
GDPR
Privacy policy.
Information on the processing of personal data submitted through the forms on amhp.pl, by e-mail or by phone.
We respect the privacy of everyone who contacts us through this website, by e-mail or by phone using the addresses and numbers shown on the website. This notice explains what data we collect, why, and what rights you have (Article 13 GDPR).
Last updated: 29 September 2026
1. Data controller
The controller of your personal data is "AM&HP" Spółka z ograniczoną odpowiedzialnością, ul. Lutostańskiego 6/13, 16-400 Suwałki, Poland (KRS 0000324896, NIP 8442303753, REGON 200258459).
For data protection matters, write to biuro@amhp.pl or call +48 725 407 400.
2. Data we collect
Through the contact, product and service forms we collect the data you provide: full name, phone number, e-mail address, company name, location (country, region, city, postal code, address), product or service details, quantity and your message. We may receive the same categories of data when you write to or call the addresses and numbers shown on the website.
Providing data is voluntary and is not a statutory or contractual requirement. Without your name, phone number and e-mail address (and, for service enquiries, a description of your needs) we cannot respond; all other fields are optional.
Technical data: each time a page is displayed, our hosting provider’s servers automatically process data sent by your browser — such as your IP address, the date and time of the request, the page address and the browser type — to deliver the website, keep it secure and diagnose errors. Server logs are kept for the period set by the hosting service (typically from a few hours to a few days).
3. Purposes and legal basis
- responding to your enquiry and preparing an offer when you act on your own behalf (e.g. as a farmer or sole trader) — Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract);
- responding to your enquiry, preparing an offer and business correspondence when you act on behalf of a company or institution (as an employee or representative) — Article 6(1)(f) GDPR; our legitimate interest is handling business enquiries and running our business;
- replying to other messages sent to us by e-mail or phone — Article 6(1)(f) GDPR (handling correspondence);
- the establishment, exercise or defence of legal claims — Article 6(1)(f) GDPR;
- keeping the website running and secure and protecting the forms against abuse and spam — Article 6(1)(f) GDPR.
We do not use form data for newsletters or for automated decision-making, including profiling.
4. Recipients and transfers outside the EEA
Your data is accessed by authorised AM&HP staff, including in our internal enquiry-handling system. We entrust data to service providers under data processing agreements: our website hosting provider (Vercel Inc.), our database provider (Supabase Inc.), our e-mail service provider and providers supporting the maintenance of our IT systems. We disclose data to public authorities only where required by law.
The database and the website servers run in a European Union region (Ireland). Vercel Inc. and Supabase Inc. are based in the USA, and part of the infrastructure of our internal systems and of these providers’ technical support is located in the USA, so data may be transferred to the USA. The transfer is based on Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 (EU-US Data Privacy Framework) for providers participating in that framework, or on the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914. You can obtain a copy of these safeguards by writing to biuro@amhp.pl.
5. Retention
Data from an enquiry that does not lead to cooperation is deleted 12 months after we receive it. If we start working together, the data becomes part of the contract documentation and is kept for the duration of the contract and then until the limitation periods for claims and statutory tax and accounting obligations expire.
6. Your rights
You have the right to access, rectify and erase your data, to restrict processing and to data portability for data processed under Article 6(1)(b) GDPR. To exercise these rights, write to the address given in section 1.
You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
7. Right to object
You may object at any time, on grounds relating to your particular situation, to the processing of your data based on Article 6(1)(f) GDPR (legitimate interest). We will then stop processing your data for that purpose unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for the establishment, exercise or defence of legal claims (Article 21(1) GDPR). Send your objection to biuro@amhp.pl.
8. Cookies and browser storage
The public part of the website does not store or read any cookies or other information on your device (e.g. in localStorage or sessionStorage). We do not use analytics or advertising tools, or embedded content from external services (maps, videos, social media plugins). Fonts and images are served from our own server, so browsing the website does not connect you to third-party servers.
We use cookies only in restricted areas intended for the AM&HP team:
- the editorial panel — login session cookies (names starting with “sb-”) that keep content editors signed in; deleted when you sign out or when the session expires;
- the internal AM&HP Market Pulse pilot — the “amhp_market_pilot” cookie confirming that the access code was entered, valid for 8 hours and limited to that part of the website; data entered there in the demonstration form is stored only in your browser (localStorage) and is not sent to AM&HP.
These cookies are strictly necessary to provide a service you request, so under Article 399(3) of the Polish Electronic Communications Law they do not require consent. You can delete or block them at any time in your browser settings; blocking them will prevent you from using these areas. If we introduce analytics or marketing tools, we will update this notice and ask for your consent before they are activated.