1. General Information
1.1. The administrator of your personal data is energlow.life. If you have any doubts related to the privacy policy, you can contact us at any time by sending a message to contact@energlow.life.
1.2. GDPR (General Data Protection Regulation) grants you the following rights related to the processing of your personal data:
● The right to access your data and receive copies.
● The right to correct (amend) your data.
● The right to delete data (if you believe there is no basis for us to process your data, you can request its deletion).
● The right to limit data processing (you can request limiting data processing solely to storage or agreed-upon actions with you).
● The right to object to data processing (you have the right to object to data processing based on legitimate interest; you should indicate a specific situation justifying our cessation of processing objected data).
● The right to data portability (you have the right to receive your personal data from us in a structured, commonly used, machine-readable format).
● The right to lodge a complaint with the supervisory authority.
The principles related to exercising the above rights are described in detail in articles 16-21 of the GDPR. Remember, you can also request us to provide information about what data we hold about you and for what purposes we process it.
1.3. Your personal data may be processed by entities whose services we use. They may have access to your personal data if the services they provide involve or may involve the processing of personal data related to providing services associated with such access. This particularly refers to entities such as hosting providers, email service providers, entities providing technical support for websites, mailing, marketing service providers, cloud software providers, etc. Remember that your data is safe and processed only to the necessary extent. Moreover, if necessary, your personal data may be disclosed to entities,
authorities, or institutions authorized to access data under the law, such as police services, security, courts, prosecutors, as well as tax offices for tax and accounting obligations.
1.4. We transfer your personal data to third countries in connection with using tools that store personal data on servers located in third countries. Providers of these tools guarantee an adequate level of personal data protection through compliance mechanisms provided by the GDPR, especially by joining the Privacy Shield program or using standard contractual clauses.
1.5. We use tools that can take certain actions depending on the information collected within tracking mechanisms (profiling and behavioral advertising). However, we believe these actions do not significantly impact you as a customer, do not affect the terms of the contract you may enter with us.
2. Purposes and Activities of Personal Data Processing
2.1. Contact
Processed data: name, email address, and optionally data contained in the message content (providing data is voluntary but necessary to establish contact).
Processing purpose: establishing contact.
Processing period: The correspondence content may be subject to archiving, and it is not possible to definitively determine when it will be deleted.
Legal basis: Article 6(1)(f) GDPR (legitimate interest). The legal basis for processing after contact is also our justified purpose of archiving correspondence for internal needs (Article 6(1)(f) GDPR).
Rights: You have the right to demand presentation of the correspondence history you had with us (if it was archived) and request its deletion unless its archiving is justified due to our overriding interests, e.g., defense against potential claims from your side.
2.2. Newsletter
Processed data: name and email address (providing data is voluntary but necessary to subscribe to the newsletter).
Processing purpose: sending newsletters. Our mailing system tracks your actions related to the emails sent to you. Therefore, we have information about which emails you opened, the links you clicked, etc.
Processing period: for the duration of the newsletter service and for archiving purposes to prove your past consent to receive the newsletter.
Legal basis: Consent (Article 6(1)(a) GDPR) expressed during newsletter subscription.
Rights: You can unsubscribe from receiving the newsletter at any time by clicking the dedicated link in each newsletter or by contacting us directly. You can correct your data or object to the processing of your personal data. Due to our legitimate interest (Article 6(1)(f) GDPR), we will not delete your data from the database. Deleting such data would prevent us from proving your past consent to receive the newsletter.
2.3. Orders in the store
Processed data: data necessary to fulfill the order, i.e., name, email address, phone number (providing data is voluntary but necessary to place an order).
Processing purpose: executing the contract made by placing an order, issuing an invoice, inclusion in accounting documentation, after-sales service informing about legal changes, product updates, archival and statistical purposes, and direct marketing of our own products and services.
Processing period: the time necessary to fulfill the order, and then until the expiry of the limitation period for claims arising from the concluded contract. After this period, we may
continue processing data for archival and statistical purposes, identifying returning customers, and for direct marketing of our own products and services until you object.
Legal basis: Execution of the contract made by placing an order (Article 6(1)(b) GDPR), issuing an invoice (Article 6(1)(c) GDPR), inclusion of the invoice in accounting documentation (Article 6(1)(c) GDPR), direct marketing of our own products and services (Article 6(1)(f) GDPR), and for archival and statistical purposes (Article 6(1)(f) GDPR).
Rights: After order fulfillment, you cannot correct this data. You also cannot object to the processing or request deletion of data until the expiration of the limitation period for claims arising from the concluded contract. After this period, you can object to our processing of your data and request its deletion from the database.
2.4. Complaints and withdrawal from the contract
Processed data: name, address, phone number, email address, bank account number. Providing data is voluntary but necessary to make a complaint or withdraw from the contract.
Processing purpose: executing the complaint procedure or contract withdrawal.
Processing period: the time necessary to execute the complaint procedure or contract withdrawal. Complaints and statements about contract withdrawal may also be archived to prove the course of the complaint process or contract withdrawal in the future.
Legal basis: Execution of the complaint procedure or contract withdrawal (Article 6(1)(c) GDPR), followed by archiving for our legitimate interest (Article 6(1)(f) GDPR).
Rights: Regarding data included in complaints or statements about contract withdrawal, you cannot correct this data. You also cannot object to the processing or request deletion of data until the expiration of the limitation period for claims arising from the concluded contract. However, after this limitation period, you can object to our processing of your data and request its deletion from the database.
3. Cookies
3.1. Cookies and other tracking technologies
Our website uses cookies. Cookies are small text information stored on your end device (e.g., computer, tablet, smartphone), which can be read by our IT system (proprietary cookies) or third-party IT systems (third-party cookies). Some cookies used by us are deleted after closing the web browser session (session cookies). Others are stored on your end device, allowing us to recognize your browser on the next visit (persistent cookies).
3.2. Consent to cookies
During your first visit to the site, information about the use of cookies is displayed along with a request for consent to use these files. You can always change cookie settings in your browser or delete cookies altogether. Browsers manage cookie settings in different ways. In the help menu of your web browser, you will find explanations on how to change cookie settings. You can also manage cookie settings by installing special add-ons that allow you to control cookies.
3.3. Server logs
Using the website involves sending queries to the server where the site is stored. Each query directed to the server is saved in server logs. Logs include your IP address, server date and time, information about the web browser, and operating system you use. Server logs are stored on the server. Data stored in server logs are not associated with specific individuals using the site and are not used by us to identify you. Server logs are only auxiliary material used for site administration, and their content is not disclosed to anyone except those authorized to administer the server.
3.4. Google Analytics
We use Google Analytics provided by Google LLC based in the USA. The purpose is to create statistics and analyze them to optimize our websites. The collected data are personal data
that do not allow your identification. The information accessible through Google Analytics includes details about your operating system, web browser, visited subpages within our site, time spent on our site and its subpages, and the source from which you entered our site.
3.4. Google Analytics
We use Google Analytics, provided by Google LLC based in the USA, to create and analyze statistics for the optimization of our websites. The data collected are personal but don’t allow for your identification. Information available through Google Analytics includes details about your operating system, web browser, the subpages you visit within our site, the time spent on our site and its subpages, and the source through which you accessed our site.
Within Google Analytics, we use Advertising Features such as demographic reports and interests, age range, gender, and inferred interests based on online activity. To use Google Analytics, we’ve implemented specific tracking code in our website’s code. The tracking code utilizes Google LLC cookies concerning the Google Analytics service.
3.5. Google Ads
We use Google Ads, operated by Google LLC, for advertising campaigns, including remarketing, based on our legitimate interest in marketing our own products or services. The collected data are personal but do not allow for your identification.
Data collected through Google Ads, specifically through the Google Ads conversion pixel implemented in our website’s code, involves Google LLC cookies related to the Google Ads service. You can disable these cookies via the browser’s cookie settings or manage ad settings directly via Google: https://adssettings.google.com/. More details about data processing under Google Ads can be found here: https://policies.google.com/privacy.
3.6. Facebook Ads and Insights
We utilize marketing and analytical tools available within Facebook services (Facebook Inc.) for marketing our own products or services, as well as for analysis and statistics. On our
website, we’ve integrated the Facebook Pixel, which automatically gathers information about your interactions with our website to tailor personalized ads based on your behavior within our site.
The information collected via the Facebook Pixel doesn’t allow for your direct identification; it merely provides insights into your actions on our site. It can offer insights into your age group, gender, or internet connection. Details regarding Facebook’s privacy policy can be found here: https://www.facebook.com/privacy/explanation.
3.7. Social Media Tools
On our website, we use plugins and other social media tools provided by social media services such as Facebook, Instagram, TikTok. These plugins allow your browser to establish a direct connection with the servers of these social media platforms. The content provided by these plugins is directly transmitted to your browser and integrated into the website.
By using these plugins, if you’re logged in to a social media service, the service provider can associate your visit to our website with your profile on that platform. You can prevent the loading of these plugins by using browser extensions or logging out of social media services before visiting our website to prevent data association with your profile.
The purpose and scope of data collection, further processing and use by the service providers, contact details, your rights in this regard, and options to protect your privacy are detailed in the privacy policies of each service provider.