Privacy and Cookie Policy

1. Who is responsible for your data

The data controller is:

For anything about your data, email hello@3lanes.eu or write to the address above. We have not appointed a data protection officer, because our activities do not require one under Article 37 GDPR.

2. What we collect and why

When you contact us

If you use the trade enquiry form, email us or call us, we receive what you give us. That is usually your name, company or venue, role, city, business email, phone number and the content of your message.

We use it to answer you, prepare an offer and, if we work together, to set up and run that relationship. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). Where you contact us on behalf of a company, we rely on our legitimate interest in communicating with business partners (Article 6(1)(f) GDPR).

When you become a customer or supplier

We process the contact and billing details needed to deliver products, issue invoices and keep accounting records. The legal bases are performance of the contract (Article 6(1)(b)) and our legal obligations under Polish tax and accounting law (Article 6(1)(c)).

When you browse the site

Our hosting provider receives technical data that every browser sends, such as your IP address, browser type and the pages requested. This is needed to deliver the site and protect it from abuse. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f)).

If you agree to analytics cookies, Google Analytics also records how you use the site, such as pages viewed, time on page, approximate location, device type, and whether you clicked our phone or email links or sent the enquiry form. The legal basis is your consent (Article 6(1)(a)), which you can withdraw at any time.

Age check

The site shows alcoholic drinks, so we ask whether you are of legal drinking age. We only store your answer in your browser for the current visit. We do not keep a record of it.

We do not sell personal data, and we do not make decisions about you by automated means, including profiling, that have legal or similarly significant effects.

3. Cookies and similar technologies

Cookies are small files a website stores in your browser. We also use your browser's local storage, which works in a similar way. When you first visit, we ask which optional categories you accept. Nothing optional is set until you choose.

We use Google Consent Mode. Until you accept analytics, Google Analytics sets no cookies and receives only basic signals without identifiers, such as the fact that a page was loaded. If we add advertising or social media pixels in future, they will run only if you accept the Marketing category, and we will list them here first.

You can change your choice at any time with Cookie settings, which also appears at the bottom of every page. You can also delete cookies in your browser settings.

4. Who we share data with

We use a few service providers who process data for us under data processing terms and only on our instructions:

• Cloudflare, Inc. hosts the website and protects it against attacks.
• Google Ireland Limited provides Google Analytics (only with your consent) and serves the fonts used on the site.
• jsDelivr, a public content delivery network, serves some of the code libraries the site uses.
• Porkbun LLC forwards email sent to our address to our mailbox.
• Our email, accounting and office software providers store correspondence and business records.

Loading fonts and code libraries from these networks means your browser sends them your IP address. We may also share data with couriers and logistics partners to deliver orders, with our accountants and legal advisers, and with public authorities when the law requires it.

5. Transfers outside the EEA

Some of these providers, or their parent companies, are in the United States. Where data leaves the European Economic Area, we rely on the provider's certification under the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards that apply.

6. How long we keep data

• Enquiries that do not lead to a business relationship: up to 3 years after our last contact, so we can follow up and handle any claims.
• Customer and supplier data: for the length of the relationship, then until any claims are time-barred.
• Invoices and accounting records: 5 years from the end of the calendar year in which the tax obligation arose, as Polish law requires.
• Google Analytics data: no longer than 14 months, after which Google deletes it automatically.
• Technical data held by our hosting provider: for the short period set by that provider.

7. Your rights

Under the GDPR you have the right to:

• access your data and get a copy of it;
• have inaccurate data corrected;
• have your data deleted, or its use restricted, in the cases the law allows;
• receive data you gave us in a portable format;
• object to processing based on our legitimate interests, including direct marketing at any time;
• withdraw consent at any time, without affecting what we did before you withdrew it.

To use any of these rights, email hello@3lanes.eu. We reply within one month.

You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (President of the Personal Data Protection Office), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

8. Other information

Giving us your data is voluntary, but without contact details we cannot reply to your enquiry or do business with you.

This website is intended for adults of legal drinking age. We do not knowingly collect data from anyone under 18.

If we change how we handle personal data, we will update this page and the date at the top.