Privacy policy
Privacy Policy
Dear User,
This Privacy Policy aims to provide you with information regarding how your personal data is processed during your visits to our website, as well as when you contact our company or enter into contracts with us. It serves to provide the information referred to in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Who is the controller of your personal data?
1. The controller of your personal data is the company ELTEK POLAND Spółka z ograniczoną odpowiedzialnością, with its registered office in Bielsko-Biała at ul. Świt 16, 43-382 Bielsko-Biała; Tax ID (NIP): 9372423776; Statistical ID (REGON): 072910594; National Court Register (KRS) number: 0000213358; e-mail address: info_poland@eltekgroup.com.
2. For any matters concerning personal data protection, you may contact us via e-mail at: iodopoland@eltekgroup.com, or by mail at the address: ELTEK POLAND Sp. z o.o., ul. Świt 16, 43-382 Bielsko-Biała, marked "Data Protection Officer".
How do we ensure the security of your personal data?
1. Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – "GDPR"), as well as other currently applicable data protection laws.
2. We implement technical and organizational measures required by national and EU law to ensure the protection of processed personal data and to safeguard it against unauthorized disclosure, unauthorized access, unlawful processing, alteration, loss, or destruction.
3. Providing personal data is voluntary but necessary to use website functionalities that require it, as well as to conclude a contract for our services and to issue accounting documents related to such a contract.
4. Where the processing of personal data is based on consent, failure to provide such consent will prevent us from taking the action to which the consent relates. You may withdraw your consent at any time; however, this will not affect the lawfulness of the processing of your personal data carried out by us based on your consent prior to its withdrawal.
For what purposes and on what legal basis do we process your personal data, and how long will we retain it?
We process your personal data primarily for the purpose of concluding and performing contracts involving our company, as well as for taking steps prior to their conclusion. We also process your personal data for the purpose of providing electronic services in connection with your use of our website. We may process your personal data for the following purposes:
1. Conclusion of contracts
The personal data you provide in connection with the conclusion of contracts with our company (specifically: first name and surname, address [street, building number, unit number, city/town, country], e-mail address, telephone number, representative’s details, order number, order date, order value, and—in the case of business entities—company name, address, and tax identification number [NIP]) are or may be processed by us for the following purposes and on the following legal bases:
a) performance of the contract, as well as taking steps at your request prior to its conclusion (Art. 6(1)(b) of the GDPR),
b) potential establishment, exercise, or defense of claims arising in connection with concluded contracts, as well as other purposes (e.g., archiving for the purpose of demonstrating facts) that constitute our legitimate interest (Art. 6(1)(f) of the GDPR),
c) issuance and storage of accounting documents and handling of potential complaints, in accordance with applicable regulations (Art. 6(1)(c) of the GDPR). We will process your personal data for the duration of the contract, unless continued data retention is required by applicable laws (e.g., tax or accounting regulations), justified by the statute of limitations for claims, or justified by our overriding interest arising from the pursuit of legitimate interests. In any case, the longer personal data retention period shall apply.
2. Services provided by electronic means
Personal data provided by you, or other data collected in connection with your use of our website (such as, in particular: your IP address, request URL, device identifier, time spent on specific pages, browser type, browser language, date and time of website usage, screen resolution, operating system type and version), are or may be processed by us for the following purposes and on the following legal bases:
a) provision of services by electronic means, based on the agreement for the provision of services by electronic means, as well as taking steps at your request prior to concluding said agreement (Art. 6(1)(b) of the GDPR),
b) potential establishment, assertion of, or defense against claims that may arise in connection with your use of our website, as well as other purposes (e.g., archival purposes to demonstrate facts) that constitute our legitimate interest (Art. 6(1)(f) of the GDPR).
We will process your personal data for the duration of the provision of services by electronic means, unless further data retention is justified by the statute of limitations for claims, required by generally applicable laws, or justified by our overriding interest arising from the pursuit of legitimate interests. In any case, the longer personal data retention period shall apply.
3. Website marketing and analytics
Personal data provided by you, or other data collected in connection with your use of our website, are or may be processed by us for the following purposes and based on the following legal grounds:
a) marketing of our services, which constitutes our legitimate interest in conducting marketing activities (Art. 6(1)(f) of the GDPR), subject to the proviso that the sending of commercial information by us via telecommunications terminal equipment and automated calling systems is possible only with your prior consent (granting such consent is voluntary but necessary for the transmission of commercial information); in such a case, the legal basis for processing personal data may also be your consent (Art. 6(1)(a) of the GDPR)
b) compiling summaries, analyses, and statistics—including reporting, service development planning, development work, and the creation of statistical models—which constitutes our legitimate interest in improving and developing the website (Art. 6(1)(f) GDPR),
c) establishing, pursuing, or defending against potential claims arising from your use of our website, as well as other purposes (e.g., archiving to demonstrate facts) that constitute our legitimate interest (Art. 6(1)(f) GDPR).
We will process your personal data for marketing activities based on consent until such consent is withdrawn, and for marketing activities based on legitimate interest until an objection is raised, unless continued data retention (in either case) is justified by the statute of limitations for claims, required by applicable law, or justified by the Controller’s overriding interest arising from the pursuit of legitimate interests.
4. Contact via email or telephone
The personal data you provide in connection with email or telephone contact (i.e., data necessary to establish and maintain contact), as well as data collected during subsequent communication, are or may be processed by us for the following purposes and based on the following legal grounds:
a) responding to email or telephone inquiries, which constitutes our legitimate interest (Art. 6(1)(f) of the GDPR),
b) taking steps at your request prior to entering into a contract, if the communication concerns such matters (Art. 6(1)(b) of the GDPR),
c) the potential establishment, exercise, or defense of claims arising from your use of our website, as well as other purposes (e.g., archiving for the purpose of demonstrating facts) that constitute our legitimate interest (Art. 6(1)(f) of the GDPR).
We will process your personal data for the duration of the correspondence, unless further data retention is justified by the statute of limitations for claims, required by applicable law, or justified by the Controller’s overriding interest arising from the pursuit of legitimate interests. In any case, the longer personal data retention period applies.
5. Social media
The personal data you provide when visiting our social media profiles (comments, likes, shares) are or may be processed by us for the following purposes and based on the following legal grounds:
a) maintaining social media profiles and conducting marketing and promotional activities within those profiles, which constitutes our legitimate interest (Art. 6(1)(f) of the GDPR),
b) establishing, pursuing, or defending against potential claims arising from your use of our social media profiles, as well as other purposes (e.g., archiving for the purpose of establishing facts) that constitute our legitimate interest (Art. 6(1)(f) of the GDPR).
We will process your personal data until the aforementioned purposes are fulfilled or until an objection is raised, unless continued data storage is justified by the statute of limitations for claims, required by applicable law, or justified by the Controller's overriding interest arising from the pursuit of legitimate interests. In any case, the longer personal data retention period applies.
What are cookies?
1. Our website uses cookie technology and similar functionalities. Cookies are stored on the end device of the person visiting the website. Every visitor has the option to choose the scope of cookie usage and provide their consent via the so-called cookie banner displayed during their first visit to the website.
2. Cookies are IT data—specifically text files—stored on the visitor's end device and intended for use with the website. Cookies typically contain the name of the website they originate from, the duration of their storage on the end device, and a unique number.
3. Cookies are primarily used to ensure the proper functioning of the website. Depending on the scope of cookie usage selected by the visitor, cookies may also be used for other purposes, such as generating statistics to help understand how users interact with the website—thereby enabling improvements to its structure and content—and for marketing purposes. These marketing activities include reaching visitors who have previously visited the website with advertising messages while they browse other websites or social media platforms (third-party cookies—i.e., those from providers of tools used by the Controller for this purpose—may also be utilized in this context).
4. Depending on the selected scope of cookie usage, they collect various types of information which, as a general rule, do not constitute personal data. However, depending on the type of cookies used, some information collected in this manner may allow for the identification of the website visitor, particularly when combined with other data. This applies primarily to cookies that require the visitor's consent for their use. The remaining provisions of the Privacy Policy apply to such information, particularly regarding the rights of the data subject.
5. Detailed information regarding the scope and types of cookies used on the website can be found in the cookie banner displayed during the first visit to the website, as well as by clicking the "Cookie settings" button. In the same way, a website visitor may change their cookie preferences at any time—including withdrawing previously granted consent—without affecting the lawfulness of actions taken based on consent prior to its withdrawal.
6. Cookies used to ensure the proper and secure functioning of the website ("necessary cookies") are deployed pursuant to Art. 399 para. 3 point 2 of the Electronic Communication Law. In all other cases (analytical, functional, and marketing cookies), the collection and storage of information are based on your voluntary consent, expressed via the cookie banner displayed during your first visit to the website or by changing settings after clicking the "Cookie settings" button.
7. To the extent that cookies may contain information constituting personal data, the basis for processing is the user's consent (Art. 6 para. 1 point (a) of the GDPR) and the Controller's legitimate interest (Art. 6 para. 1 point (f) of the GDPR)—such as monitoring and analyzing website traffic for statistical purposes, as well as conducting marketing activities by the Controller or third parties. Where such third parties have direct access to this type of information, the legal basis for such processing will be the legitimate interest of those third parties or separate consent expressed by the visitor (e.g., within the privacy settings of a social media platform). To the extent that information collected via cookies is necessary for the proper provision of electronic services within the website, the legal basis for processing such information is Article 6(1)(b) of the GDPR.
8. Depending on the purposes and legal basis for processing personal data, information collected via cookies may be stored for varying periods. Information regarding the storage periods for data collected by specific cookies can be found in the cookie banner displayed during your first visit to the Website, as well as by clicking the "Cookie settings" button. Where information collected via cookies constitutes personal data, it will generally be stored until an objection is raised. Personal data may also be stored until the statute of limitations for claims expires or for the duration required by applicable law. In any case, the longer personal data storage period applies.
9. The Website uses marketing and analytics tools from third-party providers that employ cookies on the Website (third-party cookies). The providers of these tools are listed in the section below. Further information regarding these entities' cookies can be found in their respective privacy policies. Cookies originating from these third parties—who may act as independent controllers or as joint controllers alongside the Controller—may be stored on the device used by the Website visitor.
10. The Website uses marketing and analytics tools provided by the following entities, which employ third-party cookies: Google Ireland Limited.
11. Some of the aforementioned providers may store user data outside the European Economic Area. In such cases, your data will be transferred only to countries that ensure an adequate level of protection; transfers to countries that do not ensure an adequate level of protection will occur only if appropriate safeguards are in place, such as—among others—Standard Contractual Clauses adopted by the European Commission.
What are your rights?
You have a number of rights regarding our processing of your personal data. You may exercise any of these rights by contacting us via email at iodopoland@eltekgroup.com or by mail at the following address: ELTEK POLAND Sp. z o.o., ul. Świt 16, 43-382 Bielsko-Biała, marked "Data Protection Officer."
You have the right to:
a) access your personal data and the right to request its rectification, erasure, or restriction of processing. To the extent that the processing is based on our legitimate interests, you have the right to object to the processing of your personal data,
b) withdraw your consent, to the extent that the processing of your personal data is based on consent. The withdrawal of consent does not affect the lawfulness of processing carried out based on consent prior to its withdrawal,
c) data portability, to the extent that the processing of your personal data is based on consent or a contract—i.e., the right to request that we provide you with your personal data in a structured, commonly used format,
d) to lodge a complaint with the President of the Personal Data Protection Office whenever you believe that the processing of your personal data violates your rights.
Automated decision-making and profiling
Your personal data will not be used for automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR.
To whom do we disclose your personal data?
Your personal data may be transferred to entities authorized to obtain such data under applicable law, as well as to entities to whom we entrust data under contracts for services related to the operation of our website—such as hosting, marketing, and IT system provision. We may also transfer your personal data to providers of tools used for analytics, statistics generation, website traffic tracking, and marketing automation.
In certain instances, we use Google reCAPTCHA on our website to prevent automated bots from using text input fields. Consequently, Google Ireland Limited may obtain information regarding the user's IP address.
Some service providers may store your data outside the European Economic Area. In such cases, your data will be transferred only to countries that ensure an adequate level of protection; transfers to countries that do not ensure an adequate level of protection will occur only if appropriate safeguards are in place—such as the Standard Contractual Clauses adopted by the European Commission.