you write to [email protected], we process your email address, your name and the content of your message in order to answer you and to keep a record of our correspondence. Legal basis: steps taken at your request, and our legitimate interest in handling enquiries (Art. 6(1)(b) and (f) GDPR).

By contact form. Our contact page also offers a form. Its contents are transmitted by the form service Formspree (Formspree, Inc., United States) acting as our processor, and delivered to our mailbox. Spam is filtered by the form service and by a hidden field that only automated submissions fill in; we do not use a captcha or any advertising identifier for this. Only the details you enter are processed.

How long. We keep correspondence for as long as is needed to deal with it, and for a reasonable period afterwards for reference, then delete it. If a message becomes part of our accounting records, tax law may require us to keep it longer.

7. Who else receives data

Cloudflare, Inc. — hosting and delivery of the website.
Zoho Corporation — our email hosting.
Formspree, Inc. — only if you use the contact form.
Meta Platforms Ireland Ltd. — only if you click to load the Facebook feed.

These providers process data on our behalf under data-processing agreements, except Meta, which acts as an independent controller for the plug-in described in section 5. Some of them are established in the United States or use US infrastructure; such transfers rely on the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses.

8. Your rights

Under the GDPR you may request access to your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and you may object to processing based on our legitimate interest (Art. 21). Where processing rests on consent (Art. 7(3)), you may withdraw it at any time — for the Facebook feed that simply means not clicking the button. Write to [email protected] and we will answer within one month.

You also have the right to lodge a complaint with the supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland (uodo.gov.pl).

9. No automated decisions

We do not carry out automated decision-making, including profiling, that would produce legal effects or similarly significantly affect you.

10. Changes to this policy

If what this website does changes, this policy changes with it. The current version is always published on this page. This version: 2.0, effective 7 October 2026.

]]>