Close search box
    Customer panel Customer panel Contact us Contact us

    Privacy Policy

    General Information 

    This Privacy Policy has been developed in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of the European Union of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”), and in particular Articles 13 and 14 of the GDPR, which specify the Data Controller’s obligation to provide information, as well as national regulations regarding the protection of personal data. 

    Personal data (data) refers to any information relating to an identified or identifiable natural person (data subject). An identifiable individual is a natural person who can be identified, directly or indirectly, based on information such as first and last name, an identification number, location data, or other information that enables identification, or one or more specific factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of a natural person. Personal data includes a natural person’s email address, phone number, biometric information (e.g., a fingerprint), location data, IP address, health care information, religious beliefs, social security number, and marital status. 

    This Privacy Policy explains how your personal data is used and what rights you have regarding the processing of your personal data by the Data Controller. Please review the contents of this Privacy Policy. 

    Who is the controller of your personal data? 

    The controller of personal data is Tomasz Pawłowski, who operates a business under the name: EVOLTEC Tomasz Pawłowski, NIP: 9512001757, REGON: 140032879 (hereinafter referred to as the “Controller”); The Controller can be contacted at EVOLTEC Tomasz Pawłowski, ul. Bekasów 63/65, 02-803 Warsaw, or by email at info@evoltec.pl. 

    Categories of personal data processed by the Data Controller. 

    The administrator processes personal data related to your identification and the verification of your identity, which includes, in particular, your first and last name, residential address, shipping address, business address, and registered office address (if different from the shipping address), email address, phone number, company name, and tax ID number. 

    Does the Data Controller carry out automated data processing? 

    Personal data may be processed by the Controller in an automated manner, including through profiling, which involves creating personalized product offers available at EVOLTEC Tomasz Pawłowski, displaying them on the website—including in product recommendation boxes—and sending them in marketing messages (if the Customer has voluntarily consented) by the Controller, which may significantly influence the Customer by enabling them to purchase products at the prices listed in the offer. 

    Purpose, scope, duration, and legal basis for the processing of personal data. 

    The purpose, scope, duration, and legal basis for the processing of personal data by the Controller are related to the actions taken by the data subject on the Online Platform. Accordingly, the Controller may process personal data for the following purposes, to the following extent, for the following duration, and on the following legal basis: 

    1. the conclusion and performance of a contract for the provision of an electronic service or the taking of action at the request of the data subject prior to the conclusion of the contract (Article 6(1)(b) of the GDPR). The data is stored for the period necessary to perform, terminate, or otherwise allow the contract to expire, as well as to provide warranty, maintenance, and delivery services. Scope of personal data processed: first and last name, email address, contact phone number, delivery address (street, house number, apartment number, city, country, residential address/business address/registered office (if different from the delivery address));
    2. to fulfill the legal obligation incumbent upon the Controller in connection with the fulfillment of the order, including the complaint resolution process and accounting and tax obligations (Article 6(1)(c) of the GDPR). The Controller processes the data provided in connection with placing an order for the period necessary to fulfill the order, including the settlement of the concluded contract and the obligations arising therefrom, such as accounting and tax obligations. Scope of personal data processed: first and last name, email address, cell phone number, residential address/business address/registered office address, tax identification number; 
    3. to establish, pursue, or defend against claims in judicial, administrative, or other legal proceedings that may be brought by the Controller or against the Controller (Article 6(1)(f) of the GDPR). Personal data is retained for the purpose of asserting or defending against potential claims for the duration of the statute of limitations as specified by law. Scope of processed data: first and last name, email address, contact phone number, delivery address (street, house number, apartment number, city, country, residential address/business address/registered office (if different from the delivery address));
    4. communication related to an inquiry submitted to the Controller via email or telephone (Article 6(1)(b) and (f) of the GDPR). Personal data provided in connection with an inquiry is processed for as long as the Data Controller has a legitimate interest related to handling the inquiry submitted by the data subject, including providing a response. Scope of processed data: first and last name, company name, email address, phone number, and data provided in the form;
    5. Contact with the Customer in connection with a telephone order placed at the request of the data subject (Article 6(1)(b) and (f) of the GDPR). Personal data is processed until the telephone communication with the customer is concluded. Scope of data processed: telephone number and information provided during the conversation;
    6. marketing activities, direct marketing, including the sending of commercial communications by electronic means—provided that consent has been given (Article 6(1)(f) of the GDPR). Personal data is stored for as long as the legitimate interest pursued by the Controller exists, but no longer than until the data subject objects or for as long as the Controller’s legitimate interest exists. Scope of data processing: first and last name, email address

    Where do we get your personal information? 

    We collect personal information from you. 

    Who might we share your personal information with? 

    A “data recipient” means a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether it is a third party (a “third party” means a natural or legal person, public authority, agency, or other entity other than the data subject, the controller, the processor, or persons who—on behalf of the controller or processor—may process personal data). However, public authorities that may receive personal data in the context of a specific procedure in accordance with Union law or the law of a Member State are not considered recipients; the processing of such data by these public authorities must comply with the data protection provisions applicable to the purposes of the processing. Disclosure constitutes the transfer of personal data to a recipient who determines the purposes and means of the processing. 

    The recipients of the personal data being shared will be: 

    1. Newsletter service providers,
    2. .To transportation companies/carriers for orders placed on the online platform, 
    3. entities that provide maintenance services for the purchased equipment, including warranty services,
    4. lenders—when using the Siemens Finance payment system.

    Who might we share your personal information with? 

    A processor is defined as a natural or legal person, public authority, agency, or other entity that processes personal data on behalf of the controller. In the case of data processing under contract, the processor receives personal data based on a contract for the processing of personal data concluded with the controller. 

    The administrator uses/may use the services of third-party providers, in particular: 

    1. entities that process personal data on behalf of the Controller. 
    2. debt collection agencies; 
    3. entities that provide accounting services to the Administrator; 
    4. entities providing legal services related to the Administrator's activities; 
    5. entities providing IT services related to the Controller’s operations, including hosting services; 
    6. providers of tools used to analyze the Website's performance; 
    7. entities that provide services to assist the Controller in carrying out marketing activities; 

    Is personal data transferred to a third country or an international organization? 

    The administrator does not transfer personal data to a third country or an international organization. 

    What rights do you have regarding the processing of your personal data? 

    The data subject has the right to: 

    1. access to data, including confirmation of its processing, receipt of a copy of the data, and information about its processing; 
    2. to correct inaccurate data or request that incomplete data be supplemented; 
    3. a request for the immediate deletion of data in the event that: 
    4. the data are no longer necessary for the purposes for which they were collected or otherwise processed;  
    5. the data subject has withdrawn consent to the processing of personal data, which serves as the legal basis for the processing, and there is no other legal basis for the processing; 
    6. the data subject has objected to the processing of personal data; 
    7. personal data is being processed unlawfully; 
    8. Personal data must be deleted in order to comply with a legal obligation; 
    9. the right to restrict data processing in cases where:  
      • the data is incorrect—until it has been verified; the processing is unlawful, and the applicant objects to its deletion;
      • The administrator no longer needs the data, but the applicant needs it to establish, pursue, and defend claims;
      • the data subject has objected to the processing of their data, until it is determined whether the controller’s legitimate grounds override the grounds for the objection;
    10. data portability, including the right to receive the data in a structured, machine-readable format or to request that it be transmitted to another controller, provided that all of the following conditions are met: 
      • Data processing is carried out on the basis of a contract entered into with the data subject or on the basis of consent given by that person, 
      • processing is carried out automatically; 
      • to file a complaint with a supervisory authority if a data subject believes that the processing of their personal data violates the provisions of the GDPR; the supervisory authority is: 

    Chairperson of the Personal Data Protection Office 

    Office for Personal Data Protection 

    Stawki 2, 00-193 Warsaw

    Tel. 22 531 03 00 

    Fax: 22 531 03 01 

    kancelaria@uodo.gov.pl 

    If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal, nor does it affect your right to object to the processing of your data for purposes arising from the Controller’s legitimate interests, in particular direct marketing. 

    Within one month of receiving your request, the administrator will provide you with information about the actions taken in response to your request. In particularly complex cases, this period may be extended by an additional 2 months from the date of receipt of your request. In order to process your request, we are entitled to verify your identity to ensure that your data does not fall into the hands of an unauthorized person. 

    If your request is found to be manifestly unfounded or excessive—in particular due to its repetitive nature—the Data Controller may charge a reasonable fee for processing the request or refuse to take any action in response to the request. 

    Marketing Information

    You have the option to consent to receiving commercial and marketing information electronically. You may opt out of receiving marketing information at any time by emailing info@evoltec.pl or by sending a certified letter to the Administrator’s address.