Privacy Policy of the Website
DRUTEX SA
1. Who is the Data Controller of users' personal data for the website: www.drutex.pl (hereinafter referred to as: the Website).
The Data Controller is Drutex SA with its registered office in Bytów (77-100), at ul. Lęborska 31, NIP 8421622720, REGON 771564493, KRS 0000140428, hereinafter referred to as the “Controller” or “We”.
We have appointed a contact point, which is the designated Data Protection Officer.
The officer can be contacted:
- By mail – by sending inquiries to the Controller’s address,
- By email at: gdpr@drutex.com.pl
2. For what purposes can we process users' personal data from the website.
Personal data obtained from the website may be processed by the Controller for the following purposes:
Purpose | Legal Basis | Retention Period |
Sending a newsletter containing marketing information about Drutex products, brand, and services. | Art. 6(1)(a) GDPR – based on the User’s consent. | Until consent is withdrawn. |
Responding to a query submitted via the contact form at https://www.drutex.pl/pl/kontakty/ | Art. 6(1)(f) GDPR – legitimate interest of the Controller to respond or react to a submitted opinion. | Until the final effective response is provided. |
Forwarding the inquiry and contact details to a selected Drutex SA distributor, at the User's request | Art. 6(1)(f) GDPR – legitimate interest to support commercial contact within the distribution network. | Until the distributor confirms contact with the User. |
Determining the location of the User’s device displaying the Website to show the nearest distributors. | Art. 6(1)(a) GDPR – based on the User’s consent. | For the duration of the session. |
Optimization of websites and marketing content based on statistical data. | Art. 6(1)(a) GDPR – based on the User’s consent. | As indicated in the cookie policy. |
Remarketing activities by displaying ads tailored to the User’s interests based on activity analysis. | Art. 6(1)(a) GDPR – based on the User’s consent. | As indicated in the cookie policy. |
Analysis of CV submitted via our website. | Art. 6(1)(a) GDPR – based on the User’s consent provided through submission. | Until the recruitment process ends or consent is withdrawn if the CV was unsolicited. |
Analysis of whistleblower reports submitted via the Website. | Art. 6(1)(b) GDPR – legal obligation under the Whistleblower Protection Act of June 14, 2024. | 3 years from the end of the calendar year in which follow-up actions were completed. |
3. Can I withdraw consent?
You may withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal. You can withdraw your consent by contacting the Data Protection Officer via email: gdpr@drutex.com.pl
Regarding cookies, consent can be withdrawn using the mechanism available on our website or by changing your browser settings.
4. Who has access to users' personal data from the website?
Access to data is granted to IT service providers to whom Drutex SA has entrusted the processing of personal data, and in the case of inquiries sent via the Website – to Drutex SA product distributors within our sales network.
Moreover, third-party cookies from entities such as Google Inc. and META Platforms Inc. may be installed on users’ devices via the Website, and they may identify users by assigning them individual IDs. Detailed information is available in the Cookie Policy.
5. What rights do website users have and how can they exercise them?
Under the GDPR, every user of the website has the right to:
- access their personal data,
- rectify or complete their data,
- erase their personal data,
- restrict the processing of their data,
- data portability,
- withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal – where processing is based on consent,
- object to processing due to their particular situation – where data is processed based on the legitimate interest of the Controller,
- lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office, if the user believes their data is being processed unlawfully.
How to exercise your rights:
To exercise the above rights, please contact the Data Protection Officer (contact details in point 1 above), providing personal data that allows verification of your identity.
6. Does the Controller use profiling or make automated decisions based on my data?
Drutex does not use machine learning mechanisms or other automated technologies to make decisions about individuals whose personal data is processed.
We use mechanisms provided by Google Analytics and Google Ads to optimize remarketing campaigns, which involve profiling. For profiling analysis, we use information about website users such as browsing history, location, visit frequency, and session duration. Information is processed only after the visitor consents. Details can be found in the Cookie Policy.
Is providing data mandatory or voluntary?
Providing personal data is voluntary, but the lack of such data may hinder or prevent the use of certain functionalities of the website.