Skip to content

Privacy and cookies policy

This is a translation. The Polish version is the official, binding text. Polityka prywatności (PL)

Who is the data controller?

The controller of the personal data of visitors to this website is:

Lelalupiregistered office: ul. Czubinów 21c, 32-020 WieliczkaVAT number (NIP): PL 6832147716REGON: 542067817Contact for privacy matters: lukasz.pietowski@lelalupi.com

What data do we process and why?

Our website is informational. We do not run comments or a newsletter.

To keep the site secure, protect it against attacks (e.g. DDoS) and analyse traffic, we use the services of Cloudflare, Inc. (USA). For this, technical server log data is processed:

  • the user's IP address,
  • browser and operating system type,
  • date and time of the visit,
  • pages visited.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in optimising the website and keeping it secure.

The quote request form

If you send us a request through the “Ask for an offer” form, we process the data you enter: name, company, email address, phone number and details of the order (products, quantity, place and date of delivery, message).

We use this data only to answer your request and prepare an offer. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and, for the data of a person representing a company, our legitimate interest in communicating with business partners (Art. 6(1)(f) GDPR).

The request reaches us as an email through an email delivery provider (Resend, Inc., USA); the website does not store it in any database. We keep the correspondence as long as needed to handle the request and any cooperation, then for the period required by law or until claims are time-barred. Providing the data is voluntary, but without an email address we cannot reply.

Analytics and cookies

We use minimal analytics, Cloudflare Web Analytics. It is designed for privacy: it does not track users for marketing, does not profile them, does not collect data across websites and does not use cookies to identify individuals. The data is used only for general, anonymous traffic statistics.

Cloudflare may, however, use strictly necessary cookies or technical identifiers for security purposes only (e.g. to detect malicious bots).

Transfers outside the EEA

Cloudflare, Inc. has servers around the world, including in the USA. Transfers are based on standard contractual clauses or European Commission adequacy decisions, which keep the data protected. The same applies to the email delivery provider used by the form.

Your rights

Because we process your data (your IP address in the logs and, if you send a request, the form data), you have, to the extent provided by law, the following rights:

  • to access your data and request its correction, deletion or restriction of processing,
  • to object to the processing,
  • to lodge a complaint with the President of the Personal Data Protection Office (UODO, Poland) if you believe the processing infringes the GDPR.

Last updated: 4 October 2026