Privacy Policy

The controller of personal data is Henitom Dryjski Spółka Jawna, ul. Stalowa 26, 41-922 Radzionków, Poland, hereinafter referred to as the ‘Controller’.

You may contact us regarding your personal data by email at info@henitom.com or by post at: ul. Stalowa 26, 41-922 Radzionków, Poland.

We collect your personal data for the following purposes:

Right to withdraw consent

If you previously consented to the processing of your personal data and now wish to withdraw that consent, simply email us directly at info@henitom.com or click the link included at the end of an email you previously received from us.

• ✓Handling and fulfilling orders, delivering ordered products, accounting for sales contracts, handling complaints and returns, and conducting email correspondence concerning a sales contract. The legal basis is that processing is necessary to perform a contract or to take steps at the data subject’s request before entering into a contract (Article 6(1)(b) GDPR).
• ✓Sending information about our products and services through channels such as email, SMS or voice calls. We take such action only where you have consented to it (Article 6(1)(a) GDPR).
• ✓Analytics and statistics. The legal basis is our legitimate interest in analysing website activity and users’ purchasing preferences in order to improve the functions we use (Article 6(1)(f) GDPR).
• ✓Ensuring the Online Store operates correctly. The legal basis is our legitimate interest in operating and maintaining the Online Store (Article 6(1)(f) GDPR).
• ✓Establishing and pursuing possible claims or defending against claims. The legal basis is our legitimate interest in protecting our rights (Article 6(1)(f) GDPR).
• ✓Promotion and communication on Facebook. We use Facebook to communicate about our activity, promote the brand and make contact easier. If you visit our profile or interact with us, for example by commenting, liking or sending a message, your data is processed for these purposes. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).

You may submit a request to exercise your rights by writing to info@henitom.com. The request should contain information that allows us to identify you unambiguously.

The scope of each right and the circumstances in which it can be exercised arise from applicable law. The rights available to you depend, among other things, on the legal basis on which we process your personal data.

• ✓Request access to your data and receive a copy.
• ✓Request rectification of inaccurate data and completion of incomplete data.
• ✓Request erasure of your data.
• ✓Request restriction of processing, for example if you notice that your data is inaccurate.
• ✓Request portability of your data.
• ✓Object to processing where we rely on our legitimate interest.
• ✓Lodge a complaint with the President of the Personal Data Protection Office if you believe that processing your data has infringed the law.
• ✓Withdraw consent at any time without affecting processing carried out before withdrawal, where processing is based on consent previously given.

In accordance with applicable law, we do not process personal data indefinitely. We retain it for the period necessary to achieve the relevant purpose:

• ✓Data processed on the basis of consent: until consent is withdrawn or the purpose of processing is achieved.
• ✓Contract data: for the duration of the contract where data is processed to enter into and perform that contract.
• ✓Claims: 3 or 6 years plus 1 year, depending on whether or not you are an entrepreneur.
• ✓Preliminary product enquiries that do not promptly lead to a contract: 6 months.
• ✓Data processed on the basis of our legitimate interest: until an effective objection under Article 21 GDPR, but no longer than 5 years.
• ✓Legal obligations, including tax and accounting obligations: 5 years plus 1 year.
• ✓Analytics and website administration data: until it becomes outdated or no longer useful, but no longer than 5 years.
• ✓Facebook promotion and communication: Messenger correspondence is retained for up to 24 months after the last contact and is then deleted or archived. This period results from technical limitations and the need for continuity of communication. Facebook, as a separate controller, may retain information about your activity under its own rules.

Your personal data may be disclosed to entities that support our business, in particular providers of software, email and hosting services.

Providing data is voluntary, subject to the following rules:

• ✓Fields marked as required are necessary to use the relevant electronic service; without them, the service may not be possible.
• ✓Fields marked as optional may be omitted without any negative consequences.

We also process personal data in connection with our Facebook profiles and accounts. If you visit our profile on that platform, we process personal data for the purposes listed below.

Facebook’s service provider is a joint controller of personal data.

• ✓Operating fan pages and groups on Facebook under the terms and rules set by that service and its applicable terms.
• ✓Providing information through fan pages and social accounts about our activities and initiatives, including promoting events, services and products.
• ✓Communicating through available functions, including responding to reactions, comments and private messages.
• ✓Analysing activity on our profiles, including likes, comments and shares of our profile or content.
• ✓Statistical and advertising activities carried out through tools provided by the social-media platform.

Our Store uses Google Analytics, which helps us collect information about visits. It allows us to obtain information about pages viewed, time spent in the Store and movement between pages. Google’s ‘_ga’ analytics cookie is used to collect this information and helps us anonymously recognise who visits the Store, including how many people use it and which pages are most popular. This cookie is stored for 2 years.

Google does not use the collected data to identify a user or combine it to enable identification. Detailed information about the scope and rules of data collection for this service is available at https://www.google.com/intl/pl/policies/privacy/partners.

When you visit our Store, cookies may be stored on your computer, laptop, phone or tablet. They retain information about how the Store is used, allowing functions to be better adapted to your needs.

The Store uses session cookies concerning activity during a single browser session, which are deleted when the browser is closed. Persistent cookies remain on the user’s device and activate when the Store is opened. Information obtained through them, including IP address, domain name, browser type, operating-system type and demographic data, is used for security, server administration, statistics, marketing and analytics.

This helps us understand users’ needs and continuously improve the quality of the Online Store.

You may change how cookies are used at any time through your browser settings, including deleting cookies already stored on your device. Management and deletion options vary by browser. Information is available through your browser’s Help function or at https://www.aboutcookies.org/. Blocking all cookies may make the Store difficult or impossible to use correctly.

The Privacy Policy is reviewed on an ongoing basis and updated where necessary. The latest version is always published on the website of our Online Store.

Last updated: 3 September 2026.