Privacy Policy

1. General provisions

This Privacy Policy sets out the rules for processing and protecting personal data provided by Users in connection with their use of the services available on the lekkiepanele.pl website.

The data controller is Ergosun sp. z o.o., registered at ul. Starowiejska 16/2, 81-356 Gdynia, Poland, VAT ID: 5892064525.

2. Types of data processed

As part of the services we provide, we process the following categories of personal data:

• Identification data: first and last name
• Contact data: email address, phone number
• Company data: company name, VAT ID (if applicable)
• Content of inquiries and correspondence
• Technical data: IP address, browser type, operating system

3. Purpose and legal basis for processing

Personal data is processed for the following purposes:

• Contact and handling inquiries – based on the controller's legitimate interest (Art. 6(1)(f) GDPR) of enabling communication with people interested in our services
• Preparing commercial offers – based on the controller's legitimate interest (Art. 6(1)(f) GDPR) or consent (Art. 6(1)(a) GDPR)
• Performance of contracts – based on the performance of a contract (Art. 6(1)(b) GDPR)
• Direct marketing – based on the controller's legitimate interest (Art. 6(1)(f) GDPR) or consent (Art. 6(1)(a) GDPR)
• Fulfilling legal obligations – based on legal provisions (Art. 6(1)(c) GDPR), in particular tax and accounting regulations
• Website traffic analysis – based on consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR)

4. Data retention period

Personal data is stored for the following period:

• As necessary to fulfil the purposes for which it was collected
• Until consent is withdrawn (where processing is based on consent)
• Until an effective objection is raised (where processing is based on legitimate interest)
• As required by law (e.g. tax regulations – 5 years from the end of the year in which the tax obligation arose)

5. Disclosure of personal data

Personal data may be disclosed to:

• Providers of IT and hosting services
• Courier and postal companies
• Law firms and consulting firms
• Entities authorized under the law (e.g. tax authorities, courts)

Data is not transferred outside the European Economic Area (EEA).

6. Rights of data subjects

Individuals whose data is processed have the following rights:

• Right of access to their data and to obtain a copy of it
• Right to rectification of data
• Right to erasure of data ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to the processing of data
• Right to withdraw consent at any time (where processing is based on consent)
• Right to lodge a complaint with the President of the Personal Data Protection Office (or the relevant supervisory authority)

7. Cookies

The website uses cookies to ensure correct operation, analyze traffic and tailor content to users' preferences.

Detailed information about the use of cookies can be found in our Cookie Policy.

8. Data security

We apply appropriate technical and organizational measures to protect the personal data processed, appropriate to the risks and categories of data covered by protection, in particular safeguarding data against unauthorized disclosure, loss, damage or destruction.

9. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. Users will be informed of any changes through the publication of a new version of the policy on the website.

10. Contact

For matters related to personal data protection, please contact us: