Privacy Policy
In connection with its business activities, the Controller collects and processes personal data in accordance with the relevant regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as the GDPR. While processing data, the Controller ensures its security and confidentiality, as well as access to information about such processing for the data subjects.
1. Personal Data Controller
The controller of your personal data is Allfil Filter Technologies Polska Sp. z o.o., NIP (Tax ID): 826-218-98-76, with its registered office at: 08-410 Wola Rębkowska, ul. Przemysłowa 43D, operator's e-mail contact address: Allfil@allfil.eu. The Controller has appointed a Data Protection Officer (DPO), who can be contacted electronically at: iod@allfil.eu
2. Acquisition of personal data, purposes of processing
Depending on the relationship between us, we process personal data for the following purposes and scopes:
- Potential clients, including people who have filled out the contact form on our website:
Personal data (usually name, surname, e-mail address) is processed in order to respond to your inquiries and requests, which is a legitimate interest of the Controller (basis: Art. 6(1)(f) of the GDPR) – until you object; for marketing purposes based on additional consents (basis: Art. 6(1)(a) of the GDPR) – until you withdraw your consent. Based on our legitimate interest, we may also process your data for the purpose of pursuing possible claims, for statistical purposes, and for continuous improvement of the quality of our services. Providing personal data in the contact form is not a legal obligation, but it is necessary to respond to your inquiries.
- Clients - conclusion and performance of the contract in connection with our business activities:
If you are our client and enter into a contract, we process the personal data necessary for this purpose in order to conclude and perform that contract, i.e., on the basis of Art. 6(1)(b) of the GDPR. If you are a representative or a contact person acting on behalf of our client, we process your personal data for the purpose of professional contact, which constitutes our legitimate interest (Art. 6(1)(f) of the GDPR). For us, professional contact includes all correspondence as well as telephone contact regarding the established cooperation and the service being performed, in particular: making arrangements, scheduling business meetings, answering questions, and providing information from our side. Our legitimate interest is also to contact the client's contact persons regarding opinions on the performance of the contract, whereby such contact may be initiated by either the client or us.
We also process such personal data for tax and accounting purposes when legal provisions oblige us to store them or disclose them to relevant entities. The legal basis for our processing of personal data for tax and accounting purposes is Art. 6(1)(c) of the GDPR. We store such data for the time necessary to perform the contract, and then until the statute of limitations for claims that may arise from such a contract expires, or for the time required by law. Data related to concluded contracts is stored for such a period for evidentiary purposes, securing claims, or defending against them, which constitutes our legitimate interest as referred to in Art. 6(1)(f) of the GDPR.
- E-mail correspondence:
The data provided by you (usually name, surname, e-mail address, correspondence address), in the case of sending e-mail correspondence to us, are processed solely for the purpose of communication and handling the matter to which this correspondence relates. In such a case, the legal basis for processing is the Controller's legitimate interest based on Art. 6(1)(f) of the GDPR, consisting in conducting correspondence directed to them in connection with their business activity.
Providing personal data is voluntary, but necessary to respond to your inquiry. Data will be processed during the performance of the contract, and after this period, until the expiry of the statute of limitations for claims resulting from the legal relationship between us.
- Persons visiting our website:
Please be advised that while using our website, additional information sent by your web browser and contained in system logs may be collected, in particular: the IP address assigned to the user's computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type; navigation data may also be collected from users of our website, including information about links and references they decide to click or other activities undertaken on the Site. The legal basis for this type of activity is the Controller's legitimate interest (Art. 6(1)(f) of the GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services. The data will be used solely for statistical purposes (analysis of traffic on our website) and for marketing purposes (to better match the content of the Website to user preferences).
3. Recipients of personal data
The Controller may transfer your personal data only if it is necessary to achieve the purposes of processing: to entities providing IT services to us, supporting our activities, consulting, auditing and legal firms, subcontractors of some of our functionalities, companies providing communication tools (e.g. e-mail hosting), companies providing analytical tools, postal and courier companies, banks, tax offices, and others, as part of the legal obligations incumbent on the Controller.
4. Period of processing
The period of data processing by the Controller depends on the type of service provided and the purpose of processing. The specified data processing period may also result from regulations, if they constitute the basis for processing. In the case of data processing based on the Controller's legitimate interest, the data is processed for a period enabling its implementation or until an effective objection to the data processing is submitted. If the processing is based on consent, the data is processed until it is withdrawn. If the basis for processing is the necessity to conclude and perform a contract, the data will be processed until its termination. The data processing period may be extended if the processing is necessary to establish, pursue or defend against possible claims, and after this period, only in the case and to the extent required by law. After the processing period, the data is irreversibly deleted or anonymized.
5. Right of control, access to the content of own data and their correction
The data subject has the right to access their personal data and the right to rectify it, delete it (unless the Controller is obliged to further process it), restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Legal basis for the User's request:
- Access to data – Art. 15 GDPR.
- Rectification of data – Art. 16 GDPR.
- Erasure of data (the so-called right to be forgotten) – Art. 17 GDPR.
- Restriction of processing – Art. 18 GDPR.
- Data portability – Art. 20 GDPR.
- Objection – Art. 21 GDPR.
- Withdrawal of consent – Art. 7(3) GDPR.
If it is found that the processing of personal data violates the provisions of applicable law, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) based in Warsaw.
6. "COOKIES"
- The Controller's website uses „cookies”. The installation of „ cookies ” is necessary for the proper provision of services on the website. The „cookies ” contain information necessary for the proper functioning of the website and provide the opportunity to develop general statistics of website visits. Two types of „cookies” are used on the website: "session" and "persistent".
"Session" cookies are temporary files that are stored in the User's end device until logging out (leaving the website). - "Persistent" cookies are stored in the User's end device for the time specified in the cookie parameters or until they are deleted by the User.
- The Controller uses its own cookies to better understand how Users interact with the content of the website. The files collect information about how the User uses the website, the type of website from which the User was redirected, and the number of visits and the time of the User's visit to the website. This information does not record specific personal data of the User, but is used to compile statistics on the use of the website.
- The Controller uses external cookies to collect general and anonymous statistical data via Google Analytics (external cookie controller: Google Inc.).
- Cookies may also be used by advertising networks, in particular the Google network. For this purpose, they may store information about the User's navigation path or the time spent on a given page.
- The User has the right to decide on the access of „cookies ” to their computer by selecting them in their browser window. Detailed information on the possibility and methods of handling „cookies ” is available in the software settings (web browser). Information for selected, most popular browsers:
- Google Chrome: https://support.google.com/chrome/answer/95647?hl=pl
- Mozilla Firefox: https://support.mozilla.org/pl/kb/ciasteczka
- Safari: https://help.opera.com/pl/latest/security-and-privacy/#deleteData
- Opera: https://help.opera.com/pl/latest/web-preferences
- Microsoft Edge: https://support.microsoft.com/pl-pl/help/10607/microsoft-edge-view
- delete-browser-history
- Internet Explorer: https://support.microsoft.com/pl-pl/help/17442/windows-internet
- explorer-deletemanage-cookies
More information about what cookies are can be found at the following links:
– Polish: http://wszystkoociasteczkach.pl
– English: https://www.aboutcookies.org
Our website uses Google Analytics, i.e., a web analysis service provided by Google Ireland Limited (hereinafter: Google). Google Analytics uses cookies (collects data regarding IP addresses, network location, date of visit, operating system, browser type). The User has the right to prevent the storage of cookies by means of an appropriate setting in the browser software.
7. Transfer of data to third countries
Your personal data will not be transferred outside the European Economic Area (hereinafter: EEA).
8. Automated data processing
The Controller will not process your personal data in an automated manner in such a way that any decisions could be made as a result of such automated processing, other legal effects would be caused, or it would otherwise significantly affect your rights and obligations.
9. Final provisions
- The Controller applies technical and organizational measures ensuring protection of the processed personal data appropriate to the threats and categories of data protected, and in particular protects data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of applicable regulations, as well as change, loss, damage or destruction.
- The Controller provides appropriate technical measures to prevent unauthorized persons from acquiring and modifying personal data sent electronically.
- In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply accordingly.
Trust our experience!
Do you need help choosing the right filtration system? Contact us! We are happy to advise and provide the best solutions tailored to your needs.