ONESTO Energy » Polityka prywatności-en

I. General provisions

II. Data controller

III. Purpose of collecting personal data

IV. Type of processed personal data

V. Period of processing personal data

VI. Sharing personal data

VII. User rights

VIII. Cookies

IX. Automated decision making and profiling

X. Final provisions

I. General provisions

The privacy policy specifies how personal data necessary for the provision of electronic services through the website www.onestoenergy.pl (hereinafter: the Website) are collected, processed and stored.
The Website collects only personal data necessary for the provision and development of services offered therein.
Personal data collected through the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR) and the Personal Data Protection Act of 10 May 2018.

II. Data controller

The data controller of personal data collected through the Website is ONESTO ENERGY sp. z o.o., address: Kwiatowa 17, 47-460 Chałupki, NIP: 6392033031, REGON: 529138186, email address: biuro@onestoenergy.pl (hereinafter: the Controller).

III. Purpose of collecting personal data

Personal data are used for the purpose of:

registering an account and verifying the User's identity,
allowing login to the Website,
fulfilling the agreement on services and e-services,
communicating with the User (live chat, contact form, etc.),
sending newsletters (after the User's consent to receive them),
managing the comment system,
providing social services,
promoting the Controller's offer,
marketing, remarketing, affiliation,
personalizing the Website for Users,
analytical and statistical activities,
debt collection,
establishing and asserting claims or defending against them.

Providing data is voluntary but necessary to conclude an agreement or use other functionalities of the Website.

IV. Type of processed personal data

The Controller may process the User's personal data: name, date of birth, address, email address, phone number, NIP.

V. Period of processing personal data

User's personal data will be processed for the period:

when the basis for data processing is the performance of the agreement - until the expiration of claims after its performance,
when the basis for data processing is consent - until its withdrawal, and after the withdrawal of consent until the expiration of claims.

In both cases, the limitation period is 6 years, and for claims for periodic benefits and claims related to business activity - 3 years (unless a special provision provides otherwise).

VI. Sharing personal data

User's personal data may be transferred to entities affiliated with the Controller, its subcontractors, entities cooperating with the Controller e.g. companies providing e-payment services, courier/postal service companies, law firms.
User's personal data will not be transferred outside the European Economic Area (EEA).

VII. User rights

The Website User has the right to: access their personal data, correct, delete, limit processing, transfer, object to processing, withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).
A request for the exercise by the User of rights arising from the mentioned rights should be sent to the address biuro@onestoenergy.pl.
The Controller fulfills or refuses to fulfill the request immediately - within a maximum of one month from its receipt.
The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing violates their rights and freedoms (GDPR).

VIII. Cookies

The Website collects information using cookies - session, persistent, and third-party cookies.
Collecting cookies supports the proper provision of services on the Website and serves statistical purposes.
The User can specify the scope of access to cookies on their device in the browser settings.

IX. Automated decision making and profiling

User's data cannot be processed automatically in such a way that any decisions could be made against them.
User's data may be profiled for the purpose of adjusting content and personalizing the offer after their consent.

X. Final provisions

The Controller has the right to make changes to the privacy policy, while the User's rights will not be limited.
Information about the changes made will appear in the form of a message available on the Website.
In matters not regulated in this privacy policy, the provisions of the GDPR and Polish law apply.