Privacy Policy

Version valid from 18/01/2025.

WHAT IS A PRIVACY POLICY?

We would like to familiarize you with the details of how we process your personal data to give you full knowledge and comfort in using our website.

Since we operate in the internet industry ourselves, we know how important it is to protect your personal data. That is why we take special care to protect your privacy and the information you provide to us.

We carefully select and apply appropriate technical measures, in particular those of a programming and organizational nature, ensuring the protection of processed personal data. Our website uses encrypted data transmission (SSL), which ensures the protection of data identifying you.

In our Privacy Policy you will find all the most important information regarding our processing of your personal data. We ask you to read it and we promise that it will not take you more than a few minutes.

Who is the administrator of the website www.invictel.pl?

The administrator of the website is INVICTEL PIKUŁA SPÓŁKA JAWNA with its registered office in Kamyk, at ul. Szkolna 9/Hala A, 42-125 Kamyk, registered by the District Court in Częstochowa, 17th Commercial Division of the National Court Register, KRS 0000940050, NIP 5732932409, REGON 521028498 (i.e.: we).

PERSONAL DATA

What legal act regulates the processing of your personal data?

Your personal data are collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly referred to as: GDPR. To the extent not regulated by the GDPR, the processing of personal data is regulated by the Personal Data Protection Act of 10 May 2018.

Who is the administrator of your personal data?

The controller of your personal data is INVICTEL PIKUŁA SPÓŁKA JAWNA with its registered office in Kamyk, ul. Szkolna 9 Hala A, 42-125 Kamyk, registered by the District Court in Częstochowa, 17th Commercial Division of the National Court Register, KRS 0000940050, NIP 5732932409, REGON 521028498, phone: +48 698666185, e-mail: biuro@invictel.pl

You can contact us regarding your personal data by:

  • e-mail: biuro@invictel.pl,
  • traditional mail: ul. Szkolna 9, Hall A, 42-125 Kamyk,
  • telephone: +48 698666185.

HOW DO WE PROCESS THE PERSONAL DATA YOU PROVIDE US?

What personal data do we process and for what purposes do we process it?

On our website we offer you many different services for which we process different personal data based on different legal bases.

Objective

Personal data

Legal basis for processing

Data storage time

conclusion and performance of the contract

name, surname, mailing address, e-mail address, telephone number

Article 6, paragraph 1, letter b) of the GDPR, i.e. processing for the purpose of taking action at your request, prior to entering into a contract and processing necessary for the performance of a contract to which you are a party

until the expiry of the limitation period for claims relating to the performance of the contract

setting up and maintaining an account

name, surname, e-mail address, telephone number, mailing address

Article 6, paragraph 1, letter b) of the GDPR, i.e. processing for the purpose of taking action at your request, prior to entering into a contract and processing necessary for the performance of a contract to which you are a party

until the expiry of the limitation period for claims relating to the performance of the contract

adding opinions

nickname, email address

Article 6, paragraph 1, letter f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in presenting opinions on the goods and the course of the transaction on the online store website

until you object to the processing of your personal data

newsletter

email address, name, surname, phone number

Article 6, paragraph 1, letter a) of the GDPR, i.e. processing based on your consent to the processing of your personal data

5 years or until the day you withdraw your consent to the processing of personal data

contact form

name, surname, e-mail address, telephone number

Article 6, paragraph 1, letter f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in maintaining continuity of communication and enabling contact with us in matters related to our business activities

until you object to the processing of your personal data

organization of competitions

name, surname, e-mail address, image, phone number

Article 6, paragraph 1, letter a) of the GDPR, i.e. processing based on your consent to the processing of your personal data

until the day you withdraw your consent to the processing of personal data

analysis of traffic on the online store website

name, address, IP address

Art. 6 sec. 1 letter f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in analysing customer traffic on the store website

until you object to the processing of your personal data

direct marketing of own goods and services, including remarketing

name, address, IP address,

Art. 6 sec. 1 letter f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in direct marketing of our own services, including remarketing

until you object to the processing of your personal data

establishing, pursuing and enforcing claims and defending against claims in proceedings before courts and other state bodies

name, surname, address, PESEL, NIP, REGON, e-mail address, telephone number, IP number, bank account number, payment card number

Article 6, paragraph 1, letter f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in determining, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities

until the expiry of the limitation period for claims relating to the performance of the contract

fulfillment of legal obligations resulting from legal regulations, in particular tax and accounting regulations

name, surname, company, PESEL, NIP or REGON number, e-mail address, telephone number, correspondence address, payment card number

Art. 6 sec. 1 letter c) GDPR, i.e. processing is necessary to fulfil our legal obligations resulting from legal regulations, in particular tax and accounting regulations

until the legal obligations incumbent on the Administrator that justified the processing of personal data expire

Voluntary provision of personal data

Providing the required personal data is voluntary but is a condition for us to provide services to you (e.g. sending a newsletter or setting up an account).

Recipients of personal data

The current list of entities to which we disclose your personal data can be found here .

Automated decision-making (including profiling)

We use tools to direct personalized ads to you. Based on your actions in the Store, in particular the selection of viewed content and the time spent on the Store subpages, we adjust and display marketing content tailored to you. Thanks to such profiling, we can direct a marketing message that is more desirable to you, which is a benefit for both us and you, because in this way we limit the marketing message regarding goods and services that are not in your area of ​​interest.

Will we transfer your personal data outside the EEA or to an international organisation?

In order to use Google tools, your personal data may be transferred to the United States, where Google LLC servers are located.

Google LLC is included in the list of entities participating in the Data Privacy Framework , therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data in accordance with the EU- US Data Privacy Framework .

In order to use Facebook and Instagram tools, your personal data may be transferred to the United States, where Meta Inc. servers are located.

Meta Platforms Inc. is listed in the Data Privacy Framework , which means that the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data in accordance with the EU- US Data Privacy Framework .

WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?

Under the GDPR you have the right to:

  • request access to your personal data,
  • request the rectification of your personal data,
  • request the deletion of your personal data,
  • requesting restriction of the processing of personal data,
  • object to the processing of personal data,
  • request the transfer of personal data.

If you make any of the above requests to us, we will provide you with information on the action taken in relation to your request without undue delay - and in any case within one month of receiving the request.

If necessary, we may extend the monthly period by a further two months due to the complex nature of the request or the number of requests.

In any case, we will inform you within one month of receiving the request about the extension and provide you with the reasons for the delay.

The right to access personal data (Article 15 of the GDPR)

You have the right to obtain information about whether we process your personal data. If we process your personal data, you have the right to:

  • access to personal data,
  • obtain information on the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of this data, the planned period for which your data will be stored or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with the President of the Personal Data Protection Office, the source of this data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of this data outside the European Union;
  • obtain a copy of your personal data.

If you wish to request access to your personal data, please submit your request to the following address: biuro@invictel.pl.

The right to rectify personal data (Article 16 of the GDPR)

If your personal data is incorrect, you have the right to request that we rectify your personal data immediately. You also have the right to request that we supplement your personal data. If you want to request that your personal data be rectified or supplemented, submit your request to the following address: biuro@invictel.pl.

The right to have your personal data deleted, the so-called "right to be forgotten" (Article 17 of the GDPR)

You have the right to request the deletion of your personal data when:

  • Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • you have withdrawn specific consent to the extent that personal data were processed based on your consent;
  • Your personal data was processed unlawfully;
  • you have objected to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent that the processing of personal data is related to direct marketing;
  • you have objected to the processing of your personal data in connection with the processing necessary for the performance of a task carried out in the public interest or the processing necessary for the purposes of legitimate interests pursued by us or a third party.

Despite the request to delete personal data, we may continue to process your data for the purpose of establishing, pursuing or defending claims, about which you will be informed.

If you wish to request the deletion of your personal data, please submit your request to the following address: biuro@invictel.pl.

The right to request the restriction of the processing of personal data (Article 18 of the GDPR)

You have the right to request the restriction of the processing of your personal data when:

  • you question the accuracy of your personal data – in such a case we will limit the processing of your personal data for a period allowing us to verify the accuracy of such data;
  • the processing of your data is unlawful and instead of deleting your personal data, you request the restriction of the processing of your personal data;
  • Your personal data are no longer necessary for the purposes of processing, but they are needed for the establishment, exercise or defence of your legal claims;
  • you have objected to the processing of your personal data – until it is determined whether our legitimate interests override the grounds indicated in your objection.

If you wish to request the restriction of the processing of your personal data, please submit your request to the following address: biuro@invictel.pl.

The right to object to the processing of personal data (Article 21 of the GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

  • processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Personal Data Controller or a third party;
  • processing for direct marketing purposes.

If you wish to object to the processing of your personal data, please submit your request to the following address: biuro@invictel.pl.

The right to request the portability of personal data (Article 20 of the GDPR)

You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to transmit it to another personal data controller.

By default, we will provide you with your personal data in CSV format. If you would prefer to have your data provided to you in a different format, please indicate your preferred format in your request. Where possible, we will try to provide you with your data in your preferred format.

You can also request that we transmit your personal data directly to another controller (if technically possible).

If you wish to request the transfer of your personal data, please submit your request to the following address: biuro@invictel.pl.

Can you withdraw your consent to the processing of personal data?

You may withdraw your consent to the processing of your personal data at any time. Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out by us on the basis of your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, please submit your request to the following address: biuro@invictel.pl.

If you wish to withdraw your consent to the processing of your personal data for the purpose of providing the "Newsletter" service, you may unsubscribe by sending us a message.

Complaint to the supervisory authority

If you believe that the processing of your personal data violates personal data protection provisions, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Office for Personal Data Protection, which replaced GIODO on 25 May 2018.

You can find more information here .

Cookies

General information

When browsing the Internet pages of the Online Store, "cookies" files are used, hereinafter referred to as Cookies, i.e. small text information that is saved on your end device in connection with the use of the Online Store. Their use is aimed at the correct operation of the Internet pages of the Online Store.

These files allow you to identify the software you use and customize the Online Store to your individual needs.

Cookies usually contain the name of the domain from which they originate, the time they are stored on the device and an assigned value.

Security

The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to get to your devices via Cookies.

Types of Cookies

We use two types of cookies:

  • Session Cookies: are stored on your device and remain there until the end of the browser session. The stored information is then permanently deleted from your device's memory. The Session Cookies mechanism does not allow for the collection of any personal data or any confidential information from your device.
  • Persistent Cookies: They are stored on your device and remain there until you delete them. Ending a browser session or turning off your device does not delete them from your device. The Persistent Cookies mechanism does not allow any personal data or any confidential information to be retrieved from your device.

Goals

We also use third-party cookies for the following purposes:

  • configuration of the Online Store;

To learn about the principles of using Cookies, we recommend that you read the privacy policies of the companies indicated above.

Cookies can be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences. For this purpose, information about how you navigate the network or the time of use of a website may be stored.

To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at https://www.google.com/ads/preferences/.

Using the web browser settings or service configuration, you can independently and at any time change the settings for Cookies, specifying the conditions for their storage and access by Cookies to your device. You can change these settings to block automatic handling of Cookies in the web browser settings or to inform each time they are placed on your device. Detailed information about the possibilities and methods of handling Cookies is available in the settings of your software (web browser).