The website www.envirotech.com.pl is available in two language versions – Polish and English. The English version does not offer sales or recruitment features and therefore does not process personal data for these purposes. This Privacy Policy describes the full scope of personal data processing covering both language versions of the website.
1. Data Controller
The controller of personal data processed in connection with the use of the website www.envirotech.com.pl is:
Envirotech sp. z o.o.
ul. Jana Kochanowskiego 7
60-845 Poznań
Poland
tel.: +48 61 657 02 00
e-mail: office@envirotech.com.pl
hereinafter referred to as the Controller.
2. Scope and Purposes of Personal Data Processing
2.1. Book Orders
The website www.envirotech.com.pl processes personal data when a book order is placed via the order form. Providing personal data is voluntary, however it is necessary to place and fulfil an order. Failure to provide the required data will make it impossible to issue an invoice or ship the goods.
The following data is collected:
Invoicing data:
- company name (optional),
- first and last name,
- address (street, building number, postal code, city),
- VAT number (optional).
Shipping data (if different from invoicing data):
- company name (optional),
- first and last name,
- address (street, building number, postal code, city).
Contact data:
- e-mail address,
- phone number.
Personal data is processed for the following purposes and on the following legal bases:
- order fulfilment and performance of the sales contract – legal basis: Art. 6(1)(b) GDPR (processing necessary for the performance of a contract),
- issuing invoices and fulfilling tax obligations – legal basis: Art. 6(1)(c) GDPR (processing necessary for compliance with a legal obligation),
- establishment, exercise or defence of potential legal claims – legal basis: Art. 6(1)(f) GDPR (legitimate interests of the Controller).
Data submitted via the order form is sent directly by e-mail to the Controller’s sales department for order processing and is not stored in the website system. Access to such data is restricted to authorised employees only.
2.2. Recruitment
The website www.envirotech.com.pl also processes personal data of job applicants who have submitted application documents (CV, cover letter) in response to published job offers. Providing personal data is voluntary, however it is necessary to participate in the recruitment process. Failure to provide the required data will make it impossible to consider the application.
The following data is collected within the scope resulting from the submitted documents and the provisions of the Labour Code:
- first and last name,
- date of birth,
- contact data (address, phone number, e-mail address),
- education,
- employment history.
Personal data of candidates is processed for the following purposes and on the following legal bases:
- conducting the recruitment process – legal basis: Art. 6(1)(b) GDPR (processing necessary for taking steps at the request of the data subject prior to entering into a contract) in respect of activities related to the candidate’s participation in the recruitment process, and Art. 6(1)(c) GDPR (processing necessary for compliance with a legal obligation incumbent on the Controller) in respect of data whose processing is required under the provisions of the Labour Code;
- processing of data contained in application documents beyond the catalogue specified in the Labour Code – legal basis: Art. 6(1)(a) GDPR (candidate’s consent);
- conducting future recruitment processes – legal basis: Art. 6(1)(a) GDPR (voluntary and informed consent of the candidate).
In accordance with applicable law, there is no need to attach a separate data processing consent clause to application documents, with the exception of consent to participation in future recruitment processes, which is voluntary and optional. The wording of this consent is available in each published job offer.
Application documents (CV, cover letter) are sent to the e-mail address indicated in the job offer and are received directly by the Controller’s employees responsible for recruitment. Such data is not stored in the website system. Access to it is restricted to authorised employees participating in the recruitment process only.
3. Data Retention Periods
Personal data is retained for the following periods:
- invoicing and accounting data is retained for a period of 5 years from the end of the tax year in which the tax payment deadline fell;
- data processed on the basis of consent (analytical cookies – see section 5) is retained until consent is withdrawn by the user or for a period of 14 months, whichever occurs first;
- contact data (e-mail, phone number) provided in the book ordering process is retained until the completion of the contract, and thereafter only until the limitation period for any potential claims expires (in accordance with the Civil Code; legal basis: Art. 6(1)(f) GDPR – legitimate interests of the Controller);
- personal data of job applicants (including contact data contained in the CV) is retained for the period necessary to carry out the recruitment process, but no longer than 3 months from its conclusion. In the event of consent being given for participation in future recruitment processes, data is retained for a period of 12 months from the date on which consent was given.
4. Recipients of Data
Personal data of users may be shared with the following categories of recipients:
- courier and postal service providers — to the extent necessary to deliver the ordered book,
- Google LLC – in connection with the use of the Google Analytics tool on this website (see section 6).
The Controller does not transfer personal data to third countries, except as described in section 6, where data may be transmitted to Google servers located outside the European Economic Area, with appropriate safeguards as required by the GDPR.
5. Cookies
The website uses technical cookies, i.e. small text files stored on the user’s device, which are necessary for the proper functioning of the website, such as:
- remembering the user’s display preferences,
- ensuring the correct operation of navigation features.
Technical cookies do not require the user’s consent and are used regardless of the user’s choice.
The website also uses analytical cookies generated by the Google Analytics tool (see section 6), which are used to analyse website traffic and user behaviour. These cookies require the user’s consent, which is collected via a banner displayed upon the user’s first visit to the website. This consent may be withdrawn or changed at any time by clicking the Cookie Settings link located in the website footer.
Users may also change their cookie settings directly in their web browser at any time, including blocking the storage of cookies or deleting already stored files. However, changing these settings may affect the functioning of certain features of the website.
6. Google Analytics
This website uses Google Analytics, a tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This tool is used to analyse website statistics and user behaviour. Google Analytics collects in particular:
- anonymised IP addresses of users,
- information about the web browser and operating system,
- data on user behaviour on the website (pages visited, time spent, traffic source).
Data collected by Google Analytics is processed by Google under the terms set out in Google’s privacy policy, available at: https://policies.google.com/privacy. The website uses the IP anonymisation feature, which means that users’ IP addresses are truncated before being sent to Google.
The legal basis for processing data in connection with Google Analytics is the user’s consent (Art. 6(1)(a) GDPR), given via the cookie banner upon the user’s first visit to the website.
The transfer of data to Google LLC takes place on the basis of an implementing decision of the European Commission finding an adequate level of protection for personal data (under the Data Privacy Framework).
Users may opt out of tracking by Google Analytics at any time by:
- withdrawing the consent given via the banner displayed upon the first visit to the website (see section 5),
- installing a browser plugin available at: https://tools.google.com/dlpage/gaoptout.
7. Server Logs
Use of the website involves sending requests to the server on which it is hosted. Each request is recorded in server logs. The logs include, among other things, the user’s IP address, the date and time of the request, the URL of the requested resource, and information about the web browser. This data is processed solely for technical and administrative purposes related to ensuring the security and proper functioning of the website.
The legal basis for processing data in server logs is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), consisting in ensuring the security, stability and proper functioning of the website.
8. User Rights
Every person whose personal data is processed has rights arising from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), in particular:
- the right of access to data and to receive a copy thereof,
- the right to rectification (correction) of data,
- the right to erasure of data,
- the right to restriction of processing,
- the right to object to processing,
- the right to data portability,
- the right to withdraw consent at any time (without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal),
- the right to lodge a complaint with a supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
The right to erasure does not apply to data contained in accounting documents (invoices) which the Controller is required to retain for the period prescribed by law (Art. 6(1)(c) GDPR).
To exercise the above rights, please contact the Controller by e-mail at: office@envirotech.com.pl or in writing to the company’s registered address.
9. Data Security
The Controller applies appropriate technical and organisational measures to protect processed data against unauthorised access, loss or destruction, adequate to the risks and categories of data subject to protection.
10. Links to External Websites
The website www.envirotech.com.pl contains links to external websites. The Controller is not responsible for the privacy policies applicable to those websites. Users should review the privacy policy of each website they visit.
11. Changes to the Privacy Policy
The Controller reserves the right to make changes to this Privacy Policy. Any changes will be published on this page. Users are advised to review it regularly.
Poznań, April 2026