Privacy Policy for fruitorchard.pl
Effective date: 12 August 2026
1. Data controller
The controller of personal data is FRUIT ORCHARD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office in Warsaw at ul. Puławska 41/3, 02-508 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0001153199, NIP 5214104142, REGON 540811269, hereinafter the “Controller”.
For privacy and personal data matters, contact us at sekretariat@fruitorchard.pl.
2. Data we process
Depending on how the website is used, we may process:
- data entered in the contact form or an email: name, email address, message content and other information voluntarily included in correspondence;
- technical website data: IP address, request date and time, visited URL, browser and device type, operating system, referring page and error information;
- online identifiers and information about website activity if the user consents to analytics;
- technical data used by Google reCAPTCHA to assess whether a form is completed by a human rather than an automated system;
- the selected language and cookie consent decision.
3. Website operation and security
We process technical data and server logs to display the website, ensure its stability, diagnose errors, prevent abuse and protect the website. The legal basis is Article 6(1)(f) GDPR — our legitimate interest in ensuring the secure and proper operation of the website.
Logs are retained for 14 days. Technical data is generated automatically; without its transmission, use of the website may not be possible.
4. Contact form and email correspondence
We use data submitted through the contact form or by email solely to answer the inquiry and conduct correspondence concerning the matter identified by the person contacting us. We do not use this data for newsletters or independent marketing.
The legal basis is:
- Article 6(1)(b) GDPR where the message concerns steps taken at the data subject’s request before entering into a contract or performance of a contract;
- Article 6(1)(f) GDPR in other cases — our legitimate interest in answering inquiries and conducting the requested correspondence.
We retain the data only for the time required to answer and close the correspondence in the relevant matter and then delete it, unless continued retention is required by law or necessary to establish, pursue or defend claims. Providing the data is voluntary, but without an email address and message content we cannot respond.
5. Google Analytics
After consent to the analytics category, we use Google Analytics 4, a service provided by Google Ireland Limited. It helps us prepare visit statistics and improve the website. It may process cookie identifiers, IP address, device and browser information, approximate location, visited pages, visit source and events related to use of the website.
The legal basis is consent — Article 6(1)(a) GDPR. Google Analytics should not run before consent is given. User and event data in Google Analytics is retained for 2 months. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Google reCAPTCHA
On the contact form pages we use Google reCAPTCHA v3, provided by Google Ireland Limited, to protect the form against spam and automated abuse. The service may analyse the IP address, device and browser information, behaviour on the form page and technical identifiers.
The legal basis is Article 6(1)(f) GDPR — our legitimate interest in securing the form and website. reCAPTCHA is loaded only on pages containing the contact form. Data and technical identifiers are retained for the periods resulting from the service configuration and shown in the dynamic cookie declaration below. Without this security measure, form submission may be unavailable; in that case, you can contact us directly by email.
7. Language preference and consent record
The website may remember the selected language in order to display the correct content. The consent mechanism records the user’s decision so that it does not ask on every page view and so that consent can be demonstrated. These mechanisms are necessary to provide the selected function and manage consent.
The legal basis for processing the language preference is Article 6(1)(f) GDPR — our interest in correctly operating language versions. The legal basis for retaining the consent record is Article 6(1)(c) GDPR in connection with the obligation to demonstrate consent under Article 7(1) GDPR. Retention periods are shown in the cookie declaration below.
8. Google Fonts
The website downloads font files from Google servers. As a result, Google Ireland Limited may receive the IP address and basic browser technical data. The purpose is the correct and consistent display of content. The legal basis is Article 6(1)(f) GDPR — our legitimate interest in providing a readable presentation of the website. Google Fonts does not set its own cookies on our website. Once the fonts are hosted locally on fruitorchard.pl, this section should be removed.
9. Data recipients
Data may be received only by entities required to operate the website and communications:
- home.pl sp. z o.o., with its registered office at ul. Zbożowa 4, 70-653 Szczecin, Poland — hosting, server logs and email services;
- IT maintenance and support providers acting on our instructions;
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — Google Analytics, Google reCAPTCHA and Google Fonts.
Processors acting on our instructions receive data only to the extent required to provide their services.
10. Transfers outside the European Economic Area
Google may also process data outside the European Economic Area, including in the United States. Depending on the recipient and the current legal framework, transfers are based on an adequacy decision or Standard Contractual Clauses approved by the European Commission. Current information about processing and transfers is published in the Google Privacy Policy.
11. Data subject rights
To the extent provided by the GDPR, you have the right to:
- access your data and obtain a copy;
- rectify your data;
- erase your data;
- restrict processing;
- data portability where data is processed automatically on the basis of consent or a contract;
- object to processing based on Article 6(1)(f) GDPR;
- withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with the President of the Polish Personal Data Protection Office or another competent supervisory authority.
Requests may be sent to sekretariat@fruitorchard.pl. We do not make decisions producing legal effects concerning users solely by automated means and do not carry out such profiling.
12. Cookies and changing settings
The current list of cookies and browser storage, their purposes and retention periods is generated by the consent mechanism used on the website:
Necessary
| Provider | Cookies | Purpose | Duration |
|---|---|---|---|
| WP KRS Cookie | wpkc_consent (cookie + localStorage) | Stores your cookie consent decision — in a cookie and in the browser's local storage. Without it the banner would ask again on every visit. | 180 days |
| WordPress | wordpress_*, wp-settings-*, wordpress_test_cookie, wp_lang | WordPress login, session and preferences for logged-in users. Not set for visitors. | session / up to 1 year |
| Google reCAPTCHA | _GRECAPTCHA | Security: telling a human from a bot when forms are submitted. | _GRECAPTCHA: 6 mies. |
| WPML — language preference | wp-wpml_current_language | Remembers the selected website language during the current visit. | session |
| Google reCAPTCHA — local storage | Google reCAPTCHA — local storage | Stores technical data used by reCAPTCHA to assess abuse risk and protect the form against automated submissions. | Until the site's data is cleared in the browser |
| WP KRS Cookie — measurement marker | wpkc_sniffed (localStorage) | Remembers when cookie names were last reported to the local scanner after consent, limiting measurement to at most one report per day. It does not store cookie values. | Until the site's data is cleared; the marker is refreshed no more than once every 24 hours |
Analytics
| Provider | Cookies | Purpose | Duration |
|---|---|---|---|
| Google Analytics | _ga, _ga_*, _gid, _gat, _gat_* | Traffic measurement and visit statistics: telling users and sessions apart and throttling the number of requests. | _ga: 13 mies.; _ga_VF6RWBSZ9M: 13 mies. |
Last scan: 2026-09-09
You can change or withdraw your decision at any time:
13. Changes to this policy
This policy may be updated if the website, services used or applicable law changes. The current version is published on this page together with its effective date.