ONESTO Energy » Polityka prywatności-en

I. General Provisions

II. Data Controller

III. Purpose of Collecting Personal Data

IV. Types of Personal Data Processed

V. Period of Personal Data Processing

VI. Sharing Personal Data

VII. User Rights

VIII. Cookies

IX. Automated Decision-Making and Profiling

X. Final Provisions

I. General Provisions

The Privacy Policy defines how personal data of Users necessary for providing electronic services via the website www.onesto-energy.pl (hereinafter: the Service) are collected, processed, and stored.
The Service collects only personal data necessary for the provision and development of the services it offers.
Personal data collected via the Service are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR) and the Polish Personal Data Protection Act of 10 May 2018.

II. Data Controller

The data controller of personal data collected via the Service is ONESTO ENERGY sp. z o.o., address: Kwiatowa 17, 47-460 Chałupki, NIP: 6392033031, REGON: 529138186, e-mail address: biuro@onesto-energy.pl (hereinafter: the Controller).

III. Purpose of Collecting Personal Data

Personal data are used for:

registration of an account and verification of the User's identity,
enabling login to the Service,
performing the agreement for services and e-services,
communication with the User (live chat, contact form, etc.),
sending a newsletter (after the User consents to receive it),
operating the comment system,
providing social networking services,
promotion of the Controller's offer,
marketing, remarketing, affiliation,
personalization of the Service for Users,
analytical and statistical purposes,
debt collection,
establishing and pursuing claims or defending against them.

Providing data is voluntary but necessary to conclude an agreement or use other functionalities of the Service.

IV. Types of Personal Data Processed

The Controller may process the User's personal data: name and surname, date of birth, address, e-mail address, phone number, NIP.

V. Period of Personal Data Processing

The personal data of Users will be processed for the following periods:

when the basis for processing data is the performance of an agreement – until the expiration of claims after its performance,
when the basis for processing data is consent – until its withdrawal, and after its withdrawal until the expiration of claims.

In both cases, the limitation period is 6 years, and for claims for periodic benefits and claims related to business activities – 3 years (unless a specific provision states otherwise).

VI. Sharing Personal Data

The personal data of Users may be shared with entities related to the Controller, its subcontractors, entities cooperating with the Controller, e.g., companies handling e-payments, courier/postal services, or law firms.
The personal data of Users will not be transferred outside the European Economic Area (EEA).

VII. User Rights

The User of the Service has the right to: access their personal data, rectify them, delete them, limit their processing, transfer them, object to their processing, withdraw consent at any time (which does not affect the lawfulness of processing carried out based on consent before its withdrawal).
Requests concerning the exercise of rights should be sent to: biuro@onesto-energy.pl.
The Controller fulfills or denies the request immediately – within no more than one month of its receipt.
The User has the right to file a complaint with the President of the Personal Data Protection Office if they believe that processing violates their rights and freedoms (GDPR).

VIII. Cookies

The Service collects information through cookies – session cookies, persistent cookies, and third-party cookies.
The collection of cookies supports the proper provision of services in the Service and serves statistical purposes.
The User can define the scope of cookies' access to their device in the browser settings.

IX. Automated Decision-Making and Profiling

Users' data cannot be processed in an automated way that could lead to decisions being made about them.
Users' data may be profiled to adjust content and personalize the offer after their consent.

X. Final Provisions

The Controller reserves the right to make changes to the Privacy Policy, provided that Users' rights are not restricted.
Information about changes will be available as a notification in the Service.
Matters not regulated in this Privacy Policy are governed by GDPR and Polish law.