This is a translation for convenience. The Polish version of this policy is binding.
This document explains what personal data we process in connection with the tekieli.pl website (in all language versions), the quote form and contact with our company, for what purpose, who we share it with and what rights you have. We apply Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Polish data protection law.
1. Who is responsible for your data
The controller of your data is the person named in the box at the top of this page. For any matter concerning personal data you can write to biuro@tekieli.pl, call +48 606 714 612 (English: +48 606 480 143) or send a letter to ul. Tadeusza Ważewskiego 33G, 30-499 Kraków, Poland. The controller has not appointed a data protection officer, as there is no legal obligation to do so.
2. What data we process and where it comes from
Browsing the website. The website has no user accounts or analytics tools. To deliver the website and protect it from attacks, our hosting provider (Cloudflare) processes technical data of each request, including your IP address and information sent by your browser (such as its type and operating system version). We do not combine this data with any other information about you. Fonts and images are loaded from our own domain, not from external servers.
Language and consent choices. If you choose a language version with the flags or make a decision in the consent window, your browser stores that choice on your device. This information is not sent to us. Details are in the Cookie policy.
Google Maps. If you consent to the map being shown, your browser connects to Google servers, which receive your IP address among other data. Without your consent the map does not load and no data is sent to Google.
Quote form. We receive the data you provide: company name, full name, e-mail address, optionally a phone number and the products you are interested in, and the content of your enquiry. We also record which language version of the website the enquiry was sent from.
E-mail and phone contact. We receive the data you provide, usually your name, company name, phone number, e-mail address and the content of your message.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing, maintaining and protecting the website | Art. 6(1)(f): our legitimate interest in a secure and properly working website |
| Showing the Google map | Art. 6(1)(a): your consent, given in the consent window or with the button on the map |
| Answering your enquiry and preparing an offer at your request | Art. 6(1)(b): steps taken prior to entering into a contract, and where you contact us on behalf of a company, Art. 6(1)(f): our legitimate interest in contacting customers’ representatives |
| Handling other correspondence | Art. 6(1)(f): our legitimate interest in replying to people who contact us |
| Fulfilling an order, invoicing and accounting, if we start working together | Art. 6(1)(b) and (c), in connection with tax and accounting law |
| Establishing, exercising or defending legal claims | Art. 6(1)(f): protecting our rights |
We do not carry out marketing on the website and do not profile visitors. We do not make decisions about you based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
You can withdraw your consent to the map at any time in the “Cookie settings” in the website footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
4. Do you have to provide your data
Browsing the website involves processing technical data, without which it cannot be displayed. Providing data in the form and in other contact with us is voluntary, but without the company name, your name and e-mail address we cannot prepare a quote or reply to your message.
5. Who we share data with
Processors acting on our behalf, under data processing agreements:
- Cloudflare, Inc. - website hosting, content delivery network, protection against attacks and the database where we store enquiries from the form;
- Resend - e-mail sending service that delivers form enquiries to our mailbox;
- Google (Google Workspace) - the biuro@tekieli.pl mailbox;
- IT service providers and our accounting office - where necessary in a given matter.
Independent controllers, who decide about the data under their own rules:
- Google Ireland Limited - if you consent to the map being shown; for collecting and transmitting data to Google we may be joint controllers with Google, and further processing takes place under Google’s privacy policy;
- courier and transport companies - when we ship ordered goods;
- law firms - where needed to protect our rights;
- public authorities - where disclosure is required by law.
6. Transfers outside the European Economic Area
Cloudflare, Resend and Google group companies may process data in the United States. For companies participating in the EU-US Data Privacy Framework, the transfer is based on the European Commission adequacy decision of 10 July 2023, and in other cases on standard contractual clauses approved by the Commission. You can obtain a copy of the standard contractual clauses by contacting us.
7. How long we keep data
- Technical data processed by Cloudflare - for the short time needed to deliver the website and protect it from attacks, under the provider’s rules.
- Form enquiries and correspondence, if we do not start working together - up to 12 months from the last contact.
- Data related to orders and accounting - for the duration of our cooperation and then for the period required by tax and accounting law, as a rule 5 years from the end of the year in which the tax payment deadline expired.
- Correspondence needed to protect claims - until the claims become time-barred.
- Consent and language choices in your browser - up to 12 months or until you delete the site data.
After these periods we delete or anonymise the data.
8. Your rights
Under the GDPR you have the right to:
- find out whether we process your data and obtain a copy of it;
- have inaccurate data corrected and incomplete data completed;
- request erasure of your data or restriction of its processing;
- receive the data you provided under a contract or consent, if we process it by automated means;
- withdraw your consent at any time, where processing is based on consent.
Right to object. You have the right to object at any time, on grounds relating to your particular situation, to processing of your data based on our legitimate interest (Art. 6(1)(f) GDPR). After receiving your objection we will stop processing the data for that purpose unless we demonstrate compelling legitimate grounds that override your interests or grounds for establishing, exercising or defending legal claims.
To exercise your rights, write to biuro@tekieli.pl. We will reply without undue delay, as a rule within one month. For complex or numerous requests this may be extended by two further months, in which case we will let you know. Some rights are limited by law, for example we will not delete invoices before their mandatory retention period ends.
If you believe we process your data unlawfully, you can lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl) or with the supervisory authority in your EU country of residence.
9. Security
The website works only over an encrypted HTTPS connection. The form is protected against automated spam. We apply technical and organisational measures appropriate to the risk to protect data against loss, unauthorised access and disclosure.
10. Changes to this policy
We update this policy when the law, the way the website works or our service providers change. The current version is always available at this address, and the date at the top of the page shows when it took effect.