Privacy policy

§1 WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

The data administrator is ECOVARM SP. Z O.O. conducting business under the name ECOVARM SP. Z O.O. , NIP: 6572228078, REGON: 291056390, address: ADAMA MICKIEWICZA 8/- ul.

26-015 PIERZCHNICA ŚWIĘTOKRZYSKIE. You can contact the Administrator by writing to the e-mail address: info@ecovarm.com

§2 FOR WHAT PURPOSE DO WE COLLECT YOUR DATA AND HOW LONG DO WE KEEP THEM?

We may process your data for the following purposes:

1. communicating with you, including responding to questions submitted via the contact form, email, etc;

Your data will be processed based on the legitimate interest of the Controller, in the form of communication with Users of the Website (Article 6(1)(f) RODO). Your data will be processed no longer than until you object or the business purpose ceases. The provision of this data is voluntary, but at the same time necessary for communication with you. The data may also be processed during the archiving process for internal purposes, based on the Administrator’s legitimate interest (Art. 6(1)(f) RODO), until you raise an objection or the business purpose ceases.

2. the conclusion of a contract and its performance (placing an order);

3. the establishment, defence and assertion of claims;

4. the fulfilment of legal obligations incumbent on the Administrator (among others, tax and archiving obligations);

The data necessary for the conclusion and performance of the contract will be processed for the duration of the contract, including the duration of contractual rights, such as the right of complaint under warranty (Art. 6(1)(b) and (f) RODO). The provision of this data is voluntary, but at the same time necessary for the conclusion and execution of the contract.

Additional data provided for the purpose of, among other things, facilitating the performance of the contract, will be processed for no longer than until you raise an objection or the business purpose ceases, based on the legitimate interest of serving customers (Art. 6(1)(f) RODO).

After this time, the data will be processed for the period of the statute of limitations for claims, based on the Administrator’s legitimate interest in defending against claims, as well as for the establishment and investigation of claims (Art. 6(1)(f) RODO).

Where the data are necessary for the fulfilment of legal obligations incumbent on the Administrator (such as issuing and storing invoices, implementing procedures under the Digital Services Act) – the data will be processed for this purpose for no longer than 6 years (archiving obligations regarding accounting documents), unless otherwise provided by law (Article 6(1)(c) RODO).

Data may also be archived for internal and statistical purposes until you raise an objection or the business purpose ceases, based on the Administrator’s legitimate interest (Art. 6(1)(f) RODO).

5. to provide marketing information (including sending you newsletters and information about services, products, promotions, free content through other tools, e.g. chatbot, telephone);

The data will be processed on the basis of the legitimate interest of the Controller, in the form of marketing of the Controller’s products and services (Article 6(1)(f) RODO). The data will be processed no longer than until you raise an objection or the business purpose ceases – whichever comes first. The provision of data is voluntary, but necessary in order to receive marketing/commercial information.

In accordance with Article 10 of the Act on the Provision of Electronic Services, I need your consent for the purposes of maintaining commercial and telephone communications. You can withdraw it at any time by clicking on the link in the footer of the email or by writing to me, at the address given above.

6. the administration and management of the website and groups on social media platforms (including Facebook (Meta), Instagram, LinkedIn), when processing data on social media platforms, including communication and targeting of marketing content;

The data will only be processed if you choose to: liking the page / joining a group / selecting ‘Observe’ or otherwise leaving your data on the platform, managed by me, e.g. in the form of posting or commenting. The data will be processed for the duration of the existence of the page/group or until you raise an objection, which can be done by un-clicking the ‘Like’ option, ‘Observe’, deleting the comment/entry or in any other way provided for by the platform/website or by contacting me . Please be advised that the rules relating to the page/fanpage/group are set by the Administrator, while the rules for the use of the social network on which the page/fanpage/group is placed are set by the entity managing these portals.

7. Analytical and statistical purposes;

The processing of data for analytical and statistical purposes, consists in particular in the analysis of data obtained automatically when using the website, including cookies. The data are processed on the basis of the legitimate interest of the Administrator, in the form of adapting the content of the Website to the User’s preferences and optimising the use of the Website; creating statistics that help to understand how the Users use the Website, which enables the improvement of its structure and content (Article 6(1)(f) RODO). Data may also be archived for internal and statistical purposes, based on the Administrator’s legitimate interest (Article 6(1)(f) RODO), until you object or the business purpose ceases.

8. promotion and marketing;

Where you provide us with your data, in particular in the form of an opinion on a product or service, including image data, it will be processed on the basis of the Administrator’s legitimate interest in marketing, for the purpose of improving the quality of the Administrator’s services and products and promoting the Administrator’s services and products. The data will be processed for the period necessary to fulfil the business purposes or until you raise an objection. The provision of data is voluntary.

9. Collection of sensitive data;

Sensitive data is collected for the performance of the contract and its proper execution – on the basis of your informed and voluntary consent (Art. 9(2)(a) RODO) – until the business purpose ceases or you withdraw your consent. The provision of data is voluntary, but is necessary for the proper execution of the contract.

10. Recruitment;

The data may be processed for the time necessary for the recruitment process and the conclusion of the contract (Article 6(1)(b) and Article 6(1)(c) RODO) and, in the case of additional data voluntarily provided, based on your consent. They may also be used for future recruitment purposes – based on your consent – for a maximum period of 3 years (this period is calculated from the end of the year in which the application was obtained). The provision of personal data is voluntary, with the proviso that the provision of certain data, may be necessary to carry out the recruitment, as well as to conclude a contract. The consequence of failing to provide such data will be the failure to undertake the aforementioned activities.

§3 TO WHOM MAY WE FORWARD YOUR DATA?

We only pass on your data to other parties if this is necessary for the purposes of the processing referred to in §2 and only to the extent necessary to fulfil this purpose. As a matter of principle, we only collect and process data that you yourself have provided to us, with the exception of automatically collected data (cookies). You can find out more about cookies in §7.

If necessary, your data may be transferred to entities with whom we cooperate in the fulfilment of the aforementioned purposes, in particular the hosting company, the entity managing the website, entities providing marketing services, entities providing administrative services, other entities that support the Administrator in the fulfilment of the processing purposes.

As a general rule, data will not be transferred outside the EEA, except as described below. In other cases, where data will be transferred outside the EEA, this will be on the basis of your consent, standard contractual clauses or on the basis of other safeguards provided for in the RODO, after compliance with, among other things, the information obligation.

The services provided by Google or Facebook (META), are generally performed by entities based in the European Union. However, due to the global nature of the operation of these entities, your data may be transferred to the USA, in connection with their storage on US servers (in whole or in part). Notwithstanding this, Google and Facebook have implemented safeguards in line with the requirements of the DPA to protect your personal data, through the use of standard contractual clauses. For more information on the data processing practices of the above providers, please refer to the Privacy Policies of each entity.

Your data (insofar as this is due to the purpose of the processing) may also be transferred outside the EEA to the following entities:

1) Active Campaign LLC 1 N Dearborn St., 5th Floor, Chicago, Illinois 60602

2) Asana, Inc., 1550 Bryant Street, 2nd Floor San Francisco, California 94103,

§4 WHAT RIGHTS DO YOU HAVE?

In connection with the GDPR, you have the right to access your personal data, rectify personal data, delete personal data, limit the processing of personal data, object to the processing of personal data, transfer personal data, withdraw consent to data processing; withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. Detailed information regarding the above-mentioned rights are contained in the GDPR Regulation, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/ 46/EC (General Data Protection Regulation).

If you believe that your personal data is being processed contrary to applicable law, you have the right to complain to the President of the Office for Personal Data Protection. In such a case, I encourage you to contact me in advance to clarify your doubts.

§5 IS YOUR DATA PROFILED?

The administrator analyzes personal data in an automated manner, using tools provided by software suppliers (e.g. statistics, history), only to the extent that it does not produce any legal effects for you or does not significantly affect your situation, including your guaranteed rights. and freedom. The purpose of data processing in an automated manner is to learn about Users’ preferences (more information about the analysis can be found in §7 Cookie Policy).

§6 LAW APPLICABLE TO PERSONAL DATA

In unregulated matters, the relevant provisions of law, including European law (including GDPR), shall apply.

§7 COOKIES POLICY

The website does not automatically collect any information, except for information contained in cookies. This data is collected in a way that makes it impossible to identify the User, the so-called anonymous data.

Cookies (so-called “cookies”) are IT data, in particular text files, which are stored on the Website User’s end device and are intended for using the Website. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.

Cookies are used: to adapt the content of the Website to the User’s preferences and to optimize the use of the Website, as well as to create statistics that help understand how Users use the Website, which allows improving its structure and content.

You can make changes to your cookie settings yourself. In many cases, the web browser allows cookies to be stored on the User’s end device by default. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings. Failure to consent to cookies may limit the operation of some functionalities on the Website.

The Administrator uses technologies that monitor actions taken by the User on the Website:

– Facebook conversion pixel (Meta) provided by Meta Platforms Ireland Limited – to manage ads on Meta and conduct remarketing activities; Facebook Pixel is a piece of code published on a website that allows you to reach the target group based on the data of people who used the website. As part of the Facebook Pixel function, it is therefore possible to display published advertisements on portals belonging to Meta only to portal users who have shown interest in products or services or have common factors to the above-mentioned. people. These data are processed based on the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR). Detailed information regarding the Facebook Pixel can be found on the Facebook Privacy Policy (Meta) page.

– Google tools, including Google Analytics provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data obtained as part of the use of the above-mentioned. I use the tools to analyze website statistics. Google Analytics uses its own cookies to analyze the activities and behaviors of Website Users. These files are used to store information, e.g. from which website the User came to the current website. They help improve the Site. These data are processed based on the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR). Detailed information about Google Analytics can be found on the website: rules for using Google tools.

§8 SOCIAL PLUG-INS

The Website uses plug-ins, widgets and other social tools provided by portals such as: Facebook (Meta), Instagram, YouTube, LinkedIn. The rules regarding the processing of personal data are described directly on the above-mentioned websites. Service providers.

§9 CO-ADMINISTRATION

Data processed for the purposes of statistics collected on the Facebook (Meta) platform are co-administered by the Administrator and Meta Platforms Ireland Limited, based at 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, hereinafter referred to as the Co-Administrator. Detailed rules regarding co-administration of data, including information on your rights, are described on the Privacy Policy page.

Data processed within the LinkedIn platform is co-administered by the Administrator and LinkedIn Ireland Unlimited Company, address: Legal Dept. (Privacy Policy and User Agreement), Wilton Place, Dublin 2, Ireland, hereinafter referred to as the Joint Controller. Detailed rules regarding co-administration of data, including information on your rights, are described on the Privacy Policy page.

The Administrator processes data based on the Administrator’s legitimate interest, consisting in conducting analyzes of Users’ activity, as well as their preferences, in order to improve the functionalities used and the services provided. In matters relating to personal data, you can contact both the Administrator and the Joint Administrator.