Privacy and cookies
Information about your data and the choices available on this website.
Who is responsible for your data?
The controller of personal data processed through this website and in enquiries to our team is FLUFFY FRIENDS LAB S.A., Jaśkowa Dolina 132/20, 80-286 Gdańsk, Poland. KRS: 0001067173, NIP: 9571165526.
For questions about your personal data or to exercise your rights, write to contact@fluffyfriendslab.com or to our postal address above.
Enquiries and meetings
When you contact us, we use your name, email address, any phone number and company details you provide, and the content of your enquiry to respond and discuss your project. Product enquiries can also include your chosen format, animal species and estimated order quantity.
For enquiries made on your own behalf before entering into a contract, the legal basis is taking steps at your request under Article 6(1)(b) GDPR. For general enquiries and contact with representatives of companies, it is our legitimate interest in handling business correspondence under Article 6(1)(f) GDPR.
Providing details is voluntary. We need the fields marked as required to handle an enquiry through the form; you can also contact us directly by email. Please do not include sensitive personal information in your message.
The contact form does not sign you up for a newsletter or marketing messages. We do not use it to make automated decisions with legal or similarly significant effects on you.
Website operation and security
Your browser sends technical information, including your IP address, requested address and browser information, to the server to display the website. Protecting the website and preventing misuse is our legitimate interest under Article 6(1)(f) GDPR.
Our website form does not keep a separate database of enquiries. When delivery is enabled, submitted enquiries are sent to our company mailbox. The application does not write message contents, email addresses or mail credentials into its logs.
Authorised team members and service providers supporting website hosting, email and meeting scheduling may process data where needed for these purposes. Providers acting on our behalf must process it under the relevant data-processing arrangements.
How long we keep your data
We keep enquiry correspondence for the time needed to handle your enquiry and, as a rule, for no longer than 24 months after our last contact. We may retain relevant information longer where necessary for an ongoing business relationship, to comply with a legal obligation or to establish, exercise or defend legal claims.
We keep data relating to booked meetings for the time needed to organise and follow up on the meeting and, as a rule, for no longer than 24 months after our last contact. We may retain relevant information longer where necessary for an ongoing business relationship, to comply with a legal obligation or to establish, exercise or defend legal claims.
Technical access and security logs that we manage on the website server are configured with a 14-day retention period. This period does not apply to enquiry correspondence or to backups. Our hosting provider, HitMe.pl, creates a server backup every day and retains seven daily backups, two weekly backups and one monthly backup. The oldest backup is usually about one month old.
International transfers
According to our hosting provider, HitMe.pl, the website server and its backups are located in Poland. Data held on that server and in those backups are neither processed outside the European Economic Area nor accessed from outside it. We use Google Workspace for company email. Google may process email and related technical data outside the European Economic Area. Our data-processing agreement provides safeguards for applicable transfers, including standard contractual clauses. You can contact us at the privacy address above to ask about these safeguards and how to obtain a copy.
Cookies and optional external content
With your permission, Google Analytics measures visits and enquiries. We also keep the campaign source with your enquiry. We do not send your form answers to Google.
With your permission, Google Ads measures campaign results. We do not send your form answers to Google.
These optional services are provided by Google Ireland Limited. With your consent, Google receives technical browser data, the page address, campaign identifiers and completed actions, and may use cookies. We do not send names, email addresses, phone numbers or message contents.
Consent is the basis for this measurement. You can refuse or withdraw it in the settings below. Withdrawal stops future measurement but does not erase data already received by Google. Google's privacy notice explains its processing, retention and international transfer safeguards.
With your permission, ChatGPT Ads measures completed enquiries and booked meetings. We do not send your form answers or contact details to OpenAI.
OpenAI Ireland Limited receives only the action, its time and random identifier, the page address and any ad click reference. We do not load OpenAI's browser pixel or send form contents, contact details or your IP address. This measurement requires your consent and stops when you withdraw it. OpenAI's privacy notice describes its use of conversion data and international transfers.
Your measurement choice is stored in your browser for up to 180 days. Campaign information is kept in the current browser tab and is valid for up to 24 hours. It is removed when you withdraw permission. Information already included in a sent enquiry is handled with that correspondence. You can browse and contact us without allowing measurement.
The Calendly calendar is shown by default on the contact page. Its optional cookies are managed inside the calendar. The OpenStreetMap map stays disconnected until you choose to show it. You can hide either service and still browse the website or contact us.
We keep these display preferences only in the memory of the current page session, without a cookie or local storage. Reloading the website restores the default settings: calendar shown, map hidden. These preferences do not accept optional cookies. Cookies already set by an external service are controlled by that service and your browser.
Calendly calendar
When the calendar loads on the contact page, your browser connects to Calendly, LLC in the United States, which receives your IP address and browser information and may use cookies. If you book, Calendly also processes the booking details you enter so that our team can arrange the meeting.
Calendly’s cookie banner and Cookie Settings remain available inside the calendar. You can refuse optional cookies there. Turning off the calendar on our website removes the embedded calendar; it does not cancel a booking or delete cookies previously stored by Calendly.
Calendly describes its international transfers and safeguards, including the EU–U.S. Data Privacy Framework and standard contractual clauses, in its privacy notice. You can also arrange a meeting by emailing our team.
OpenStreetMap map
Enabling the map connects to the OpenStreetMap Foundation’s map servers, sharing your IP address, browser information, requested map tiles and this website’s address. Map tiles can be delivered through a global network of servers. We do not request your device’s precise location.
Read the OpenStreetMap Foundation privacy policy for its handling of technical request data. Opening directions in Google Maps takes you to a separate service with its own privacy information.
Your rights
You can ask to access or correct your personal data and, where the GDPR conditions apply, request erasure, restriction or portability. You can object to processing based on legitimate interests because of your particular situation.
You can hide the calendar or map at any time using the controls below or beside each service. This stops further loading of that service on this website; it does not erase data already received by the provider. You can withdraw consent to Calendly’s optional cookies using Cookie Settings inside the calendar. Withdrawal does not affect the lawfulness of earlier processing.
You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), or the competent supervisory authority where you live or work. Details are available at uodo.gov.pl.
Privacy and cookie choices
The calendar is shown by default; the map is shown only when you request it. You can hide either service here. Calendly’s optional cookies are managed inside the calendar. To remove cookies already saved by a provider, use its cookie settings or your browser’s site-data controls.
- Calendly calendarEnabled for this visit
- OpenStreetMapNot enabled