SKAWINA PLANT
WILAMOWICE PLANT
WADOWICE PLANT
Privacy Policy
Privacy and cookie policy
Protection of our website users’ privacy is our utmost priority. Therefore, we make every effort to secure our customers’ personal data. This privacy policy clearly presents and clarifies the principles and scope of all personal data processing. It also contains our cookie procedure. We apply state-of-the-art technical and organisational measures, guaranteeing high level of protection of personal data processing.
The privacy policy has been drawn up by Eko-Wtór® Sp. z o.o. ul. Piłsudskiego 57 32-050 in Skawina and it is addressed to customers using the website ekowtor.pl.
Definitions
- Controller – an entity which independently determines objectives and methods of personal data processing. The Controller of the personal data of users of ekowtor.pl is Eko-Wtór® Sp. z o.o., registered office: ul. Piłsudskiego 57 in Skawina (32-050), Tax Identification Number: 937 23 63 991,
- Personal data – information on an identified or identifiable natural person,
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC,
- Website ekowtor – website eko-wtor.pl featuring static content, containing a contact section, and able to remember its users’ preferences in order to adapt its content to their individual tastes.
- Policy – this privacy policy, valid from 1 October 2023,
- User – every natural person visiting the website eko-wtor.pl,
- Device – each electronic device with software, which allows the User to have access to the website eko-wtor.pl
- Cookies – IT data, text files stored on users’ devices (e.g. laptop, computer, tablet, or phone) sent by websites.
Who is the personal data controller?
The personal data controller for all website users who are natural persons, within the meaning of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), is Eko-Wtór® Sp. z o.o, registered headquarters ul. Piłsudskiego 57 in Skawina (32-050), the administrator of the website available at www.eko-wtor.pl.
How to contact the personal data controller?
In all matters regarding personal data processing in connection with using the website eko-wtor.pl, contact the controller by sending an e-mail to : info@ekowtor.pl or calling the number +48 33 845 72 71 or by post to the address Eko-Wtór® Sp. z o.o. ul. Piłsudskiego 57 Skawina 32-050.
How to we obtain your personal data?
We received your personal data from you when you visited the website ekowtor.pl.
What types of your data do we process?
The controller processes your data connected with cookies: IP address, domain name, website browser type, operating system type, data on the User’s navigation path, and the duration of the User’s stay on specific subpages.
What is the legal basis of our processing of your data?
In compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, we process your data:
- When the processing is necessary for compliance with a legal obligation (Article 6 Section 1 Letter c of GDPR). The controller processes your personal data in compliance with the following, without limitations:
- Provisions of the telecommunications law
- Regulations on provision of services electronically
- When processing is necessary for the purposes of the legitimate interests pursued by the controller (Article 6 Section 1 Letter f of GDPR),
- When the data subject has given consent to the processing of his or her personal data (Article 6 Section 1 Letter a of GDPR).
The consent to the processing of your personal data is voluntary. You have the right to withdraw your consent at any time. Your consent withdrawal does not affect the compliance of the processing performed based on the consent before its withdrawal.
Do we disclose your personal data?
Information on our Users constitutes an important element of our activity and we are not involved in selling our Users’ personal data to other parties. Your personal data are disclosed to the controller’s subsidiaries. They adhere to equally high standards of security of your personal data. The disclosure is carried out only for strictly defined purposes in the manner described below:
- We disclose your personal data to public authorities and entities carrying out public tasks or acting for and on behalf of public authorities, exclusively to the extent and for the purposes set forth in relevant legal regulations,
- We disclose your personal data to entities collaborating with the controller which process personal data under relevant agreements,
- We disclose your personal data to entities performing the controller’s tasks, such as e.g. software provider,
- We disclose statistical data on our users to third parties; third parties are not capable of identifying any specific user based on this information.
Do we disclose your data to countries other than those belonging to EEA?
Most entities processing and collecting personal data on our platform are based in Poland and countries belonging to the European Economic Area (EEA). Only Google Inc., an entity we cooperate with in the scope of statistical services for our platform and user of the tool Google Analytics, is based in the USA. This entity is obligated to comply with the rules set forth in the UE-USA Privacy Shield programme on collecting, using, and storing personal data of EU citizens – in connection with the Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of the protection provided by the EU-U.S. Privacy Shield, as well as clauses adopted by the EU Commission.
How long do we store / process your personal data?
We will store your data for a period necessary for the purposes defined above; not shorter that the period defined in regulations on archiving or other relevant legal regulations.
We will also save electronic documents containing personal data, if:
- They are necessary to fulfil our obligations resulting directly from legal regulations,
- They are used for the purposes of fighting abuse and fraud,
- We use them for statistical purposes,
- They are needed for the purposes of archiving.
Your data obtained on the base of your consent for marketing purposes will be stored until you withdraw your consent for data processing for the purposes of marketing activities. If you wish to withdraw your consent for the controller’s marketing activities, you can do so at any time.
Facebook, YouTube, and Gowork profiles.
The controller has public profiles in social media platforms Facebook, YouTube, and Gowork. Consequently, the controller processes data left by individuals visiting these profiles (e.g. likes, comments, online IDs).
- Personal data of such individuals are processed:
- In order to enable them to be active on the profiles;
- For the purposes of running the profiles effectively by providing portal users with information on the controller’s initiatives and other activities and in connection with the promotion of all sorts of events, services, and products;
- For analytical and statistical purposes;
- Personal data can also be processed, if need be, in order to pursue claims or to defend against claims.
- The legal basis for personal data processing is the legitimate business pursued by the controller (Article 6 Section 1 Letter f of GDPR), consisting in:
- Promoting the controller’s brand and improving the quality of services provided by the controller,
- If necessary – pursuing claims and defending against claims.
NOTE: this information does not apply to personal data processing by administrators of websites (Facebook, YouTube, and Gowork).
Recruitment – Job offers.
- Within the scheme of recruitment processes, the controller expects candidates to provide their personal data (e.g. CV) exclusively to the extent it is set forth in relevant labour law regulations. Therefore, no other data should be disclosed. If applications contain additional data beyond the scope defined in relevant labour law regulations, the processing thereof shall be based on the candidate’s consent (Article 6 Section 1 Letter a of GDPR), expressed by a clear confirmation by way of submitting application documents by the candidate. In the event when applications contain information inadequate for the purposes of the recruitment process, they will not be used or taken into consideration in the recruitment process.
- Personal data are processed:
- In the event when the preferred form of employment is an employment contract – in order to fulfil the obligations resulting from relevant legal regulations connected with the recruitment process, including most of all the Labour Code – the legal basis is the legal obligation of the Controller (Article 6 Section 1 Letter c of GDPR in connection with labour law regulations);
- In the event when the preferred form of legal relationship is a civil law contract – for the purposes of the recruitment process the legal basis for processing data contained in application documents is undertaking steps prior to the contract conclusion upon the data subject’s request (Article 6 Section 1 Letter b of GDPR);
- For the purposes of the recruitment process in the scope of data not required under relevant legal regulations by the controller, as well as for the purposes of any recruitment processes in the future – the legal basis for processing data is constituted by a consent (Article 6 Section 1 Letter a of GDPR;
- For the purposes of verifying the candidate’s qualifications and skills and of determining terms of cooperation – the legal basis for processing data is constituted by the controller’s legitimate interest (Article 6 Section 1 Letter f of GDPR). The controller’s legitimate interest is verification of employment candidates and specification of terms and conditions of any future cooperation;
- For the purposes of determining or pursuing by the controller of any claims or of defending against claims made against the controller – the legal basis of processing data is the controller’s legitimate interest (Article 6 Section 1 Letter f of GDPR).
Collection of data during business contacts.
- In connection with the controller’s activity, the controller collects personal data also in other cases, e.g. during business meetings or by exchanging business cards, for the purposes of establishing and maintaining business contacts. The legal basis is constituted by the controller’s legitimate interest (Article 6 Section 1 Letter f of GDPR) consisting in building a contact base in connection with the controller’s business activity.
Personal data collected in such cases are processed exclusively for the purposes for which they have been collected, and the controller guarantees appropriate protection thereof.
What rights do you have regarding the processing of personal data?
Processing of your personal data entails a need to respect your rights regarding your privacy.
The nature of the undertaken measures is decisive for the scope of the rights you are entitled to.
- How can you exercise your rights? If you wish to exercise your rights, you are free to contact the controller of the website info@ekowtor.pl. By contacting the contact person, you will receive a copy of your data or get some information about their processing. The security of your personal data is guaranteed by our internal procedures, which will easily allow us to exercise your rights.
If you wish to exercise any of your rights listed below, contact the administrator by sending an e-mail to info@ekowtor.pl
- Right to access your personal data. Exercising this right allows to provide you with the information whether we process your personal data, and if we do, you have the right to obtain a copy of your personal data. Additionally, it will enable you to verify whether we process your personal data in a lawful manner.
- Right to restriction of your personal data. Remember: when you file an objection to further processing, we will have to verify whether we still have precedent and legally justified grounds for keeping processing your personal data. If your exercise this right, you can demand that the further processing of your personal data be restricted in the following cases:
- When you question the correctness of your personal data,
- When it turns out that our processing is not compliant with legal regulations in force,
- When you need your data to determine, pursue, or defend claims.
- Right to erasure of your personal data. We are obligated to erase your personal data immediately:
- When your data are no longer indispensable for the purposes for which they have been collected or otherwise processed,
- When you have exercised your right to object to processing of your data,
- When you have withdrawn your consent on the basis of which we processed your personal data,
- When we processed your data unlawfully or if we are obligated to erase your personal data in order to fulfil an obligation imposed by legal regulations in force.
Remember, we are not always obligated to erase your data, in particular when their processing is necessary in order to fulfil a legal obligation.
- The right to object to the processing of your personal data is applicable when you decide that the processing affects your rights or freedom. You may justify the right to object by a special situation affecting you due to which the processing of your personal data violates your rights or freedom. You can also exercise your right to object if we process your data for the purposes of direct marketing. In certain special situations we may demonstrate that we have a legally justified basis for your personal data processing which are superior to your rights and freedoms, predominantly in order to provide safety of the website and to prevent fraud. In the indicated cases this right is not associated with the right to erasure of the data.
- Right to portability of your personal data. If you want to receive or provide a person you appoint with your personal data in a common machine-readable format, you can exercise your right to transfer of your personal data. Remember, you are entitled to the right only towards the data processed under your consent or a prerequisite for the performance of the contract you have concluded with us, and the processing itself is automatic and takes place in IT systems.
- Right to file a complaint. Remember that you also have a right to file a complaint regarding our processing of your personal data to a supervisory body, i.e. President of the Personal Data Protection Office (address: Prezes Urzędu Ochrony Danych Osobowych (President of the Personal Data Protection Office), ul. Stawki 2, 00-193 Warsaw). Despite your right to file a complaint, we will appreciate if prior to filing your complaint you give us a chance to handle your matter and doubts regarding our processing of your personal data. For this reason, please contact our representative for information security.
We make every effort to address all legitimate claims as soon as possible. If your claim is particularly complicated or you have filed several claims, their processing may take us longer than normally expected. If this is the case, we will notify you about the extension of the deadline and we will provide you with information on the processing of your claim on an ongoing basis.
How safe is the information about me?
- We pursue the top level of safety for eko-wtor.pl; hence, we constantly work on securing and protecting your personal data during transmission through specialist encrypting protocols and dedicated software.
- We organise, maintain, and update physical, electronic, and procedural protection of personal data connected with obtaining, storing, and disclosing personal data of customers of our website on the ongoing basis. The implemented protections provide you with the highest level of security of your personal data.
- Our website guarantees functions protecting your data against unauthorised access and loss of data. We make sure backup copies are regularly created, so that you don’t need to worry your data will be lost.
- All information about you which we process is stored on properly encrypted and protected servers. The controller regularly evaluates the level of security in its network and makes sure all internal regulations and procedures are monitored so as to protect the data against all possible negative consequences entailed by loss, theft, or unauthorised access. We also identify predictable risks for the safety of the website on the current basis, we minimise threats for safety, also by carrying our regular tests. All information processed on the platform is SSL encrypted.
- Remember, even the highest safety standards implemented on the basis of state-of-the-art technologies will not fully secure your personal data when information is made available via the Internet or publicly accessible networks. Therefore, there is a risk that your personal data can be accessed by unauthorised third parties.
Amendments to the privacy policy
The privacy policy may be amended or updated by us, in particular if the need or obligation to introduce amendments results from changes in legal regulations. All essential amendments shall be published on this page, and we will additionally notify you about them in an e-mail message or in relevant information on our website.
Final stipulations
For additional information on the processing of your personal data, including answers to questions regarding the entire scope of the Privacy Policy, contact our representative responsible for information safety by sending an e-mail message to info@ekowtor.pl or by post to the address Eko-Wtór® Sp. z o.o. ul. Piłsudskiego 57 Skawina 32-050.