Estika.eu
Information
Privacy Policy

Privacy Policy

I. INTRODUCTION

FIDELI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, a limited liability company, based in WOLSZTYN (registered office address and mailing address: ul. ŻEROMSKIEGO 16, 64-200 WOLSZTYN entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0000386542; the registry court where the company's records are kept: DISTRICT COURT POZNAŃ - NOWY MIASTO I WILDA IN POZNAŃ, 9th COMMERCIAL DIVISION OF THE NATIONAL COURT REGISTER; Tax Identification No. NIP 9231687378, National Business Registry No. REGON: 301745365, operating an online store available at www.estika.eu (hereinafter referred to as the Store), attaches high priority to protecting the privacy of all individuals whose data we process in connection with the Store's operations.

In this document ("Privacy Policy"), the Store wants to provide you with the most important information related to the processing of your personal data:

a)   visitors to the website hosted at www.estika.eu or our social media.
b)   people who enter into contracts with our business partners or are interested in our products;
c)   representatives and employees of our business partners or contractors,
d)   contact persons;
e)   visitors to our headquarters;

We make every effort to ensure that the information provided to you complies with the transparency requirements set forth in the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). The aforementioned act will hereinafter be referred to as “GDPR”.

II. The controller of your personal data is FIDELI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, based in WOLSZTYN (hereinafter: "we", "Controller" or "Store").

CONTACT
We can be contacted:
•   in electronic form via email address: cs@estika.eu.
•   in the form of traditional mail sent to our address: ul. ŻEROMSKIEGO 16, 64-200 WOLSZTYN
•   For matters related to the processing of personal data, please contact us by email: cs@estika.eu.

III. WHAT PERSONAL DATA DO WE PROCESS?

Website and social media profiles

In connection with your use of the website, we collect data to the extent necessary to provide the individual services offered, as well as information about your activity on the website.

For example:
 If you use the contact form, we collect information about your name, contact details, and the content of your request.
 If you navigate through our site, we collect information stored in cookies or system logs, as well as information about your IP address, time spent on the site, and interactions with content on the site.
As part of operating our social media profiles, we collect information about your activity within a specific web portal in connection with our website/company profile (e.g., clicks on "Like", published posts, comments, and messages sent within internal messengers).

Functioning of the distribution network

In connection with the operation of our distribution network, we collect and process data from individuals who have entered into a contract with our business partners related to our products or are interested in our products and have contacted a selected business partner for this purpose.

As part of the operation of our distribution network, we collect information in the form of: contact information, information about the subject of the contract and the date of its performance, information about the details of delivery or installation, information related to the performance of the contract or service to a potential customer in connection with an inquiry for a quote related to our products.

Additionally, as part of our efforts to monitor the quality of service provided to our customers, we collect and process information gathered through our business partners' satisfaction surveys.

Business cooperation

In the context of business cooperation, we collect and process personal data of entrepreneurs who are our business partners, as well as representatives or employees of our business partners operating in the form of companies (including those within our distribution network) or entities interested in such cooperation. The scope of the data collected depends on the type of cooperation. We typically collect basic information, including contact details, business information, details about the place of employment/represented entity, correspondence-related information, and details regarding the conclusion and execution of a contract.

Visits to our premises (place of business)

In connection with visits to our premises, we collect information related to your first and last name, details of your visit, and data recorded on video recordings as part of our video surveillance system.

Purchase of products or services at the headquarters of FIDELI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ.

If you purchase products or services directly from the Store, we process your data to the extent necessary to perform the concluded contract. In connection with the conclusion of a contract, we also process your data for purposes justified by our legitimate interest, which includes, among other things, monitoring the quality of our customer service within the framework of contract satisfaction surveys.

IV. COOKIES AND SIMILAR TECHNOLOGY

Our websites use cookies. You can read more about cookies and how to use them in our Cookie Policy.

V. SOURCES OF PERSONAL DATA

In cases where we do not collect personal data directly from you, we obtain it:
from our business partners with whom you conclude contracts related to ESTIKA, FIDELI Sp. z o.o. products; in the case of B2B (business-to-business) cooperation from publicly available sources, such as: the pages of the Central Register of Economic Activity and Information (CEID), the National Court Register (KRS), websites, VIES:
(https://europa.eu/youreurope/business/taxation/vat/check-vat-number-vies/index_pl.htm), other publicly available records)from your representatives or agents if they are contacting us on your behalf.

VI. PURPOSES AND BASIS OF PERSONAL DATA PROCESSING

We process your personal data for various purposes and on various legal bases, which are outlined below:

Data processing within the website

Providing online services.

We process your data to provide electronic services, including various functionalities and content posted on the website. The basis for data processing in this case is the necessity for the performance of the contract and the provision of electronic services (Article 6(1)(b) GDPR).

Marketing
Your personal information is used for marketing purposes. Based on cookies, if you have given your consent, we can tailor content to your preferences and expectations. Using such technology, the Store performs profiling of our users, so we analyze and evaluate the content you might be interested in and display relevant ads to you on our site. If you have given separate consent for marketing communications, we will also direct certain commercial content to you about the Store's products and services (e.g., newsletters, information about new products, interesting promotions), including content tailored to your preferences. The legal basis for activities undertaken for marketing purposes is the legitimate interest of FIDELI Sp. z o.o. (Article 6(1)(f) GDPR).

Analysis and statistics, and service quality survey
Your personal data is used for analytical and statistical purposes, which involve conducting analyses of site visitors' activities and preferences in terms of functionality and content offered. To study the quality of services the Store offers, the controller may use your contact information to gather information about your level of satisfaction with the quality of our services (for example, by displaying or sending you satisfaction surveys). By processing personal data for these purposes, we have the opportunity to continuously improve the quality of our services and fulfill our legitimate interest (Article 6(1)(f) GDPR).

Defense against claims
In justified cases, your personal data is processed by us for the purpose of establishing, investigating, or defending against claims (e.g., claims arising from inadequate provision of services available on the website). The legal basis for processing personal data for the aforementioned purposes remains our legitimate interest (Article 6(1)(f) GDPR).

Security and smooth operation of the website
User activity on the site is recorded in system logs (a special computer program used to store a chronological record containing information about events and activities concerning the computer system used to provide services by the Store). The information collected through logs is processed for technical and administrative purposes related to ensuring the security of the website and IT systems that process your personal data, as well as for analytical and statistical purposes to ensure the smooth operation of the website. The legal basis for processing your personal data is our legitimate interest related to providing you with a safe and efficient website (Article 6(1)(f) GDPR).

Processing of personal data in social media websites

Running social networks.

We also process the personal data of users visiting our profiles, which are maintained on social media platforms (e.g., Facebook, Instagram, YouTube, Pinterest, TikTok, LinkedIn). Your personal information (for example, your name or social media nickname) is collected and used solely in connection with the operation of the Store's corporate website or profile. The data is used to inform users of our activity, respond to your comments or use the communication features offered by the social network to respond to your activity, as well as to promote various events, services, or products on the social media platform. The legal basis for processing your personal data is our legitimate interest in promoting our brand and conducting relevant communications on social media (Article 6(1)(f) GDPR).

Data processing in connection with the operation of the distribution network

Execution of the contract with the trading partner
If you have entered into a contract related to our products with a business partner of the Store, we receive your personal data in order to enable our partner to perform the contract efficiently. Your data is needed by us, among other things, to deliver the ordered products to the business partner, as well as to deliver the product for installation and to ensure that your contract is executed on time. The legal basis for the processing of your personal data is our legitimate interest in ensuring the proper performance of contracts concluded within our distribution network (Article 6(1)(f) GDPR).

Warranty
Your personal data is processed in connection with the exercise of your rights under the warranty we provide for our products. In this case, the legal basis for processing your personal data is the premise of necessity for the performance of the contract (Article 6(1)(b) of the GDPR).

Conducting service quality surveys.
Your personal information related to the conclusion and performance of the contract with our business partners is used for our research on the quality of service to our customers within the distribution network, installation. For this purpose, we process, among other things, information about the details of contract performance and information you have chosen to provide as part of satisfaction surveys sent to you. The legal basis for processing your personal data is our legitimate interest in monitoring the quality of customer service within our distribution network (Article 6(1)(f) GDPR).

Analytical and statistical purposes.
We process your personal data related to concluded contracts for Oknoplast products for analytical and statistical purposes. Processing data for this purpose helps us develop our distribution network and improve our products. The legal basis for processing your personal data for this purpose is our legitimate interest in conducting internal business analysis (Article 6(1)(f) of the GDPR).

Marketing activities.
Your personal data is used for marketing activities by the Store.

In situations where you have given your separate consent for marketing communications, we will use your data to send you relevant commercial communications or newsletters. The legal basis for processing your personal data is our legitimate interest related to marketing and promotion of our brand (Article 6(1)(f) GDPR).

Fulfilling the obligations of the law
- We will also process your data if it is necessary for the implementation of obligations under generally applicable laws, e.g., related to the protection of consumer rights, tax law, and any other applicable laws.

Determination, investigation, or defense of claims
In justified cases, your personal data are processed by us for the purpose of establishing, investigating, or defending against claims (e.g., claims arising from non-performance or improper performance of a contract that involves the Store's products). The legal basis for processing personal data for the aforementioned purposes remains our legitimate interest (Article 6(1)(f) GDPR).

Business cooperation data processing

Conclusion or execution of the contract
Your personal data is processed by us for the purpose of entering into a proper contract of cooperation with FIDELI Sp. z o.o. or for its proper execution. If you are a sole proprietor, your data is processed on the basis of the premise of necessity for the conclusion or performance of a contract (Article 6(1)(b) of the GDPR). If you are acting as a representative, proxy, or employee of parties to a contract, the legal basis for processing your personal data is our legitimate interest in being able to conclude or properly perform the contract (Article 6(1)(f) GDPR).

Analytical and statistical purposes
Your personal data related to established or ongoing business cooperation is used for analytical and statistical purposes, including the profitability of cooperation, potential for expansion, and optimization of business processes. The legal basis for processing personal data for this purpose is our legitimate interest in conducting business analyses (Article 6(1)(f) of the GDPR).

Fulfillment of statutory obligations
Your personal data is processed in connection with the fulfillment of obligations under applicable law, in particular obligations under tax law and accounting regulations. The legal basis for processing the data in such a case is the necessity to fulfill the obligations incumbent on the Controller (Article 6(1)(c) of the GDPR).

Determination, investigation or defense of claims
In justified cases, your personal data are processed by us for the purpose of establishing, investigating or defending against claims (e.g., claims arising from non-performance or improper performance of a contract relating to cooperation with the Store). The legal basis for processing personal data for the aforementioned purposes remains our legitimate interest (Article 6(1)(f) GDPR).

Processing of data in connection with correspondence and telephone contacts

Correspondence (mail) and telephone calls

Your personal data contained in the contact form available on the website, sent in connection with email or traditional correspondence, as well as provided in telephone conversations, are processed for the purpose of conducting relevant communication, placing orders, concluding contracts, responding to you or sending you the information you requested (e.g., information indicated in the contact form). The legal basis for processing your personal data is our legitimate interest in providing you with the ability to communicate efficiently with Oknoplast on all matters of interest to you (Article 6(1)(f) GDPR) or the necessity of processing your personal data to conclude or perform a contract with the Store (Article 6(1)(b) GDPR).

Data processing in connection with the monitoring of our premises and access control

Ensuring the safety of employees and property. To ensure the safety of our employees and the company's property, we implement video surveillance and access control systems at our headquarters. The legal basis for processing your personal data is our legitimate interest related to ensuring the security of persons and property (Article 6(1)(f) GDPR).

Purchase of products or services at the headquarters of FIDELI Sp. z o.o.

Conclusion or execution of the contract
Your personal data is processed by us for the purpose of entering into a contract for products or services and its proper performance, including in connection with the exercise of your rights under the warranty we provide for our products. The legal basis is the premise of necessity for the conclusion and performance of the contract (Article 6(1)(b) of the GDPR).

Conducting service quality surveys
We use your personal information to conduct research on the quality of our customer service. For this purpose, we process, among other things, information about the details of contract performance and information you have chosen to provide as part of satisfaction surveys sent to you. The legal basis for processing your personal data is our legitimate interest in monitoring the quality of customer service (Article 6(1)(f) GDPR).

Analytical and statistical purposes
Your personal data related to the concluded contracts for the Store's products is processed by us for analytical and statistical purposes. Processing data for this purpose enables us to develop our distribution network and improve our products. The legal basis for processing your personal data for this purpose is our legitimate interest in conducting internal business analysis (Article 6(1)(f) of the GDPR).

Conducting marketing activities
Your personal information is used for marketing activities by the Store and its trusted business partners. In situations where you have given your separate consent for marketing communications, we will use your data to send you relevant commercial communications or newsletters. The legal basis for processing your personal data is our legitimate interest in marketing and promoting our brand (Article 6(1)(f) GDPR).

Determination, investigation or defense of claims
In justified cases, your personal data are processed by us for the purpose of establishing, investigating or defending against claims (e.g., claims arising from non-performance or improper performance of a contract). The legal basis for processing personal data for the aforementioned purposes remains our legitimate interest (Article 6(1)(f) GDPR).

VII. THE NEED FOR DATA

WEBSITE FORMS
In the case of the contact forms provided as part of the service, providing your personal data is voluntary, but necessary to handle your inquiry.
We also endeavor to provide you with relevant information about which personal data are mandatory and which may be provided in addition. We provide the mentioned information in the form of appropriate markings within the service (e.g. asterisks next to specific fields of the contact form).
In the case of correspondence or entry into a monitored area, your provision of personal data is voluntary, but necessary for correspondence, entry into a monitored area, or participation in the recruitment process.

CONSEQUENCES OF NOT PROVIDING PERSONAL DATA
In a situation where the provision of personal data is necessary for the provision of services, the conclusion or performance of a contract, as well as the conduct of relevant correspondence, or entry into a monitored area, failure to provide the required personal data may prevent the provision of this service, the conclusion or performance of a contract, the conduct of correspondence.

VIII. DATA RETENTION PERIODS
The period for which we keep your personal data depends on the type of service provided and the purpose of processing.

As a general rule, we process your personal data for the duration of the provision of services, the duration of the contract, or the fulfillment of the order, until you withdraw your consent or make an effective objection to the processing of your personal data when the processing takes place in connection with the fulfillment of our legitimate interests.

For monitoring purposes, the storage period for recordings does not exceed three months. In the case of correspondence, we store its contents for a period of 3 months to a year, unless we enter into a contractual relationship with you.

The site uses two main types of "cookies" - persistent and temporary (session cookies). Persistent cookies are stored on your computer or mobile device for a maximum of 12 months. Session cookies, on the other hand, are stored only temporarily and are deleted when the browser is closed.

As part of the Store, we have prepared and implemented precise policies regarding the processing of personal data, which take into account the need to store your personal data for a specified period. Our data retention policy takes into account the processing deadlines that result from applicable tax and accounting regulations, the statute of limitations for claims, or our legitimate interests arising from the need to archive ongoing correspondence.

For more detailed information regarding the periods for which we process certain categories of personal data, please contact us as described in the CONTACT section (POINT II PRIVACY POLICY).

IX. DATA RECIPIENTS

Your personal data may be disclosed and transferred to external parties, including but not limited to:
a)   persons authorized by us, employees, and associates who need to have access to personal data in order to perform their duties,
b)   a hosting company,
c)   a company that handles mailings,
d)   a company that handles text messages,
e)   companies with which the Controller cooperates in its own marketing,
f)   couriers,
g)   insurers,
h)   Law firms and debt collectors,
i)   accounting service provider,
j)   banks, payment operators,
k)   public authorities.

Your personal data may also be transferred to entities affiliated with the Controller, including, in particular, other companies in the FIDELI Sp. z o.o. Capital Group.
If you use the contact form, your personal data, including your name, phone number, email address, city, and the content of your inquiry, will be transferred to a business partner within the Store's distribution network. As a general rule, we will provide your personal data to the business partner selected through the contact form. In some cases, related to changes within the distribution network, we may need to transfer your personal data to a business partner other than the one indicated in the Store's contact form to ensure the highest quality of service and timely handling of your inquiries. The selected partner will immediately contact you and provide the necessary information.
The list of trading partners belonging to the Store's distribution network can be found in the "regulations" tab in Appendix 17 on the www.estika.eu/information/terms-and-conditions-en.

X. RIGHTS OF STORE CUSTOMERS
In connection with our processing of your personal data, you have the right to access your data and to request rectification, erasure, restriction of processing, as well as the right to data portability.
Where we process your personal data in connection with the pursuit of our legitimate interests and for marketing purposes, you also have the right to object to such processing.
In the event that you have given separate consent to the processing of personal data for a specific purpose, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
If you suspect irregularities in the processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority. Currently, this authority is the President of the Office of Personal Data Protection (for more information, please visit the Office's website: https://uodo.gov.pl). You can lodge a complaint about the Controller's actions to the President of the Office of Personal Data Protection, ul. Stawki 2, 00-193 Warsaw).

X. TRANSFER OF DATA OUTSIDE THE EEA

The level of protection of personal data outside the European Economic Area (EEA) differs from that provided by European Union law.

The store generally does not transfer data outside the EEA. The store transfers personal data outside the EEA only if it is necessary due to the nature of the cooperation and with an adequate degree of protection, primarily through:

a)   cooperation with processors of personal data in countries for which a relevant decision of the European Commission has been issued;
b)   use of standard contractual clauses issued by the European Commission;
c)   other and legitimate ways permitted by law, including the GDPR.

At any time, you have the opportunity to obtain information and a copy of the relevant protection measures applicable to the transfer of personal data outside the EEA. For this purpose, please contact us as indicated in the contact tab (PKT II).

XI. SECURITY OF PERSONAL DATA

The Store pays considerable attention to the security of your personal data.
To this end, we conduct a risk analysis on an ongoing basis to ensure that personal data is processed in a way that ensures that only authorized persons have access to the data and only to the extent necessary for their tasks.
The Store also ensures that all operations on personal data are recorded and performed only by authorized employees and associates of the aforementioned entity, and that the IT systems used to process data ensure their availability, integrity and confidentiality.

We also take all necessary measures to ensure that all of our subcontractors and cooperating entities provide guarantees to apply appropriate security measures whenever they process personal data on behalf of the Store.

XII. SECURITY OF PERSONAL DATA

Selected data protection methods used by the Store

The login and personal data entry sites are protected in the transmission layer (SSL certificate). This ensures that the personal and login information entered on the site is encrypted on the user's computer and can only be read on the target server. The store periodically changes its administrative passwords.

XIII. HOSTING

The service is hosted (technically maintained) on OVHcloud servers.

XIV. PRIVACY POLICY CHANGES

The policy is reviewed on an ongoing basis and updated as necessary. The current version of the Policy has been adopted and is effective as of March 1, 2025.

We will inform you of any changes to its content on the website www.estika.eu.