Privacy policy

Last updated: June 2026

1. Data controller

The controller of personal data is EURO-SCRAP Sp. z o.o., ul. Bolesława Limanowskiego 1/6, 60-743 Poznań, KRS: 0001098867, REGON: 528334844, NIP: 7792569729, BDO registration number: 000630445. General contact: [email protected].

2. Scope of processed data

We process data you voluntarily provide in forms on the website: (a) contact form (/kontakt) – name, phone number, e-mail address (optional), message content; (b) quote request form (/zapytania-ofertowe) – name or company name, phone, e-mail (optional), type of material, estimated quantity, location, transport information, material description and optionally attached photos (JPG, PNG, WEBP, GIF – solely for valuation). When submitting forms, your IP address and the date and time of submission are also recorded for security purposes.

3. Purposes and legal bases (GDPR)

• Responding to enquiries sent via the contact or quote form – Art. 6(1)(b) GDPR (steps prior to entering into a contract)
• Performance of a scrap purchasing contract – Art. 6(1)(b) GDPR
• Consent given – GDPR checkbox in forms and acceptance in the cookie banner on first visit – Art. 6(1)(a) GDPR
• Legal obligations, including BDO documentation – Art. 6(1)(c) GDPR
• Legitimate interests of the controller (e.g. pursuing claims, form security, spam protection) – Art. 6(1)(f) GDPR

4. Retention period

We store form data for the period necessary to respond and possibly perform a contract, no longer than 3 years from the last contact, unless law (e.g. tax law, BDO) requires a longer period. Security logs and consent choices stored locally in the browser are not stored on the controller's server.

5. Data recipients and processors

Data may be shared with service providers acting on behalf of the controller under data processing agreements, in particular: website hosting, e-mail (SMTP), IT support. Form messages are sent to [email protected] via a secure mail server. Forms are protected by Cloudflare Turnstile (anti-spam verification – operator Cloudflare Inc.). The directions map uses OpenStreetMap (OpenStreetMap Foundation) – when loading map tiles your IP address may be transmitted to the map operator. We do not transfer data to third countries beyond the standard operation of the listed technical services.

6. Rights of the data subject

You have the right to access, rectify, erase, restrict processing, data portability, withdraw consent at any time (without affecting the lawfulness of processing before withdrawal), object to processing based on Art. 6(1)(f) GDPR and lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

7. Cookies, consent banner and map

The site uses only cookies essential for operation: PHP session (PHPSESSID – forms and CSRF tokens), language cookie (euroscrap_lang). On first visit a banner informs about cookies and GDPR – your choice is stored in browser localStorage (key euroscrap_cookie_consent), not in an HTTP cookie. We do not use marketing or analytics cookies. The directions map (OpenStreetMap, Leaflet library) on Contact and About pages loads automatically and may use external tile servers (tile.openstreetmap.org). Cloudflare Turnstile protects forms against spam and bots.

8. Contact regarding GDPR and breaches

For matters related to personal data protection, exercising GDPR rights and reporting data protection breaches, contact: [email protected].

9. Form submission

The contact form and quote request form send data over encrypted HTTPS. After submission the message is delivered to the controller's mailbox ([email protected]). Each form requires GDPR consent and successful anti-spam verification. You do not need to create a user account – you provide data once to handle your enquiry.