ENVIPOL · personal data

Privacy policy

I. Scope of this privacy policy

  1. This policy explains how personal data and other information relating to users of the ENVIPOL website, contact form, electronic correspondence and ENVIPOL social-media profiles are processed under the GDPR.
  2. Detailed information on cookies, localStorage and similar technologies is provided in the Cookie policy.

II. Data controller

The controller is Jolanta Okońska-Kubica, trading as ENVIPOL JOLANTA OKOŃSKA-KUBICA.

  1. Postal address: 15 Stefana Okrzei Street, 96-100 Skierniewice, Poland.
  2. Email: office@envipol.pl.

III. Purposes, legal bases and retention

Website operation

  1. Device and connection data necessary to provide and secure the website may be processed under Article 6(1)(b) or (f) GDPR, as appropriate. Necessary device storage/access is used where permitted by law.
  2. Optional analytics and marketing technologies are activated only after prior consent through the cookie panel. Consent may be changed or withdrawn through “Cookie settings” in the footer; browser settings do not replace this mechanism where consent is required.
  3. In Poland, device access/storage is governed by Articles 399–400 PKE; in Germany, by Section 25 TDDDG.

Contact form and correspondence

  1. Contact details and message content are processed to answer the request and handle the matter under Article 6(1)(b) GDPR or the parties’ legitimate interests under Article 6(1)(f) GDPR, generally for the time needed to resolve the matter and up to three months thereafter for archiving and claims.
  2. Electronic commercial communications or direct marketing are sent only where the required consent or another legal condition is met; in Poland, Article 398 PKE also applies.

Social media

  1. When users interact with ENVIPOL profiles or contact ENVIPOL through Messenger, ENVIPOL may process profile identifiers, activity and message content under Article 6(1)(b) or (f) GDPR. Platform operators process data under their own policies and determine much of that processing independently.

Contracts, claims and business correspondence

  1. Data may be processed to perform contracts under Article 6(1)(b) GDPR, comply with legal obligations under Article 6(1)(c), and establish, pursue or defend claims under Article 6(1)(f) and, where applicable, Article 9(2)(f) GDPR. Retention follows the purpose and applicable limitation periods.

IV. Recipients

Data may be disclosed to service providers acting under data-processing agreements, including providers of email, hosting, website and IT support, debt collection, legal, advisory or administrative services, and to competent authorities where required by law.

V. Transfers outside the EEA

The current website configuration does not include external analytics or marketing tools causing a transfer outside the EEA. Where a provider or social-media platform causes such a transfer, an appropriate safeguard will be used, such as an adequacy decision, the EU–US Data Privacy Framework or Standard Contractual Clauses.

VI. Your rights

Subject to the statutory conditions, you have the right to:

  1. access your data and receive a copy (Article 15, including Article 15(3), GDPR);
  2. rectify inaccurate or incomplete data (Article 16 GDPR);
  3. erase data (Article 17 GDPR);
  4. restrict processing (Article 18 GDPR);
  5. data portability (Article 20 GDPR);
  6. object to processing based on legitimate interests (Article 21 GDPR);
  7. withdraw consent at any time without affecting earlier lawful processing.

VII. Supervisory authority

Under Article 77 GDPR, you may lodge a complaint with the supervisory authority competent for your habitual residence, workplace or the place of the alleged infringement. In Poland this is the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, https://www.uodo.gov.pl/pl/p/kontakt

VIII. Changes

This policy may be supplemented or updated to reflect current processing and legal requirements. Material changes will be communicated on the website.