PRIVACY POLICY

Effective date: 10 January 2026
Website: www.cazo.eu

1. Who we are (Data Controller)

The website www.cazo.eu is operated by CAZO Sp. z o.o., Rakowska 1, 42-208 Częstochowa, Poland, VAT ID: PL5732851987 (“we”, “us”).
For the purposes of the General Data Protection Regulation (“GDPR”), CAZO Sp. z o.o. is the data controller.

Contact for privacy matters: cazo@cazo.eu
Postal address: CAZO Sp. z o.o., Rakowska 1, 42-208 Częstochowa, Poland
Data Protection Officer (DPO): We have not appointed a Data Protection Officer.

2. What personal data we collect

We collect personal data only to the extent necessary for the purposes described in this Policy.

2.1. Data you provide to us

Depending on how you use the website, we may collect:

• identification and contact data (e.g., name, surname, company name, email address, phone number),

• correspondence data (e.g., the content of your message sent via our contact form or email),

• newsletter data (email address and records of consent), if you subscribe to our newsletter.

2.2. Data collected automatically (technical data)

When you visit the website, we may automatically collect:

• IP address (or part of it), browser type, device type, operating system, language settings,

• technical logs needed to operate and secure the website,

• cookie identifiers and information from cookies or similar technologies (see Section 6).

3. Why we process your data and legal bases

We process personal data only where we have a lawful basis under Article 6 GDPR.

3.1. Website operation and security

Purpose: to operate the website, ensure technical functionality, prevent abuse and fraud, maintain security logs, and protect our rights.
Legal basis: our legitimate interests (Article 6(1)(f) GDPR).

3.2. Handling enquiries and communication (contact form)

Purpose: to respond to your requests and questions, and to communicate with you.
Legal basis: our legitimate interests (Article 6(1)(f) GDPR) and/or taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR), where applicable.

3.3. Newsletter and marketing communications (MailerLite)

Purpose: to send newsletters with promotional offers, product updates and news, and to manage subscriptions.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time (see Section 8).

4. Whether you must provide data

Providing personal data is voluntary. However:

• if you do not provide contact details, we may not be able to respond to your enquiry,

• if you do not provide your email address and consent, you will not be able to receive our newsletter.

5. Who we share data with (recipients)

We may share personal data only to the extent necessary with trusted recipients, such as:

• hosting and IT providers (hosting is located in Poland), website maintenance and cybersecurity providers,

• MailerLite as our newsletter and email marketing service provider,

• professional advisers (legal/accounting) and public authorities where required by law.

These recipients process data as processors under our instructions or as independent controllers, depending on the service.

6. Cookies and similar technologies

We use cookies and similar technologies that are necessary for the website to function properly and securely.
If we use any non-essential cookies (e.g., analytics or marketing cookies), we will ask for your consent through a cookie banner and provide a cookie settings option where you can change or withdraw your consent at any time.

7. International data transfers

Some service providers (including newsletter platforms) may process data outside the European Economic Area (“EEA”), depending on their infrastructure and the location of their subcontractors. Where personal data is transferred outside the EEA and such transfer is subject to GDPR requirements, we apply appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or we rely on an adequacy decision where applicable.

You may request information about the safeguards used by contacting us at cazo@cazo.eu.

8. Your rights under GDPR

If the GDPR applies to you, you have the right to:

• be informed about processing,

• access your data,

• rectification,

• erasure,

• restriction of processing,

• data portability,

• object to processing (including processing based on legitimate interests),

• withdraw consent at any time (where processing is based on consent), without affecting the lawfulness of processing before withdrawal,

• lodge a complaint with a supervisory authority.

To exercise your rights, contact us at cazo@cazo.eu.

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
In Poland, the competent authority is the President of the Personal Data Protection Office (UODO).

10. Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy, and then we delete or anonymise it, unless a longer retention period is required by law. In particular:

• contact form/email correspondence is retained for a reasonable period to handle follow-up and potential disputes,

• newsletter data is retained until you unsubscribe or withdraw your consent,

• technical logs are retained for a limited period necessary for security and troubleshooting.

11. Security

We apply reasonable administrative, technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. However, no transmission over the Internet can be guaranteed as fully secure.

12. Links to other websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy notices.

13. Children’s privacy

Our website is intended for business and general audiences and is not directed to children. We do not knowingly collect personal data from children.

14. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will be published on this page with the effective date.

15. Contact

For any questions about this Privacy Policy or your personal data, contact: cazo@cazo.eu.