Privacy Policy of the kanno.pl website

Last updated: 14 August 2026

1. Data controller

The controller of personal data processed in connection with the use of the kanno.pl website is:

KANNO NOODLE Spółka z ograniczoną odpowiedzialnością, al. Niepodległości 112, 02-577 Warsaw
KRS: 0001008318 · NIP: 5273032875 · REGON: 523934947
E-mail: kanno@kanno.pl

(hereinafter: the "Controller" or the "Company")

In all matters relating to the processing of personal data and the exercise of rights under the GDPR, the Controller can be contacted at: kanno@kanno.pl.

2. Legal basis and general principles

The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Polish Act of 10 May 2018 on the Protection of Personal Data, and the Telecommunications Law with regard to cookies.

The kanno.pl website is informational in nature (it presents information about the company and its offering) and serves to collect inquiries and contact details from parties interested in cooperation (so-called leads).

3. What data we process and for what purpose

3.1 Contact form / inquiries (leads)

If a user completes the contact form, sends a request for a quote or makes contact by e-mail, we process the data provided, in particular:

• first name and surname,
• e-mail address,
• telephone number (if provided),
• company name and position (if provided),
• the content of the inquiry and other data voluntarily provided in the message.

Purpose of processing: responding to the inquiry, conducting commercial correspondence, preparing an offer, establishing and carrying out any business cooperation.

Legal basis:

• Art. 6(1)(b) GDPR — steps taken at the request of the data subject prior to entering into a contract and in order to perform it,
• Art. 6(1)(f) GDPR — the legitimate interest of the Controller, consisting in conducting correspondence and marketing its own services and products (to the extent that the inquiry does not lead directly to the conclusion of a contract).

3.2 Data processed automatically (server logs, analytics)

When the website is used, the following data may be collected automatically: IP address, browser type and version, operating system, date and time of the visit, subpages visited, traffic source.

Purpose of processing: ensuring the correct and secure operation of the website, visit statistics, traffic analysis and content optimisation.

Legal basis: Art. 6(1)(f) GDPR — the legitimate interest of the Controller (website administration, IT security, statistical analysis).

3.3 Newsletter / marketing communication (if applicable)

If the website enables subscription to a newsletter or the giving of consent to marketing communication, the data (e-mail address, possibly first name) are processed in order to send commercial and marketing information.

Legal basis: Art. 6(1)(a) GDPR — consent of the data subject (consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal).

4. Data retention period

Personal data are stored for the period:

• necessary to respond to the inquiry and to conduct any further cooperation — until the correspondence or cooperation ends, and thereafter for the limitation period of any claims (as a rule 3 or 6 years, in accordance with the Civil Code),
• data processed on the basis of consent (e.g. newsletter) — until consent is withdrawn,
• data in server logs and analytics tools — in line with the periods adopted by the providers of those tools (usually no longer than 26 months),
• data arising from tax and accounting obligations (e.g. in connection with a concluded contract) — for the period required by law (as a rule 5 years from the end of the tax year).

5. Data recipients

Personal data may be transferred to the following categories of recipients:

• entities providing hosting, IT and website maintenance services to the Controller,
• providers of analytics and marketing tools (e.g. Google Analytics, mailing systems) — to the extent that they are used on the website,
• entities providing accounting, legal and advisory services to the Controller,
• public authorities, where the obligation to provide data arises from legal provisions.

The Controller does not sell personal data to third parties.

Transfers outside the EEA

Where tools are used whose providers process data outside the European Economic Area (e.g. Google), the transfer takes place on the basis of mechanisms ensuring an adequate level of data protection provided for by the GDPR (e.g. standard contractual clauses).

6. Rights of data subjects

Every person whose data are processed by the Controller has the right to:

• access their personal data,
• rectification (correction) of data,
• erasure of data (the "right to be forgotten"),
• restriction of processing,
• data portability,
• object to processing based on Art. 6(1)(f) GDPR,
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal,
• lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

To exercise the above rights, please contact the Controller at: kanno@kanno.pl.

Providing data is voluntary; however, in some cases (e.g. sending an inquiry through the contact form) it is necessary in order for a response to be given.

7. Cookies

7.1 What cookies are

Cookies are small text files saved on the user's device while using the website.

7.2 Types of cookies used

The kanno.pl website may use the following types of cookies:

• essential — necessary for the correct functioning of the website,
• analytical / statistical — allowing analysis of how the website is used (e.g. Google Analytics),
• functional — remembering the user's choices (e.g. website language),
• marketing — used to display content matched to the user's interests (if applicable).

7.3 Managing cookies

The user may at any time change the cookie settings in their web browser, including blocking or restricting their storage. Please note, however, that disabling certain cookies may affect the functionality of the website.

8. Data security

The Controller applies appropriate technical and organisational measures to protect personal data against disclosure to unauthorised persons, loss, destruction or unauthorised modification, in accordance with applicable legal provisions and current technical knowledge.

9. Automated decision-making and profiling

The Controller does not take automated decisions in relation to users, including decisions based on profiling, which produce legal effects or similarly significantly affect the user.

10. Changes to the Privacy Policy

The Controller reserves the right to introduce changes to this Privacy Policy, in particular in connection with changes to applicable law, the development of website functionality or changes to the tools used. The current version of the Privacy Policy is always available on the kanno.pl website.

11. Contact

For questions concerning this Privacy Policy or the processing of personal data, please contact:

KANNO NOODLE Sp. z o.o.
E-mail: kanno@kanno.pl

This is an English translation provided for convenience. In the event of any discrepancy, the Polish original prevails.

← Back to the website