Who the controller is
The controller of your personal data is Truverta Sp. z o.o., registered in Poland, the operator of the Expova brand. For data matters, write to the address given in the site footer.
What we collect
From the quotation form: your name, e-mail address and the content of your enquiry. Optionally, if you provide them: company name, phone number, event date, quantity, delivery point and a link to your files. We do not ask for data we do not need in order to prepare a quotation, and the form is not a channel for sensitive data.
From server logs: IP address, timestamp, request method and path, response code and browser header. Logs are written automatically for every request and serve only site maintenance, abuse detection and diagnostics.
What we do not collect: we use no third-party analytics, no advertising pixels and no profiling. No external script runs on this site. That is also why there is no cookie consent banner here: the only thing we store in your browser is a technical language preference.
Legal basis and purpose
Form data is processed on the basis of your consent and in order to take steps prior to entering into a contract, that is to prepare a quotation (Art. 6(1)(a) and (b) GDPR). Server logs are processed on the basis of our legitimate interest in the security and maintenance of the service (Art. 6(1)(f) GDPR).
How long we keep it
Quotation enquiries stay in our mailbox for as long as the case needs and, if the enquiry leads to an order, for the period required by accounting law. Server logs are rotated and deleted after 14 days.
Who processes it for us
The site runs on a hosting provider inside the European Union. E-mail is handled by a mail service provider. Both act under data processing agreements and only to the extent needed to deliver the service. We do not sell data and we do not transfer it outside the European Economic Area.
Form protection
The form is protected by a hidden trap field, a fill-time measurement and a limit on the number of submissions from one IP address. These mechanisms collect no additional data about you: they exist only to reject automated submissions.
Cookies and browser storage
We use no analytics or marketing cookies. We store only the ex-lang key in your browser local storage when you choose a language version yourself, plus a session key that stops the language redirect from looping. You can delete both at any time in your browser settings and the site will keep working.
Your rights
You have the right to access your data, to rectify it, erase it, restrict its processing, port it and to object. You may withdraw consent at any time, which does not affect the lawfulness of processing before withdrawal. You may also lodge a complaint with the Polish data protection authority.