Privacy policy

GDPR Information

Effective May 25, 2018, amendments were made to the current data protection legislation. The General Data Protection Regulation of April 27, 2016 is now in force. Therefore, we are providing this information to our Customers and Potential Customers to inform you about how we process your personal data.

Data Controller

KRISTECH Krzysztof Kajstura, located at Porzeczkowa 12, 43-450 Ustroń, Poland (hereinafter referred to as “KRISTECH”), is your personal data controller, responsible for determining the purposes and methods of processing your personal data. Providing your data is voluntary but necessary to conclude an agreement and subsequently provide the service as ordered.

Obtaining information on personal data processing

For matters related to personal data protection, you can contact KRISTECH by contact form or write to our registered office.

Data collection and the processing purpose

We process your personal data due to the fact that it is necessary for the performance of the contract concluded with you, i.e. the provision of the service including:

• registration of the User in the order processing system and provision of User service, including presentation of product offers and order processing,
• handling complaints,
• pursuing contractual claims,
• archiving purposes,
• statistical purposes,
• in order to fulfill the obligations imposed on us by law.

In addition, the law requires us to process your data for tax and accounting purposes.

Data recipients

Your personal data may be transferred to other entities that process your data on their own behalf, including but not limited to:

• parties conducting postal or courier activities,
• banks and payment intermediaries,
• government authorities or other entities entitled by law, for the purposes of performing our obligations (tax offices, law enforcement agencies, etc.),
• entities managing our IT systems (hosting companies, IT service providers),
• entities providing us with legal counsel, accounting, tax, claim collection, and advisory services.

Personal data retention period

Your personal data will be retained for the duration of a contract (performance of services) and after its termination:

• data included in contracts – until the contractual claims become barred by limitation (up to 10 years from the contract completion date),
• for the purposes required under applicable law, in particular the obligation to retain accounting documentation, issue invoices, etc.,
• statutory warranty and complaint-related documentation shall be stored for 1 year after the expiration of the statutory warranty period or after complaint settlement;Data retained for marketing purposes:
  • data processed on the basis of consent – until withdrawal of such consent,
  • data processed on the basis of KRISTECH’s legitimate interest – until an objection to data processing is filed,
• data provided via a contact form – until any possible claims become barred by limitation (up to 3 years).

Rights related to personal data processing

You have the right to access, rectify, delete, limit the processing of, transfer, object to the processing of and withdraw your consent to the processing of your personal data at any time, which shall not affect the lawfulness of processing based on consent before its withdrawal (provided that the processing is based on consent).