Privacy & cookies
Updated: 28 October 2026
1. Controller and contact
Fendeal is operated by Dawid Sularz, ul. Matematyków Krakowskich 14, 30-698 Kraków, Poland; NIP (tax ID): 6793163242; REGON: 369167990. This notice covers our website, RFQs, manufacturer applications and correspondence. Privacy contact: kontakt@inlead.pl; telephone +48 660 279 059.
2. Information collected
We receive company and contact details, business email, optional telephone and VAT details, contact language, project specifications, quantities, dates, delivery addresses, logistics and uploaded files. Manufacturer applications include products, markets, production times and local service. Contact messages contain sender details and the message. Infrastructure may process IP addresses, browser information and request times for security. We record the time and wording version of required confirmations.
3. Purposes and legal bases
Enquiry handling and preparation of cooperation are pre-contractual steps requested by the prospective contracting party under Article 6(1)(b) GDPR. For company representatives, correspondence and supplier introductions rely on our legitimate interest in handling B2B enquiries and business relationships, Article 6(1)(f). Security, misuse prevention and claims also rely on Article 6(1)(f). Legal and accounting duties, where applicable, rely on Article 6(1)(c). Optional analytics and marketing storage require consent under Article 6(1)(a) and applicable electronic communications law. An enquiry does not subscribe you to advertising.
4. Recipients and manufacturers
We connect buyers with manufacturers using the project information provided. We agree the named recipients with you before sharing the full project and contact details. Those manufacturers use the information to prepare quotes and establish their own business relationship and must provide their own privacy information where required. Files are not published on an open marketplace.
Authorised providers may process data for operation of the service: OpenAI / ChatGPT Sites, Cloudflare, email hosting and Resend when notifications are enabled, and accounting or professional advisers as needed. Access is limited to the relevant purpose. We do not send form contents to advertising tools.
5. Attachments and safeguards
Requests are stored in the service database. Files are held in private object storage with administrator-authorised downloads. Administrators can generate PDF summaries. If notifications are enabled, the summary goes to the configured internal mailbox; original buyer files remain access-controlled. We apply access controls, file type and size checks and request limits. Submit only information necessary for the project and files you are authorised to share, without unrelated sensitive data.
6. Cookies and browser storage
Necessary storage supports operation, security, sign-in, language and cookie choices. The ws_language cookie, when selected, and fendeal.cookie-consent preferences last up to 180 days. RFQ drafts in sessionStorage last for the browser session; uploaded files must be selected again after reloading. Authentication storage follows the sign-in provider’s session settings.
Optional analytics and marketing are off by default. Rejecting them does not block forms. No external analytics or advertising tags are currently enabled on this site. Future providers require an update to this notice and consent-based loading. You can reject, accept or select categories in the banner and change or withdraw them at any time through Cookie settings in the footer. Withdrawal does not affect earlier lawful processing.
7. Processing outside the EEA
International infrastructure and email services may involve processing outside the European Economic Area, including the USA. Applicable GDPR safeguards include an applicable adequacy decision or standard contractual clauses with required supplementary measures. Contact us to request information about the relevant safeguards or a copy.
8. Retention
We retain enquiries, applications and correspondence while handling the matter and any resulting cooperation. After closure, only information required for legal duties or the establishment, exercise or defence of claims is retained for the relevant statutory or limitation period. Files no longer needed for these purposes are removed. Consent-only data is processed until withdrawal or completion of the purpose. Cookie preferences expire after 180 days; anti-abuse counters after their short security window.
9. Your rights
Under the applicable GDPR conditions, you can request access, rectification, erasure, restriction and portability, object to legitimate-interest processing and withdraw consent. Send requests to kontakt@inlead.pl. We may request proportionate identity verification. You may complain to the Polish data protection authority (UODO) or another competent authority, including where you live or work in the EEA.
10. Voluntary data, decisions and changes
Data is provided voluntarily. Required fields are necessary for the selected form; without them it cannot be submitted. We do not make solely automated decisions with legal or similarly significant effects. Manufacturer matching is manual. This notice is updated when processing or services change; renewed cookie consent is requested where needed.