Skip to content
Logo

Privacy policy

What is GDPR? The General Data Protection Regulation (GDPR) is a European regulation that replaces the existing law in Poland and standardizes personal data processing regulations across the European Union. The previous regulations were created before the development of new technologies, geolocation, social media, profiling, and cloud data storage.

Check the most frequently asked questions and answers.

On what basis are personal data processed? Personal data is processed based on:

  • The necessity to fulfill your order;
  • Legitimate interest, e.g., responding to a complaint, marketing purposes;
  • The necessity to fulfill a legal obligation, e.g., issuing and storing invoices, accounting documents (tax and fiscal obligations);
  • Voluntary consent provided by you.

On what occasions do we collect your data? We may collect your data in cases such as: entering into contracts, initiating cooperation, setting up access accounts to systems, purchase processes, responding to complaints, participating in training, or expressing the desire to receive newsletters, and signing up at trade fairs.

How long is the data stored? Personal data is stored for the period required to complete the order or provide the service, as required by legal regulations, e.g., tax, fiscal-criminal, or until you withdraw your consent in the case of consent to receive marketing information.

What are your rights regarding personal data processing? Individuals whose data is processed have the following rights:

  • Right to object to data processing You can object when we process data based on our legitimate interest that you do not agree with. If the objection is justified, the data will be deleted.
  • Right to rectification (correction) of data This right can be exercised when the processed data is incorrect or incomplete.
  • Right to data deletion (right to be forgotten) You can request the deletion of your personal data in situations such as:
    • When the consent on which data processing is based has been withdrawn;
    • When the data is no longer necessary for the purposes for which it was collected;
    • When an objection to data processing has been lodged;
    • When personal data is processed unlawfully.
  • Right to restrict processing You can request that we do not process certain personal data (except for storing it) without completely deleting it.
  • Right to access data This right allows you to obtain information on whether the Controller processes personal data, what data is processed, for what purpose and for how long, and to obtain a copy of your personal data.
  • Right to data portability You can request that the data held by the Controller be prepared in a structured, commonly readable format and/or ask for it to be transferred to another Data Controller.

How can I manage my data or withdraw my consent to process my data? At any time, you can change your consents regarding the ways we communicate with you, correct data, or withdraw your consent to process your data by using the registry available at: customerservice@castrol-filters.eu

How do we use cookies? Details on how we use cookies are available separately on the website www.castrol-filters.eu.

What is the role of the supervisory authority regarding the rights granted under GDPR? If you believe that your data protection rights have been violated, you have the right to file a complaint with the President of the Personal Data Protection Office.