Privacy Policy
Last updated: August 2026
1. Data Controller
FENTO Sp. z o.o., ul. Kędzierskiego 3a/3, 01-493 Warszawa, Poland.
KRS: 0000362170 | NIP: 5213576063
Contact: office@fento.com.pl
2. Data We Collect
When you use our contact form, we collect:
- Full name
- Email address
- Company name (optional)
- Message content
We process this data solely to respond to your business inquiry (Art. 6(1)(b) GDPR — pre-contractual measures).
When you use our quality claim form (/complaints page), we additionally collect:
- Company details: name, VAT ID (optional)
- Contact person details: full name, email, phone (optional)
- Delivery details: order/delivery note/invoice number, delivery date, product, batch number, quantity
- Issue description and voluntarily attached product photos
Claim data is processed to handle the claim, defend against legal claims, and fulfil quality and batch-traceability obligations under food law (Art. 6(1)(f) GDPR — legitimate interest; Art. 6(1)(c) GDPR — legal obligations). Please do not include people or unrelated documents in photos.
3. Cookies
This website uses only essential cookies required for the site to function properly (e.g., cookie consent preference). We do not use tracking, analytics, or advertising cookies.
4. Data Sharing
We do not sell or share your personal data with third parties. Your data may be processed by:
- Vercel Inc. (site hosting and claim photo storage) — EU infrastructure (Frankfurt)
- Neon Inc. (claims database) — EU region (Frankfurt)
- Resend (confirmation email delivery) — EU region
- FENTO internal sales team and quality department
Vercel Inc., Neon Inc. and Resend are U.S.-based entities — data transfers rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCC), with data operationally stored in EU regions.
5. Data Retention
Contact form submissions are retained for up to 12 months or until the business relationship is concluded, whichever is longer.
Quality claims are retained for 3 years after case closure (commercial claim limitation period and BRC/IFS quality system requirements); photos are deleted 12 months after closure. After the retention period, personal data is anonymised, and anonymised statistics (defect category, decision) are kept for quality trend analysis. Early-deletion requests may be limited while claims defence is ongoing (Art. 17(3)(e) GDPR).
6. Your Rights (GDPR)
Under EU GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Lodge a complaint with a supervisory authority (UODO, Poland)
To exercise these rights, contact us at office@fento.com.pl.
7. Security
All data is transmitted via HTTPS/TLS encryption. We implement appropriate technical and organizational measures to protect your personal data.