Back to article

Privacy Policy and Site Information

This page provides the information required by Articles 13 and 14 of Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and serves as the imprint of the operator of this website.

1. Operator and data controller

The operator of this website and data controller within the meaning of Article 4(7) GDPR is:

A data protection officer has not been appointed because the activity does not meet the conditions of Article 37(1) GDPR. All matters concerning personal data may be addressed to the e-mail above.

2. Scope of this policy

This website is a static editorial article on a defined topic of European Union customs law. It does not host contact forms, user accounts, comment functions, newsletter sign-ups or online shops. When you open the website, only the technical data needed to deliver the page are processed.

3. Server log files

Each request to this website is logged automatically by the hosting provider. The following data, transmitted by your browser, are processed:

• IP address of the requesting device
• date and time of the request
• requested URL
• HTTP status code and bytes transferred
• referrer URL (if sent by the browser)
• browser identifier (user-agent) and language preference

Purpose: delivering the website, ensuring technical security, detecting and defending against abuse, diagnosing technical errors.

Legal basis: Article 6(1)(f) GDPR. The legitimate interest pursued is the secure and stable operation of the website.

Retention: log files are deleted or anonymised by the hosting provider within fourteen days at the latest. Logs are not combined with any other data sets.

4. Cookies and similar technologies

This website does not set cookies and does not use similar technologies that store information on your device. There are no analytics tools (such as Google Analytics, Matomo, Plausible), no advertising pixels and no social media plug-ins.

For this reason, no consent under Article 5(3) of Directive 2002/58/EC (the e-Privacy Directive), as transposed into national law, is required. Should consent-requiring tools be added in the future, a compliant consent mechanism will be implemented before activation.

5. Hosting and processor

This website is hosted by a third-party provider:

OVH SAS

The hosting provider acts as a processor under Article 28 GDPR and processes personal data only on the documented instructions of the controller. Processing is limited to the server log data described in section 3 for the purpose of operating the website.

6. E-mail correspondence

If you contact the controller by e-mail, the sender address, any name supplied and the content of your message are processed in order to handle your enquiry.

Legal basis: Article 6(1)(b) GDPR for pre-contractual enquiries; Article 6(1)(f) GDPR for other business correspondence.

Retention: until the matter is concluded, with regard to applicable accounting and tax retention obligations where relevant.

7. Recipients and transfers outside the EEA

Personal data are not disclosed to third parties except to the hosting provider referred to in section 5 and where disclosure is required by law (for example, to public authorities). Transfers to countries outside the European Economic Area occur only where the hosting provider operates servers outside the EEA; in such cases, transfers are based on the standard contractual clauses adopted by the European Commission within the meaning of Article 46(2)(c) GDPR.

8. Your rights

Under the GDPR, you have the following rights with regard to your personal data:

• right of access (Article 15 GDPR)
• right to rectification (Article 16 GDPR)
• right to erasure (Article 17 GDPR)
• right to restriction of processing (Article 18 GDPR)
• right to data portability (Article 20 GDPR)
• right to object to processing based on Article 6(1)(f) GDPR (Article 21 GDPR)
• right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3) GDPR)

To exercise any of these rights, please send an informal request to the e-mail address listed in section 1. The controller will respond within one month of receipt of the request, with a possible extension of two further months for complex requests (Article 12(3) GDPR).

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. Because the controller is established in Poland, the lead authority is:

You may also lodge a complaint with the supervisory authority of your habitual residence, place of work or place of the alleged infringement.

10. Automated decision-making

This website does not engage in automated decision-making, including profiling, within the meaning of Article 22 GDPR.

11. Provision of data

You are not required by law or contract to provide any personal data to use this website. The processing of server log data described in section 3 is technically required for the website to be delivered and does not depend on a decision by the user.

12. Disclaimer

The content of this website has been prepared with care but is provided for general information only. It does not constitute legal, tax or customs advice and does not create a client relationship. For decisions in individual cases, please seek qualified professional advice.

13. Updates

This policy is updated when the function of the website changes or when the law requires it. The version published on this page applies.

Last updated: 2026-05-06.