Privacy policy
- General Provisions
- Purpose and scope of data collection, as well as the period and method of storage
- Legal basis for data processing
- Right to control, access, and correct your data
- “Cookies” files
- Consent request for offers
- Google Analytics Privacy Policy
- Google AdWords Privacy Policy
- Facebook Privacy Policy
- Links to other websites
- Personal data profiling
- Final provisions
At Griltex Polska Sp. z o.o., we work hard every day to better serve our customers. The protection of the personal data you provide us is an integral part of this process. We want to ensure that your data is safe with us and that you understand how we use it to provide you with better and more personalized shopping experiences.
1. General Provisions
- The administrator of personal data collected through the website https://griltex.pl or www.griltex.com is Griltex Polska sp. z o.o., with its registered office at ul. Obornicka 7, Złotkowo, 62-002 Suchy Las, and delivery address at ul. Obornicka 7, Złotkowo, 62-002 Suchy Las, registered in the National Court Register under the number KRS: 0000124014, NIP: 7772194858, REGON: 631058608, with share capital of 772,000 PLN, and email address: biuro@griltex.pl, hereinafter referred to as the “Administrator,” also acting as the Service Provider. For additional information about the stored data and the methods of processing, you can contact the Administrator via email: sekretariat@griltex.pl
- The personal data of Service Recipients is processed in accordance with the Personal Data Protection Act of August 29, 1997 (Journal of Laws No. 133, item 883, as amended) and the Act on the provision of electronic services of July 18, 2002 (Journal of Laws No. 144, item 1204, as amended).
- The Administrator takes special care to protect the interests of individuals whose data is processed, ensuring that the collected data is:
- processed lawfully,
- collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes,
- accurate and adequate in relation to the purposes for which they are processed and stored in a form that allows the identification of the individuals concerned, no longer than necessary for the purpose of processing.
2. Purpose and scope of data collection, as well as the period and method of storage
- The personal data of Service Recipients collected by the Administrator are used for:
- contacting the service recipient (customer). When using the website www.griltex.pl or www.griltex.com, including contact forms, you may be asked to provide some personal data: name, surname, email address, and phone number. This data is collected to process your inquiry, including sending commercial offers. Failure to provide the required data in the forms will prevent the performance of the actions to which the data pertains and which are necessary for their correct execution. The collected data is also processed to prepare contracts for the provision of services and their implementation, in case you enter into cooperation with Griltex Polska Sp. z o.o.
- contacting the service recipient (customer). When using the website www.griltex.pl or www.griltex.com, including contact forms, you may be asked to provide some personal data: name, surname, email address, and phone number. This data is collected to process your inquiry, including sending commercial offers. Failure to provide the required data in the forms will prevent the performance of the actions to which the data pertains and which are necessary for their correct execution. The collected data is also processed to prepare contracts for the provision of services and their implementation, in case you enter into cooperation with Griltex Polska Sp. z o.o.
- The Administrator processes the following personal data of Service Recipients:
- Name and surname,
- Address,
- Email address,
- Phone number,
- Other
- The Administrator may process data characterizing the way the Service Recipient uses electronic services (exploitation data), including:
- Identifiers identifying the telecommunications network termination point or the IT system used by the Service Recipient.
- Information about the start, end, and scope of each use by the Service Recipient of the electronic service.
- Information about the Service Recipient’s use of electronic services.
- The storage period of the data determines the purpose for which the data was provided to the Administrator. After achieving this purpose, data enabling the identification of individuals will be anonymized, thus making the identification of the data subject impossible.
- Providing personal data as mentioned in point 2 is necessary to provide electronic services on the website.
- We store and process the personal data collected by us with due diligence, from the moment of collection until the completion of the activities to which they relate, but no longer than until the end of the business activity conducted by the Administrator. All personal data is stored on secured servers. Personal data held in printed form is kept in locked cabinets, in rooms accessible only to authorized persons (who have been issued individual keys and/or magnetic cards), additionally secured by an alarm system and monitoring.
- The personal data collected by us may be disclosed to entities authorized to receive them under applicable laws (judicial and law enforcement authorities and other entities authorized by law). Personal data may also be entrusted to third-party entities cooperating with us, who act as processors of this data, only if we conclude appropriate data processing agreements with such entities and only for the purpose of processing them on behalf of the Administrator. Data processors include law firms, accounting offices, hosting companies, and newsletter delivery operators collaborating with us.
3. Legal basis for data processing
- Using the website and entering into agreements for the provision of electronic services through it, which involves the necessity of providing personal data, is entirely voluntary. The person whose data is processed independently decides whether to start using electronic services provided by the Service Provider in accordance with the Regulations.
- In accordance with the Personal Data Protection Act of August 29, 1997 (Dz. U. Nr 133, poz. 883 ze zm.), data processing is permissible, among others, when:
- the person whose data it concerns gives consent, unless it concerns the deletion of their data.
- it is necessary to perform a contract in which the person whose data it concerns is a party, or when it is necessary to take action before concluding a contract at the request of the person whose data it concerns.
- The processing of personal data by the Administrator always takes place within the permissible processing bases listed in point 2. The processing of data will be related to the implementation of the contract or the necessity to take action before concluding the contract at the request of the person whose data it concerns (point 2 lit. b).
4. Right to control, access, and correct your data
- The Service Recipient has the right to access the content of their personal data and correct it.
- Everyone has the right to control the processing of data concerning them contained in the Administrator’s data set, especially the right to request the completion, updating, correction of personal data, temporary or permanent suspension of their processing, or their removal if they are incomplete, outdated, untrue, or have been collected in violation of the law or are no longer necessary for the purpose for which they were collected.
- Everyone has the right to lodge a complaint with the supervisory authority of the President of the Office for Personal Data Protection.
- To exercise the rights mentioned in points 1 and 2, you can send a relevant email to: sekretariat@griltex.pl
5. “Cookies” files
- The Service Provider’s website uses “cookies” files. Failure to change the User’s browser settings is equivalent to agreeing to their use.
- The installation of “cookies” files is necessary for the proper provision of services on the website. “Cookies” files contain information necessary for the proper functioning of the website, especially those requiring authorization.
- The following types of “cookies” are used within the website:
- Session cookies
- Persistent cookies
- Analytical cookies
1. “Session” cookies are temporary files that are stored on the User’s end device until logging out (leaving the website).
2. “Persistent” cookies are stored on the User’s end device for the time specified in the parameters of the “cookies” files or until they are deleted by the User.
3. “Analytical” cookies allow better understanding of the User’s interaction with the content of the website, better organize its layout. “Analytical” cookies collect information about how Users use the website, the type of website from which the User was redirected, and the number of visits and the time of the User’s visit to the website. This information does not record specific personal data of the Service Recipient but is used to compile statistics on the use of the website.
- The User has the right to decide on the access of “cookies” files to their computer by pre-selecting them in their browser window. Detailed information on the possibilities and ways of handling “cookies” files is available in the software settings (web browser). More information can be found on the cookies policy page.
6. Consent request for offers
The 2002 Act on the Provision of Electronic Services allows sending a request for consent to send an offer. Such requests are sent to users who have not subscribed to our newsletter but have publicly provided their email addresses, e.g., in online business directories or on their own websites. In each sent message, the user is given the opportunity to permanently block receiving further requests from Griltex Polska Sp. z o.o. in the future.
7. Google Analytics Privacy Policy
The www.griltex.pl and www.griltex.com websites use Google Analytics, a web analytics service provided by Google Inc. Through Google Analytics, we can learn, among other things, from which website you reached us. Data collected in Google Analytics is anonymous, and according to the Google Analytics Privacy Policy, no data allowing the identification of the user may be transmitted. You can delete data from the Analytics database at any time by using the plugin: https://tools.google.com/dlpage/gaoptout
8. Google AdWords Privacy Policy
The www.griltex.pl and www.griltex.com websites use Google AdWords, a service that allows for the management of advertisements and remarketing activities on websites, provided by Google Inc. You can opt-out and delete the Google cookie file on your account at https://myaccount.google.com/privacy#ads in the Ads Settings section, thereby limiting the display of ads shown to you.
9. Facebook Privacy Policy
The www.griltex.pl and www.griltex.com websites use the Facebook Pixel conversion mechanism, a service that allows for the management of advertisements on Facebook and remarketing activities, provided by Facebook Inc. and managed by Facebook Inc. and Facebook Ireland Ltd. Facebook and its advertising mechanisms have a Privacy Shield certificate, guaranteeing compliance with the applicable EU data protection laws.
10. Links to other websites
The www.griltex.pl and www.griltex.com websites may contain links to other websites. We are not responsible for the privacy practices on these websites.
11. Personal data profiling
The data provided by you to the Administrator will be subject to profiling for marketing purposes, including to better match the content of the website to your expectations. We will use analytical mechanisms relying on cookies for personal data profiling. If you do not consent to profiling, you should leave the www.griltex.pl or www.griltex.com website and delete cookies from your browser.
12. Final provisions
The Administrator applies technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data covered by protection, in particular, it secures data against their disclosure to unauthorized persons, taking over by an unauthorized person, processing in violation of applicable laws, and change, loss, damage, or destruction.
The Service Provider provides appropriate technical means to prevent the acquisition and modification of personal data sent electronically by unauthorized persons.