Privacy Policy

This Privacy Policy describes how Lyshen & Yun sp. z o.o. ("we", "our", "the company") collects, uses, and protects personal data when you visit lyshengyun.com or contact us. We are established in Poland and subject to the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Polish Act on Personal Data Protection.

1. Data controller

The data controller is:
Lyshen & Yun sp. z o.o.
R. Kaczorowskiego 14/lok U7
15-375 Białystok, Poland
Email: [email protected]
Phone: +48 735 000 323

2. What data we collect and why

Contact form submissions

When you send us a message through the contact form on this website, we collect: your name, email address, phone number (if provided), and the content of your message. Legal basis: Article 6(1)(b) GDPR — processing necessary to respond to your request and take pre-contractual steps.

Service enquiries

If you make an enquiry about our customs brokerage or consulting services, we process the data you provide to assess your situation and prepare a response. Legal basis: Article 6(1)(b) GDPR.

Analytics

We may use privacy-respecting analytics tools to understand how visitors use this site (pages visited, time spent, referral source). This data is aggregated and not linked to individuals. Legal basis: Article 6(1)(f) GDPR — legitimate interest in understanding site usage to improve it. You may opt out of analytics cookies via our cookie consent banner.

Technical data

Our hosting provider processes IP addresses and server access logs as a necessary part of operating any website. We do not use this data to identify or profile visitors. Retention: 30 days maximum, as required for security and error diagnosis.

3. How long we keep your data

Contact form data is retained for up to 3 years after last contact, unless we enter a service relationship with you, in which case data is kept for the duration of the contract plus 5 years for statutory accounting purposes under Polish law (Ustawa o rachunkowości). Analytics data is retained for 12 months on a rolling basis.

4. Who receives your data

We do not sell personal data. We may share it with:

• Our email and hosting service providers, operating under data processing agreements
• Accountants or legal advisers, where necessary and under confidentiality obligations
• Public authorities, where required by law

All processors are established in the EU or operate under Standard Contractual Clauses where data is transferred outside the EEA.

5. Your rights under GDPR

You have the right to:

• Access — request a copy of the data we hold about you (Article 15)
• Rectification — ask us to correct inaccurate data (Article 16)
• Erasure — request deletion where there is no lawful basis for continued processing (Article 17)
• Restriction — ask us to pause processing in certain circumstances (Article 18)
• Data portability — receive your data in a structured, machine-readable format (Article 20)
• Object — object to processing based on legitimate interests (Article 21)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Right to complain

If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:
Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warsaw
https://uodo.gov.pl

7. Cookies

This site uses cookies. See our Cookie Policy for details on which cookies are set and how to control them.

8. Changes to this policy

We may update this policy when our data processing practices change or when required by law. The date at the top of this page reflects the most recent revision. Continued use of the site after an update constitutes acceptance of the revised policy.

9. Contact

Questions about this policy or our data practices: [email protected] or by post to the address in section 1.