1. Privacy contact
For privacy, data rights and reports, contact kontakt@pelletnik.pl, preferably with the subject “Personal data”.
2. People and data covered
This policy covers visitors, people contacting us, operator-panel users and individuals whose data appears in collected offers, including sole traders and private advertisers. Company information may also contain data about employees or representatives.
- Page visits, searches and calculations: page requests, IP addresses, technical connection data and submitted filters, quantity, postcode or locality. We use these to provide the requested feature under Article 6(1)(b) GDPR to the extent necessary, and for protection and diagnostics under Article 6(1)(f), our legitimate interest in a secure service.
- Contact and complaints: email address, message, voluntary attachments and case information supplied directly by the sender. The basis is Article 6(1)(b) for contractual or pre-contractual matters, Article 6(1)(c) for specific legal obligations such as GDPR rights, and otherwise Article 6(1)(f), our interest in answering correspondence.
- Seller data in offers: business or sole-trader name, listing identifier and address, locality and product parameters; a seller label in the source may identify an individual. The source is the identified shop or portal. Article 6(1)(f) supports our and users' legitimate interest in reliably comparing public offers and identifying sellers. The scope is limited to comparison needs, not arbitrary listing data.
- Operator panel: authorised operator identifier or email, session and administrative actions. Article 6(1)(f) supports access control and accountability to protect the service and data.
- Claims: limited records of a particular dispute, under Article 6(1)(f), for establishing, exercising or defending claims. This does not justify indefinite retention of the entire catalogue.
Correspondence data is voluntary, but without a reply address or information about the problem we may be unable to resolve it. A postcode helps tailor searches; features that do not need location remain available. Refusing analytics consent does not disable the comparison service. Technical data needed to deliver a page is processed without such consent.
No consumer account or payment information is required. Orders and payments take place outside Pelletnik. Do not send identity documents, health data or other unnecessary information.
3. Information for sellers and advertisers
When we process data identifying an individual from a public offer, Pelletnik acts as a separate controller for its own comparison service. Public availability does not mean consent to unrestricted reuse. Product and price information may be published with limited seller identification and a source link; visitors then receive the published data.
Sources are public shop and classified-portal pages, including the full pellet category on OLX. The specific source is identified with the offer. Data is limited to the listing identifier and address, seller identification needed to distinguish offers, locality, product, price and delivery information. Seller identification and the link itself may identify a person. Report unwanted disclosure to kontakt@pelletnik.pl.
Information under Article 14 GDPR must be provided within the applicable time limits: generally within one month of obtaining data, or at the first earlier contact or disclosure to another recipient. Publishing this policy alone does not replace individual notice unless a specific statutory exception applies and has been documented. Article 14(5)(b) does not automatically apply because of the number of listings or contact costs.
You can object or report outdated data, incorrect seller attribution or unwanted disclosure by providing the offer address. Identifying a source does not prove that the portal licensed its content to Pelletnik.
4. Analytics, address and data received by sellers
Comparison settings — quantity, postcode, collection or delivery, and municipality — may be stored in the current browser tab to continue calculations between results and offers. They may also appear in the page URL and calculation request. The cookies and device-storage notice describes the scope and duration. This is not a consumer account or an order record.
When the PostHog integration is available, voluntary consent allows us to analyse visited pages and controlled interaction events, click maps for public controls, and limited error and performance diagnostics to improve the service (Article 6(1)(a) GDPR). We can replay the course of a random 10% sample of visits and keep these replays for up to 30 days. We mask all visible text and form fields, and exclude the exact delivery address section and postcode field. We do not collect error content, request bodies, headers or console output. Masking does not guarantee anonymity, and collected data may contain personal information. Refusing consent does not restrict comparisons. You can withdraw consent in “Privacy settings”; this does not affect the lawfulness of earlier processing. Contact the controller to request deletion of collected data.
Google exact-address search is outside this scope. Information about its data and recipients will precede activation; analytics consent does not automatically cover address search.
Locations map. When an offer shows a map (the Locations section or the map view of the location picker; the Map view is the default for offers with several locations), your browser loads the map tiles, style and fonts directly from OpenFreeMap servers (openfreemap.org); map data © OpenStreetMap contributors. With that request these servers receive your IP address and standard request data (for example user agent and the referring page, per the Referrer-Policy). Pelletnik sends them nothing else, and the map sets no cookies. OpenFreeMap's further handling of this data is governed by its own rules. The basis is Article 6(1)(f) GDPR, our interest in showing where an offer's locations are.
When you visit a seller's site, it may receive technical connection information and processes data under its own rules. Pelletnik does not send order or fulfilment data because it does not collect them. At launch there are no affiliate links or paid positions. Advertising or paid positions would require prior explanation of new data flows and appropriate legal bases.
5. Recipients, AI and transfers
Authorised service staff and providers of hosting, backups, email, content delivery, analytics and offer-processing tools may receive data only as needed and on an appropriate basis. Public authorities may receive data where required by law.
Automated content-analysis services may be used to read product parameters. Sending personal data to them requires a separate justification and safeguards; public availability alone is insufficient. These services analyse product content, not people.
For information about recipients, possible transfers outside the European Economic Area and applicable safeguards, email kontakt@pelletnik.pl. We do not assure that every service processes data exclusively within the EEA.
6. How long we retain data
Retention depends on the purpose and type of data. Technical data and logs are retained as needed for operation, diagnostics and security. Offer data and source material support comparison updates and correctness checks; an expired offer, objection or infringement report requires reassessment of the basis for further publication and retention.
Correspondence is retained while handling a case and afterwards as needed to demonstrate its handling or establish, exercise or defend claims, taking relevant statutory periods into account. A minimal record of an upheld objection may be necessary to prevent republication from the same source. This does not justify indefinite archiving of the whole catalogue.
A reply email voluntarily supplied through the offer-error form is removed from the active database by daily cleanup after 90 days from submission. Report text and offer context may remain for case review and service accuracy checks. A daily rotating hash is stored instead of the IP address for abuse limits and removed from the active database by daily cleanup after 48 hours.
Backup data follows the backup cycle and must be considered during restoration. Visit replays are kept for up to 30 days. Other optional analytics periods depend on the active configuration, which we explain before seeking consent. Ask kontakt@pelletnik.pl about the period or criteria for particular data. Device storage has separate periods described in the cookies notice.
7. Your rights
Subject to the GDPR, you may access and obtain a copy of data, rectify it, request erasure or restriction, and object to processing based on legitimate interests. An objection based on your particular situation requires individual assessment. Objection to direct marketing is unconditional.
Portability covers data you provided that is processed automatically on the basis of consent or contract, within Article 20 GDPR. You may withdraw consent at any time as easily as you gave it. You may complain to the President of Poland's Personal Data Protection Office; see UODO.
Send requests to kontakt@pelletnik.pl. We reply without undue delay, normally within one month. If grounds allow an extension of up to two further months, we explain the extension and reasons within the first month. We explain refusals and available remedies. Requests are generally free, subject to Article 12(5) GDPR. Identity checks are proportionate, without routinely requesting identity-document copies.
8. Automation and updates
Algorithms calculate costs, group products and order offers according to search settings. AI tools may help read offers. This is not an automated decision about a person with legal or similarly significant effects under Article 22 GDPR. A different use, such as assessing people's trustworthiness, requires a new assessment. An algorithm is not independent offer verification.
We date policy changes. An earlier consent does not retrospectively cover a new purpose. The version date appears at the start of this policy.