Data protection / GDPR

The controller of your personal data is ELMAL Spółka z ograniczoną odpowiedzialnością with its registered office at ul. Górecka 32, 43-430 Skoczów, entered into the Register of Entrepreneurs kept by the District Court in Bielsko-Biała, 8th Economic Division of the National Court Register, KRS number 0000249487, NIP 5482467264, REGON 240284371, tel. 33 853 0407, fax 33 857 8679, e-mail: biuro@elmal.pl

Conclusion and performance of a service contract or taking actions at the request of a prospective Client before its conclusion, based on Article 6(1)(b) of the GDPR,

Sending a commercial offer based on Article 6(1)(a) of the GDPR,

profiling for evaluation and analysis purposes and tailoring the offer to the interests of a given Client, e.g., by analyzing how often they visit the online store and whether and what products they buy or reserve. This allows for a better understanding of the Client's expectations and adjusting to their needs, without significantly affecting their decisions, based on Article 6(1)(a) of the GDPR,

Fulfillment of legal obligations resulting from regulations, e.g., tax and accounting regulations, based on Article 6(1)(c) of the GDPR,

Handling complaints – based on Article 6(1)(c) and (f) of the GDPR.

establishment, exercise, or defense of legal claims that the Controller or the Client may have against each other — based on Article 6(1)(f) of the GDPR

Other entities on the basis of commissioned services, in accordance with concluded data processing agreements, as well as when required by applicable laws.

In the event that personal data is processed in connection with the conclusion and performance of contracts – until the expiry of the limitation period for claims that the parties could pursue in connection with the performance of the contract,

In the event that personal data is processed on the basis of consent, the processing period lasts until this consent is withdrawn by the user, but no longer than until the liquidation of the business conducted by the Controller,

In the event that personal data is processed on the basis of the legitimate interest of the Data Controller, the processing period lasts until the termination of the aforementioned interest (e.g., the limitation period for civil claims) or until the data subject objects to further such processing – in situations where such an objection is legally permitted,

In the event that personal data is processed due to applicable laws, the processing periods are determined by these regulations.

You have the right to access the content of your data and the right to rectify, erase, restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of your personal data violates the provisions of the General Data Protection Regulation of 27 April 2016.

Providing personal data is a contractual condition/a condition for entering into a contract. Providing data is voluntary, but the consequence of not providing personal data will be the inability to present a commercial offer and conclude a contract for the provision of services.

In the event that personal data is processed due to applicable laws, the processing periods are determined by these regulations.

The Controller transfers personal data outside the EEA only when necessary and ensuring an adequate level of protection, primarily through: cooperation with entities processing personal data in countries for which a relevant European Commission decision has been issued; application of standard contractual clauses issued by the European Commission; application of binding corporate rules approved by the competent supervisory authority and, in the case of transferring data to the USA, cooperation with entities participating in the Privacy Shield program, approved by a European Commission decision.

Information we collect in connection with the use of our website may be processed in an automated manner (including profiling), however, this will not produce any legal effects for a natural person or significantly affect their situation in a similar way.