Privacy policy

 

1. GENERAL PROVISIONS

This Privacy Policy applies to all persons using the website available at www.ondaFlo.pl (next: "Side"), in particular customers, potential customers, as well as other persons visiting the Website and the online store operated therein, and specifies in particular the rules for collecting and processing data obtained while using the Website and the rules for storing and accessing information on user's devices using cookies. 

We make every effort to keep your data safe, paying particular attention to respecting the privacy of users visiting our Website. We use appropriate tools and technical solutions to protect data against accidental or unlawful destruction, loss, unauthorized disclosure or access. We process your personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "GDPR") and other applicable legal provisions. Detailed information regarding the processing of your personal data is provided below.

 

2. WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA 

The administrator, i.e. the entity deciding how your personal data will be used, is ondaFlo limited liability company based in Konin, ul. Leszczynowa No. 23, postal code 62-500 Konin, entered into the register of entrepreneurs of the National Court Register under KRS number 0001218468, using NIP number 6653083394, REGON number 54377602 (hereinafter: "Administrator" or "Seller"). 

 

3. WHERE YOUR DATA COMES FROM

We received them from you in connection with your use of the Website and its functionalities, in particular the online store. In addition, we process your data that you provide to us or share in your browsing history as part of using the Website, including through the technology of automatic information collection using technologies such as cookies, logs and analytical tools (such as Google Analytics) to the extent necessary to provide services on the Website.

4. WHAT DATA WE COLLECT AND FOR WHAT PURPOSE WE PROCESS THEM

We process personal data:

1. Store Customers: name, surname, delivery address, e-mail, telephone number, company, registered office or residential address, NIP (Tax Identification Number), bank account number, computer IP address, if applicable, account information including User name, password, ID,
2. persons contacting the Seller: name, surname, company, e-mail address,
3. website users: IP address, online identifiers, data from cookies and pixel tags, operating system data, website activity data and personal and marketing preferences.

We process the above data for the purpose of:

1. enabling users of the Website to create a Customer Account and make purchases on the Website, including in particular: 
   1. performance of obligations arising from the contract, if one has been concluded [Art. 6 section 1 (b) GDPR], including contracts for maintaining a Customer Account, sales contracts, and delivery of ordered products; in the case of customers who are legal entities - in such a situation, we process data on the basis of Art. 6 section 1 (f) GDPR, i.e. on the basis of our legitimate interest in achieving the objective in question;
   2. in order to fulfill obligations arising from legal provisions, including: warranty provisions (including consideration and handling of complaints submitted by you regarding our goods), tax and accounting law provisions [pursuant to Art. 6 section 1 (c) GDPR];
   3. contacting the user, in particular for purposes related to the provision of services such as the Newsletter - if applicable, in connection with the necessity to perform the concluded contract [Art. 6 section 1 (b) GDPR] or on the basis of our legitimate interest [Art. 6 section 1 (f) GDPR],
2. statistical and analytical, which is the legitimate interest of the Administrator consisting in conducting analyzes of user activity as well as their preferences in order to improve the quality and adequacy of the functionalities of the Website (Article 6(1)(f) of the GDPR),
3. archiving, which is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR),
4. possible pursuit of claims or defense against them, which is the legitimate interest of the Administrator consisting in the protection of its rights (Article 6(1)(f) of the GDPR).

 

5. SERVER LOGS

Using the Website each time involves sending a query to our server. Individual queries are saved in the server logs and stored there. The data contained in the logs includes: your IP address, time of query arrival, time of sending the response, information about the user's browser and operating system. The data collected in log files is used only to administer the Website.

 

6. COOKIES (“COOKIES”)

Cookies are small text files sent by websites and placed on the user's end device (computer, tablet or other devices connected to the Internet). Depending on the type of these files, they can be used for various purposes, including improving browsing and navigation on websites. 

The term "cookie" also covers various technologies (tag, pixel, SDK, etc.) that operate when you use the Internet, including storing or reading information on your device. The use of these technologies requires informing you, and in some cases - due to the purposes of processing - your consent is required.

We use the following types of cookies on our Website:

Depending on the storage period on the end device, the cookies we use can be divided into:

session cookies: stored on the user's device and remaining there until the end of the browser session. The saved information is then permanently deleted from the device's memory.

permanent cookies: are stored on the user's end device for the time specified in the cookie parameters or until they are deleted by the user.

During your first visit to our Website, information about the use of cookies is displayed. You can independently determine the scope of consent to our use of cookies in your browser settings. You also have the option of limiting or even disabling cookies' access to your device. In such a case, it will be possible to use the Website, except for functions that by their nature require cookies. You can always withdraw your consent by deleting cookies or changing cookie settings in your browser. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings. 

 

7. DATA STORAGE PERIOD

Your personal data will be processed by us for the period necessary to perform the contract for the provision of the Customer Account service (if concluded) and the contract for the sale of goods (if concluded), as well as for the period provided for by applicable law, taking into account, where applicable, the limitation period for claims arising from civil law relations between you and us.

We are entitled to process personal data that we process based on your consent until you withdraw your consent or until the processing of your personal data is no longer necessary to achieve the purpose for which the data is processed, as well as when the given purpose of processing is achieved and completed, depending on which event occurs first.

We will process data that we process on the basis of our legitimate interest until you raise an objection, or until the processing of your personal data is no longer necessary to achieve the purpose for which the data is processed, and when the given purpose of processing is achieved and completed, depending on which event occurs first.

 

8. IS PROVIDING DATA MANDATORY?

Providing your personal data specified in the contact form is required voluntary, but necessary to make a purchase on the Website or to achieve other purposes referred to in this Privacy Policy for which this data is necessary. In the remaining scope, providing data is voluntary and dependent on your consent and is not necessary to achieve the above-mentioned purposes. If you do not consent to the processing of personal data, your personal data will not be processed for this purpose. You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing of your data which was carried out on the basis of the consent granted before its withdrawal.

9. YOUR RIGHTS

In connection with the processing of your personal data, you have, within the limits set by law and where applicable, the following rights:

1. access to the content of your data and rectification, deletion or limitation of processing and transfer of your data,
2. in situations where we process your data on the basis of your consent, you have the right to withdraw it at any time, but this will not affect the lawfulness of the processing carried out on the basis of your consent expressed before its withdrawal,
3. object at any time to the processing of personal data based on our legitimate interest for reasons related to your particular situation,
4. to lodge a complaint with the President of the Office of Data Protection if you believe that the processing of your personal data violates the provisions of the GDPR.

10. WHOM WE TRANSFER YOUR DATA TO

Where appropriate, we may transfer your data to:

1. external entities, including in particular suppliers responsible for operating IT systems, entities such as banks and payment operators, entities providing accounting services, marketing agencies (within the scope of marketing services) on the basis of concluded contracts (provided that these entities cannot use your data for purposes other than the performance of contracts concluded with the Administrator),
2. entities related to the Administrator, including companies from its capital group,
3. authorized persons, employees and collaborators of the Administrator who must have access to the provided data, for the purpose and to the extent necessary to perform their duties,
4. public entities, if this results from the obligation imposed by law.
   

 

11. DATA TRANSFER TO THIRD COUNTRIES (OUTSIDE THE EEA)

The scope of protection of your personal data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, we only transfer your personal data outside the EEA when necessary and with an adequate level of protection, in particular by: 

1. cooperation with entities processing personal data in countries for which an appropriate decision of the European Commission has been issued;
2. application of standard contractual clauses issued by the European Commission;
3. application of binding corporate rules approved by the relevant supervisory authority; 
4. in the event of data transfer to the USA - cooperation with entities participating in the Privacy Shield program, approved by the decision of the European Commission. 

As a rule, your data is not transferred outside the EEA. The administrator always informs about the intention to transfer personal data outside the EEA at the stage of collection. 

12. LINKS TO OTHER SITES

This Privacy Policy applies only to the Site. If you provide a link to another website on the Website, please read its privacy policy after visiting it. The Seller is not responsible for the privacy policies applicable on these websites.

13. CHANGE TO POLICY

Our goal is to ensure the highest possible protection of your data. The development of technology and the development of the Website mean that the Privacy Policy may change.  The amended Privacy Policy will be posted and updated on the Website with an appropriate annotation. 

To the extent not regulated by this Privacy Policy, applicable legal provisions shall apply, in particular the provisions of the GDPR. In the event of inconsistency between the provisions of this Privacy Policy and the above provisions, these provisions shall prevail.

14. CONTACT WITH THE ADMINISTRATOR

In matters related to the processing of your data (e.g. matters regarding the Privacy Policy or withdrawal of consent to the processing of your data), you can contact us at: support@ondaFlo.com.

The current version of the Policy has been adopted and is valid from May 1, 2026.