This Privacy Policy explains how personal data is collected, used and protected on the website https://turfex.eu, operated by:

OR-MET Patryk Kujawa
Rusborek 39, 63-014 Rusiborek
NIP: 7861725168
VAT No.: PL7861725168
Email: support@turfex.eu

The Administrator takes appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration or destruction.

1. Data we collect
Depending on how you use the website, we may collect the following categories of personal data:

. Contact and identification data: name, email address, telephone number, shipping address (when placing an order).

. Data provided via contact forms and order forms.

. Technical data: IP address, browser version, device identifiers, operating system.

. Cookies and tracking data from analytics and advertising systems (for example Google Analytics, Meta Pixel).

Providing personal data is voluntary but may be necessary to use certain functions of the site (e.g., to place an order or receive a reply to an inquiry).

2. Purposes and legal bases for processing
We process personal data for the following purposes and on the listed legal bases:

1. Order fulfillment — to perform the contract and process purchases (legal basis: performance of a contract, Article 6(1)(b) GDPR).

2. Customer communication — to respond to inquiries submitted via contact forms (legal basis: consent or legitimate interest, Article 6(1)(a) or (f) GDPR).

3. Marketing and advertising — to run advertising campaigns including Google Ads, Meta (Facebook, Instagram) and Performance Max campaigns (legal basis: consent and/or legitimate interest, Article 6(1)(a) and (f) GDPR).

4. Analytics and statistics — to analyze website usage with tools such as Google Analytics (legal basis: legitimate interest depending on the method, Article 6(1)(f) GDPR).

5. Legal and accounting obligations — to keep records required by law (e.g., tax or accounting) (legal basis: legal obligation, Article 6(1)(c) GDPR).

3. Recipients and data transfers
Personal data may be shared with:

. Hosting and IT service providers (the website is hosted by CyberFolks S.A.).

. Payment service providers, couriers and other service partners involved in order fulfillment.

. Advertising and analytics providers such as Google and Meta.

Some service providers may process data outside the European Economic Area (EEA). Where transfers outside the EEA occur (for example to U.S.-based services), we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses or other lawful transfer mechanisms) to protect your personal data in accordance with GDPR.

4. Cookies and tracking technologies
The site uses cookies and similar tracking technologies for:

. Correct functioning of the website,

. Remembering user preferences,

. Website analytics and performance measurement,

. Delivering targeted advertising (Google Ads, Meta Ads, Performance Max).

You can control or delete cookies through your browser settings. Disabling certain cookies may reduce the functionality of the website. For more information, see the Cookies Policy (if available) or the cookies section below.

5. Data retention
We retain personal data only as long as necessary for the purposes for which the data was collected, including to:

. Fulfil orders and provide customer support,

. Comply with legal obligations (e.g., tax and accounting rules require retaining certain records),

. Maintain marketing records until consent is withdrawn or an objection is raised.

Typical retention periods: contact and order data — until the contract is closed and/or the statutory retention period required by law; marketing data — until consent is withdrawn.

6. Your rights
Under GDPR you have the right to:

. Request access to your personal data,

. Request rectification of inaccurate or incomplete data,

. Request erasure of your personal data (“right to be forgotten”) where legal requirements are met,

. Request restriction of processing,

. Request portability of your personal data,

. Object to processing where processing is based on legitimate interest,

. Withdraw consent at any time when processing is based on consent.

To exercise any of these rights, please contact us at support@turfex.eu. You also have the right to lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office — Urząd Ochrony Danych Osobowych).

7. Security
We implement reasonable technical and organizational measures designed to protect personal data, including SSL/TLS encryption for data transmitted between your browser and our servers, and access controls on systems and databases.

8. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be published on https://turfex.eu/privacy-policy and the “Last updated” date at the top will be revised accordingly.

9. Contact
If you have questions about this Privacy Policy or how we handle personal data, please contact:

OR-MET Patryk Kujawa
Rusborek 39, 63-014 Rusiborek
Email: support@turfex.eu