COMPOSITE POWER POLES
OF THE NEW GENERATION
We manufacture innovative, lightweight and durable solutions for modern energy infrastructure.
ENERGY COMPOSITES

Privacy Policy

Privacy Policy

of the website www.e-composites.eu

This Privacy Policy sets out the principles governing the processing and protection of personal data provided by Users in connection with the use of the website available at www.e-composites.eu (hereinafter referred to as the “Website”).

This document has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).

§ 1. Personal Data Controller

  1. The controller of your personal data is Energy Composites Sp. z o.o., with its registered office in Wodzisław Śląski, ul. Marklowicka 30a, 44-300 Wodzisław Śląski (hereinafter referred to as the “Controller”).
  2. You may contact the Controller regarding matters related to the processing of personal data electronically at: info@e-composites.eu or by post at the address of the company’s registered office.

§ 2. Purposes, Legal Grounds and Duration of Data Processing

We process Users’ personal data only for specified purposes, on a lawful basis and for the period necessary to achieve those purposes:

1. Handling inquiries and communication with the User

This includes, among other things, contact by e-mail or via the contact form.

  • Legal basis: Article 6(1)(f) GDPR (the Controller’s legitimate interest in responding to inquiries) or Article 6(1)(b) GDPR (if the correspondence is intended to lead to the conclusion of a contract).
  • Processing period: until communication regarding a given matter has been completed, and thereafter for archival purposes for the period necessary to defend against possible claims (usually up to 3 years).

2. Conclusion and performance of a contract

This includes, among other things, order fulfilment and the provision of services.

  • Legal basis: Article 6(1)(b) GDPR – processing is necessary for the performance of a contract to which the data subject is a party.
  • Processing period: for the duration of the contract and thereafter until the expiry of the limitation period for any potential claims.

3. Compliance with legal obligations, including accounting and tax obligations

This includes, among other things, issuing invoices.

  • Legal basis: Article 6(1)(c) GDPR in conjunction with tax regulations and accounting legislation.
  • Processing period: for a period of 5 years, calculated from the end of the calendar year in which the tax payment deadline expired.

4. Analytical and statistical purposes and Website optimisation

This includes, among other things, analysing website traffic.

  • Legal basis: Article 6(1)(a) GDPR (the User’s voluntary consent expressed, for example, through cookie settings) or Article 6(1)(f) GDPR.
  • Processing period: until consent is withdrawn or an effective objection is raised.

5. Direct marketing of the Controller’s own services

  • Legal basis: Article 6(1)(f) GDPR (legitimate interest) or Article 6(1)(a) GDPR (consent – in the case of sending newsletters).
  • Processing period: until consent is withdrawn or an objection is raised.

§ 3. Recipients of Personal Data

  1. Your personal data may be transferred to external entities cooperating with the Controller in order to ensure the proper functioning of the Website and provision of services. These may include:
    • hosting companies and IT service providers,
    • accounting/bookkeeping offices – where invoices are issued,
    • courier and logistics companies – where physical goods are delivered,
    • providers of CRM systems, analytical tools, such as Google, or marketing tools.
  2. These entities process data solely on the basis of appropriate data processing agreements and are required to maintain high security standards.
  3. Personal data will not be disclosed to other third parties without your explicit consent, unless such disclosure is required by generally applicable law, for example where data must be provided to law enforcement authorities.

§ 4. Transfer of Data Outside the European Economic Area (EEA)

Due to the use of certain external tools, for example solutions provided by Google or other global providers, your personal data (for example an IP address stored in cookies) may be transferred outside the EEA. The Controller ensures that data is transferred only to entities located in countries that provide an adequate level of protection, for example countries covered by European Commission adequacy decisions, or by using Standard Contractual Clauses.

§ 5. User Rights in Connection with Personal Data Processing

Under the GDPR, you have the following rights:

  1. Right of access: the right to obtain information about what data is processed by the Controller and to receive a copy of that data.
  2. Right to rectification: the right to request correction of inaccurate data or completion of incomplete data.
  3. Right to erasure (“right to be forgotten”): the right to request deletion of data where it is no longer necessary for the purposes for which it was collected or where consent has been withdrawn.
  4. Right to restriction of processing: the right to restrict operations performed on data, except for its storage, in strictly defined circumstances.
  5. Right to data portability: the right to receive data in a structured format and transmit it to another controller.
  6. Right to object: the right to object to the processing of data based on the Controller’s legitimate interests.
  7. Right to withdraw consent: where processing is based on consent, the User has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise your rights, please contact us at: info@e-composites.eu .

If you believe that the processing of your personal data infringes the GDPR, you also have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw.

§ 6. Data Security

The Controller applies appropriate technical and organisational measures to ensure the protection of processed personal data, taking into account the risks and categories of data being protected. In particular, we protect data against unauthorised access, theft, destruction or loss. The Website uses an encrypted connection (SSL certificate), ensuring secure transmission of data between your browser and our server.

§ 7. Profiling and Automated Decision-Making

Data provided by the User will not be subject to automated decision-making, including profiling, that would produce legal effects concerning the User or similarly significantly affect the User. Any profiling for marketing purposes, for example through analytical or advertising tools, is always based on your voluntary consent expressed through the cookie banner.

§ 8. Cookies

Detailed information on how our Website collects data using cookie technology can be found in the Cookie Policy available on our Website.

§ 9. Changes to the Privacy Policy

  1. The Privacy Policy is reviewed on an ongoing basis and updated where necessary, for example in the event of changes to applicable law, implementation of new technological solutions or modifications to the operation of the Website.
  2. Changes take effect from the moment they are published on the Website.