Privacy policy

In connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), we inform you that your personal data is held in our database and is processed as described below.

The controller of your personal data is ELA-COMPIL Sp. z o.o. with its registered office in Poznań 60-541, ul. Szczepanowskiego 8. Enquiries or requests related to personal data processing should be directed to:

This information applies to data received in person (employees, former employees, associates), through electronic forms, within the scope of business and contractual relations with clients or suppliers, as well as data collected by ELA-COMPIL Sp. z o.o. representatives in the course of purchasing, sales, or marketing activities (e.g. during meetings, business correspondence, conferences, tenders, negotiations, etc.)

Contact database

Contact data is collected directly from the data subject (e.g. through business cards, electronic forms, trade fairs, or conferences) or via other persons (e.g. from an employer or another employee). When providing data directly, you have full control over the scope of information shared. When data is provided by another person, ELA-COMPIL Sp. z o.o. typically collects only basic professional contact data: first name, surname, e-mail address, telephone number, position or role, company, and possibly other data arising from a contract.

Data is processed for the purpose of facilitating business contacts, contract performance, and sending holiday greetings, and will be stored for the time necessary to perform the contract, and then for the period corresponding to the limitation of claims. Data is not disclosed to other entities, except for entities acting on behalf of ELA-COMPIL Sp. z o.o. and entities authorised under applicable law.

Legal bases for processing:

  • Contract or order performance (Art. 6(1)(b) GDPR) — data is processed for the purpose of performing a contract or order and its settlement.
  • Business contacts and marketing (Art. 6(1)(f) GDPR) — representatives of ELA-COMPIL Sp. z o.o. may contact you to present an offer, invite you to a meeting or event, and as part of the company newsletter and other marketing activities. You have the right to object to such processing.
  • Response to an enquiry (Art. 6(1)(a) GDPR) — by submitting an enquiry in any form (e-mail, telephone, form), you consent to being contacted for the purpose of handling that enquiry.
  • Legal obligation (Art. 6(1)(c) GDPR) — data contained in invoices, accounting books, or other documentation confirming the conclusion and performance of a contract is processed for the purpose of preparing and storing documents in accordance with applicable law.

Job candidates

Personal data of job candidates is collected and processed in the “Job candidates” dataset. Providing data is voluntary. Data will be stored until the end of the recruitment process, and then for 6 months for the purposes of future recruitment. Data is not disclosed to other entities, except for entities acting on behalf of ELA-COMPIL Sp. z o.o. and entities authorised under applicable law. Legal basis: consent (Art. 6(1)(a) GDPR).

Employees

Employee data (including former employees) is collected and processed to the extent required by the Polish Labour Code (Art. 22¹) and provisions regarding payroll, accounting, tax, and insurance matters. Providing data to the extent specified in the Labour Code is mandatory. Personal data will be stored for the period required by Labour Code provisions. Data may be disclosed to Company clients to the extent necessary to issue an access pass or entry permit (first name, surname, PESEL number, ID document number, position, photograph).

In addition to mandatory data, the “Employees” dataset may contain data collected on the basis of voluntary consent (e.g. bank account number). In such cases, you have the right to withdraw consent at any time.

Legal bases for processing: maintaining employee documentation and payroll matters (Labour Code, Art. 22¹); performing employer tasks arising from superior regulations and Work Rules (employee consent).

To ensure employee safety, protect property, and maintain the confidentiality of information whose disclosure could harm the employer, video monitoring is in operation on company premises. Monitoring data is stored for 30 days.

Associates

Personal data of associates is collected and processed in the “Associates” dataset for the purpose of performing a contract concluded with ELA-COMPIL Sp. z o.o. Data is stored for the time necessary to perform the contract, and then for the period corresponding to the limitation of claims. It may also be processed for payroll, accounting, tax, and insurance purposes, and disclosed to Company clients to the extent necessary to issue an access pass (first name, surname, PESEL number, ID document number, position, photograph). Legal basis: civil law contract.

Training participants

Personal data of training participants is collected and processed for the purpose of performing a contract concluded with ELA-COMPIL Sp. z o.o. and, upon separate consent, for marketing purposes. Data is stored for the time necessary to perform the contract, and then for the period corresponding to the limitation of claims. Marketing data is processed only until consent is withdrawn. Data is disclosed to entities performing tasks on behalf of ELA-COMPIL Sp. z o.o. and entities authorised under applicable law. Legal basis: contract or order; separate consent for using data and likeness for marketing purposes.

Data subject rights

Under the GDPR, you have the right to:

  1. access your data,
  2. rectify your data,
  3. erase your data,
  4. restrict processing,
  5. data portability,
  6. object (when processing is based on the controller’s legitimate interest),
  7. withdraw consent (when processing is based on consent).

You also have the right to lodge a complaint with the competent supervisory authority — the President of the Personal Data Protection Office (UODO).

Spam protection for forms

To protect contact forms against automated spam, we use the Google reCAPTCHA v3 service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). This service analyses user behaviour on the website (including mouse movements, time spent on the page, IP address, browser data) to distinguish humans from bots. This data is transmitted and processed by Google in accordance with the Google Privacy Policy and Terms of Service. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR) — protecting the website against abuse and spam.

Cookies are small text files stored on the user’s device when visiting websites. They are used to store information between visits and enable website owners to collect anonymous statistics about how the site is used.

The ela.pl website uses cookies for the following purposes:

  • Analytics cookies — provided by Google Analytics 4. They help us understand how visitors use the website — which pages are visited, how long visits last, where traffic comes from, and which content is most popular. We use this data to improve the website and tailor its content to visitors’ needs.
  • Advertising cookies — provided by Google Ads and related services. They enable the display of personalised advertisements based on user activity on the website and measuring the effectiveness of advertising campaigns.

Both analytics and advertising cookies are stored on the user’s device only after voluntary consent is given for a specific cookie category. The _ga and _ga_* files may be stored on the user’s device for up to 2 years, as well as the cookieConsent file belonging to the ela.pl website, which is stored after consent is given and kept for up to 1 year.

Collection of data via analytics and advertising cookies takes place only after the user has given voluntary consent for a specific category, in accordance with Art. 6(1)(a) GDPR and the provisions of the Telecommunications Act. Analytics data is processed in an anonymised manner and does not allow identification of a specific person. Advertising data may be processed by Google for the purpose of ad personalisation and campaign effectiveness measurement.

Analytics and advertising cookies are stored only after the user gives consent by clicking the appropriate button in the window displayed during their visit. The user can consent to each category independently. Consent can be withdrawn at any time by clicking “Cookie settings” in the website footer or by deleting cookies in browser settings. After deleting cookies, the consent window will be displayed again on the next visit.