Cookie policy

Valid from: 25 May 2018.

The Controller of personal data is GALECO Sp. z o.o. with its registered office in Balice, ul. Uśmiechu 1, 32- -083 Balice), entered into the Register of Entrepreneurs of the National Court Register under the number KRS 0000102185, with its register files maintainAed by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, Tax Identification Number (NIP): 6792594371, share capital: PLN 400,000.00 (four hundred thousand złoty), hereinafter referred to as: Galeco.

Galeco attaches great importance to the protection of personal data and to compliance with the law during their collection and processing. For this purpose, this Privacy and Cookie Policy has been created – it contains all the information about the collection of your personal data by Galeco via www.galeco.pl and the principles of their use.

This Privacy and Cookie Policy specifies in particular the current practice of Galeco regarding privacy with respect to information that is collected in the interactions with the website galeco.pl, through the contact form and order forms. In addition, an integral part of this Privacy and Cookie Policy is the information on Galeco’s use of cookies technology on the website www.galeco.pl.

Any questions regarding the Privacy and Cookie Policy may be sent to: galeco@galeco.pl or by mail to: Galeco Sp. z o.o., ul. Uśmiechu 1, 32-083 Balice.

Galeco reserves the right to change this Privacy and Cookie policy by publishing an updated policy on the website www.galeco.pl.

PERSONAL DATA

Contact

You may contact Galeco by emails provided at www.galeco.pl or through the contact form - https://galeco.pl/en/contact/main-office or by telephone.
When contacting Galeco by email, you provide your email address as the address of the sender of the message. In addition, you may include other personal data in the text of the message. The provision of data is voluntary, but necessary to contact us.
When contacting Galeco by the contact form, you provide your email address. In addition, you may include other personal data in the text of the message. The provision of those data is voluntary, but necessary to contact us. In the contact form, you may also provide your name and surname, the name of your company and telephone number - the provision of those data is voluntary and it is not necessary to contact us.
When contacting Galeco by telephone, you provide your name and surname and the telephone number. In addition, you may include other personal data during the conversation. The provision of data is voluntary, but necessary to contact us.
Your personal data you provided in the contact form and in the correspondence with Galeco will be processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as: the GDPR for the following purposes:
1. to respond to your query or warranty claim (for the purposes of legitimate interest - Article 6(1)(f) of the GDPR);
2. in order to take steps at the request of the data subject prior to entering into a contract (under Article 6(1)(b) of the GDPR);
3. for the conclusion and performance of the contract (under Article 6(1)(b) of the GDPR);
4. for the establishment or defence of legal claims by Galeco (for the purposes of legitimate interest - Article 6(1)(f) of the GDPR).

Your personal data indicated in email correspondence or contact form will be stored by Galeco only for as long as it is necessary for the purposes for which they have been collected, i.e.:

for a maximum period of 30 (thirty) days from providing the answer to the last question submitted in the contact form,
for a maximum period of 10 (ten) years from the time of the response to your warranty claim submitted in the contact form for the protection against any possible claims;
for a maximum period of 10 (ten) years from the completion of the contract concluded by you with Galeco for the protection against any possible claims.

After the lapse of the indicated periods, your personal data will be deleted without delay. If the limitation period is interrupted, those periods will be extended as appropriate, e.g., in the case of a legal dispute, the indicated period will be extended until the final settlement of the dispute.

Orders

You can download the order form on the website http://galeco.pl/pl/do-pobrania/formularz-zamowienia-i-kalkulator.html.
By completing the order form and sending it to Galeco, you provide the name of the company, its address and your telephone number. The provision of data is voluntary, but necessary for the delivery of the order placed.
All data provided in connection with the order are processed for the purposes of delivery of the order and issuing the VAT invoice (Article 6(1)(c) of the GDPR), possible exercise of the right of withdrawal (Article 6(1)(c) of the GDPR), inclusion of the VAT invoice in the accounting records (Article 6(1)(c) of the GDPR) and for the purposes of legitimate interest of Galeco (Article 6(1)(f) of the GDPR), namely the establishment, exercise or defence of legal claims, in particular in connection with the procedures pertaining to guarantee, warranty claims and returns.
The data regarding orders will be processed for the time necessary for the delivery of the order, and then until expiry of the limitation period for the claims in relation to the concluded contract, i.e., up to 10 (ten) years from the time of completion of the contract. In addition, Galeco is also obliged to keep VAT invoices with your personal data for the period of 5 (five) years from the end of the tax year in which the tax liability arose.
After the lapse of the indicated periods, your personal data will be deleted without delay. If the limitation period is interrupted, those periods will be extended as appropriate, e.g., in the case of a legal dispute, the indicated period will be extended until the final settlement of the dispute.

Competitions

On www.galeco.pl, you also may find the competitions currently organised by Galeco. Terms and conditions of those competitions are available on the relevant pages.
When declaring participation in a competition (in particular by filling and sending the application form to Galeco) you provide your personal data necessary to participate in the competition. The provision of data is voluntary, but necessary for to accept the application.
In the event of the award of the prize by Galeco, you also fill the order form for the prize, where you provide your personal data necessary for the collection of the prize and calculation of the appropriate tax. The provision of data is voluntary, but necessary for the collection of the prize and the relevant tax settlement.
The data provided in connection with the competition are processed on the basis of a voluntary and explicit consent of the competition participant (Article 6(a)(f) of the GDPR) solely for the purposes of the competition, including the publication of visualisations along with the names and surnames of the organisers [EES1] on the website and in the social media profile of Galeco, selecting the winners, awarding the prizes, publication of data of the winner and consideration of any possible complaints or defence of claims. Galeco also processes personal data of the winners in order to fulfil the tax obligations incumbent on Galeco (Article 6(1)(c) of the GDPR).
Personal data will be processed for the time necessary for the implementation of the competition, delivery and settlement of the awarded prize, and then until expiry of the time to submit any complaints or the limitation period for the claims in the case of complaints timely submitted. In addition, Galeco is also obliged to keep the application with your personal data along with the tax return, as a general rule, for the period of 5 (five) years from the end of the tax year in which the tax liability arose.
Where the processing of personal data is carried out on the basis of your consent, you have the right to withdraw your consent at any time. This will stop the processing of your personal data, unless the processing is possible on a different basis or unless Galeco is obliged to carry out the processing on the basis of the relevant provisions of applicable law. However, in the competition period, this is tantamount to the resignation from the participation in the given competition (Galeco may exclude you from the participation in the competition), and in the case where the data are to be processed in connection with the delivery of prize, its delivery will be denied. Withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent before its withdrawal.
After the lapse of the indicated periods, your personal data will be deleted without delay. If the limitation period is interrupted, those periods will be extended as appropriate, e.g., in the case of a legal dispute, the indicated period will be extended until the final settlement of the dispute.

RIGTS OF THE DATA SUBJECT

In connection with the processing of your personal data, in accordance with the GDPR, you will have the following rights, depending on the scope and purpose for which such data are processed:

to obtain confirmation as to whether or not personal data concerning you are being processed, and access to the personal data (Article 15 of the GDPR),
the right to obtain a copy of the personal data undergoing processing (Article 15 of the GDPR),
the right to obtain the rectification of inaccurate personal data concerning you and the right to have incomplete personal data completed (Article 16 of the GDPR),
right to erasure or the ‘right to be forgotten’ (Article 17 of the GDPR) - the right to obtain from Galeco the erasure of personal data concerning you without undue delay where one of the following grounds applies:
1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
2. you object to the processing pursuant to section 7 below and there are no overriding legitimate grounds for the processing of such data;
3. the personal data have been unlawfully processed;
4. the personal data have to be erased for compliance with a legal obligation provided for in the law of the European Union or the Polish law.

However, Galeco may not be able to erase your personal data to the extent that processing is necessary (i) for exercising the right of freedom of expression and information, (ii) for compliance with a legal obligation which requires processing provided for in the law of the European Union or the Polish law, (iii) for the establishment, exercise or defence of legal claims.

right to restriction of processing (Article 18 of the GDPR) – you have the right to obtain from Galeco restriction of processing where one of the following applies:
1. the accuracy of the personal data is contested by you, for a period enabling Galeco to verify the accuracy of the personal data;
2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
3. Galeco no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
4. you have objected to processing pursuant to section 7) below - pending the verification whether the legitimate grounds of Galeco override your grounds for the objection,

right to data portability (Article 20 of the GDPR) – you have the right to receive from Galeco the personal data concerning you, which you have provided when placing the order, in a structured, commonly used and machine-readable format; you also have the right to transmit those data to another controller,
right to object (Article 21 of the GDPR) - you have the right to object to the processing of personal data in cases where Galeco processes these data on grounds of legitimate interest; Galeco will no longer process the personal data unless Galeco demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims,

You may exercise the aforementioned rights by contacting Galeco at: galeco@galeco.pl or by mail to: Galeco Sp. z o.o., ul. Uśmiechu 1, 32-083 Balice.
You have, at any time, the right to lodge a complaint with a supervisory authority (currently, President of the Personal Data Protection Authority), if Galeco violates your rights with regard to the processing of personal data (Article 77 of the GDPR).

SAFEGUARDS

Galeco cooperates with providers of IT services (including hosting) in order to ensure stability of the operation and security of the website www.galeco.pl.
Galeco applies technical and organisational measures to ensure the protection of personal data processed appropriate to the risks and the category of protected data, and in particular protects data from their disclosure to or acquisition by unauthorised persons, their processing in breach of the applicable provisions as well as their change, loss, damage or destruction.
The data you enter in the contact form are encrypted. Galeco uses a valid SSL certificate.

COOKIES AND OTHER TRACKING TECHNOLOGIES

The website www.galeco.pl uses cookies. Cookies are small text files that are stored on your end device (e.g. computer, tablet, smartphone), which can be read by Galeco’s IT system (proprietary cookies) or the IT system of Google LLC and Google Ireland Limited (third party cookies).
Some cookies used by Galeco are deleted after the end of the session of the web browser, i.e., after it is closed (session cookies). Other cookies are stored on your end device and allow Galeco to recognize your web browser next time you open the website (persistent cookies).
During the first visit on the website, you will be presented with a message concerning the application of cookies, along with the possibility to express consent to their use in order to allow the utilisation of advertising tools for remarketing campaigns.
Acceptance of Galeco using cookies for the aforementioned purposes means consent for the use of cookies in accordance with the information contained in this Privacy and Cookie Policy. You may, at any time, withdraw your consent by changing cookie settings in your browser in order to adapt it to your needs and in particular to turn the service off completely. Browsers manage cookie settings in different ways. You will find information on changing cookie settings in the help menu of the web browser. However, blocking cookies may result in the inability to use the website www.galeco.pl or its individual functions.
Proprietary cookies are used in order to ensure the proper operation of the site.
Third party cookies concerns the tools Google Analytics and Google Adwords (since 24 July 2018 known as Google Ads) provided, respectively, by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin, Ireland (hereinafter collectively referred to as: Google).
Google LLC, which has its headquarters in the United States and uses the technical infrastructure available in that country, has joined the EU-US Privacy Shield in order to ensure an adequate level of protection for personal data required by European regulations. In the framework of the agreement between the United States and the European Commission, the latter confirmed the adequate level of data protection in the case of Privacy Shield certified enterprises. You can find more information about the principles of personal data protection under Privacy Shield at: https://www.privacyshield.gov/Program-Overview and also at: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_en.
Galeco does not identify the user and does not link information allowing his or her identification with information which do not allow such identification collected previously using any advertising service or functionality of Google.
Detailed information about how Google uses the user data is available at: https://policies.google.com/technologies/partner-sites.
Application of both types of cookies (except Google Adwords cookies, the application of which requires the user consent) is based on the legitimate interest of Galeco (Article 6(1)(f) of the GDPR) which involves the correct operation of the website, the production of statistics and their analysis in order to optimise the website www.galeco.pl. Cookies applied at www.galeco.pl are not used to identify the users.

GOOGLE ANALITYCS

Google Analytics is an online tool to analyse statistics of websites. It automatically collects information about your use of the Galeco website. Galeco uses Google Tag Manager for Google Analitycs.
Galeco has activated anonymisation of the IP address. Your IP address is truncated before it is passed further on. Only in exceptional cases a complete IP address is sent to the Google LLC server in the United States and a truncated there. The anonymised IP address sent by your browser in Google Analytics, as a general rule, is not combined with other Google LLC data.
You can prevent Google from recording the data collected by cookies concerning your use of the Galeco website, and you can also prevent Google from processing of such data, by installing a browser plugin available at: https://tools.google.com/dlpage/gaoptout.
If you are interested in the details related to the processing of data as part of Google Analytics, you can refer to the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.

GOOGLE ADWORDS (KNOWN AS GOOGLE ADS SINCE 24 JULY 2018)

Galeco uses the Google Adwords advertising system to create remarketing campaigns. Remarketing allows to display advertisements for Galeco products to the users who have visited the website www.galeco.pl. More information on displaying ads through the Google Adwords service is available here: https://policies.google.com/technologies/ads?hl=pl.
As part of Google Adwords, Galeco also uses the conversion tracking service. Google Adwords places a cookie to track conversion (called a conversion cookie) on the hard drive of the user’s computer every time the user clicks on the ad provided by Google. Such cookies do not serve to identify the user. Your visits on specific pages of the Galeco website allows Google and Galeco to determine that you have been redirected to such pages after clicking on the ad.
The data obtained from the application of conversion cookies are used for the purposes of statistical reporting by Galeco. Such statistical data indicate the total number of users who clicked on the ad provided by Google and opened a web page with the conversion tracking marker. However, Galeco receives no information allowing to identify users. Galeco is not able to link the obtained data with specific users.
You can adjust ads in the advertising network of Google by changing ad settings (e.g., blocking specific ads) at: https://www.google.com/settings/ads. Exact instructions to do it are available at: https://support.google.com/ads/answer/2662856?hl=pl&co=GENIE.Platform%3DDesktop&oco=0 . However, even if you turn off personalised ads, you may still be presented with ads based, e.g., on your general location (on the basis of your IP address), browser type and search words.

SOCIAL NETWORKING TOOLS

The social network Facebook is the controller of personal data of its users on the basis of its own regulations. When you interact with Galeco via Facebook (like/observe a profile, react to posts, share, comment, send private messages), the controller of your data is not only Facebook, but also Galeco. The data such as your name/nick, physical likeness, public profile and other information provided in messages or comments are processed by Galeco on the grounds of legitimate interest (Article 6(1)(f) of the GDPR) in order to respond to the comments and messages, maintain relations with people interacting with Galeco, and also for the analysis of the effectiveness of communication.
Your interactions with Galeco on Facebook, as a general rule, are not linked by Galeco with the information you provide otherwise (e.g. by email), unless something different arises from the circumstances (e.g., you wrote a private message to us on Facebook where you provided your email address asking to contact you). Galeco does not transmit your personal data to anyone, however, Facebook has access to all information about you as the portal administrator.
If you wish your data to be processed in accordance with our Privacy and Cookie Policy, please contact Galeco through other channels than social networks. For example, if you write an email, Galeco can control what will happen to this information and who will read it.
Our website www.galeco.pl also uses the plugin made available by Facebook.
When you display a website which contains such a plugin, your browser will establish a direct connection with the server of the administrator of Facebook - Facebook, Inc. 1601 Willow Road, Menlo Park, California 94025, USA (service provider). The content of the plug is transmitted by the service provider directly to your browser and integrated with the site. Through this integration, the service provider receives the information that your browser displayed the website www.galeco.pl, even if you do not have a profile with the specific service provider or you are currently logged out. This information (along with your IP address) is sent by your browser directly to the server of the service provider (whose servers, as a general rule, are located in the USA) and stored there.
If you have logged in to Facebook, the service provider will be able to directly link the visit on the Galeco website to your profile in the relevant social network.
If you use the given plugin, e.g., by clicking the Like button or the Share button, the relevant information will also be sent directly to the server of the service provider and stored there. In addition, such information will be published in the social network and will appear to persons added as your contacts. The purpose and scope of the collection of data and their further processing and use by the service provider, as well as the contact options and your rights in this respect, and the settings allowing to protect your privacy have been described in the privacy policy of the service provider - https://www.facebook.com/legal/FB_Work_Privacy.
If you do not want Facebook to link the data collected during your visits on www.galeco.pl directly to your profile in the given network, log out of this network before visiting the Galeco website. You can also completely prevent the loading of the plugins on the website, using the appropriate extension for your browser, such as blocking scripts.

RECIPIENTS OF PERSONAL DATA

Your data can be accessed only on the need-to-know basis by employees authorised by Galeco. In addition, your personal data may be entrusted to the following entities on the basis of contracts concluded with them: companies providing IT support (including providers of the Google Analitycs service - Google LLC with its headquarters in the United States and Google Adwords - Google Ireland Limited) and server services, law firms providing legal and tax advice, accounting companies, entities connected with Galeco by capital or personally, responsible for the implementation of the contractual obligations and those arising from the provisions of law, and may also made available to authorities entitled to their processing on the basis of separate provisions of law.
Your personal data collected using the contact form or order form will not be transferred to a third country.
The data collected by Google Analytics are usually transferred by Google LLC to servers in the United States and stored there, whereas the data collected by Google Adwords are transferred to servers in Ireland.
The data collected by Facebook, including through the plugin made available by it, are usually transferred by Facebook Inc. to servers in the United States and stored there.