Privacy Policy

1. Personal data controller

The controller of personal data processed in connection with the use of the kristalan.pl website is:

KRISTALAN Sp. z o.o.
ul. Nowogrodzka 31/330Z
00-511 Warsaw, Poland
KRS: 0000975285
NIP: 1133060711
e-mail: office@kristalan.pl

For matters concerning personal data protection, you can contact the Controller at office@kristalan.pl or in writing at the registered office address.

The Controller has not appointed a Data Protection Officer.

2. What data we may process

Depending on how the Website is used, we may process in particular:

• first and last name;
• company name and business-related information;
• e-mail address;
• telephone number;
• information provided in the content of an inquiry;
• information about the product of interest, quantity, planned order or required date;
• information contained in attachments submitted by the user;
• data provided in e-mail correspondence;
• technical data related to the use of the Website, such as IP address, device and browser information, and data necessary to ensure Website security;
• information concerning cookie consent and, where applicable, consent to marketing communications.

3. Purposes and legal bases for processing

Personal data may be processed for the following purposes:

Handling inquiries and preparing replies or offers.
Where the contact is intended to lead to the conclusion of a contract — on the basis of Article 6(1)(b) GDPR.
In other cases — on the basis of Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest in conducting correspondence and handling inquiries related to Kristalan’s business activity.

Conclusion and performance of a contract or order — on the basis of Article 6(1)(b) GDPR.

Compliance with legal, tax and accounting obligations — on the basis of Article 6(1)(c) GDPR.

Establishment, exercise or defence of legal claims — on the basis of Article 6(1)(f) GDPR.

Ensuring the security and proper operation of the Website — on the basis of Article 6(1)(f) GDPR.

Sending commercial and marketing information to an e-mail address — only where the user has voluntarily provided separate consent.

Use of optional cookies and similar technologies — after obtaining the appropriate consent from the user. Detailed information is provided in the Cookie Policy.

4. Voluntary provision of data

Providing personal data through the forms is voluntary.

However, some information is necessary for Kristalan to respond to an inquiry, prepare an offer or take steps in connection with a potential contract.

Consent to marketing communications is not required in order to submit an inquiry or receive a response.

5. E-mail marketing

If the user provides separate marketing consent, the e-mail address provided may be used to send information concerning, among other things:

• products and new product categories;
• Kristalan offers;
• commercial information;
• news and informational materials relating to the company’s activities.

Consent is voluntary and may be withdrawn at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Until a dedicated newsletter system is implemented, consent may be withdrawn by contacting:

office@kristalan.pl

Once a newsletter system is implemented, marketing messages will also include a mechanism enabling users to opt out of further communications.

6. Recipients of data

Data may be disclosed to entities supporting the Controller, in particular:

• providers of IT infrastructure, hosting and cloud services;
• e-mail service providers;
• providers of systems used to store and handle inquiries;
• providers of consent and cookie management tools;
• providers of IT, accounting, legal or administrative services;
• public authorities where disclosure is required by law.

Entities processing data on behalf of Kristalan may use it only to the extent necessary to provide the services entrusted to them.

7. Transfers outside the EEA

Some providers of infrastructure or online services may process data outside the European Economic Area.

Where required, such transfers are carried out using mechanisms provided for under the GDPR, such as an adequacy decision of the European Commission or Standard Contractual Clauses.

8. Data retention period

Data related to inquiries is retained for as long as necessary to handle the inquiry and related correspondence.

If the inquiry leads to a contract or transaction, the data may continue to be stored for the duration of the contract and for periods required by law, including tax and accounting regulations, as well as for the period necessary to establish, exercise or defend legal claims.

Data processed on the basis of marketing consent is retained until the consent is withdrawn or the purpose of processing ceases to exist.

After consent is withdrawn, we may retain minimal information about the withdrawal where necessary to demonstrate compliance and to prevent the e-mail address from being added to marketing communications again.

Technical and security-related data is retained for the period necessary to ensure the security and proper operation of the Website.

9. User rights

In the cases provided for by the GDPR, the user has the right to:

• access their personal data;
• rectify their data;
• erase their data;
• restrict processing;
• data portability;
• object to processing based on legitimate interests;
• withdraw consent at any time where processing is based on consent.

To exercise these rights, contact:

office@kristalan.pl

10. Right to lodge a complaint

A person who believes that their personal data is being processed in breach of the GDPR has the right to lodge a complaint with the competent supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO).

11. Automated decision-making

Data submitted through Kristalan forms is not currently used for decisions based solely on automated processing that would produce legal effects concerning the user or similarly significantly affect them.

12. Cookies

The Website uses cookies and similar technologies.

Necessary technologies may be used to the extent required for the proper functioning of the Website.

Cookies relating to preferences, statistics and marketing are activated in accordance with the user’s choices made through Cookiebot CMP.

Detailed information is available in the Cookie Policy and the dynamic Cookie Declaration.

Users may change their settings at any time using the “Cookie settings” link available in the Website footer.

13. Changes to the Privacy Policy

This Policy may be updated in the event of changes to the Website, the services used or applicable law.

The current version will be published on kristalan.pl.