Nameplatesand labelsfor industry.

Notice updated: 25 October 2026.

This notice applies to the ATZ DRUK website and its contact form. The language specified in the page address or saved with your consent takes priority. On the main entry address, the server chooses a supported browser language. If none is recognised, it uses the connection country supplied by Cloudflare; if this does not yield a supported language either, it opens the English version. We do not store your IP address or country for language selection. Once sending is enabled, clicking “Send enquiry” sends your details, message and selected files to the form server and then to the email delivery service, which addresses the email to biuro@aletabliczki.pl. Your email address is set as the reply address. A success message means the delivery service has accepted the email for sending; it does not confirm receipt or that it has been read. The form code does not save message content or files in persistent browser storage.

Controller and contact

The data controller is ATZ DRUK Sp. z o.o., ul. Piekarska 9, 91-314 Łódź, Poland; KRS 0000910851, NIP 7262686189. For personal data matters, email biuro@aletabliczki.pl or write to our registered address.

Why we process data

We process your name, email address, message and attached files to receive and answer your enquiry and manage business correspondence. The legal basis is our legitimate interest in handling communications under Article 6(1)(f) GDPR. Where we take steps at your request before entering into a contract with you, Article 6(1)(b) GDPR applies. We also rely on legitimate interests to protect the form against spam and accidental duplicate submissions. For this purpose, we process technical identifiers and the outcome of submission attempts. The hosting infrastructure processes IP addresses and connection information to display and protect the website. Providing personal data is voluntary; the form requires your name, email address and message, while attachments are optional. This landing page does not carry out profiling or make automated decisions producing legal effects. Independently of measurement consent, we keep an aggregate count of accepted enquiries, without their content, to monitor the form and organise customer service.

Who may receive data

Once sending is enabled, your details and files are handled by authorised staff and the providers needed to operate the form: Cloudflare Workers hosting with a Cloudflare D1 database, the Resend email delivery service (Plus Five Five, Inc.), and cyber_Folks, which hosts our company mailbox. Files are included as email attachments; the application does not create public download links. Resend stores data in the USA. Cloudflare may also process data outside the European Economic Area. Resend provides EU Standard Contractual Clauses for these transfers; Cloudflare describes its use of the EU–US Data Privacy Framework and Standard Contractual Clauses in the circumstances set out in its documentation. To request information about these safeguards and a copy, email biuro@aletabliczki.pl. Data may also be disclosed to recipients entitled to receive it under applicable law.

How long we keep data

We retain correspondence for as long as needed to handle the matter. Further retention may be necessary because of a contract, a legal obligation or the establishment, exercise or defence of legal claims, only to the extent and for the period justified by that purpose. The form application passes message content and files through server memory without storing them in its database. To prevent spam, it stores an identifier derived from the IP address using a secret key, valid for up to 24 hours. The submission identifier, content checksum, outcome of the attempt and email service identifier remain valid for 7 days to prevent the same message being sent twice. The application database contains no raw IP addresses, message content or attachments. Resend normally retains emails and logs for 30 days and backups for 7 days. Infrastructure and mailbox logs and backups are subject to the providers’ separate policies. Cookie retention periods are described below. We also retain a random accepted-enquiry identifier, time, language and measurement statuses for 400 days to prevent duplicate counting. The server consent record — a token hash, decision and version — is valid for 180 days. The oppref click reference is stored only with advertising consent and removed when OpenAI accepts or rejects the event, when consent is withdrawn, or at the next cleanup after 7 days. We keep daily enquiry totals without personal or enquiry identifiers indefinitely to compare results. Expired records are deleted during subsequent requests and automatically once a day. Deletion takes place at the next cleanup after the stated period expires, normally within the following 24 hours. If the cleanup fails, deletion follows when service is restored.

Your rights

Subject to the GDPR, you may request access to, rectification or erasure of your data, or restriction of processing. You may object to processing based on legitimate interests. Data portability applies where the GDPR conditions are met. You can withdraw consent to optional cookies at any time in cookie settings; withdrawal does not affect the lawfulness of earlier processing. You may also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (uodo.gov.pl), or another competent supervisory authority.

Cookies used by this landing page

The essential atz_cookie_choice cookie stores separate choices for language preferences, analytics and advertising measurement for 6 months. The technical atz_measurement_consent record keeps a random token and decision version for 6 months so the server can respect consent and withdrawal. This token is not sent to Google or OpenAI. The optional atz_lang cookie remembers PL, EN, DE or UK for one year. Once GA4 is configured and you agree to analytics, _ga and _ga_* cookies may identify the browser and session for up to 6 months, without extending their expiry on return visits. OpenAI advertising measurement runs on the server; we do not install its browser Pixel. With advertising consent, we may keep the oppref click reference for the current session to include it with an accepted enquiry. Rejecting or withdrawing consent removes the relevant optional records and stops further measurement. The form and manual language selection work without these consents. You can change your choice through “Cookie settings” in the footer.

Analytics and advertising measurement

Google Analytics 4 and OpenAI advertising measurement are separate, optional functions. An unconfigured service remains unavailable in the settings. Where personal data is involved, these functions rely on your consent under Article 6(1)(a) GDPR. GA4 starts only after analytics consent; before then, we neither load its tag nor send requests to Google. We may measure page views, traffic sources, safe campaign labels, language, visits to the form, contact-link clicks and accepted enquiries. Google also receives technical information when the browser connects to its service. A phone or WhatsApp click does not confirm a conversation. Advertising consent allows our server to send a lead_created event to OpenAI only after the email service accepts the message. It contains a random event ID, time, language-page address without query parameters and an available oppref click reference. We do not send OpenAI the visitor’s IP address or browser information. Neither measurement system receives names, email addresses, phone numbers, enquiry text, filenames or file contents from our form. We do not enable Google Signals, remarketing, enhanced conversions or automatic contact matching in OpenAI. Google and OpenAI may receive measurement data and process it outside the EEA. Before activation, the terms for the connected accounts, retention periods and transfer safeguards must be confirmed. Google’s policy is available at policies.google.com/privacy; you can request current information about our providers at biuro@aletabliczki.pl. Withdrawing consent stops further measurement, including pending server events. Giving consent again does not send earlier enquiries retrospectively.

Links to other services

WhatsApp, Instagram and Aletabliczki open only when you select their links. They are separate services governed by their own privacy policies. This also applies to any processing outside the European Economic Area and the safeguards used, which depend on the particular provider. We do not embed social media plugins that track visitors on this page.