Privacy Policy

1. Data Controller

The controller of personal data processed through this website is Valeor sp. z o.o., with its registered office at ul. Kowalska 5/203, 20-115 Lublin, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS 0001213877, NIP 9462762105, operating under the Valéor brand (“Valéor”, “we” or “us”).

For questions concerning personal data or the exercise of data-protection rights, contact: office@valeorlaurus.com.

Valéor has not appointed a Data Protection Officer.

2. Scope of this Policy

This Privacy Policy explains how Valéor processes personal data in connection with visits to the website, professional B2B enquiries, requests for samples, discussions of orders or pre-orders, preparation of offers and subsequent business communication.

The website and its forms are intended for persons acting on behalf of a business or in a professional capacity. They are not directed to children or private consumer enquiries.

3. Personal Data We Collect

When you submit a B2B enquiry, we may collect your company name, company website, company country, name, position, business email address, telephone number, business type, requested product grade, request type, intended application, estimated annual demand and the content of your message.

We do not collect a delivery address in the initial enquiry form. If a sample or delivery is approved, we may request the delivery address and other information necessary to organise shipment.

When you communicate with us by email or telephone, we process the contact details and information contained in that communication. Technical information such as IP address, date and time, requested page, browser or device information and diagnostic or security logs may be processed by the website infrastructure.

Personal data is normally obtained directly from the person submitting the form or communicating with Valéor.

4. Purposes and Legal Bases

We process personal data to receive, evaluate, qualify and respond to professional enquiries; discuss samples, orders or pre-orders; prepare commercial information or an offer; organise an approved sample shipment; conduct contractual communication; perform an order; comply with legal obligations; protect the website and forms against abuse; and establish, exercise or defend legal claims.

Where the person submitting the enquiry is a party to a potential contract, processing necessary to take steps at that person’s request or to perform a contract is based on Article 6(1)(b) GDPR. Where the person acts for a company or other organisation, processing is based on Valéor’s legitimate interest in conducting B2B communication and managing business relationships under Article 6(1)(f) GDPR.

Processing required by accounting, tax or other laws is based on Article 6(1)(c) GDPR. Security, fraud prevention and the establishment, exercise or defence of claims are based on Valéor’s legitimate interests under Article 6(1)(f) GDPR.

We do not use enquiry data for an independent newsletter or unrelated marketing after the enquiry has ended.

5. Required and Optional Information

Fields marked as required are necessary to evaluate and answer the enquiry. Without them, we may be unable to process the request. Optional information may help us assess the business context but is not required.

Submitting the form does not create an order, reservation, confirmation of availability, minimum quantity, price, delivery date or commitment to supply.

6. Netlify Forms and Email Delivery

The website uses Netlify Forms. Form submissions are processed and stored in the Netlify administration panel and a notification containing the submitted information is sent to info@valeorlaurus.com.

Netlify applies technical security and spam-filtering measures, including its standard spam filtering and the honeypot configured for this form. The email notification is handled through Proton.

Access to enquiries within Valéor is limited to the director and persons authorised to handle prospective or existing clients.

7. Recipients of Personal Data

Personal data may be made available, only where necessary, to website and form infrastructure providers, email providers and their authorised subprocessors; authorised representatives of Valéor; accounting or legal advisers; and carriers, couriers or logistics partners after a sample or delivery has been agreed.

Data may also be disclosed to public authorities where required by law. Valéor does not sell personal data and does not automatically forward enquiries to unrelated third parties. Valéor currently does not use a CRM system.

8. International Data Transfers

Some technical providers, including Netlify and its subprocessors, may process information outside the European Economic Area. Where required, such transfers are carried out using an applicable adequacy decision, standard contractual clauses or another lawful transfer mechanism described in the provider’s data-processing terms.

The email infrastructure provider is located in Switzerland. Where applicable, transfers to Switzerland rely on the European Commission’s adequacy decision. You may contact Valéor for further information about the safeguards relevant to a particular transfer.

9. Retention Periods

A viable B2B enquiry that does not lead to a contract may be retained for up to 24 months after the last substantive contact. A rejected or clearly non-target enquiry may be retained for up to 6 months after closure. Spam and automated abuse are deleted within 30 days.

Correspondence and information concerning a sample shipment that does not lead to a contract may be retained for up to 24 months after the last contact. If an enquiry leads to an order or contract, relevant data is retained for the duration of the relationship and for the periods required by accounting, tax, contractual and other applicable laws.

Information needed to establish, exercise or defend legal claims may be retained until the claim is finally resolved or the applicable limitation period has expired. A longer period may apply where proceedings, an audit or a legal hold requires continued retention.

10. Your Rights

Subject to the conditions of the GDPR, you may request access to your personal data, rectification of inaccurate data, erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation.

To exercise a right, contact office@valeorlaurus.com. We may need to verify your identity before completing the request.

11. Complaint to a Supervisory Authority

You have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych) or, where applicable, another competent supervisory authority.

Information about submitting a complaint is available at https://uodo.gov.pl/.

12. Automated Decisions, Profiling and Children

Valéor does not use personal data collected through the website for automated decision-making or profiling that produces legal or similarly significant effects. Enquiries are reviewed by authorised persons.

The website and B2B enquiry form are not directed to children.

13. Cookies and Website Analytics

At the date of publication, the website does not use Google Analytics, advertising pixels, behavioural advertising tools or newsletter tracking. Netlify Web Analytics is based on content-delivery-network server logs and does not require analytics cookies or client-side tracking code.

The website is intended not to use non-essential cookies. A cookie consent banner is therefore not displayed in the confirmed configuration. If non-essential analytics, advertising, embedded media or similar technologies are added, this policy and the consent mechanism will be reviewed before those technologies are activated.

14. Security

Valéor applies reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. Access is limited according to business need. No method of internet transmission or storage can be guaranteed to be completely secure.

15. Changes to this Policy

This Privacy Policy may be updated when the website, forms, providers or legal requirements change. The current version and effective date will be published on this page.

16. Contact

Valeor sp. z o.o.
ul. Kowalska 5/203, 20-115 Lublin, Poland
KRS: 0001213877 | NIP: 9462762105
Privacy contact: office@valeorlaurus.com