Privacy Policy

1. This privacy policy sets out how users' personal data necessary to complete orders placed through the website is collected, processed and stored.
2. The website only collects the personal data necessary to fulfil orders and for the purposes indicated in this policy.
3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and with the national legislation on the protection of personal data.

The administrator of the personal data processed through the shopping service is Soltech Group Sp. z o. o., with its registered office in Poznań, and can be contacted at the email address published on the contact page.

Personal data is processed for the purposes arising from the legitimate interests pursued by the administrator, and in particular:

1. to conclude and perform the sales contract, or to take steps at the request of the data subject before entering into it;
2. for accounting and tax purposes arising from the provisions of law;
3. to pursue claims, or to defend against claims, before the courts and other public authorities;
4. to send the newsletter and commercial information by email, where consent has been given;
5. to handle complaints and requests, and to invite customers to leave a review after a purchase.

The administrator processes the following personal data: first name and surname, address of residence or delivery, email address, telephone number, and — for business customers — the company name and tax identification number.

1. Where the basis of processing is the performance of a contract, data is kept until the resulting claims become time-barred.
2. Where the basis of processing is consent, data is kept until that consent is withdrawn.
3. In all cases the retention period may be extended where necessary to establish, exercise or defend legal claims.

1. Personal data may be shared with entities that process it on the administrator's behalf: hosting and IT providers, courier and postal operators, payment providers, accounting offices and legal advisers.
2. Data may also be shared with public authorities where required by law.
3. Where data is transferred outside the European Economic Area, that transfer takes place on the basis of the standard contractual clauses approved by the European Commission.
4. Where the newsletter is sent, data is shared with the marketing-automation provider operating the mailing system.
5. Payment system providers (for example, the bank transfer service) are used to settle payments.

1. The administrator of the personal data of newsletter subscribers is Soltech Group Sp. z o. o.
2. Data processing for the newsletter is carried out on the basis of consent (Article 6(1)(a) GDPR). Consent is voluntary and may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
3. Sending commercial information by electronic means also takes place on the basis of consent, which may be withdrawn at any time.
4. Consent is withdrawn by clicking the "unsubscribe" link included in every message, or by contacting the administrator directly.

1. The user has the right of access to their data, and the right to rectification, erasure, restriction of processing, data portability and objection.
2. Where processing is based on consent, the user has the right to withdraw that consent at any time.
3. The user has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing of their data infringes the law.

1. Cookies. Cookies are small text files stored on the user's device while browsing the website. They are used to keep the service working correctly, to remember settings, and to gather anonymous statistics.
2. Types of cookies used.
   • Necessary — required for the basic operation of the service (basket, login, order form). These cannot be switched off.
   • Analytical — help us understand how the site is used, so we can improve it.
   • Marketing — used to display advertising matched to the user's interests.
   • Functional — remember user preferences such as language, currency or region.
3. Consent. Analytical and marketing cookies are only used once the user has given consent through the cookie banner. Consent may be changed or withdrawn at any time from the cookie settings.
4. Managing cookies in your browser. Regardless of the settings on this site, you can manage cookies at any time from your browser settings. Blocking cookies may affect how parts of the website function.

1. User data is not processed in a way that produces legal effects for the user based solely on automated processing.
2. Data may be profiled in order to tailor the offer presented, but only where the user has given the appropriate consent.
3. Any marketing segmentation or profiling — for example, based on interaction with the newsletter — does not produce legal effects for the user and can be objected to at any time.

1. The administrator reserves the right to amend this privacy policy. Users' acquired rights are not thereby limited.
2. Any change appears on the website. Significant changes affecting data processing are announced in advance.
3. In matters not covered by this privacy policy, the provisions of the GDPR and of the applicable national legislation, including telecommunications law, apply.