Privacy Policy

The data controller responsible for personal data processed in connection with the use of enconglobal.com is:

ENCON Ralf Horstmann Ralf Horstmann ul. Firmowa 1, unit 301 45-594 Opole Poland Tax Identification Number (NIP): 5261776742 EU VAT ID: PL5261776742 E-mail: office@enconglobal.com

The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and other applicable data protection laws and regulations.

The enconglobal.com website is informational in nature and presents information about ENCON's activities and the products and solutions offered by ENCON.

The website does not require users to create an account or register.

Through the website, users may in particular:

• browse information about ENCON products and solutions,
• browse product catalogues,
• open catalogues to view their contents,
• download available materials and catalogues,
• use the contact form to submit an inquiry to the Controller.

Access to catalogues and informational materials does not require the submission of personal data.

Certain website functions allow users to open a specific catalogue page in a new browser tab so that they can directly view information concerning a particular product or component.

Personal data is provided to the Controller primarily through the contact form.

The contact form contains the following fields:

• inquiry subject / department,
• first and last name,
• company – optional,
• e-mail address,
• message.

Users may also voluntarily include additional information in the content of their message.

The Controller recommends that users do not provide special categories of personal data or information that is not necessary to process their inquiry through the contact form.

The Controller applies the principle of data minimisation and processes only data that is appropriate and necessary for the specified purposes.

Personal data submitted through the contact form is processed for the following purposes:

• receiving and handling the inquiry,
• providing a response,
• conducting further correspondence related to the inquiry,
• providing information about products and solutions where this is related to the content of the inquiry,
• taking steps at the user's request prior to entering into a potential agreement.

Depending on the nature of the inquiry, the legal basis for processing may be:

Article 6(1)(b) GDPR – where processing is necessary in order to take steps at the request of the data subject prior to entering into a contract;

or

Article 6(1)(f) GDPR – where processing is necessary for the purposes of the legitimate interests pursued by the Controller, in particular handling correspondence and responding to inquiries addressed to the Controller.

In the case of commercial inquiries from potential customers, processing personal data for the purpose of responding to such an inquiry may constitute steps taken at the request of the data subject prior to entering into a contract.

Personal data is not used by the Controller for user profiling or for automated decision-making that produces legal effects concerning users or similarly significantly affects them.

The contact form is operated using Web3Forms, provided by Web3Creative.

Data entered into the form is transmitted to Web3Forms for the technical processing of the submission and for forwarding the message to the Controller's business e-mail address.

Web3Forms is also used to provide technical protection of the contact form against spam.

The form does not use Google reCAPTCHA or other mechanisms requiring the Controller to add analytics or advertising tools.

The retention period for form submissions in the configuration used by the Controller is set to 30 days.

Messages submitted through the contact form are delivered to the Controller's business e-mail account using Google Workspace.

As a result, the data contained in a message, including in particular the sender's name, e-mail address, company name and message content, may be processed within the e-mail service to the extent necessary to provide the service.

The enconglobal.com website is currently hosted on infrastructure provided by:

SuperHosting.BG Ltd. Bulgaria

In connection with the technical operation of the website, information relating to connections to the server may be recorded, including in particular:

• IP address,
• date and time of connection,
• requested resource address,
• information about the browser and device used,
• information concerning technical errors and security.

Technical data and server logs are used in particular to ensure the proper operation, security and stability of the website and to detect and prevent misuse.

The website provides free access to catalogues and other informational materials for viewing and download.

Downloading a catalogue or opening its preview does not require the submission of personal data.

Materials may also be opened in a new browser tab, including directly on the catalogue page corresponding to a particular product or component.

Use of these functions may involve the processing of standard technical data by the server, such as the IP address and information contained in server logs.

The website uses local browser storage mechanisms to remember the user's settings.

In particular, the following information may be stored:

• the user's selected language,
• the user's display preferences.

This information is used solely to retain the user's settings for subsequent visits and is not used to create a user profile, for advertising, remarketing or behavioural analytics.

The website does not use Google Analytics, Google Tag Manager, Meta Pixel or other analytics or advertising tools.

Personal data may be transferred to entities involved in the technical operation of the website or the handling of inquiries, including in particular:

• Web3Creative / Web3Forms – provider of the technology used to operate the contact form,
• Google Workspace – provider of the business e-mail service,
• SuperHosting.BG Ltd. – current website hosting provider,
• persons authorised by the Controller to handle inquiries, where applicable.

The Controller does not sell users' personal data and does not transfer such data to other entities for the purpose of those entities carrying out independent marketing activities.

In connection with the use of certain technology services, personal data may be processed or transferred outside the European Economic Area.

Web3Creative states in its Data Processing Agreement that it acts as a data processor and that data may be processed or transferred in jurisdictions outside the area applicable to the Controller. The DPA provides for the use of Standard Contractual Clauses (SCCs) where they are required for transfers of data from the European Economic Area.

When using Google Workspace, the applicable data protection mechanisms set out in the Google Workspace terms and the Cloud Data Processing Addendum apply, including appropriate transfer mechanisms where required.

Personal data submitted through the contact form is retained by the Controller for the period necessary to handle the inquiry and conduct related correspondence.

Submissions stored in the Web3Forms service are, in the configuration used by the Controller, subject to a 30-day retention period.

After the period necessary to fulfil the purpose of processing has expired, personal data is deleted or anonymised unless further retention is required by applicable law or is necessary for the establishment, exercise or defence of legal claims.

If contact results in the conclusion of an agreement or the commencement of a business relationship, relevant data may be retained for periods resulting from legal, accounting or other legitimate purposes connected with that relationship.

To the extent provided for by the GDPR, data subjects have the right to:

• access their personal data,
• rectify inaccurate or incomplete personal data,
• erase their personal data,
• restrict processing,
• data portability where provided for by the GDPR,
• object to processing based on the legitimate interests of the Controller.

The scope of individual rights depends on the legal basis and circumstances of the particular processing.

To exercise these rights, users may contact the Controller at: office@enconglobal.com

If a data subject considers that the processing of their personal data violates applicable data protection laws, they have the right to lodge a complaint with the competent supervisory authority.

In Poland, the competent supervisory authority is:

President of the Personal Data Protection Office (UODO) ul. Moniuszki 1A 00-014 Warsaw Poland

The Controller implements appropriate technical and organisational measures designed to protect personal data against loss, destruction, unauthorised access, disclosure or alteration, taking into account the nature of the data and the risks associated with its processing.

The website uses an encrypted HTTPS connection.

Personal data submitted through the website is not used for automated decision-making that produces legal effects concerning users or similarly significantly affects them.

The Controller does not conduct user profiling for advertising or analytics purposes.

The Controller may periodically update this Privacy Policy, in particular in the event of changes to the website's functionality, the way personal data is processed, the technology service providers used, or applicable laws and regulations.

The current version of the Privacy Policy is available on: enconglobal.com