Privacy Policy
Last updated: October 2026
1. Data Controller
FENTO Sp. z o.o., ul. Kędzierskiego 3a/3, 01-493 Warszawa, Poland.
KRS: 0000362170 | NIP: 5213576063
Contact: office@fento.com.pl
2. Data We Collect
When you use our contact form, we collect:
- Full name
- Email address
- Company name (optional)
- Message content
We process this data solely to respond to your business inquiry (Art. 6(1)(b) GDPR — pre-contractual measures).
When you use our quality claim form (/complaints page), we additionally collect:
- Company details: name, VAT ID (optional)
- Contact person details: full name, email, phone (optional)
- Delivery details: HDI WZ number, delivery date, product, batch number, quantity
- Issue description and attached photos or documents
Claim data is processed to handle the claim, defend against legal claims, and fulfil quality and batch-traceability obligations under food law (Art. 6(1)(f) GDPR — legitimate interest; Art. 6(1)(c) GDPR — legal obligations). Please do not include people in photos or attach documents unrelated to the claim.
3. Cookies and browser storage
The public part of the website does not set cookies and does not use analytics, tracking or advertising tools. All files (including fonts and the map) are served from our own server. In the browser's local storage we keep only what is strictly necessary for the features you use, so no consent is required:
fento-locale— your chosen website language; kept until you change the language or clear your browser data.fento-claim-draft— a draft of the claim form (without contact details or files), so entered information is not lost on page reload; deleted after submission, or after 2 hours on your next visit to the site.
The FENTO staff panel (staff only) uses one strictly necessary login session cookie (__Host-fento_panel, valid for up to 7 days).
4. Data Sharing
We do not sell or share your personal data with third parties. Your data may be processed by:
- Vercel Inc. (site hosting and claim attachment storage) — EU infrastructure (Frankfurt)
- Neon Inc. (claims database) — EU region (Frankfurt)
- Resend (confirmation email delivery) — EU region
- FENTO internal sales team and quality department
Vercel Inc., Neon Inc. and Resend are U.S.-based entities — data transfers rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCC), with data operationally stored in EU regions.
5. Data Retention
Contact form submissions are retained for up to 12 months or until the business relationship is concluded, whichever is longer.
Quality claims are retained for 3 years after case closure (commercial claim limitation period and BRC/IFS quality system requirements); attachments are deleted 12 months after closure. After the retention period, personal data is anonymised, and anonymised statistics (defect category, decision) are kept for quality trend analysis. Early-deletion requests may be limited while claims defence is ongoing (Art. 17(3)(e) GDPR).
6. Your Rights (GDPR)
Under EU GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Lodge a complaint with a supervisory authority (UODO, Poland)
To exercise these rights, contact us at office@fento.com.pl.
7. Security
All data is transmitted via HTTPS/TLS encryption. We implement appropriate technical and organizational measures to protect your personal data.
