1. Data Controller
2 Heroes Sp. z o.o. (“we,” “us,” “our”) is the controller of your personal data.
- Legal name: 2 Heroes Sp. z o.o.
- Registered address: 98 Czerinakowska street, 00-716 Warsaw, Poland
- Email: info@2-heroes.com
- Phone: +48 694441401
2. Data We Collect
We collect personal data only when you voluntarily provide it through our website:
- Contact form data: Name, company name, email address, phone number, subject, message, and optional section of interest (Salt, Granite & Marbles, Phosphate & Filtration, Wood & Pallets, Herbs, General Inquiry).
- Communication data: Correspondence you send us via email, phone, or contact form.
- Technical data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on pages (via analytics).
- Cookie data: See our Cookie Policy section below.
3. Legal Basis for Processing (GDPR)
As a company operating in Poland (EU), we process your data under the following legal bases:
- Legitimate interest (Art. 6(1)(f) GDPR): Responding to inquiries, improving our website, ensuring security, and direct marketing to existing business contacts.
- Contractual necessity (Art. 6(1)(b) GDPR): Processing inquiries that may lead to a commercial relationship.
- Consent (Art. 6(1)(a) GDPR): Where you explicitly opt in to marketing communications or non-essential cookies.
- Legal obligation (Art. 6(1)(c) GDPR): Compliance with applicable laws and regulations.
4. Purpose of Processing
We use your data for:
- Responding to your inquiries about our export, transport, and logistics services
- Providing information about our product sections (Salt, Granite & Marbles, Phosphate & Filtration, Wood & Pallets, Herbs)
- Managing potential business relationships and partnerships
- Improving our website functionality and user experience
- Ensuring website security and preventing fraud
- Compliance with legal and regulatory obligations
- Sending marketing communications (only with your consent or under legitimate interest for existing business contacts)
5. Data Sharing and Disclosure
We do not sell your personal data. We may share it only in the following circumstances:
- Service providers: Third parties who process data on our behalf (hosting, analytics, email services) under data processing agreements.
- Business partners: Relevant internal teams or partner entities within 2 Heroes group (Poland and Egypt) to handle your inquiry.
- Legal requirements: When required by law, court order, or governmental authority.
- Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate safeguards.
6. International Data Transfers
Our operations span Poland (EU) and Egypt. When transferring personal data outside the European Economic Area, we ensure adequate protection through:
- EU Standard Contractual Clauses
- Adequacy decisions where applicable
- Binding corporate rules or equivalent safeguards
7. Data Retention
We retain personal data only as long as necessary:
- Contact inquiries: 2 years from last interaction
- Contractual communications: Duration of contract plus 5 years (legal requirement)
- Marketing data: Until you unsubscribe or object
- Analytics/cookie data: Per cookie policy (typically 13 months max)
- Security logs: 12 months
8. Your Rights (GDPR)
You have the following rights regarding your personal data:
- Access: Request a copy of your data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion (“right to be forgotten”)
- Restriction: Limit processing of your data
- Portability: Receive your data in a structured, commonly used format
- Objection: Object to processing based on legitimate interest or direct marketing
- Withdraw consent: Where processing is based on consent
- Complaint: Lodge a complaint with the Polish supervisory authority (UODO – Urząd Ochrony Danych Osobowych)
To exercise these rights, contact us at info@2-heroes.com or write to our registered address.
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies:
- Essential cookies: Required for website functionality (session, security, cookie consent).
- Analytics cookies: Help us understand visitor behavior (Google Analytics or similar). Only set with your consent.
- Preference cookies: Remember your settings (language, region).
You can manage cookie preferences via our cookie banner or your browser settings. Disabling essential cookies may impair website functionality.
10. Security Measures
We implement appropriate technical and organizational measures to protect your data:
- HTTPS/TLS encryption for all data in transit
- Content Security Policy (CSP) and secure HTTP headers
- Rate limiting and bot protection
- Input validation and sanitization
- Regular dependency scanning and updates
- Access controls and principle of least privilege
- No sensitive personal data stored client-side
While we strive to protect your data, no internet transmission is 100% secure.
11. Children’s Privacy
Our website and services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, contact us immediately.
12. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. The “Last updated” date at the top indicates the latest revision. Material changes will be communicated via website notice or email.
13. Contact Us
For questions about this policy or your data:
- Email: info@2-heroes.com
- Post: 2 Heroes Sp. z o.o., 98 Czerinakowska street, 00-716 Warsaw, Poland
- Phone: +48 694441401
For security-related concerns: security@2-heroes.com