Privacy Policy

ECOWIPES SP. Z O.O. PRIVACY POLICY

This privacy policy (hereinafter referred to as the “Privacy Policy”) sets out the terms and conditions for the processing of personal data by EcoWipes Sp. z o.o. with its registered office in Warsaw, ul. Nowogrodzka 46a, 00-695 Warsaw. The Privacy Policy describes, among other things, the purposes and legal basis for data processing, the scope of data processing, the rights of individuals in relation to the processing of their personal data, and sets out the rules for the use of cookies.

We process your personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; OJ EU L 2016. 119.1; hereinafter referred to as “GDPR”).

We regularly review and update our Privacy Policy to ensure that it contains all the necessary information.

PERSONAL DATA ADMINISTRATOR

The administrator of personal data is EcoWipes Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Nowogrodzka 46a, 00-695 Warsaw, entered in the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0000889775, REGON 200246373, NIP 966-197-86-64, share capital of PLN 975,000.00 (hereinafter referred to as the “Administrator”, ‘Company’ or “we”).

For all matters related to data protection, please contact us at the above address or at the following e-mail address: rodo@ecowipes.com.pl.

PURPOSE, LEGAL BASIS, AND PERIOD OF PERSONAL DATA PROCESSING

  1. Cooperation with us
  2. Representatives and contact persons on the part of our business partners and other entities contacting us
  3. Contacting us, e.g. by e-mail or telephone
  4. Complaints about our products
  5. Maintaining social media accounts
  6. Exercising the rights of a natural person in relation to the processing of their personal data

I. Cooperation with us

If you are a natural person conducting business activity – a party to a contract concluded with us – or you intend to conclude such a contract with us, your personal data is processed for the following purpose and on the following legal basis:

  1. establishing cooperation, concluding and performing a contract with the Company (Article 6(1)(b) of the GDPR),
  2. fulfilling the legal obligations incumbent on the Company (Article 6(1)(c) of the GDPR), in particular tax and accounting obligations (in accordance with the Tax Ordinance Act of August 29, 1997, the Accounting Act of September 29, 1994, and the Goods and Services Tax Act of March 11, 2004),
  3. pursuit of the Company’s legitimate interests (Article 6(1)(f) of the GDPR), which is to establish and maintain business contacts necessary for cooperation, as well as to determine, pursue, and defend against claims.

We process the data provided by you; we may also obtain or verify data from publicly available sources such as CEIDG. Providing personal data is a condition for concluding a contract, and failure to provide such data will result in the inability to conclude and perform the contract.

Personal data is stored for the period necessary to establish, perform, and settle cooperation. Personal data may be processed for a longer period, i.e., until the expiry of the periods resulting from the relevant provisions of law (i.e., until the expiry of the limitation period for tax liabilities related to accounting documentation, which is currently 5 years). This period may be extended by the limitation period for civil law claims. In order to pursue the Company’s legitimate interests, personal data is stored until these legitimate interests are fulfilled or until an effective objection to its processing is lodged (unless, despite the objection or withdrawal of consent, the Company continues to have another basis for processing personal data – in this respect, information will be provided separately).

Personal data is not used for automated decision-making, including profiling.

II. Representatives and contact persons on the part of our business partners and other entities contacting us

If you act on behalf of another entity (e.g., you represent our business partner, you are a contact person or another person acting on behalf of a specific entity, e.g., a contractor), your personal data is processed for the following purpose and on the following legal basis:

  1. fulfilling the legal obligations incumbent on the Company (Article 6(1)(c) of the GDPR), in particular tax and accounting obligations (in accordance with the Tax Ordinance Act of August 29, 1997, the Accounting Act of September 29, 1994 on Accounting and the Act of March 11, 2004 on Goods and Services Tax),
  2. pursuing the Company’s legitimate interests (Article 6(1)(f) of the GDPR), which is to establish and maintain business contacts necessary for cooperation, as well as to determine, pursue, and defend against claims.

Personal data has been obtained from you or from the entity on whose behalf you are acting; as a standard, we process your identification data (such as name, surname, position, company name) and contact details (such as company address, telephone number, e-mail address); we may also obtain or verify data from publicly available sources such as CEIDG or KRS. If you provide us with personal data yourself, the provision of such data is voluntary, but failure to provide it will result in the inability to cooperate with the entity on whose behalf you are acting.

Personal data is stored for the period necessary to establish, implement, and settle cooperation. Personal data may be processed for a longer period, i.e., until the expiry of the periods resulting from the relevant legal provisions (i.e., until the expiry of the limitation period for tax liabilities related to accounting documentation, which is currently 5 years). This period may be extended by the limitation period for civil law claims. In order to pursue the Company’s legitimate interests, personal data is stored until these legitimate interests are fulfilled or until an effective objection to its processing is lodged (unless, despite the objection or withdrawal of consent, the Company continues to have another basis for processing personal data – in this respect, information will be provided separately).

Personal data is not used for automated decision-making, including profiling.

III. Contacting us, e.g., by email or phone

If you contact us using the available contact methods, we process personal data for the purpose of our legitimate interest (Article 6(1)(f) of the GDPR), consisting of:

  1. handling current contacts,
  2. establishing, pursuing, or defending against claims.

We process the personal data you provide during a conversation or correspondence, in particular the data necessary to identify you and relating to the matter in which you are contacting us. This data has been obtained directly from the person who contacted us. Providing personal data is voluntary, but necessary to handle your inquiry. Refusal to provide personal data will result in the inability to handle correspondence.

Personal data is stored:

  1. data processed for the purposes of handling current contacts – for the time necessary to handle contacts,
  2. data processed for the purposes of establishing, investigating, or defending against claims – until the claims expire.

Personal data is not used for automated decision-making, including profiling.

IV. Complaints about our products

If you file a complaint about the Company’s products purchased from our distributors, we process your personal data in order to accept and consider the complaint, which is based on our legitimate interest in handling consumer complaints and ensuring the quality of our products (Article 6(1)(f) of the GDPR), as well as to defend against claims (Article 6(1)(f) of the GDPR and Article 9(2)(f) of the GDPR).

Depending on how you submit a complaint about our products, your personal data comes from the following sources:

  1. If you submit a complaint directly to us, we process the data provided directly by you; in this case, providing the data is voluntary, but failure to provide it will result in our inability to respond to the complaint.
  2. If you submit a complaint to the store where you purchased the product, the source of the data is the entity operating the store, which forwarded the complaint to us. In this case, we process the personal data provided in the complaint (this is usually identification and contact details and possibly other information that you provide when submitting the complaint, e.g., information about your health).

Personal data is stored for the period necessary to conduct the complaint procedure and then for a period of 12 months, which may be extended until the expiry of the limitation period for claims under the law. Personal data is not used for automated decision-making, including profiling.

V. Maintaining social media accounts

In connection with our use of social media accounts, we process data for the purpose of pursuing our legitimate interest (Article 6(1)(f) of the GDPR), which consists of:

  1. informing about our activities,
  2. building and maintaining contacts with our community,
  3. managing our social media account in accordance with the applicable terms and conditions of the given service (including ensuring supervision of the content appearing on our account),
  4. keeping statistics, i.e., analyzing account user activity, including by collecting data on the number of reactions and demographic analysis of visitors to our account, which we do using tools provided by the social media service,
  5. possibly establishing, investigating, or defending against claims.

We process the data of people who have visited our accounts, interacted with us through them, or published or sent us data through the options available on the services. In particular, this includes the following persons and the following personal data:

  • LinkedIn: we process personal data provided by individuals who have visited our account, followed it, contacted us, reacted to our activity using the options available on the service, or sent us their data using the available options. We process the data that the person provides to us, in particular: LinkedIn ID (usually first and last name), profile photo, information provided in comments and other reactions and messages sent directly to us, as well as statistical data about visitors to the account, collected through cookies;
  • Facebook: we process personal data provided by individuals who have visited our account, followed or liked it, contacted us, reacted to our activity using the options available on the website, or sent us their data using the available options. We process the data that a person provides to us, in particular: Facebook ID (usually first and last name), profile photo, information provided in comments and other reactions and messages sent directly to us, as well as statistical data about visitors to the account, collected through cookies;
  • Instagram: we process personal data provided by persons who have visited or followed our account, contacted us, reacted to our activity using the options available on the website, or sent us their data using the available options. We process the data that a person provides to us, in particular: your Instagram account ID, profile photo, information provided in comments and other reactions and messages sent directly to us, as well as statistical data about visitors to the account, collected through cookies.

Providing personal data is voluntary, but necessary to use our account.

At the same time, we remain a joint controller of personal data processed in connection with the maintenance of statistics, together with the owner of the website that provides the option of maintaining statistics:

We undertake such activities as part of our legitimate interest (Article 6(1)(f) of the GDPR) described above.

Regardless of this, the owner of a given social networking site remains a separate controller of the data processed using the site and the options available on it, and thus processes it according to its own rules. For this reason, we encourage you to read the privacy policy of the site and the information published therein. Below are links to the privacy policies of the social networking sites on which we maintain accounts:

Please note that the content you publish on our account is publicly available, and therefore other users of the social networking site will have access to your personal data – this applies to information about people following the account, reactions, comments, posts, and other information provided to us by the user.

We also point out that we do not transfer your personal data to a third country or international organization. However, the rules of operation of social networking sites and their international nature may result in the owner of a given social networking site transferring your personal data to a third country or international organization. Details can be found in the privacy policies of social networking sites, available at the links above.

The data is processed until an effective objection to its processing for the purposes of our legitimate interest is lodged or until that interest ceases to exist, i.e.:

  • the data is processed until we close our social media account,
  • we store the data we have obtained in our correspondence for the time necessary to handle the message sent to us,
  • we process data for the purpose of establishing, investigating, or defending against claims until the limitation period for such claims expires.

Personal data is not used for automated decision-making, including profiling.

VI. Exercising the rights of a natural person in relation to the processing of their personal data

We process data for the following purposes and on the following legal bases:

  1. acceptance of requests and exercise of rights under Chapter III of the GDPR, in accordance with our legal obligation under the GDPR (Article 6(1)(c) of the GDPR), including identification of the person exercising their rights,
  2. exercising our legitimate interest (Article 6(1)(f) of the GDPR), consisting in establishing, pursuing, and defending against claims, as well as handling any proceedings related to the exercise of the rights of data subjects.

We process the data provided to us for the purpose of exercising your rights in accordance with the provisions of the GDPR, as well as the data we hold that is necessary to consider your request. The provision of personal data is necessary for the acceptance of your request and the exercise of your rights, and failure to provide such data will result in the inability to accept and thus consider your request.

The data is stored until the expiry of the limitation period for claims of data subjects arising from the exercise of their rights, as well as for the period necessary to handle any proceedings related to the exercise of the rights of data subjects.

Personal data is not used for automated decision-making, including profiling.

RECIPIENTS OF PERSONAL DATA

Your personal data may be transferred to recipients, which include in particular: 

  • entities providing services to us to the extent necessary to perform the tasks entrusted to them (e.g., IT, hosting, marketing, accounting, or legal service providers), however, these entities will only have access to the data for the purpose of performing their duties and to the extent necessary for this purpose,
  • other controllers, when necessary to achieve the purposes of data processing described in the Policy and to the extent necessary for this purpose (e.g., banks, postal and telecommunications operators, courier companies),
  • public administration bodies, when required by applicable law, e.g., tax authorities in connection with the performance of tasks related to tax obligations or, where applicable, law enforcement authorities.

RIGHTS OF NATURAL PERSONS IN RELATION TO THE PROCESSING OF THEIR PERSONAL DATA

You have the right to: 

  • access your data, including obtaining a copy of your data;
  • transfer your data;
  • rectify and erase your data;
  • restrict processing;
  • not be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you;
  • where the basis for the processing of personal data is the legitimate interest of the Company – the right to object at any time to the processing of personal data for reasons related to your particular situation;
  • if the basis for the processing of personal data is the Company’s legitimate interest in direct marketing, you have the right to object to the processing of personal data at any time;
  • to lodge a complaint with a supervisory authority (the President of the Personal Data Protection Office)
    (see more: www.uodo.gov.pl).

If you have consented to the processing of your personal data or to receiving information from us (e.g., commercial information), you also have the right to withdraw your consent without affecting the lawfulness of the processing or sending of information based on your consent prior to its withdrawal. If we intend to process your data on the basis of consent, we will inform you in advance and take steps to ensure that you have the opportunity to give your consent; consent is always voluntary and there are no negative consequences for not giving it.

To exercise your rights, please contact us at rodo@ecowipes.com.pl.

RULES FOR THE USE OF COOKIES

The website uses cookies. Cookies are IT data, in particular text files, which are stored on your end device (e.g., smartphone, tablet, laptop) and are intended for use on the website. Cookies do not cause any configuration changes to your device or the software you use.

Cookies do not allow us to access your end device or information about you, except for the information you provide to us yourself, including information about how you use our website (including information that you automatically share with us due to your web browser settings).

We only use cookies that are necessary for the proper and secure functioning of the website, and therefore you cannot opt out of them. We use such files based on our legitimate interest (Article 6(1)(f) of the GDPR), which is to inform about our activities through the website and to ensure its proper and secure functioning.

Below you will find detailed information about the cookies we use:

Cookie nameLifetimeProvider
__cf_bm30 min.erecruiter.pl
_cfuvidExpires
After the browsing session ends		.erecruiter.pl
wp-wpml_current_languageExpires
After the browsing session ends		ecowipes.com.pl

MANAGING COOKIES

Below you will find information from the most popular web browsers on how to manage cookies yourself:

You can check your current privacy settings in your web browser at any time, e.g. using the following links: http://www.aboutads.info/choices  and https://www.youronlinechoices.com/pl/.

Hydra beauty & clean
© ecowipes 2025