Privacy Policy
How we process your personal data
1. Who is responsible for your data
The controller of your personal data is:
Wensday Invest Sp. z o.o.
Trading as: ElectroQuell
Registered address: ul. Święty Marcin 29/8, 61-806 Poznań, Poland
NIP / EU VAT ID: PL 7831870813 · REGON: 523967958
Registration: National Court Register (KRS) no. 0001008813, District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register; share capital PLN 5,000
Represented by: Karol Półtorak, President of the Management Board
E-mail: info@electroquell.de · Telephone: +49 176 82370794
Website: www.electroquell.de
For all questions about personal data, contact us at info@electroquell.de or by post at the address above, marking your letter "Data protection". We have not appointed a data protection officer, as we are not required to do so.
2. What this policy covers
This policy applies to personal data we process when you visit www.electroquell.de, request a quotation, place an order, create an account, contact us, subscribe to our newsletter, apply for a job, or otherwise deal with us as a customer, supplier or business contact. Where we process data of employees of business customers and suppliers (name, role, business contact details), this policy applies to them as well.
3. What data we process, why, and on what legal basis
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Answering enquiries and preparing quotations | Name, company, e-mail, telephone, address, content of your enquiry, technical requirements | Art. 6(1)(b): steps prior to a contract at your request; Art. 6(1)(f): legitimate interest in responding to business contacts | Until the enquiry is closed; quotations for 3 years for follow-up and evidence |
| Processing and fulfilling orders, delivery, installation, warranty and complaints | Identification and contact data, delivery address, order details, serial numbers, payment status, correspondence, service records | Art. 6(1)(b): performance of the contract | Duration of the contract, then for the limitation period of claims (generally 6 years for business claims and 2 to 6 years for consumer claims under Polish law) |
| Accounting, invoicing and tax | Invoice data, payment data, VAT numbers | Art. 6(1)(c): legal obligation under the Polish Accounting Act and tax laws | 5 years from the end of the tax year in which the obligation arose |
| Payments | Payment method, transaction identifier, amount; card or PayPal data are processed by the provider, not stored by us | Art. 6(1)(b) and (c) | As for accounting |
| Customer account | Login data, order history, saved addresses | Art. 6(1)(b): providing the account service you requested | Until you delete the account, then as required for claims and accounting |
| Establishing, exercising or defending legal claims | Contract and correspondence data | Art. 6(1)(f): legitimate interest | Until the claims are time-barred or finally settled |
| Direct marketing to existing customers and business contacts (post, and e-mail or telephone where you have consented) | Name, company, contact data, purchase history | Art. 6(1)(f): legitimate interest in promoting our products; sending electronic marketing additionally requires your consent under Art. 398 of the Polish Electronic Communications Law | Until you object or withdraw consent |
| Newsletter | E-mail address, name, consent record, opening and click statistics | Art. 6(1)(a): consent, and Art. 398 of the Electronic Communications Law | Until you unsubscribe; consent record kept for 3 years afterwards as evidence |
| Website operation, security and error logs | IP address, browser and device data, pages visited, time stamps | Art. 6(1)(f): legitimate interest in a secure, functioning website | Up to 90 days in server logs |
| Analytics and advertising cookies | Online identifiers, device data, pages visited, interactions, approximate location | Art. 6(1)(a): consent given through the cookie banner (Art. 399 of the Electronic Communications Law) | See the Cookie Policy for each cookie's lifetime |
| Recruitment | Data in your application | Art. 6(1)(b) and (c) (Labour Code); Art. 6(1)(a) for future recruitment | Until the process ends; 12 months with your consent |
Providing personal data is voluntary but necessary to answer your enquiry or conclude and perform a contract; without it we cannot supply you. Data marked as required in our forms is the minimum we need.
4. Where the data comes from
Most data comes directly from you. For business contacts we may also obtain data from your employer or colleagues, from public registers (CEIDG, KRS, VIES, Handelsregister), from company websites, or from trade fairs and industry directories. Payment providers inform us about the status of your payment. Carriers inform us about the status of deliveries.
5. Who receives your data
We share personal data only where necessary, with:
- Service providers acting on our behalf (processors), bound by data processing agreements: our cloud hosting provider, whose data centres for this Website are located in Germany; providers of e-mail, office and customer-relationship software; the e-commerce and newsletter platforms used to run the Website; website chat and support tools; accounting software and our external accountant; IT support.
- Independent controllers needed to perform the contract: payment service providers (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, and our card payment provider), banks, carriers and freight forwarders, engine manufacturers and their service networks for warranty registration and claims, installation subcontractors, export credit insurers and trade finance providers where the contract is financed, and customs agents for exports.
- Advertising and analytics providers where you have consented through the cookie banner: Google (analytics and advertising measurement), Meta and LinkedIn (advertising measurement). The Cookie Policy lists the categories and lifetimes.
- Authorities and advisers: tax authorities, courts, law enforcement where legally required; lawyers, auditors and insurers where needed to protect our rights.
6. Transfers outside the European Economic Area
Our Website and customer data are hosted in the European Union. Some providers of advertising, analytics, payment and office software (for example Google, Meta and PayPal group companies) may process data in the United States or other countries outside the EEA. Where this happens we rely on an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified US companies) or on the Commission's Standard Contractual Clauses with additional safeguards. You can obtain a copy of the relevant safeguards by contacting us. When we sell to customers outside the EEA (for example in the United Arab Emirates, Bahrain or the United Kingdom) we transfer the data needed to perform the contract on the basis of Article 49(1)(b) GDPR, or the UK adequacy decision where applicable.
7. How long we keep data
Retention periods are shown in the table in section 3. In general: contract and service data for the life of the contract and the limitation period of claims; accounting and tax records for 5 years after the end of the tax year; marketing data until you object or withdraw consent; enquiry data until the matter is closed plus a short follow-up period. When the period ends, we delete or anonymise the data.
8. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy (Art. 15);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure where the data is no longer needed, consent is withdrawn, or processing is unlawful (Art. 17), subject to legal retention duties;
- restriction of processing in the cases set out in Art. 18;
- data portability of data you provided and that we process by automated means on the basis of consent or contract (Art. 20);
- object at any time to processing based on our legitimate interests, including profiling (Art. 21(1)); we then stop unless we demonstrate compelling legitimate grounds. You may object to direct marketing at any time and we will stop without exception (Art. 21(2));
- withdraw consent at any time with effect for the future, without affecting the lawfulness of processing before withdrawal (Art. 7(3)); for the newsletter, use the unsubscribe link; for cookies, use the cookie settings link in the Website footer.
To exercise your rights, contact us at info@electroquell.de. We respond within one month, extendable by two further months for complex requests. We may ask you to verify your identity.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country of your habitual residence, place of work or place of the alleged infringement. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl. In Germany, the competent Landesdatenschutzbehörde.
9. Automated decision-making and profiling
We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Advertising tools may group visitors into audiences based on browsing behaviour if you consent to marketing cookies; this does not have legal effects for you and you can withdraw consent at any time.
10. Security
We use TLS encryption on the Website, access controls, encrypted backups and data-processing agreements with our providers. Card and PayPal payments are processed on the provider's systems; we do not receive or store card numbers. For security reasons we do not publish details of our technical infrastructure; you may ask us about specific safeguards where this is relevant to a request.
11. Children
Our products and Website are directed at adults and businesses. We do not knowingly collect data from children under 16.
12. Changes to this policy
We update this policy when our processing, providers or the law change. The current version with its date is always available on the Website. Material changes affecting account holders or newsletter subscribers will be communicated by e-mail.