Privacy Policy

Last updated: May 7, 2026

1. Who we are

This Privacy Policy describes how Anis Trading Services Sp. z o.o. (hereinafter "Anis", "we", "us" or "our") processes personal data of visitors to the website anis.trading and of individuals who contact us through this website.

Our company details:

• Legal name: Anis Trading Services Sp. z o.o.
• Registered office: ul. Żelazna 40 lok. 101, 00-832 Warszawa, Poland
• Tax ID (NIP): 5273092771
• Statistical Number (REGON): 527435974
• Court register (KRS): 0001080504
• Contact email: privacy@anis.trading

We are the Data Controller under Article 4(7) of the General Data Protection Regulation (GDPR).

2. Applicable law

This Privacy Policy is governed by:

• GDPR — Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data
• Polish Data Protection Act — Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych
• PKE — Ustawa z dnia 12 lipca 2024 r. — Prawo komunikacji elektronicznej (in force since 10 November 2024), governing the use of cookies and similar technologies

The supervisory authority for personal data protection in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO), ul. Stawki 2, 00-193 Warszawa.

3. What personal data we collect and why

We process personal data in three specific contexts. We do not collect data we do not need, and we do not sell or rent personal data to third parties.

3.1 Email correspondence

When you contact us by email (info@anis.trading, export@anis.trading, privacy@anis.trading), or use the email links available on our website which open your email client, we process the following data:

• Your name and email address
• Any other information you choose to include in your message (company name, country, sector of interest, content of your enquiry, phone number if you share it)

Purpose: to respond to your commercial enquiry and, where applicable, to enter into and perform a B2B sales contract.

Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest of Anis in pursuing commercial activities).

Retention period: data is retained for 3 years from the last contact, after which it is deleted. If a commercial relationship is established, data is retained for the duration of the relationship plus the legally required period for accounting and tax records (5 years from the end of the tax year, under Polish accounting law).

How data is stored: emails are stored on our business email accounts hosted on OVH (Gravelines, France — within the EU). Our website does not include a server-side contact form and does not store any submitted data in a website database.

3.2 Website analytics

To understand how our website is used, we use Plausible Analytics (provided by Plausible Insights OÜ, Estonia). Plausible:

• Does not use cookies
• Does not collect personal data or personally identifiable information
• Does not track users across websites
• Anonymises and aggregates all data
• Stores data exclusively on EU servers (Germany)

Purpose: statistical analysis of website traffic — purely aggregated and anonymous.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in measuring effectiveness. As Plausible does not use cookies and does not process personal data, no cookie consent is required.

More information: https://plausible.io/privacy

3.3 Phone communications

If you contact us by phone at our business number, the following data is processed:

• Caller phone number
• Date, time and duration of the call
• Voicemail audio (if you leave a message)

Purpose: to handle your enquiry and to manage business communications.

Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest in pursuing commercial activities).

Retention period: call metadata is retained for 6 months. Voicemail recordings are retained for 30 days unless they relate to an active commercial discussion, in which case they may be retained for the duration of the relationship.

How data is processed: our business telephony service is provided by CloudTalk s.r.o., Slovakia (EU). CloudTalk acts as our data processor under Article 28 GDPR. Calls are routed through EU-based infrastructure. We do not record calls.

4. Who has access to your data

Your personal data is accessed only by:

• Authorised employees and contractors of Anis bound by confidentiality obligations
• Our hosting provider OVH SAS, France (data processor under Article 28 GDPR)
• Plausible Insights OÜ, Estonia (analytics processor — anonymised data only)
• CloudTalk s.r.o., Slovakia (telephony processor — call metadata only, no call recording)
• Tax advisors, accountants, and legal counsel — only when strictly necessary
• Public authorities — only when legally required

We do not transfer personal data outside the European Economic Area (EEA). All our data processors are located within the EU.

5. Your rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) — to obtain confirmation that we process your data and to receive a copy
• Right to rectification (Art. 16 GDPR) — to have inaccurate data corrected
• Right to erasure (Art. 17 GDPR) — to have your data deleted in specific circumstances
• Right to restriction (Art. 18 GDPR) — to limit our processing of your data
• Right to data portability (Art. 20 GDPR) — to receive your data in a structured, machine-readable format
• Right to object (Art. 21 GDPR) — to object to processing based on legitimate interest
• Right to lodge a complaint — with the Polish supervisory authority UODO (ul. Stawki 2, 00-193 Warszawa, kancelaria@uodo.gov.pl)

To exercise any of these rights, please contact us at privacy@anis.trading. We will respond within 30 days.

6. Cookies

This website uses only technical cookies that are strictly necessary for its operation. We do not use marketing or profiling cookies. For full details, see our separate Cookie Policy.

7. Security measures

We implement appropriate technical and organisational measures (Article 32 GDPR) to protect your personal data, including: encrypted HTTPS connections, access controls on email accounts, regular software updates, secure backups, and confidentiality obligations for all personnel and contractors with access to data.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be marked with a new "Last updated" date. Substantial changes will be communicated through a notice on the website.

9. Contact

For any question concerning this Privacy Policy or how we process your personal data, please contact us at:

Email: privacy@anis.trading
Postal address: Anis Trading Services Sp. z o.o., ul. Żelazna 40 lok. 101, 00-832 Warszawa, Poland