Privacy Policy

I. Who we are?
We are ELASTIKO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ and we take care of the
www.elastiko.pl website, and we are the data controller in regard to the information we collect through the
website.

II. Who is this notice for?
We provide this information to you as a visitor of our website and a user of the services available through
the website.
III. Are you required to provide us with your personal information?
If you want to use the service we offer, you must provide us with the data needed to provide it. However,
providing the necessary data and using the services is fully voluntary

IV. Data of the Personal Data Administrator
The administrator of your personal data is ELASTIKO SPÓŁKA Z OGRANICZONĄ
ODPOWIEDZIALNOŚCIĄ, with its registered office at MAJOWA str, nr 6, ŁOMIANKI, zip code 05-092,
POLAND, hereinafter referred to as the "Company". You can contact the Company regarding personal data
protection by writing to info@elastiko.pl.
V. Data Protection Inspector
The company has a Data Protection Officer – currently, it is Ms Monika Gawrońska – who will be happy to
help you in all matters related to the protection of personal data, in particular, answer any questions
regarding the processing of your personal data. Contact with the Inspector is possible at the following e-
mail address: info@elastiko.pl.

VI. Purposes and grounds for processing personal data
To provide services in line with the business profile, the Company processes your personal data – for
various purposes but always follows the law. Below you will find the specific purposes of personal data
processing along with the legal grounds.

To provide the prospect with the quote, to fulfil the service, we process personal data such as:
● name,
● e-mail address,
● gender,
● date of registration,
● name and surname (if provided),
● company name,
● e-mail address,
● order number,
● phone number,
● bank account number,
● registered office address,
● NIP number.
The legal basis for such data processing is Art. 6 sec. 1 lit. b GDPR, which allows the processing of
personal data if they are necessary to perform the contract or take steps to conclude a contract; if you also
decide to provide your surname, we recognize that you have consented to the processing of your surname
as well – then the legal basis for such processing is Art. 6 sec. 1 lit. a GDPR, which allows the processing of
personal data based on voluntarily granted consent;

To handle complaints, we process personal data specifically:
● name and surname (if provided),
● e-mail address,
● order number,
● address of residence – if the money is refunded,
● bank account number – if the money is refunded.
The legal basis for such data processing is Art. 6 sec. 1 lit. b GDPR, which allows the processing of
personal data if they are necessary to perform the contract or take steps to conclude a contract; if you also
decide to provide your surname, we recognize that you have consented to the processing of your surname
as well – then the legal basis for such processing is Art. 6 sec. 1 lit. a GDPR, which allows the processing of
personal data based on voluntarily granted consent;

To send e-mail notifications, we process personal data specifically:
● e-mail address,
● order number.

The legal basis for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of
personal data, if in this way the Personal Data Administrator carries out its legitimate interest (in this case,

the interest of the Company is to inform the customer about activities related to the provision of the service
to increase the comfort of using the website);

To contact a client by phone in matters related to the service, we process personal data such as:
● Phone number,
● order number
– if you are interested in the form of telephone contact (we do not require the mandatory provision of a
telephone number). The legal basis for such data processing is Art. 6 sec. 1 lit. a GDPR, which allows the
processing of personal data based on voluntarily granted consent;

To issue an invoice and fulfil other obligations arising from tax law, such as, for example, keeping
accounting records for 5 years, we process personal data such as:

● first name and last name,
● business,
● home address or registered office address,
● number nip,
● order number.
The legal basis for such data processing is Art. 6 sec. 1 lit. c GDPR, which allows the processing of
personal data, if such processing is necessary for the Personal Data Administrator to fulfill its obligations
under the law;

To store inquiries, we process personal data such as:
● name,
● e-mail address,
● order number
●
– it may happen that you will decide to use the service sometime after receiving the quote. The legal basis
for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of personal data if, in this
way, the Personal Data Administrator carries out its legitimate interest;

To test customer service quality, we process personal data such as:
● e-mail address
● order number

The legal basis for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of
personal data, if in this way, the Personal Data Administrator carries out its legitimate interest (in this case,
the interest of the Company is to learn the opinions of customers on the services provided to adapt them to
the needs and expectations of interested parties);

To fulfil the obligations related to the GDPR, in particular by creating registers and records, e.g. the register
of customers who objected under the GDPR, we process personal data such as:
● name,
● surname (if provided),
● e-mail address,
because, firstly, the provisions of the GDPR impose certain documentation obligations on us to
demonstrate compliance and accountability, secondly, if you object, for example, to the processing of your
personal data for marketing purposes, we need to know who not to use direct marketing against, because
he doesn't want it.
The legal basis for such data processing is, firstly, Art. 6 sec. 1 lit. c GDPR, which allows the processing of
personal data, if such processing is necessary for the Personal Data Administrator to fulfil its obligations
under the law; second, Art. 6 sec. 1 lit. f GDPR, which allows the processing of personal data, if in this way,
the Personal Data Administrator implements its legitimate interest (in this case, the interest of the Company
is to know people who exercise their rights under the GDPR);

To establish, investigate or defend against claims, we process personal data such as:
● name and surname (if the surname has been provided) or company name,
● home address (if provided),
● PESEL number or NIP number (if provided),
● e-mail address,
● IP,
● order number.

The legal basis for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of
personal data, if in this way the Personal Data Administrator implements its legitimate interest (in this case,
the interest of the Company is to have personal data that will allow to establish, pursue or defend against
claims, including clients and third parties);

For archival and evidentiary purposes, we process personal data such as:
● name and surname (if provided),

● e-mail address,
● order number
– to secure information that may be used to demonstrate facts of legal significance. The legal basis for such
data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of personal data, if in this way the
Personal Data Administrator implements its legitimate interest (in this case, the interest of the Company is
to have personal data that will prove certain facts related to the provision of services, e.g. when a state
authority requests it) ;

For analytical purposes, i.e. research and analysis of activity on the website belonging to the Company, we
process personal data such as:
● date and time of visiting the website,
● type of operating system,
● approximate location,
● type of web browser used to browse the website,
● time spent on the site,
● visited subpages,
● subpage where the contact form has been completed.
The legal basis for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of
personal data, if in this way the Personal Data Administrator carries out its legitimate interest (in this case,
the interest of the Company is to know the activity of customers on the website);

To use cookies on the website, we process such text information (cookies will be described in a separate
section). The legal basis for such processing is Art. 6 sec. 1 lit. a GDPR, which allows data to be processed
processing based on consent to the use of access cookies;

To administer the website, we process personal data such as:
● IP address,
● server data and time,
● information about the website,
● information about the operating system
– these data are automatically in the so-called server logs, each time the website of each page is used by
the company. Administration of the showcase of the portal without a server and this automatic point will be
possible. The basis for data processing activities is Art. 6 sec. 1 lit. f GDPR, which allows the processing of
personal data, if in this way the Personal Data Administrator in your case is an interest (including the
administration of the website);

To publish client’s comments on the website, we process personal data such as:
● name or nickname,
● IP number.

The basis for the failure is Art. 6 sec. 1 lit. a GDPR, which is the processing of personal data based on
consent approval arrangements (in this case, we assume that delight is a modern authorization to consent
to the processing of personal data);

To publish the client’s testimony, we process personal data such as:
● the first name, possibly surname,
● occupation,
● age.
The legal basis for such processing is Art. 6 sec. 1 lit. a GDPR, which allows us to process personal data
based on voluntarily granted consent (in this case, we assume that posting an opinion is simultaneous
consent to the processing of personal data).

VII. Your rights
You have the right:
● to access your data;
● to rectify your data;
● to erase your data;
● to limit the processing of your data;
● to transfer your data;
● not to be subject to automated decision-making, including profiling (side note: we don’t do it)
● to withdraw your consent for processing your data.
● to object to the processing of your personal data.

You also have the right to lodge a complaint in relation to our processing of your data to your local data
protection authority or to the President of the Personal Data Protection Office – Prezes Urzędu Ochrony
Danych Osobowych in Poland.

VIII. How long will we store your data?
We will keep your personal data only for as long as needed to fulfil the purposes outlined in this Privacy
Policy.

IX. Recipients of your data
We may share your personal data with our partners who help us deliver our services to you and who
provide us with legal support. This includes:
● our partners responsible for forum hosting and maintenance;
● our partners providing us with internal management and data-sharing tools;
● our partners who help us in data analysis by providing us with analytical tools;
● law firms providing us with legal support.

When required by law, we may also share your data with courts, law enforcement authorities, or regulators.

X. Data transfers outside EEA
Your personal data may be processed, stored or transferred to the United States in the context of our use
of statistical tools. If so, we will protect your personal data using EU standard contractual clauses or other
acceptable measures to transfer and protect your personal data.