This Privacy Policy explains how Herbi Clean sp. z o.o., with its registered office in Warsaw (00-095), Plac Bankowy 2, Poland, NIP: 5441539216, REGON: 368644488 (“Company”, “we”, “us”, or “our”), collects, uses, and protects personal data in connection with the use of our website and our business activities.
We are committed to protecting your privacy and ensuring that your personal data is processed in accordance with applicable laws, including Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – “GDPR”) and relevant Polish data protection laws.
1. Data Controller
The data controller responsible for your personal data is:
Herbi Clean sp. z o.o.
Plac Bankowy 2
00-095 Warsaw
Poland
Email: brand@makebrand.eu
Phone: +48 510 636 813
If you have any questions regarding this Privacy Policy or the way we process your personal data, please contact us using the details above.
2. Personal Data We Collect
Depending on how you interact with our website or contact us, we may collect and process the following categories of personal data:
- First and last name
- Company name
- Job title
- Email address
- Phone number
- Company address details
- Content of messages sent via contact forms or email
- IP address
- Technical data relating to your device and browser
- Data collected through cookies and similar technologies
Providing personal data is voluntary. However, in some cases, it may be necessary in order to respond to your inquiry, provide a commercial offer, or enter into and perform a contract.
3. Purposes and Legal Bases for Processing
We process personal data for the following purposes and on the following legal bases:
- Responding to inquiries
When you contact us via the contact form or email, we process your data to respond to your inquiry.
Legal basis: Article 6(1)(b) GDPR (pre-contractual steps) or Article 6(1)(f) GDPR (our legitimate interest in handling correspondence).
- Preparing offers and conducting negotiations
We process data to prepare commercial offers and conduct negotiations related to contract manufacturing of cosmetics, cleaning products, or supplements.
Legal basis: Article 6(1)(b) GDPR.
- Performance of a contract
We process personal data necessary for the performance of a contract concluded with you or your company.
Legal basis: Article 6(1)(b) GDPR.
- Compliance with legal obligations
We process data to fulfill legal obligations, including tax and accounting requirements.
Legal basis: Article 6(1)(c) GDPR.
- Marketing activities
We may process data for marketing our own products and services, including remarketing and analysis of advertising campaign effectiveness.
Legal basis: Article 6(1)(f) GDPR (legitimate interest) or Article 6(1)(a) GDPR (your consent, where required).
- Website analytics and optimization
We use data to analyze website traffic and improve the performance of our website and advertising campaigns.
Legal basis: Article 6(1)(f) GDPR (legitimate interest).
4. Data Recipients
Your personal data may be shared with trusted third parties who support our business operations, including:
- Hosting service providers
- IT service and system maintenance providers
- Accounting and legal advisors
- Email service providers
- Marketing and analytics providers (e.g., Google Ads, Google Analytics)
- Marketing agencies
These entities process personal data on our behalf under data processing agreements and only in accordance with our instructions.
5. International Data Transfers
Due to our use of certain analytics and marketing tools, some personal data may be transferred outside the European Economic Area (EEA).
Where such transfers occur, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.
6. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including:
- For the duration of correspondence and business negotiations
- For the duration of a contract and any legally required retention period thereafter
- Until consent is withdrawn (where processing is based on consent)
- Until a valid objection is raised (in the case of marketing processing based on legitimate interest)
After the applicable retention period, personal data is securely deleted or anonymized.
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access to your personal data
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time (where processing is based on consent)
- Right to lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO)
To exercise your rights, please contact us using the contact details provided above.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to ensure proper functionality, improve user experience, conduct statistical analysis, and support marketing activities, including remarketing.
Cookies may be placed by us or by third parties such as Google in order to display advertisements tailored to your interests.
You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our business operations.
The most current version will always be available on our website.