Privacy Policy

§ 1 General provisions

  1. This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with their use of the services of the Web Portal available at the following address https://www.geltag.pl/ (hereinafter: „Portal”).

  2. The administrator of the personal data contained in the site is:
    Geltag sp. z o.o.
    headquartered at 60 Porcelanowa Street, 40-246 Katowice, Silesia Province,
    entered in the register of entrepreneurs of the National Court Register under the number KRS: 0000567997,
    having NIP: 6342843118 and REGON: 362066524
    (hereinafter: „Administrator” or „GELTAG”).

  3. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: „RODO”.”) and the Law on Provision of Electronic Services.

  4. The controller shall exercise special care to protect the interests of data subjects, and in particular shall ensure that the data it collects is processed lawfully, fairly and transparently.

§ 2 Purposes and basis of data processing

The Administrator processes Users' personal data for the following purposes and on the following legal grounds:

  1. Provision of services by electronic means - including account registration, order processing and implementation of agreements concluded through the Portal.

    • Legal basis: Article 6(1)(b) of the RODO (necessary for the performance of the contract).

  2. Implementation of legal obligations - In particular, the issuance and storage of invoices and accounting documents.

    • Legal basis: Article 6(1)(c) RODO (legal obligation).

  3. User Contact - Responding to inquiries sent via contact form or e-mail.

    • Legal basis: Article 6(1)(f) RODO (the Administrator's legitimate interest in building relationships and handling inquiries).

  4. Investigating and defending against claims - Debt collection, litigation.

    • Legal basis: Article 6(1)(f) RODO (legitimate interest of the Administrator).

  5. Analytical and statistical purposes - Analyzing the activity of Users in order to improve the functionality of the Portal.

    • Legal basis: Article 6(1)(f) RODO (legitimate interest of the Administrator).

§ 3 Scope of data processed

The Administrator may process the following categories of Users' personal data, depending on the type of service provided:

  1. Name;

  2. Residence/business address;

  3. Email address;

  4. Phone number;

  5. TIN number (in case of entrepreneurs);

  6. Bank account number (for refunds);

  7. IP address and other data recorded in system logs.

§ 4 Recipients of data

  1. For the proper functioning of the Portal, including the execution of concluded agreements, it is necessary for the Administrator to use the services of third parties. The Administrator shall only use the services of such processors who provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing meets the requirements of the RODO.

  2. Personal data may be transferred to the following recipients:
    (a) Providers of hosting services and information systems;
    (b) Electronic payment processors;
    (c) Accounting and legal service providers;
    (d) Courier and postal companies (in case of deliveries).

§ 5 Data storage period

  1. Personal data processed for the purpose of entering into or executing a contract will be kept for the duration of the contract, and thereafter for the period necessary for securing or pursuing possible claims (as a rule, the period of limitation of claims under the Civil Code).

  2. Personal data recorded in the accounting records will be retained for the period indicated in applicable laws, including tax laws (usually 5 years from the end of the calendar year).

  3. Data processed on the basis of consent will be stored until it is withdrawn.

§ 6 Rights of the data subject

In accordance with the RODO, you have the following rights:

  1. Right of access to data - obtain information about the processing of data and receive a copy of the data.

  2. Right to rectify data - request to correct incorrect data or complete incomplete data.

  3. The right to delete data („right to be forgotten”) - a request to delete data if there is no legal basis for further processing.

  4. Right to restrict processing - In the cases specified in the RODO.

  5. Right to data portability - receive data in a structured format and send it to another controller.

  6. Right to object - against data processing based on the legitimate interests of the Controller.

  7. The right to lodge a complaint with the supervisory authority - President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw), in case the processing is deemed to violate the provisions of RODO.

In order to exercise their rights, the User may contact the Administrator:

  • In writing to the address: 60 Porcelanowa St., 40-246 Katowice

  • By email to: info@geltag.pl

§ 7 Voluntariness of providing data

Provision of personal data is voluntary, however, failure to provide data necessary to conclude an agreement or perform a service (marked as required) may result in the inability to register on the Portal, place an order or use certain services.

§ 8 Cookies and server logs

  1. The Portal website uses cookies (so-called „cookies”). These are small text files sent by a web server and stored by your browser's computer software.

  2. Cookies are used for:
    a) To adapt the content of the websites to the User's preferences and to optimize the use of the websites;
    (b) To create statistics to help understand how Users use the Websites;
    c) Maintain the Portal User's session (after logging in).

  3. The user may at any time change the settings for cookies in their web browser, including blocking their use. Restricting the use of cookies may affect some of the functionality available on the Portal's websites.

  4. The Administrator also processes anonymized data related to the use of the Website (e.g. IP address, domain), which are used to generate statistics to help administer the Website (so-called server logs). These data are aggregate and anonymous, i.e. they do not contain characteristics that identify visitors to the Site.

§ 9 Data security

The Portal is provided with security measures to protect the data under the Administrator's control from loss, misuse or modification. The Administrator uses connection encryption with an SSL certificate and other technical and organizational measures in accordance with the requirements of the RODO.

§ 10 Final provisions

  1. The Administrator reserves the right to make changes to this Privacy Policy. Changes may result from the development of Internet technology, changes in generally applicable law or the development of the Portal.

  2. Users will be informed of any changes in a visible and understandable manner on the Portal pages.

  3. Date the Policy was last updated: [Enter the current date, e.g., May 24, 2024].