Privacy policy

This privacy policy has been adopted in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union No. L 119/1 of 4.5.2016; hereinafter: GDPR). The purpose of the policy is, in particular, to comply with the information obligation referred to in Articles 13 and 14 of the GDPR.

1. Definitions

In the content of this policy, we use the following phrases:
Website – a website run by ENVICLA at the address envicla.com
We, ENVICLA, Administrator – Mr Robert Wontor conducting business activity under the name ENVICLA Robert Wontor (hereinafter: ENVICLA), entered into the Central Registration and Information on Economic Activity (CEIDG), NIP: 8981939903, REGON: 542725404, at the address: Bliska 1a lok. 2, 43-316 Bielsko-Biała, e-mail address: info@envicla.com
, phone number: +48 728 571 061
You, Client – persons whose personal data are processed by ENVICLA in connection with the use of the Website.

2. Who is the Data Controller?

A data controller is a person who determines the purposes and means of the processing of personal data. The controller of your personal data is ENVICLA.

3. Whose personal data do we process?

In connection with our business, we process in particular the personal data of Website users. The scope of the processed data is each time adequate to the purposes of processing.

4. What data do we collect through the Website and for what purpose do we use it?

The scope of your data that we collect and the purposes of its processing depend on the functionalities of the Website used, and so:

4.1 Browsing the Website

I. What data do we collect?

Data stored in the form of server logs, in which the user is identified by a URL. This data includes:

a) the time of arrival of the request,
b) the time taken to send a response,
c) IP address information.

II. For what purpose do we process data?

For the purposes of administering the server on which the Website is stored.

III. Do you have to provide us with your data?

Providing data is voluntary, with the proviso that it determines the possibility of proper use of the Website.

IV. On what legal basis do we process your data?

On the basis of:

a) the concluded agreement, the subject of which is a service provided electronically in the form of access to the Website (Article 6(1)(b) GDPR),

b) our legitimate interest (Article 6(1)(f) GDPR) – consisting in the possibility of making the Website available to third parties and ensuring its proper display.

V. Who may we share your data with?

Personal data may only be disclosed to third parties if we are obliged or entitled to do so by law. In particular, recipients may include:

a) persons operating our infrastructure or IT systems,

b) entities providing data hosting services.

VI. How long will we process your data?

For the time necessary to perform the agreement to provide access to the Website or for the duration of our legitimate interest in data processing – but in each case not shorter than for the period of your visit to the Website.

Remember that if the basis for data processing is a legitimate interest, you have the right to object to further data processing in accordance with point 8 below.

4.2 Contact form / Order

I. What data do we collect?

Data necessary to make contact via the Website and to place an order by e-mail, including: name and surname, address, shipping address (if different), e-mail address, telephone number.

II. For what purpose do we process data?

In order to:

a) take steps to conclude a contract, including responding to a contact request submitted via the contact form,

b) perform the placed order, including sending related e-mails, performing the service or delivering goods to the indicated address and handling any complaints,

c) conduct correspondence via e-mail,

d) create summaries, analyses and statistics – in particular marketing research, commercial data analysis and service development planning,

e) pursue claims or defend against claims.

III. Do you have to provide us with your data?

Providing data is voluntary, with the proviso that it is a condition for using the related functionalities of the Website and for processing contact data and placing an order by e-mail.

IV. On what legal basis do we process your data?

Based on:

a) concluded contracts concerning the performance of ordered services (Article 6(1)(b) GDPR),

b) generally applicable laws imposing legal obligations on us, in particular in the field of tax law, accounting or archiving (Article 6(1)(c) GDPR),

c) our legitimate interest (Article 6(1)(f) GDPR) – consisting in the possibility of undertaking the actions indicated in point II(c)-(e) above.

V. Who may we share your data with?

Personal data may only be disclosed to third parties if we are obliged or entitled to do so by law. In particular, recipients may include:

a) entities providing data hosting or supporting our infrastructure or IT systems,

b) subcontractors through whom we fulfil orders,

c) entities providing services related to the execution or improvement of the sales process (e.g. couriers, carriers, payment service providers),

d) entities providing audit or advisory services, e.g. legal, tax or accounting services.

VI. How long will we process your data?

Depending on the legal basis, this will be:

a) the time necessary to perform the contract, take steps to conclude it and for the limitation period of related claims,

b) the duration of legal obligations requiring the processing of your data,

c) the duration of our legitimate interest in processing the data.

Remember that if the basis for data processing is a legitimate interest, you have the right to object in accordance with point 8 below.

4.3 Cookies

The Cookie Policy constitutes Appendix No. 1 to this Privacy Policy.

Can data be processed in automated decision-making processes, including profiling?

At present, we do not carry out operations involving automated decision-making that would produce legal effects or similarly significantly affect individuals. If such operations are implemented in the future, we will ensure compliance with applicable laws.

5. Can your personal data be transferred outside the European Economic Area (EEA)?

At present, we do not anticipate transferring your data outside the EEA. However, we do not exclude this possibility in the future. In such a case, data will be secured in accordance with applicable regulations, in particular through the use of standard contractual clauses (SCC).

6. What rights do you have in relation to data processing?

You may request in particular:

• access to your data (including information about processing or a copy of the data),
• rectification of data,
• restriction of processing,
• erasure of data (“right to be forgotten”),
• data portability to another controller.

Requests may be submitted in the manner specified in point 10 below and will be considered in accordance with Articles 15–20 GDPR.

7. Right to object

You have the right to object to the processing of your data based on our legitimate interest.

• If data is processed for marketing purposes – we will cease such processing immediately.
• If based on another legitimate interest – we will cease processing unless we demonstrate overriding legitimate grounds or the need to establish, exercise or defend legal claims.

8. Complaint to the supervisory authority

If you believe that the processing of your data violates applicable regulations, you have the right to lodge a complaint with the President of the Personal Data Protection Office. Contact details are available at: https://uodo.gov.pl/pl/p/kontakt

9. Place of publication and updates

This Privacy Policy may be amended from time to time. The current version will always be available at: envicla.com

10. How to contact us?

If you have any questions regarding the use of your personal data, you may contact us:

Robert Wontor
ENVICLA Robert Wontor
Bliska 1a lok. 2
43-316 Bielsko-Biała
with the note: “personal data protection”
tel. +48 728 571 061
e-mail: info@envicla.com

Appendix No. 1 to the Privacy Policy – COOKIES Policy

§1

1. This Policy sets out the rules for storing information by the Administrator and the Administrator’s access to information already stored on the Client’s Devices in the form of Cookies.

2. All terms defined in the Privacy Policy shall also have the meaning of this Cookie Policy. In addition, the following terms are given the following meanings:

a) Cookies – constitute IT data, in particular text files, which are stored on the Website User’s end device and are intended for the use of the Website’s websites. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device and a unique number.

b) First-party Cookies – means Cookies placed by the Administrator, related to the provision of electronic services by the Administrator through the Website.

c) Privacy Policy – of this Cookies Policy, constituting Appendix No. 1 to the Privacy Policy.

d) Device – means an electronic device through which the Customer accesses the Service.

§2

1. By means of Cookies, the Administrator stores information on the Client’s Device or obtains access to information already stored – on the terms set out in this Policy.

2. The Administrator uses the following types of Cookies:

a) Session cookies: are temporary files that are stored on the User’s end device until logging out, leaving the website or turning off the software (web browser),

b) Persistent cookies: – they are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User. Ending the session of a given browser or turning off the Device does not remove such Cookies from the Device.

3. The use of Cookies by the Administrator does not cause configuration changes in the Client’s Device and the software installed on this Device.

§3

1. The Administrator uses its own Cookies in order to adapt the content of the Website to the preferences and needs of the User, in particular taking into account the type of Device used by the User to access the Website. These types of Cookies include:

a) “necessary” cookies enabling the use of services available on the Website, e.g. authentication cookies used for services that require authentication within the Website;

b) cookies used to ensure security, e.g. used to detect fraud in the field of authentication within the Website;.

2. In connection with the use of cookies, the Administrator collects only statistical data related to the browsing history. Other data (e.g. name, address, etc.) is not stored in any way.

§4

1. The Client has the option of restricting or disabling the access of Cookies to their Device in the settings of the web browser or by configuring the service – in particular in such a way as to block the automatic handling of Cookies or to inform about each time Cookies are placed on the Client’s Device. A description of the necessary steps for this purpose can be found on the manufacturers’ websites, e.g:

a) Mozilla Firefox: https://support.mozilla.org/pl/kb/W%C5%82%C4%85czanie%20i%20wy%C5%82%C4%85czanie%20obs%C5%82ugi%20ciasteczek

b) Google Chrome:https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=pl

c) Microsoft Edge: https://privacy.microsoft.com/pl-pl/windows-10-microsoft-edge-and-privacy

2. The User may delete Cookies at any time.

3. The Administrator informs that restrictions on the use of cookies may affect some of the functionalities available on the Website.