Dębowiec 11a, Opole Voivodeship • Certified Huacaya and Suri Alpaca Farm (PZHA)

Privacy Policy and Personal Data Protection (GDPR)

Privacy Policy and Personal Data Protection (GDPR) at Ajmaraya Alpaca Stud and the Llamerada Foundation in Dębowiec. Information clause, cookies, and user rights.

🛡️
Personal Data Controller

Llamerada Foundation & Ajmaraya Alpaca Farm

Registered Office and Postal Address

Dębowiec 11a, 48-200 Prudnik

Opole Voivodeship, Poland (at the foot of the Opawskie Mountains)

Registration Numbers of the Foundation

KRS: 0000707207

NIP (Tax ID): 7551934110 • REGON: 368888931

District Court in Opole, 8th Commercial Division of the National Court Register (KRS)

Contact for GDPR and Privacy

E-mail: fundacja@llamerada.org.pl

Phone: +48 885 556 484

We respond without undue delay (within 14 days).

📅 Legal status: October 2026 (compliance with EU Regulation 2016/679 – GDPR) SSL/TLS Security Certificate & Data Protection

I General Information and Data Security

↑ To top

This document contains all information regarding the processing of personal data of individuals visiting the website ajmaraya.com (and ajmaraya.web.app), using contact forms, submitting inquiries, booking alpaca walks, alpaca therapy and workshops, as well as participating in the volunteer program or purchasing certified breeding alpacas.

The controller of your personal data is Llamerada Foundation with its registered office: 48-200 Dębowiec 11a, entered into the register of associations, other social and professional organizations, foundations, and independent public healthcare institutions maintained by the District Court in Opole, 8th Commercial Division of the National Court Register, under number KRS: 0000707207, NIP: 7551934110, REGON: 368888931, conducting statutory activities and co-creating the breeding center Ajmaraya Alpaca Farm (hereinafter referred to in this document as the "Administrator" or "Controller").

Contact the Data Controller:

For all matters concerning the processing of your personal data and the exercise of your rights, you can contact us:

We make every effort to respond to each inquiry promptly, no later than within 14 days, unless a different deadline arises from statutory provisions or the nature of the matter.

We implement advanced technical and organizational measures required by current applicable laws (in particular Art. 32 GDPR) to prevent the acquisition, loss, alteration, or unauthorized disclosure of personal data transmitted to us electronically or processed in our systems. Communication with our website is encrypted using a secure protocol SSL/TLS.

Definition of personal data (Art. 4 point 1 GDPR): Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.

II Purposes and legal bases for personal data processing

↑ To top

Your personal data are processed strictly in accordance with the law, for strictly defined, legitimate purposes related to the activity profile of the Ajmaraya Alpaca Stud and the Llamerada Foundation:

Bookings & Tourism

1. Booking farm visits, alpaca walks, and stays

We process name, surname, phone number, and email address in order to arrange the ranch visit appointment, confirm the alpaca walk booking, and handle organizational contact.

Legal basis: Article 6(1)(b) GDPR (necessity for the performance of a recreational service contract).
Breeding & PZHA Pedigrees

2. Sale of certified breeding alpacas (Huacaya and Suri)

We process buyer data necessary for concluding alpaca sale agreements, issuing PZHA pedigree certificates, veterinary documentation, and registration with ARiMR.

Legal basis: Article 6(1)(b) and (c) GDPR (sales contract and animal record-keeping obligations).
Zootherapy & Education

3. Alpaca therapy, horticultural therapy, and educational workshops

We process data of participants and legal guardians in order to prepare safe and tailored therapeutic sessions, weaving, and handicraft workshops.

Legal basis: Article 6(1)(b) and (a) GDPR (performance of the service and voluntary consent of the participant/guardian).
Community & Support

4. Volunteer Club "Alpaca Haven"

We process data of candidates and volunteer club members in order to verify applications, conclude volunteer agreements, and coordinate tasks at the ranch.

Legal basis: Article 6(1)(a) and (b) GDPR (consent to recruitment and execution of the volunteer agreement).
Handicraft Shop

5. Purchases of alpaca wool products and handicrafts

In the case of purchasing products in the Llamerada Foundation Shop, data are processed to assemble the order, process the payment, dispatch the shipment, and issue proof of purchase.

Legal basis: Article 6(1)(b) GDPR (performance of the product sales contract).
Law & Taxes

6. Tax settlements, accounting, and pursuit of claims

Fulfillment of obligations arising from the Accounting Act and tax regulations, as well as defense against or pursuit of potential claims.

Legal basis: Article 6(1)(c) and (f) GDPR (legal obligation and legitimate interest of the Controller).
⚠️ Voluntary provision of personal data:

Providing your personal data (in the contact form, telephone booking, or volunteer application) is always voluntary. However, failure to provide data marked as necessary for contact, booking a visit, purchasing alpacas, or fulfilling an order will prevent us from establishing contact and performing the requested service.

III Recipients of personal data

↑ To top

The processing of your personal data may be entrusted to trusted entities cooperating with the Controller. Such entrustment takes place solely on the basis of a written data processing agreement (in accordance with Art. 28 GDPR) guaranteeing high data security standards:

  • Postal operators and courier companies: for delivering parcels with handmade products or official correspondence and alpaca documentation.
  • Providers of hosting, cloud, and electronic mail services: ensuring stable and secure operation of the website, database, and mail servers (including Google Cloud Platform / Firebase Hosting with data centers within the EU).
  • Entities providing accounting, bookkeeping, and legal advisory services: in favor of the Llamerada Foundation.
  • Breeding associations and veterinary authorities: Polish Alpaca Breeders Association (PZHA), District Veterinary Officer, and Agency for Restructuring and Modernisation of Agriculture (ARiMR) – to the extent required by animal identification and registration regulations.
🔒 No transfer of data outside the European Economic Area: Your personal data are not and will not be transferred to third countries (outside the territory of the European Economic Area) or to international organizations without your prior, explicit consent.

IV Retention period of personal data

↑ To top

Your personal data are stored only for the time necessary to achieve the purposes for which they were collected, including:

⏱️
Fulfillment of contracts, bookings, and alpaca sales: for the period necessary to execute the contract, and after its termination until the expiry of limitation periods for civil law claims (in accordance with Civil Code regulations).
📑
Tax and accounting documentation: for a period of 5 years, starting from the end of the calendar year in which the tax payment deadline for the transaction expired (pursuant to the Accounting Act and the Tax Ordinance).
✉️
Inquiries, contact, and volunteering: until correspondence is concluded or until consent to data processing is withdrawn.

V Rights of data subjects (Art. 15–21 GDPR)

↑ To top

In connection with our processing of your personal data, you have full rights under the GDPR regulations:

A. Right of access to personal data (Art. 15 GDPR)

You have the right at any time to ask us what personal data of yours we process, for what purpose, to whom they were entrusted, and to obtain their first free copy. If subsequent copies are requested, we may charge a fee based on administrative costs.

B. Right to rectification of personal data (Art. 16 GDPR)

You may at any time request the rectification of incorrect data or the completion of incomplete data.

C. Right to erasure ("right to be forgotten", Art. 17 GDPR)

You may request the prompt erasure of your personal data when, among other cases: the data is no longer necessary for the purposes for which it was collected; you withdraw your consent; you raise a justified objection; or the data was processed unlawfully. This right does not apply if processing is necessary to fulfill a legal obligation (e.g., accounting) or to establish, exercise, or defend legal claims.

D. Right to restriction of processing (Art. 18 GDPR)

You may request the restriction of processing, e.g., while the accuracy of your data is being verified or if you oppose its erasure. During the restriction period, the data may only be stored by us.

E. Right to object (Art. 21 GDPR)

You have the right to object at any time to the processing of your data based on the legitimate interest of the Controller (Art. 6(1)(f) GDPR), including any direct marketing.

F. Right to data portability (Art. 20 GDPR)

If your data is processed based on consent or a contract by automated means, you have the right to receive it in a commonly used machine-readable format (e.g., CSV, Excel, JSON) or request that it be transmitted to another controller.

G. Right to lodge a complaint with the Supervisory Authority (PUODO)

If you consider that the processing of your personal data by the Llamerada Foundation or the Ajmaraya Alpaca Farm violates Polish law or the GDPR, you have the right to lodge a complaint with the Polish supervisory authority:

President of the Personal Data Protection Office (PUODO)

📍 Address: ul. Stawki 2, 00-193 Warsaw

📞 Telephone helpline: 606 950 000 | Chancery / Office: (22) 531 03 00

🌐 Website: https://uodo.gov.pl

VI Applicable Legal Bases

↑ To top

This Privacy Policy has been drawn up and implemented to comply with the informational and legal obligations arising from the applicable legal acts of the Republic of Poland and the European Union:

  1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR, OJ EU L 119 of 04.05.2016, p. 1 as amended), with particular emphasis on Art. 13 and Art. 14 of the GDPR.
  2. Act of 10 May 2018 on the Protection of Personal Data (consolidated text: Journal of Laws of 2019, item 1781, as amended).
  3. Act of 18 July 2002 on Providing Services by Electronic Means (consolidated text: Journal of Laws of 2020, item 344, as amended).
  4. Act of 12 July 2024 – Electronic Communications Law (Journal of Laws of 2024, item 1221).
  5. Act of 23 April 1964 – Civil Code (consolidated text: Journal of Laws of 2024, item 1061, as amended) and Act of 29 September 1994 on Accounting.

VII Cookie Policy, Local Storage (localStorage) and Image Rights Protection

↑ To top

🍪 1. No external advertising trackers and tracking cookies

We respect the privacy of our visitors. The website ajmaraya.com and ajmaraya.web.app does not use invasive marketing or advertising cookies or scripts profiling User behavior (such as Google Ads Remarketing, Meta Pixel / Facebook Pixel or third-party traffic monitoring scripts).

💾 2. Browser local storage (localStorage)

For purely technical and functional purposes, our website uses the built-in browser cache (localStorage). Only the following key is used:

  • ajmaraya_rodo_accepted_v1 – technical value recording the acknowledgment and acceptance of the data protection notice and cookie policy. It prevents the bottom notice banner from re-appearing on every pageview.

This entry does not contain any personal data, is not transmitted to external servers, and can be deleted by the User at any time by clearing the browser cache or clicking the link “Cookies / GDPR Settings” in the website footer.

📷 3. Protection and respect for the image of workshop and class participants

At the Ajmaraya Alpaca Stud and the Llamerada Foundation, the safety, dignity, and privacy of our guests, and in particular children, minors, and beneficiaries participating in alpaca therapy sessions, horticultural therapy, and educational workshops, constitute the highest priority (in accordance with Art. 81 of the Act on Copyright and Related Rights).

Photographs documenting ranch life and workshops are published on the website and on our official social media channels only with prior, voluntary consent of the participant or their parents / legal guardians. In the case of group shots or absence of separate consent, the likeness of participants is subject to careful cropping or anonymization (face blurring) in a manner that permanently prevents their identification.

Document valid from October 27, 2026 • Ajmaraya Alpaca Farm & Llamerada Foundation