Privacy Policy

We collect the following categories of personal data, only where you have provided it voluntarily or where collection is technically necessary for the operation of the website:

We do not collect special category personal data (as defined in Article 9 GDPR), including data concerning health, ethnicity, religious belief, or political opinion.

All personal data processing by Toravel is conducted under one of the following legal bases established by Article 6 GDPR:

• 6(1)(b)Performance of a contract: Where processing is necessary to respond to an enquiry or fulfil a request you have made, including lot record requests and product specification queries.
• 6(1)(a)Consent: Where you have actively consented to the use of non-essential cookies or to receiving optional communications.
• 6(1)(f)Legitimate interests: Where processing is necessary for the purposes of the legitimate interests pursued by Toravel, including website security, fraud prevention, and the improvement of website content, provided those interests are not overridden by your rights and freedoms.
• 6(1)(c)Legal obligation: Where processing is required so as to comply with a legal obligation applicable to Toravel.

Personal data collected through the Toravel website is used for the following purposes:

• Responding to written enquiries submitted via the contact form, including product specification and lot record requests
• Maintaining records of correspondence for internal documentation and follow-up purposes
• Operating website analytics to understand aggregate patterns of visitor engagement with website content (where consent is given)
• Maintaining website security and preventing fraudulent or abusive submissions
• Complying with applicable legal and regulatory obligations

We do not use personal data for automated decision-making or profiling as defined under Article 22 GDPR. We do not use your contact data for unsolicited marketing communications.

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Contact form submissions: Retained for a maximum of 24 months from the date of submission, after which records are deleted unless an ongoing correspondence has been established.
• Technical and analytics data: Retained for a maximum of 13 months in aggregated, anonymised form.
• Cookie consent records: Retained for 12 months from the date of consent registration.

Toravel does not sell, rent, or otherwise transfer personal data to third parties for their own commercial purposes. Personal data may be shared with the following categories of recipient only where strictly necessary:

• Hosting and infrastructure providers: Servers and content distribution infrastructure used to operate the toravel.info website. Data processing agreements are in place with all infrastructure providers.
• Analytics service providers: Where you have consented to analytics cookies, aggregate and anonymised data may be processed by a third-party analytics platform.
• Legal and regulatory authorities: Where disclosure is required by applicable law, court order, or regulatory directive.

Where data is transferred outside the European Economic Area (EEA), such transfers are conducted only in accordance with Chapter V GDPR, using appropriate safeguards including Standard Contractual Clauses where applicable.

Where Toravel acts as the data controller for your personal data, you have the following rights under applicable data protection law:

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland, or with the supervisory authority in your country of residence.

The toravel.info website uses cookies. Detailed information about the cookies we use, their purpose, duration, and your options for managing them is provided in our Cookie Policy. You can manage your cookie preferences at any time using the Cookie Settings option in the footer of this website.

Toravel implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. The toravel.info website operates exclusively over HTTPS (TLS encryption). Access to systems holding personal data is restricted to authorised personnel only.

No method of electronic transmission or storage is entirely secure. While we maintain appropriate safeguards, we cannot guarantee absolute security. In the event of a personal data breach that presents a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify affected individuals directly.

Toravel reserves the right to update this Privacy Policy when necessary to reflect changes in legal requirements, our data processing practices, or the services we provide. Material changes will be indicated by an updated "Last updated" date at the top of this document. We recommend reviewing this policy periodically. Continued use of the toravel.info website following a material update constitutes acceptance of the revised policy.