Privacy Policy & Cookies (GDPR)

Data Controller

The data controller is Napkins Sp. z o.o., ul. Spółdzielcza 1, Sadów, Poland. For any data protection enquiries, please contact us by email (see Contact section).

Scope of collected data

We collect only automatically gathered data: (1) essential technical cookies required for the website to function (Next.js, i18n – language selection); (2) Google Analytics GA4 analytics cookies (only after consent); (3) IP addresses and server logs stored by hosting (Vercel). We do not collect any form data, do not operate user accounts or newsletters.

Purposes and legal bases

Legal bases for processing: (a) user consent (Art. 6(1)(a) GDPR) – for Google Analytics cookies, loaded only after clicking "Accept All" or enabling analytics in cookie settings; (b) legitimate interest of the controller (Art. 6(1)(f) GDPR) – for essential technical cookies and server logs.

Types of cookies

We use two categories of cookies: (1) Essential – technical cookies for site operation, language selection (i18n) and session, stored automatically; (2) Analytics – Google Analytics (GA4) cookies that help us analyse site traffic. These are loaded only after the user gives consent via the cookie banner.

Google Analytics

Google Analytics (GA4) is used solely for traffic analysis (visits, traffic sources, popular content). We have enabled IP anonymisation (anonymize_ip). Google Analytics scripts are loaded only after consent is given – no analytics cookies are stored before clicking "Accept All". We do not use Google AdSense or any other advertising tools.

Data retention periods

Data retention periods: session cookies – deleted automatically when the browser is closed; Google Analytics cookies – up to 2 years (GA4 defaults); server logs and IP addresses – up to 90 days (Vercel); cookie consent – stored in browser localStorage until revoked.

Your rights (GDPR)

Under the GDPR you have the following rights: right of access (Art. 15), right to rectification (Art. 16), right to erasure "right to be forgotten" (Art. 17), right to restriction of processing (Art. 18), right to data portability (Art. 20), right to object (Art. 21), right to withdraw consent at any time (Art. 7(3)). To exercise these rights, contact us (see Contact section). You also have the right to lodge a complaint with a supervisory authority.

Cookie management

You can manage your cookie preferences by clicking the settings icon (gear) in the bottom-left corner of the page. Most browsers also allow you to control and delete cookies in their settings. Revoking consent for analytics cookies will remove Google Analytics cookies and block analytics scripts from loading.

Contact

Napkins Sp. z o.o., ul. Spółdzielcza 1, Sadów, Poland. Email available on the Contact page.