Privacy policy

Privacy policy for ELPACK.pl customers

Data of the Personal Data Administrator

We kindly inform you that the administrator of your personal data is the ELPACK company with its registered office at ul. Magazynowa 5A, 30-758 Kraków, using the NIP number 6792805566, hereinafter referred to as the “Administrator”. Contact with the Administrator regarding the protection of personal data is possible at the following e-mail address: elpackkrakow1@gmail.com

Data Protection Officer

The administrator does not have a Data Protection Officer. The main activity of the company is to perform business activities – wholesale, and the processing of personal data of customers and third parties, which are shown in the documents resulting from the services provided, is not a goal, but only a tool of the workshop required by law and is not, due to its nature, the scope and purposes of the processing of personal data on a regular and systematic basis, or on a large scale.

Purposes and grounds for processing personal data

In order to provide services in accordance with the business profile, the Administrator processes personal data – for various purposes, but always in accordance with the law.

In order to evaluate and perform the service, we process such personal data as:

name and surname of the representative of the counterparty or counterparty,
e-mail address,
order number,
date of registration.

The legal basis for such data processing is Art. 6 sec. 1 lit. b of the GDPR, which allows you to process personal data if they are necessary to perform the contract or take steps to conclude the contract.

In order to consider a complaint, we process such personal data as:

name and surname of the company representative or company owner,
e-mail address,
order number,
company name,
possibly the address of the company’s registered office.

In order to send e-mail notifications about messages in the customer panel, we process such personal data as:

e-mail address,
name and surname of the contractor’s representative.

The legal basis for such data processing is Art. 6 sec. 1 lit. f of the GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator pursues its legitimate interest (in this case, the interest of the Company is to inform the client about activities related to the implementation of the service in order to increase the comfort of using the services);

In order to contact you by phone in matters related to the provision of the service, we process such personal data as:

phone number,
order number.

The legal basis for such data processing is Art. 6 sec. 1 lit. a GDPR, which allows the processing of personal data on the basis of voluntary consent;

In order to issue an invoice and fulfill other obligations resulting from the provisions of the tax law, such as e.g. storing accounting documentation for 5 years, we process such personal data as:

first name and last name,
business,
HQ address,
number “nip”,
order number.

The legal basis for such data processing is Art. 6 sec. 1 lit. c of the GDPR, which allows the processing of personal data, if such processing is necessary for the Personal Data Administrator to fulfill its obligations under the law;

In order to establish, pursue or defend against claims, we process such personal data as:

name and surname or possibly company,
number nip ,
e-mail address,
IP,
order number.

The legal basis for such data processing is Art. 6 sec. 1 lit. f of the GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator pursues its legitimate interest (in this case, the interest of the Company is to have personal data that will allow to determine, pursue or defend against claims, including clients and third parties);

For archival and evidence purposes, we process such personal data as:

name and surname (if provided),

e-mail address,
order number.

– for the purpose of securing information that can be used to demonstrate facts of legal significance. The legal basis for such data processing is Art. 6 sec. 1 lit. f of the GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator pursues its legitimate interest (in this case, the Administrator’s interest is to have personal data that will prove certain facts related to the provision of services, e.g. when a state authority requests it);

For analytical purposes, i.e. researching and analyzing activity on the website belonging to the Administrator, we process such personal data as:

date and time of visiting the website,
type of operating system,
approximate location,
type of web browser used to view the website,
time spent on the site,
visited subpages,
subpage where the contact form was filled out.

The legal basis for such data processing is Art. 6 sec. 1 lit. f of the GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator pursues its legitimate interest (in this case, the Administrator’s interest is to know the activity of customers on the website);

In order to use cookies on the website, we process such text information (cookies will be described in a separate section). The legal basis for such processing is Art. 6 sec. 1 lit. a GDPR, which allows you to process personal data on the basis of your voluntary consent (when you first visit the website, you will be asked for consent to the use of cookies);

In order to administer the website, we process such personal data as:

IP address,
server date and time,
information about the web browser,
operating system information.

– these data are automatically saved in the so-called server logs, each time a website belonging to the Administrator is used. The administration of the website without the use of a server and without this automatic recording would not be possible. The legal basis for such data processing is Art. 6 sec. 1 lit. f of the GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator pursues its legitimate interest (in this case, the Administrator’s interest is the administration of the website);

Right to withdraw consent

If the processing of personal data is based on consent, this consent can be withdrawn at any time – at your discretion.
If you want to withdraw your consent to the processing of personal data, all you need to do is:

send an email directly to the Company at: elpackkrakow1@gmail.com
If the processing of personal data was based on consent, its withdrawal does not mean that the processing of personal data up to that point was illegal. In other words, until the consent is withdrawn, we have the right to process your personal data and its withdrawal does not affect the lawfulness of the existing processing.

The requirement to provide personal data

The provision of certain personal data is necessary to meet expectations regarding the use of services.
In order to commission a service – place an order, it is necessary to provide your name and surname, company name and email address – without this we are not able to conclude and perform the contract.
In order to receive an invoice for services – an order, it is necessary to provide all the data required by tax law, i.e. name and surname or company, registered office address, NIP number – without this we are not able to issue an invoice correctly.
To contact us by phone in matters related to the implementation of the service, it is necessary to provide a telephone number – without this we are unable to make telephone contact.

Automated decision making and profiling

We kindly inform you that we do not make automated decision-making, including based on profiling. The content of the inquiry, which is sent via the contact form, is not evaluated by the IT system.

Recipients of personal data

Like most entrepreneurs, in our business we use the help of other entities, which often involves the need to provide personal data. Therefore, if necessary, we transfer personal data to lawyers cooperating with us who provide services, companies that support quick payments, an accounting company, a hosting company, as well as an insurance company (if it is necessary to repair the damage).
In addition, it may happen that, for example, on the basis of the relevant law or decision of the competent authority, we will also have to transfer personal data to other entities, whether public or private. Therefore, it is extremely difficult for us to predict who may submit a request to provide personal data. However, for our part, we assure you that we analyze each case of a request to provide personal data very carefully and thoroughly, so as not to inadvertently provide information to an unauthorized person.

Transfer of personal data to third countries

Like most entrepreneurs, we use various popular services and technologies offered by entities such as Facebook, Microsoft, Google or Zendesk. These companies are based outside the European Union, and therefore, in the light of the provisions of the GDPR, they are treated as third countries.
The GDPR introduces certain restrictions on the transfer of personal data to third countries, because since European regulations do not apply there, the protection of personal data of European Union citizens may unfortunately be insufficient. Therefore, each personal data controller is obliged to determine the legal basis for such transfer.
For our part, we assure you that when using services and technologies, we transfer personal data only to entities from the United States and only to those that have joined the Privacy Shield program, based on the European Commission’s executive decision of July 12, 2016 – more on this subject can be found read on the website of the European Commission available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_pl. Entities that have joined the Privacy Shield program guarantee that they will comply with high standards in the field of personal data protection that apply in the European Union, therefore the use of their services and offered technologies in the processing of personal data is lawful.
We will provide additional explanations regarding the transfer of personal data at any time.
You have the right to obtain a copy of your personal data transferred to a third country at any time.

The period of personal data processing

In accordance with applicable law, we do not process personal data “indefinitely”, but for the time needed to achieve the set goal. After this period, personal data will be irreversibly deleted or destroyed.
Regarding individual periods of personal data processing, we kindly inform you that we process personal data for the period of:

duration of the contract – in relation to personal data processed in order to conclude and perform the contract;
3 years + 1 year in relation to personal data processed to establish, pursue or defend claims (the length of the period depends on whether both parties are entrepreneurs or not);
6 months – in relation to personal data that was collected when pricing the service, and at the same time the contract was not concluded immediately;
5 years – in relation to personal data related to the fulfillment of obligations under tax law;
until they become outdated or lose their usefulness, but no longer than for 3 years – in relation to personal data processed mainly for analytical purposes, the use of cookies and website administration.

Periods in years are counted from the end of the year in which we started processing personal data in order to improve the process of removing or destroying personal data. Separate calculation of the deadline for each concluded contract would involve significant organizational and technical difficulties, as well as significant financial outlay, therefore setting a single date for removing or destroying personal data allows us to manage this process more efficiently. Of course, in the case of exercising the right to be forgotten, such situations are considered individually.
The additional year related to the processing of personal data collected for the purposes of the performance of the contract is dictated by the fact that hypothetically you can submit a claim just before the expiry of the limitation period, the request may be delivered with a significant delay or you may incorrectly specify the limitation period for your claim.

Data subjects’ rights

We kindly inform you that you have the right to:
- access to your personal data;
- rectification of personal data;
- deletion of personal data;
- restrictions on the processing of personal data;
- object to the processing of personal data;
- transfer of personal data.
We point out that the above-mentioned rights are not absolute, and therefore in some situations we may lawfully refuse to fulfill them. However, if we refuse to comply with the request, it is only after a thorough analysis and only if the refusal to comply with the request is necessary.
Regarding the right to object, we explain that you have the right to object to the processing of personal data at any time on the basis of the legitimate interest of the Personal Data Administrator (these are listed in point III) in connection with a particular situation.
You can exercise your rights by:
- sending an email directly to the Company at elpackkrakow1@gmail.com

Right to lodge a complaint

If you believe that personal data is processed contrary to applicable law, you can lodge a complaint with the President of the Office for Personal Data Protection.

Final Provisions

To the extent not covered by this Privacy Policy, the provisions on the protection of personal data shall apply.
This Privacy Policy is effective from May 25, 2018.

COOKIES POLICY

On its website, the Company, like other entities, uses the so-called cookies. cookies, i.e. short text information, saved on a computer, telephone, tablet or other user device. They can be read by our system, as well as by systems belonging to other entities whose services we use (e.g. Facebook, Google).

Cookies perform many functions on the website, the most often useful ones, which we will try to describe below (if the information is insufficient, please contact us):

ensuring security – cookies are used to authenticate users and prevent unauthorized use of the customer panel. Therefore, they are used to protect the user’s personal data against access by unauthorized persons;
impact on the processes and efficiency of using the website – cookies are used to make the website work efficiently and to use the functions available on it, which is possible, among others, by remembering settings between subsequent visits to the website. Thanks to them, you can efficiently navigate the website and individual subpages;
session state – cookies often store information about how visitors use the website, e.g. which subpages they most often display. They also make it possible to identify errors displayed on some subpages. Cookies used to save the so-called “session state” therefore help to improve services and enhance the browsing experience;
maintaining the state of the session – if the customer logs into his panel, cookies allow the session to be maintained. This means that after switching to another subpage, you do not have to re-enter your login and password each time, which is conducive to the comfort of using the website;
creating statistics – cookies are used to analyze how users use the website (how many open the website, how long they stay on it, which content arouses the greatest interest, etc.). This allows you to constantly improve the website and adapt its operation to the preferences of users. In order to track activity and create statistics, we use Google tools, such as Google Analytics; in addition to reporting site usage statistics, the Google Analytics pixel may also be used, together with some of the cookies described above, to help show you more relevant content across Google services (e.g. Google Search) and across the web;

The web browser by default allows the use of cookies on your device, so when you visit us for the first time, please agree to the use of cookies. However, if you do not wish to use cookies when browsing the website, you can change the settings in your web browser – completely block the automatic handling of cookies or request notifications each time cookies are placed on your device. You can change the settings at any time.
Respecting the autonomy of all people using the website, we feel obliged to warn you that disabling or limiting the use of cookies may cause quite serious difficulties in using the website, e.g. in the form of the need to log in to each subpage, longer page loading time , restrictions on the use of functionalities, restrictions on liking the Facebook page, etc.

INFORMATION CLAUSE

According to Art. 13 sec. 1 and sec. 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, I inform you that: personal data is ELPACK with its registered office at ul. Magazynowa 5A, 30-758 Kraków, regarding the protection of personal data and related rights, you can contact us at: elpackkrakow1@gmail.com. Your personal data will be processed in order to perform the sales service pursuant to art. 6 sec. 1 lit. b of the GDPR, which allows you to process personal data if they are necessary to perform the contract or take steps to conclude the contract; the recipient of your personal data will be an accounting company, a hosting company; Your personal data will be stored for a period of 6 years in connection with the issued invoice; you have the right to access your data and the right to rectify, delete, limit processing, the right to transfer data, the right to raise objections, the right to withdraw consent at any time without affecting the lawfulness of processing, which was made on the basis of consent before its withdrawal; you have the right to lodge a complaint with the UODO when you feel that the processing of your personal data violates the provisions on data protection; providing your personal data is a condition for concluding the contract. You are obliged to provide them and the consequence of not providing personal data will be the inability to conclude the contract; Your data will not be processed in an automated manner, including in the form of profiling.

Privacy policy

Kontakt