Privacy Policy

1. Introduction and Data Controller

Talmora operates the website talmora.info and is the data controller for personal information collected through this site. Talmora is registered and operates from ul. Wspólna 38, 00-684 Warsaw, Poland. Enquiries regarding this policy may be directed to [email protected].

This privacy policy describes the categories of personal data Talmora collects, the purposes for which it is used, the legal basis for processing, and the rights available to individuals whose data is held. Processing is conducted in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation) and applicable Polish data protection legislation.

2. Categories of Personal Data Collected

Talmora collects personal data only where it is necessary to fulfil a legitimate purpose. The categories collected through normal site operation include:

• Contact form data: name, email address, and the content of any message submitted through the contact form on contact.php. This data is used solely to respond to the enquiry.
• Technical data: IP address, browser type, operating system, referring URL, and pages visited. This data is collected automatically by server logs and analytics tools. It is used in aggregate, anonymised form to understand site performance.
• Cookie data: session identifiers and preference markers stored in accordance with the Talmora Cookie Policy. See the Cookie Policy for full detail.

Talmora does not collect special category data (as defined in GDPR Article 9), financial data, or data from individuals under the age of 18.

3. Legal Basis for Processing

Processing of personal data at Talmora rests on one or more of the following legal bases as defined in GDPR Article 6:

• Consent (Article 6(1)(a)): where the individual has provided clear, freely given consent to a specific processing activity — for example, acceptance of non-essential cookies.
• Contract (Article 6(1)(b)): where processing is necessary to take steps at the request of the data subject before entering into or fulfilling a contract.
• Legitimate interests (Article 6(1)(f)): for technical analytics processed in aggregate, anonymised form to maintain and improve the security and functionality of talmora.info.

4. Purposes of Processing

Personal data collected by Talmora is used for the following purposes only:

• Responding to enquiries submitted through the contact form
• Processing wholesale and trade partnership requests
• Fulfilling batch documentation requests from registered trade partners
• Monitoring site performance and security through anonymised technical data
• Complying with applicable legal obligations

Talmora does not engage in direct-marketing communications unless the individual has provided explicit consent. Personal data is never sold, rented, or traded to third parties for commercial purposes.

5. Data Retention

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. Specific retention periods:

• Contact form enquiries: retained for 24 months from the date of last correspondence, then permanently deleted.
• Trade partner records: retained for the duration of the active partnership plus 36 months.
• Technical / server log data: retained in raw form for 90 days, then deleted. Anonymised aggregate reports may be retained indefinitely.
• Cookie consent records: retained for 13 months from the date of consent, in line with standard GDPR guidance.

6. Rights of Data Subjects

Individuals whose personal data is held by Talmora have the following rights under GDPR:

• Right of access (Article 15): to request confirmation of whether personal data is held and to receive a copy.
• Right to rectification (Article 16): to request correction of inaccurate personal data.
• Right to erasure (Article 17): to request deletion of personal data where there is no compelling reason for its continued processing.
• Right to restriction (Article 18): to request that processing be restricted in certain circumstances.
• Right to portability (Article 20): to receive personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object (Article 21): to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, submit a written request to [email protected]. Requests will be acknowledged within five business days and fulfilled within 30 calendar days, or extended to 90 days for complex requests with written notification of the extension.

Individuals also have the right to lodge a complaint with the Polish supervisory authority (Urząd Ochrony Danych Osobowych, UODO) at uodo.gov.pl.

7. Product Classification Note

Talmora products are nutritional food-supplements registered with the applicable local regulatory authority under food-supplement classification. Products meet compositional and labelling requirements for nutritional supplement categories. This website does not collect or process personal data related to individual health conditions, nutritional assessments, or supplement usage histories.

8. Changes to This Policy

Talmora may update this privacy policy from time to time to reflect changes in processing activities or applicable legal requirements. The date of the most recent revision appears at the top of this page. Continued use of talmora.info following any update constitutes acceptance of the revised policy.