Privacy policy

Privacy Policy of the website – www.elstal.com.pl

Data Administrator

The Administrator of personal data collected via the website – www.elstal.com.pl – is Paulina Ludkowska running a business under the name eLstal Paulina Ludkowska, ul. Miechowska 5-7, 85-875 Bydgoszcz hereinafter referred to as the “Administrator”. Personal data is collected and processed in the manner specified in this Policy. Contact with the Administrator is possible at the email address: biuro@elstal.com.pl.

General provisions

Paulina Ludkowska running a business under the name of eLstal Paulina Ludkowska, ul. Miechowska 5-7, 85-875 Bydgoszcz is the Administrator of personal data within the meaning of art. 4 point 7 of GDPR, i.e. the entity deciding on the purposes and means of processing your personal data collected in connection with visiting the website – www.elstal.com.pl, and using the contact forms provided on it. In the processing of personal data of our website users, we also use the services of processing entities referred to in art. 4 point 8 of GDPR, among others providing hosting services for the Administrator.

In our activities, we pay special attention to the protection of the privacy of our clients and contractors. One of its key aspects is the protection of the rights and liberties of persons in relation to the processing of their personal data.

We make sure that the processing of your data takes place in accordance with the provisions of the General Data Protection Regulation 2016/679/EC (hereinafter referred to as “GDPR”), the Act on the protection of personal data, as well as specific provisions (included, among others, in the Act on providing services by electronic means or the Telecommunications Act).

As the Administrator, we have implemented appropriate technical and organisational measures to ensure the level of security corresponding to the risk of violating the rights and liberties of natural persons with a different probability of occurrence and the severity of the threat. We have developed policies and procedures and regularly participate in training on data protection rules to broaden our knowledge and competence in this area.

What we use personal data for

Taking care of the protection of your personal data, we pay special attention to protect your interests, rights and liberties, in particular we ensure that the data we collect is:

Collected for specific, legitimate purposes and not subjected to further processing incompatible with these purposes;
Processed lawfully.

Purpose and scope of collected personal data:

Your personal data is collected for the following purposes:

In order to answer an inquiry made via the contact form – in accordance with the principle that the processing of personal data is lawful if it is necessary for the performance of the contract or for contact before its conclusion.

In order to implement the legitimate interest of the Administrator consisting in providing information services on the website – www.elstal.com.pl .

The categories of data we collect:

Name and surname;
E-mail address;
Phone number;
Computer IP address;
Name of the organisation on behalf of which you contact the Administrator.

Your data is not subject to profiling – that is, the data is not processed in an automated manner to determine your needs or personality traits and we do not collect any additional information about you from other sources.

We do not trade data or share your personal data with other entities. First of all, your data is not transferred outside the EEA (European Economic Area) and is not transferred to international organisations.

Processing of the data of persons contacting us via social networks

As a rule, Facebook.pl and Instagram.com are the administrators of their users’ personal data and process it on the basis of their own regulations and policies that the user accepts when creating an account.

Regulations for the use of Facebook.pl https://www.facebook.com/privacy/explanation

Regulations for the use of Instagram.com https://help.instagram.com/581066165581870

In a situation when you contact us or enter into a relation via Facebook.pl or Instagram.com (i.e. watching our posts, leaving comments, likes or sharing posts), eLstal Paulina Ludkowska also becomes the administrator of your personal data. We process the data that we have access to via social networks (name and surname/nickname, photos, profile and other information that is provided to us via private messages by Messenger or in comments) based on the legitimate interest of the administrator to respond to the message, comment on the post and to maintain relations with people interested in our products and services.

We do not combine data obtained through social networks with data that you provide to us through other channels, unless you send us a private message in which you provide your e-mail address or other data that we will use for contact. We do not transfer your data to other entities, but social networks may do so. Please note that Facebook and Instagram as administrators of data of their users have full access to all information about you.

If you want to keep the confidentiality of the data you provide to us, please use other communication channels than social networks. During communication through our e-mail addresses indicated for contact on the website – www.elstal.com.pl/kontakt – we have full control over the confidentiality and access to the information contained therein.

Links to other websites

Website – www.elstal.com.pl – in the Cooperation tab, contains links to the websites of our clients and business partners in the form of interactive logotypes. The Administrator is not responsible for the confidentiality and privacy rules of the pages to which the redirect occurs.

Who may be the recipient of your data

The recipients of the data of visitors to the website are:

provider of the website administration service www.elstal.com.pl i.e. Special Space sp. z o.o., located in Bydgoszcz (85-703), at ul. Kijowska 44;
provider of the website and e-mail hosting service for the Administrator, Teleinspiro Sp. z o.o. ul., Libelta 8, Bydgoszcz (85-080) NIP: 9671441090, KRS 0000870556.

How long will we process your personal data

We limit the storage period of your personal data that is no longer used as much as possible, i.e. we process it only for the time necessary to decide whether further contact is advisable, as well as for the time needed to delete data from the backup copy.

Your personal data processed for the purpose of handling the inquiry will be processed for the duration of the correspondence and then, depending on the results of the negotiations, they will either enter our client database and will be processed in connection with the performance of the contract or will be deleted if we do not establish cooperation.

Rights of data subjects

The right to request access to their data and receive a copy of it;
The right to rectify (correct) their data, if it is incorrect or out of date, as well as the right to delete it, in a situation where data processing does not take place in order to fulfill the obligation arising from the law;
the right to limit or object to processing;
the right to lodge a complaint with the President of the Personal Data Protection Office (to the address of the Personal Data Protection Office, ul. Stawki 2, 00 – 193 Warszawa).

How we take care of data processing

To meet legal requirements, we have developed and implemented detailed procedures covering such issues as:

Risk analysis for the rights and liberties of persons;
Notification of violations;
Data retention;
Implementation of the rights of data subjects.

We regularly check and update our documentation to be able to demonstrate compliance with the legal requirements in accordance with the principle of accountability set out in the GDPR, but also in the interests of data subjects, we try to incorporate the recommendations of the Personal Data Protection Office and the European Data Protection Board (EDPB) into it.

Authorisations

We assure you that every person acting under our authorisation and having access to your personal data processes it only upon our request, unless other requirements result from EU law or the law of a Member State.

Is providing personal data necessary?

Providing personal data in connection with visiting the website – www.elstal.com.pl, and asking questions using the contact forms is voluntary, but failure to provide them results in the inability to use the website’s services.

Profiling and automated decision making

Your personal data is not profiled and will not be subject to automated decision making by the Administrator.

Cookies

Our website uses cookie files, i.e. cookies. Cookies are stored in the memory of your device. Thanks to them, you can use all the functionalities of the Website. Cookies do not change the settings of your devices. The cookies of the website – www.elstal.com.pl – do not store confidential data such as name, surname or address. In order to limit, block or delete cookies from the website – www.elstal.com.pl, use the web browser settings. Each browser is different, but you can see how to change your cookie preferences in the browser’s “Help” menu.

Cookies that we use for the functioning of the website – www.elstal.com.pl

PHPSESSID – necessary cookies help make the website useful by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Statistical cookies of the Google Analytics application used on the website – www.elstal.com.pl

_ga – registers a unique identifier that is used to generate statistical data on how the user uses the website. This cookie is stored on the user’s end device for 2 years.

_gat – Used to throttle request rate. This cookie is stored for 1 day on the user’s end device.

_gid – registers a unique identifier that is used to generate statistical data on how the user uses the website. This cookie is stored for 1 day on the user’s end device.

The Administrator of the website – www.elstal.com.pl – does not profile the personal data of website users and does not subject them to automated decision-making processes. However, Google can (and does) do so.

The website Administrator uses the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The legal basis for such action is the legitimate interest of the Administrator consisting in the creation and analysis of statistics in order to optimise the functioning of the website.

Google Analytics collects information about the use of the website automatically.

The Administrator has activated the function of partial anonymisation of the user’s IP address, i.e. the user’s IP address is shortened before being transferred outside the European Economic Area. The anonymised IP address provided by the user’s browser as part of Google Analytics is, as a rule, not combined with other Google data.

Due to the fact that Google LLC is based in the USA and uses technical infrastructure located in the USA, it joined the EU-US-Privacy Shield program in order to ensure an adequate level of personal data protection required by the European law. Within the framework of the agreement between the US and the European Commission, the latter has established an adequate level of data protection in the case of companies certified by the Privacy Shield.

The user can prevent the recording of data collected by cookies on the use of the website –www.elstal.com.pl – by Google, as well as the processing of this data by Google, by installing the browser plug-in at the following address: https://tools.google.com/dlpage/gaoptout .

Details on data processing as part of Google Analytics can be found at: https://support.google.com/analytics/answer/6004245 .