§ 1. Data Controller
The controller of personal data processed on the Celna24.pl website is:
AI2137 Paweł Dubel
Tax ID (NIP): 5214052379
Correspondence address: ul. Mroza 12/22, 10-692 Olsztyn, Poland
Contact e-mail: kontakt@celna24.pl
The Controller has not appointed a Data Protection Officer. For all matters related to personal data processing, please contact us at the e-mail address above.
§ 2. Purposes and Legal Bases for Data Processing
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter: “GDPR”) and the Polish Act of 10 May 2018 on the Protection of Personal Data.
a) Newsletter
- Purpose: sending customs and logistics information by electronic means.
- Legal basis: Art. 6(1)(a) GDPR — consent of the data subject, and Art. 398 of the Polish Act of 12 July 2024 — Electronic Communications Law (Journal of Laws 2024, item 1221).
- Scope of data: e-mail address.
- Retention period: until consent is withdrawn or the user unsubscribes from the newsletter. After unsubscription, the e-mail address may be retained on a suppression list to ensure the newsletter is not sent again.
b) Use of Website Tools
Celna24.pl provides customs tools, including: customs calculators (customs duty and VAT calculator, car import calculator, non-EU purchases calculator, excise duty calculator, CBAM calculator, relocation property exemption checker, import profitability analysis, trade preferences checker, travel assistant), customs tariff browser (CN/HS codes), Polish customs offices search, and an articles and guides section.
- Purpose: providing customs tools, ensuring proper operation of the website, statistical analysis and optimization.
- Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the Controller in operating and improving the website.
- Scope of data: IP address, browser and device data, website activity data (collected automatically). Using calculators and search tools does not require providing personally identifiable information.
- Retention period: Google Analytics data — up to 14 months; server logs — up to 90 days.
c) AI-powered Search
- Purpose: processing user queries for tariff classification using machine learning algorithms.
- Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the Controller.
- Scope of data: query content, IP address. Queries are not associated with user identity.
- Retention period: up to 12 months for algorithm improvement purposes, then anonymized.
- Automated decision-making: the AI search assists users with tariff classification; however, results are informational only and do not constitute a binding classification. The final decision always rests with the user.
d) E-mail Correspondence
- Purpose: handling inquiries and correspondence.
- Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the Controller.
- Scope of data: e-mail address, name, message content.
- Retention period: for the time necessary to handle the inquiry, no longer than 12 months from the last contact.
§ 3. Data Recipients
Personal data may be disclosed to the following categories of recipients:
- hosting and IT infrastructure providers,
- analytics service providers (Google Analytics — Google Ireland Ltd.),
- mailing service provider — Resend Inc. (for newsletter operations),
- entities authorized to receive data under applicable law.
The Controller does not sell personal data to third parties.
§ 4. Data Transfers to Third Countries
Due to the use of Google Analytics (Google LLC) and Resend Inc. services, personal data may be transferred to the United States.
Data transfers to the USA are carried out pursuant to the European Commission Implementing Decision of 10 July 2023 on the adequate level of protection of personal data under the EU–US Data Privacy Framework (Decision C(2023) 4745), in accordance with Art. 45 GDPR — provided that the given entity participates in the DPF programme. In the absence of DPF participation, the transfer is based on Standard Contractual Clauses (Art. 46(2)(c) GDPR).
§ 5. Rights of Data Subjects
Under the GDPR, you have the following rights:
- right of access to data (Art. 15 GDPR),
- right to rectification (Art. 16 GDPR),
- right to erasure — “right to be forgotten” (Art. 17 GDPR),
- right to restriction of processing (Art. 18 GDPR),
- right to data portability (Art. 20 GDPR),
- right to object to processing based on the legitimate interest of the Controller (Art. 21 GDPR),
- right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR).
To exercise these rights, please contact the Controller: kontakt@celna24.pl. The Controller will respond without undue delay, no later than one month from receiving the request.
§ 6. Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office (PUODO)
ul. Stawki 2, 00-193 Warsaw, Poland
§ 8. Voluntary Provision of Data
Providing personal data is voluntary. For the newsletter, providing an e-mail address is a condition for providing the service. Using customs calculators, the tariff browser, customs offices search, and the articles section does not require providing personal data — only technical data collected automatically is processed.
§ 9. Changes to the Privacy Policy
The Controller reserves the right to amend this Privacy Policy to adapt it to changes in legislation or website functionality. Users will be informed of significant changes through the website. The current version of the Privacy Policy is always available at: celna24.pl/privacy-policy.
Publication date: 31 January 2026