Privacy Policy (GDPR)

The administrator of your personal data is Firma Andrzej Uchman, hereinafter referred to as Velles or the Administrator.

Headquarters address: Lotników Polskich Street 2a/30 80-809 Gdańsk, Poland NIP: 1251596232; contact details: info@velles.eu.

I. What data do we collect?

We process your personal data for the following purposes:

to take, at your request, all actions aimed at entering into a contract and performing the contract (article 6.1.b of the Regulation),
marketing and promotion of the products offered by Velles being our legitimate interest (Art. 6(1)(f) of the Regulation),
to comply with any legal obligations incumbent on us in connection with the cooperation undertaken (Article 6(1)(c) of the Regulation),
for archival (evidential) purposes in order to safeguard information in the event of a legal need to prove the facts, which is our legitimate interest (basis of Article 6(1)(f) of the Regulation);
for the possible establishment, investigation or defence against claims, which is our legitimate interest (basis of Article 6(1)(f) of the Regulation);
the purpose related to legal obligations to keep certain documents for the time indicated by law, e.g:
1. Art. 74(2)(1-8) of the Accounting Act of 29.09.1994 (Journal of Laws of 017, item 1858),
2. art. 8b par. 3 in connection with art. 9k of the Act on Counteracting Money Laundering and Terrorist Financing of 16.11.2000 (Journal of Laws 2000 no. 116 item 1216),
3. Article 86 §1 and 2 of the Act of 29.08.1997. – Tax Ordinance (Journal of Laws 1997 no. 137 item 926).
for a specific purpose on the basis of your consent to the processing of your personal data for one or more purposes (the basis of Article 6(1)(a) of the Regulation) – if you consent to the use of your data, the content of this consent will specify for which specific purpose we will process the data.

II. What data do you need to give us?

In order to conclude a contract, we require your data on the order form – data necessary for the conclusion of the contract and its execution, including delivery of the shipment to the indicated data (if you do not provide it, we will not conclude the contract / execute the order).
During the course of the contract, by providing services, we come into possession of your other data. The appearance of your personal data with us is a consequence of the operation of our services, which you use. When entering into a contract or during the term of the contract, you may additionally, for example, order services not yet covered by the contract. If this requires the use of your data in a manner other than that described in this document, we will complete and provide the missing information, if possible, before obtaining the data. For the rest, the information on data processing contained in this document will remain valid.

III. To whom we may share your personal data:

Public authorities, to the extent that they do not receive the data in the context of a specific procedure under the law (depending on the competence basis);
Entities that process your personal data on behalf of Velles on the basis of a contract concluded with Velles for the entrustment of the processing of personal data (so-called processors). These will include, but are not limited to: IT specialists, archiving companies, courier, banking and payment service providers, hosting companies.
Third party data controllers (so called Parallel Controllers to whom data is shared, e.g. legal advisers and solicitors, courier or postal operators, debt buyers – in case you do not pay our invoices on time),

IV. For how long will we keep your personal data?

Your personal data will be processed for the period necessary for the purposes of the processing indicated in point 1, i.e.: with regard to the performance of the contract you have entered into with Velles in connection with your business for the period until its completion, and thereafter:
1. for the period required by law, e.g. for the retention of certain accounting records and certain data in accordance with tax regulations;
2. for the period resulting from Velles’ legitimate interests (i.e. the limitation period for the preservation of possible claims),
  in terms of internal administrative purposes, for a period until the legitimate interests of Velles forming the basis for such processing are fulfilled or until you object to such processing;
in terms of marketing and promotion of the services offered by the Administrator, for the period until you object to the processing; in terms of your consent, until you withdraw it.

V. Transfers of data to third countries

We do not transfer your data outside of Poland, the European Union and the European Economic Area (which includes the European Union, Norway, Liechtenstein and Iceland). However, we may decide to transfer your data outside the EEA during the term of the contract – only to the extent that the law allows us to do so. Such a transfer will only take place if the third country provides adequate protection for your personal data. You will be informed of such a situation by email or telephone. In the case of transfer of your personal data to a third country which has not been recognised as an adequate state of protection by a decision of the European Commission, we will request your explicit consent to such a transfer, informing you of the prior risks involved on the basis of Article 40(1)(a) of the Regulation. Right of access and rectification

VI. We inform you that you have the following rights:

the right of access to the personal data we process (art. 15 of the Ordinance),
the right to rectification of the personal data entrusted to us, including rectification (Article 16 of the Regulation),
the right to have your personal data erased from our systems, the so-called “right to be forgotten” – if, in your opinion, there are no grounds for us to process your data, you may request that we erase it (art. 17 of the Regulation),
The right to restrict the processing of your personal data – you may request that we restrict the processing of your personal data only to the storage of the data or the performance of activities agreed with you, if in your opinion we have inaccurate data about you or we are processing it unduly; or you do not want us to delete it because you need it to establish, assert or defend your claims; or for the duration of your objection to the processing of the data (Article 18 of the Regulation),
Right to data portability – you have the right to receive from us in a structured, commonly used, machine-readable format (e.g. “.csv” format) the personal data relating to you that we hold under the contract or your consent. You will be entitled to this right if we hold your data in electronic format – if we only hold your data in paper form you will not be able to exercise this right. You may instruct us to send the data directly to another entity (Article 20 of the Regulation),
the right to withdraw your consent to the processing of personal data (at any time you have the right to withdraw your consent to the processing of those personal data which we process on the basis of your consent) – Article 7(3) of the Regulation. The withdrawal of your consent will not affect the lawfulness of the processing that was carried out on the basis of your consent before its withdrawal. Withdrawal of consent occurs by sending an email to: info@velles.eu. In order to exercise the above rights, please send a request with the appropriate content to Velles.

VII. Right to object

Notwithstanding the rights mentioned above, you may object at any time to the processing of your data for direct marketing purposes – Article 21 of the Regulation. Once we have accepted your request to this effect, we are obliged to stop processing your data for this purpose. In specific situations, you may object at any time to our processing of your personal data if the basis for the use of the data is our legitimate interest or public interest – Article 21 of the Regulation. In such a situation, once we have considered your request, we will no longer be able to process the personal data subject to the objection on this basis unless we can demonstrate that there are: compelling legitimate grounds for processing which are deemed by law to override your interests, rights and freedoms, or grounds for establishing, pursuing or defending claims. You can find more information in Article 21 of the Regulation

VIII. Information on voluntary data provision

Insofar as the processing of your data takes place for the purpose of entering into and performing a contract with Velles, the provision of your data is a condition for entering into this contract. The provision of data is voluntary, but the consequence of failing to provide such data will be that it will not be possible to conclude and perform this contract.

IX. Information about a change in the purposes of data processing by the controller

If Velles decides to process your personal data for a purpose other than the purpose for which the personal data was collected, we will inform you, prior to such further processing, of this other purpose and provide any other relevant information.

X. Consent

If our use of your data is not necessary for the performance of a contract, performance of a legal obligation or does not constitute our legitimate interest, we may ask for your consent for specific purposes of using your data. Such consent may allow, for example, for data to be shared with other entities for their promotional campaigns or for automated decision-making based on your data and at your request or for us to contact you by telephone/email to inform you about the progress of the contract. You may withdraw your consent granted to us at any time (this will not affect the lawfulness of the use of your data prior to the withdrawal of such consent).
The withdrawal of your consent shall be effected by means of an appropriate notification in accordance with point g(1) of the section “Right of access and rectification” of this document. If you consent to the use of your data, the content of this consent will specify for which purpose we will process the data.
Your consent for the processing of your data will only be used for purposes where the other grounds for processing indicated in points (a) to (e) above do not apply.

XI. Cookie policy

The Website does not collect any information automatically, except for the information contained in cookies.
Cookies (so-called “cookies”) are IT data, in particular text files, which are stored on your terminal equipment on the Website and are intended for the use of the Website. Cookies usually contain the name of the website they come from, the time they are stored on your terminal equipment and a unique number.
Cookies are used in order to:
adapting the content of the Website to your preferences and optimising the use of the websites; in particular, these files allow for the recognition of the type of your device and appropriate display of the website, adapted to your individual needs;
creating statistics which help to understand how you use the Website, which enables improving its structure and content;
maintaining your session (after logging in), thanks to which you do not have to re-enter your login and password on each sub-page of the Website;
The following types of cookies are used within the Website:
Session cookies (which expire when you leave the Website)
security cookies, e.g. used to detect misuse of authentication on the Website;
“Performance” cookies, enabling the collection of information on the use of the Website’s pages;
permanent (stored for a period from 60 to 90 days)
Advertising cookies, to enable the provision of affiliate advertising content to you.
In many cases, web browsers allow cookies to be stored on your terminal equipment by default. Service users may change their cookie settings at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the settings of your web browser or inform you each time they are placed on your device.
The Owner of the Website informs you that at any time in the settings of your browser you can block cookies and/or delete currently stored cookies.

X. Right of complaint

If, in your opinion, the processing of your personal data by Velles violates the Regulation, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for the Protection of Personal Data. If you have any questions, we encourage you to contact us at info@velles.eu.