Privacy Policy

Effective date: November 3, 2026

This Policy explains how personal data is processed when you visit https://www.humax-eco.com/ or contact HUMAX, why it is used, and how you can exercise your rights.

1. Who is responsible for your data

Data controller: HUMAX SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, operating under the HUMAX brand.

Country: Poland

Polish tax identification number (NIP): 7011192159

Contact person: Aleksander Nowak

Telephone: +48 792 095 802

Postal address: ul. Żurawia 47/49 lok. 415, 00-680 Warszawa, Polska

Privacy contact: sales@humax-eco.com.

In this Policy, “we” means the controller identified above. Wix provides the website’s technical platform and does not replace the controller responsible for the use of HUMAX enquiries.

2. The data we process

Information you provide: your email address, message and other details you voluntarily include, such as your name, company, job title, telephone number, country and product requirements. In subsequent correspondence, we also process information needed to respond, prepare an offer or arrange a contract.

Technical information: IP address, device and browser information, pages visited, access times and technical events, and cookies or similar identifiers, depending on the website features used and your consent settings.

Data comes from you, your interactions with the website and the technical services used. If someone at your company provides your business contact details to help us respond to an enquiry, we use those details for the relevant business communication.

Please do not include passport details, payment information, health information or other information unnecessary for your business enquiry in a free-text message.

3. Why we use data

We process data to:

respond to enquiries about products, prices, technical materials, samples and cooperation;
prepare quotations and take steps you request before entering into a contract;
maintain enquiry-related business correspondence and, where a contract is concluded, support its performance;
operate and secure the website and prevent spam, abuse and technical failures;
analyse website use and improve it, where the relevant tools are enabled and any necessary consent has been obtained;
meet applicable legal obligations and establish, exercise or defend legal claims.

Requesting a quotation does not subscribe you to marketing emails. Form data is used to handle your enquiry and the related business correspondence.

4. Legal grounds

We process data under the GDPR and rely on:

pre-contractual steps and performance of a contract where the enquiry concerns a contract with you as an individual, Article 6(1)(b);
legitimate interests in handling enquiries from company representatives, maintaining business correspondence, securing our services and protecting rights, Article 6(1)(f), taking your rights and interests into account;
consent for optional Wix technologies where required, Article 6(1)(a);
legal obligations where applicable law requires retention or disclosure, Article 6(1)(c).

Where other laws apply, the grounds and conditions for processing are determined under those laws. Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing carried out before withdrawal.

5. Whether you must provide data

A valid email address is needed to reply through the contact form; the message field is optional. Without a valid email address, we cannot reply through that channel. Additional information is voluntary unless needed for a particular enquiry or contract. We do not require information unrelated to your enquiry.

6. Who receives data

Access may be given to authorised staff and contractors within their assigned tasks, and to providers supporting the website, enquiry storage and email. This Policy does not provide for forwarding enquiries to international regional representatives; if such sharing becomes necessary, we will first provide the required information and establish an applicable legal ground.

We use Wix to host and operate the website and handle enquiries through its features. Wix information: https://www.wix.com/about/privacy.

Active services and recipients:

Wix.com Ltd. (Israel), its group companies and subprocessors provide the website platform, hosting, forms/contacts, enquiry storage and technical security functions. They process the information described in section 2 to the extent needed for enabled features. Processing terms: https://www.wix.com/about/privacy-dpa-users. Wix describes international infrastructure including Europe, Israel and the United States; the specific countries and subprocessors depend on the services and Wix’s current terms. International transfer safeguards are governed by the applicable DPA, including adequacy decisions and Standard Contractual Clauses where applicable. Wix privacy contact: privacy@wix.com; provider information: https://www.wix.com/about/privacy.

No separate third-party analytics services or advertising pixels are connected to the website. HUMAX staff handle enquiries on behalf of the controller in Poland.

We may disclose data to competent authorities where required by law, or to professional advisers to the extent necessary to protect rights. We do not sell personal data.

7. International processing

Depending on the location of the controller, providers and authorised recipients, data may be processed outside your country of residence. The recipients, processing countries, purposes and safeguards are specified in section 6.

Where the GDPR applies to a transfer outside the EEA, an appropriate transfer mechanism must be used, such as an adequacy decision or Standard Contractual Clauses where applicable. Information about the safeguards actually used and how to obtain a copy is available on request at sales@humax-eco.com.

If applicable law requires a separate notice or consent for a particular transfer, that notice will be provided or consent requested separately before the transfer. This Policy and your use of the website do not themselves constitute that consent.

8. Cookies, analytics and external services

The website uses technologies necessary for its operation, security and core features. No separate advertising pixels or third-party analytics are connected. Optional built-in Wix functions, if used, are subject to applicable consent requirements.

Where consent is required, the relevant optional technologies are not activated before your choice. You can change your choice through the website’s “Cookie settings” control. Browser settings can also restrict cookies, but may affect website functionality and do not replace consent controls for all technologies.

When you follow an external link or independently contact us through an external messaging service, that service also processes data under its own rules. An embedded external video player or widget may transmit technical data to its provider; the embedded services actually enabled and their loading conditions are described in the details above.

9. Retention

Enquiries that do not result in a contract: up to 2 years after the last substantive contact, followed by deletion or anonymisation unless another lawful reason for retention exists.
Correspondence and records relating to concluded contracts: for the contract’s duration and subsequently for periods required for mandatory record retention or the establishment, exercise or defence of claims under applicable law.
Cookies: for the periods specified in section 8, which vary between technologies.
Consent and objection records: to the extent and for the period necessary to evidence your choice and meet applicable obligations.

Information needed for an existing dispute or legal obligation may be retained longer only to the necessary extent. Deleted data may temporarily remain in backups until routine overwriting; its use is restricted to restoration and security, and applicable deletion requirements are respected when restoring data.

10. Your rights and requests

Depending on applicable law, you may have rights to information and access, correction, erasure, restriction, objection, a portable copy of data and withdrawal of consent. You may also complain to the competent supervisory authority, including Poland’s President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych): https://uodo.gov.pl/pl/p/kontakt.

To make a request, email sales@humax-eco.com, explaining which data your request concerns and what action you seek. Where reasonably necessary, we may request minimal additional information to verify your identity. Do not send a passport copy without a separate, justified request.

We handle requests within the deadlines required by applicable law. Where the GDPR applies, a response is normally provided within one month; if a permitted extension is needed, we will explain why and provide the revised deadline.

Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time.

11. Security and automated decisions

We apply proportionate organisational and technical measures to protect data and restrict access to people who need it for their work. No method of transmission or storage guarantees absolute security.

We do not use enquiry data for solely automated decisions producing legal or similarly significant effects on you.

12. Changes and contact

When processing practices change, we update this Policy and its effective date. Where required, we provide additional notice of material changes and separately request any new consent. Continued use of the website does not replace consent where it is required.

For all privacy enquiries: sales@humax-eco.com.