1. DEFINITIONS 1.1. Administrator- ESCO SC ul. Wilanowska 2, 05-509 Józefosław NIP 1231494511 REGON 388960995

1.2. Personal data- information about a natural person identified or identifiable by one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, internet identifier and information collected via cookies and other similar technology.

1.3. Policy- this Privacy Policy.

1.4. GDPR- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC.

1.5. Website- a website run by the Administrator at esco.eu.com

1.6. User- any natural person visiting the Website or using one or more services or functionalities described in the Policy.

2. DATA PROCESSING IN CONNECTION WITH THE USE OF THE WEBSITE

2.1.In connection with the User's use of the Website, the Administrator collects data to the extent necessary to provide individual services offered, as well as information about the User's activity on the Website. The detailed rules and purposes of processing Personal Data collected during the use of the Website by the User are described below.

3. OBJECTIVES AND LEGAL BASIS FOR PROCESSING DATA ON THE WEBSITE USING THE WEBSITE

3.1.Personal data of all persons using the Website (including IP address or other identifiers and information collected via cookies or other similar technologies), and who are not registered Users (i.e. persons who do not have a profile on the Website), are processed by the Administrator:

3.1.1.in order to provide electronic services in the scope of making the content collected on the Website available to Users - then the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);

3.1.2.for analytical and statistical purposes - then the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in conducting analyzes of Users' activity, as well as their preferences in order to improve the functionalities used and the services provided;

3.1.3.in order to possibly establish and pursue claims or defend against claims - the legal basis for processing is the Controller's legitimate interest (Article 6 (1) (f) of the GDPR), consisting in the protection of its rights;

3.1.4.for the marketing purposes of the Administrator and other entities, in particular related to the presentation of behavioral advertising - the rules for the processing of Personal Data for marketing purposes are described in the MARKETING section.

3.2.The User's activity on the Website, including his Personal Data, is recorded in system logs (a special computer program used to store a chronological record containing information about events and activities related to the IT system used to provide services by the Administrator). The information collected in the logs is processed primarily for purposes related to the provision of services. The administrator also processes them for technical and administrative purposes, for the purposes of ensuring the security of the IT system and managing this system, as well as for analytical and statistical purposes - in this respect, the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) GDPR). REGISTRATION ON THE WEBSITE

3.3.Persons who register on the Website are asked to provide the data necessary to create and operate the account. In order to facilitate service, the User may provide additional data, thereby consenting to their processing. Such data can be deleted at any time. Providing data marked as mandatory is required to set up and operate an account, and failure to do so results in the inability to create an account. Providing other data is voluntary.

3.4.Personal data is processed:

3.4.1.in order to provide services related to the operation and maintenance of an account on the Website - the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);

3.4.2.for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in conducting analyzes of Users 'activity on the Website and how to use the account, as well as Users' preferences in order to improve the functionalities used ;

3.4.3.in order to possibly establish and pursue claims or defend against claims - the legal basis for processing is the Controller's legitimate interest (Article 6 (1) (f) of the GDPR), consisting in the protection of its rights;

3.4.4.for marketing purposes of the Administrator and other entities - the rules for the processing of Personal Data for marketing purposes are described in the MARKETING section.

3.5.If the User publishes any Personal Data of other people on the Website (including their name, address, telephone number or e-mail address), they may do so only if they do not violate the law and personal rights of these people. PLACING ORDERS

3.6.Placing an order (purchase of goods) by the Website User involves the processing of his Personal Data. Providing data marked as mandatory is required in order to accept and service the order, and failure to do so results in the failure to process the order. Providing other data is optional.

3.7. Personal data is processed:

3.7.1.in order to fulfill the order placed - the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);

3.7.2.in order to fulfill the statutory obligations incumbent on the Administrator, resulting in particular from tax and accounting regulations - the legal basis for processing is the legal obligation (Article 6 (1) (c) of the GDPR);

3.7.3.for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in conducting analyzes of Users 'activity on the Website, as well as Users' shopping preferences in order to improve the functionalities used;

3.7.4.in order to possibly establish and pursue claims or defend against claims - the legal basis for processing is the Controller's legitimate interest (Article 6 (1) (f) of the GDPR), consisting in the protection of its rights.

CONTACT FORMS

1. The administrator provides the possibility of contacting him using electronic contact forms. Using the form requires providing Personal Data necessary to contact the User and answer the inquiry. The User may also provide other data to facilitate contact or service the inquiry. Providing data marked as mandatory is required in order to accept and handle the inquiry, and failure to do so results in the inability to service. Providing other data is voluntary.

2. Personal data is processed: 3.9.1.in order to identify the sender and handle his inquiry sent via the provided form - the legal basis for processing is the necessity of processing to perform the contract for the provision of the service (Article 6 (1) (b) of the GDPR); in the scope of optional data, the legal basis for processing is consent (Article 6 (1) (a) of the GDPR).

4. MARKETING

4.1.The Administrator processes Users' Personal Data in order to carry out marketing activities, which may include: 4.1.1.displaying to the User marketing content that is not tailored to his preferences (contextual advertising);

4.1.2.displaying to the User marketing content corresponding to his interests (behavioral advertising);

4.1.3.sending e-mail notifications about interesting offers or content, which in some cases contain commercial information (newsletter service);

4.1.4.conducting other types of activities related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).

4.2.In order to carry out marketing activities, the Administrator uses profiling in some cases. This means that thanks to automatic data processing, the Administrator evaluates selected factors relating to Users in order to analyze their behavior or create a forecast for the future. This allows for a better adjustment of the displayed content to the individual preferences and interests of the User. CONTEXTUAL ADVERTISING

4.3.The Administrator processes Users' Personal Data for marketing purposes in connection with directing contextual advertising to Users (i.e. advertising that does not match the User's preferences). The processing of Personal Data takes place then in connection with the implementation of the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR). BEHAVIORAL ADVERTISING

4.4.The Administrator and his trusted partners process Users' Personal Data, including Personal Data collected via cookies and other similar technologies, for marketing purposes in connection with targeting behavioral advertising to Users (i.e. advertising that is tailored to the User's preferences).

4.5.The processing of Personal Data also includes profiling of Users. NEWSLETTER4.6.The administrator provides the newsletter service on the terms set out in the regulations to persons who have provided their e-mail address for this purpose. Providing data is required to provide the newsletter service, and failure to do so results in the inability to send it. This form of communication with the User may include profiling.

4.7. Personal data is processed:

4.7.1.in order to provide the newsletter sending service - the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);

4.7.2.in the case of sending marketing content to the User as part of the newsletter - the legal basis for processing, including the use of profiling, is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) in connection with the consent expressed to receive the newsletter;

4.7.3.for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in conducting analyzes of Users' activity on the Website in order to improve the functionalities used;

4.7.4.in order to possibly establish and pursue claims or defend against claims - the legal basis for processing is the Controller's legitimate interest (Article 6 (1) (f) of the GDPR), consisting in the protection of its rights.

SOCIAL PORTALS

5.1.The Administrator processes the Personal Data of Users visiting the Administrator's profiles in social media (Facebook, YouTube, Twitter, Google+). These data are processed in connection with keeping the profile, including to inform Users about the Administrator's activity and to promote various types of events, services and products. The legal basis for the processing of Personal Data by the Administrator for this purpose is its legitimate interest (Article 6 (1) (f) of the GDPR), consisting in promoting its own brand. More information on our profiles on social media.

6. POSTING OF COMMENTS
6.1.The administrator provides the option of posting comments on the Website. Providing data in the fields marked as "required field" is voluntary, but failure to do so results in the inability to post a comment. The User may independently decide on the scope of Data that is publicly visible to all Users.

6.2.Personal data is processed:
6.2.1.in order to publish a comment as part of the functionalities provided by the Administrator - the legal basis for processing is the necessity of processing to provide the service (Article 6 (1) (b) of the GDPR);
6.2.2.in order to moderate a comment (including elimination of spam) - then the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in approving comments added by Users and making them public.

7. COOKIES AND SIMILAR TECHNOLOGY
7.1.Cookies are small text files installed on the device of the User browsing the Website. Cookies collect information that facilitates the use of the website - e.g. by remembering the User's visits to the Website and the activities performed by the User.

"SERVICE" COOKIES
7.2.The administrator uses the so-called service cookies primarily to provide the User with services provided electronically and to improve the quality of these services. Therefore, the Administrator and other entities providing analytical and statistical services to him use cookies by storing information or accessing information already stored in the User's telecommunications end device (computer, telephone, tablet, etc.). Cookies used for this purpose include:

7.2.1.cookies with data entered by the User (session ID) for the duration of the session ( user input cookies);

7.2.2.multimedia player session cookies (e.g. flash player cookies), for the duration of the session ( multimedia player session cookies);

7.2.3.persistent cookies used to personalize the User's interface for the duration of the session or a little longer ( user interface customization cookies).

"MARKETING" COOKIES
7.3.The administrator and his trusted partners also use cookies for marketing purposes, including in connection with targeting Users with behavioral advertising. For this purpose, the Administrator and trusted partners store information or gain access to information already stored in the User's telecommunications end device (computer, telephone, tablet, etc.).

8. ANALYTICAL AND MARKETING TOOLS USED BY THE ADMINISTRATOR'S PARTNERS
8.1.The Administrator and its Partners use various solutions and tools used for analytical and marketing purposes. Below is some basic information about these tools. Detailed information in this regard can be found in the privacy policy of a given partner.

GOOGLE ANALYTICS
8.2.Google Analytics cookies are files used by the Google company to analyze how the User uses the Website, to create statistics and reports on the functioning of the Website. Google does not use the collected data to identify the User and does not combine this information to enable identification. Detailed information on the scope and principles of data collection in connection with this service can be found at: www.google.com/intl/pl/policies/privacy/partners.

GOOGLE ADWORDS
8.3.Google AdWords is a tool that allows you to measure the effectiveness of advertising campaigns carried out by the Administrator, allowing for the analysis of such data as, for example, keywords or the number of unique users. The Google Adwords platform also allows us to display our ads to people who have visited the Website in the past. Information on data processing by Google in the scope of the above service is available at: policies.google.com/technologies/ads.

FACEBOOK PIXELS
8.4.Facebook pixels is a tool that allows you to measure the effectiveness of advertising campaigns carried out by the Administrator on Facebook. The tool allows for advanced data analytics in order to optimize the Administrator's activities also with the use of other tools offered by Facebook. Detailed information on data processing by Facebook can be found at this link: pl-pl.facebook.com/help/443357099140264.

9. MANAGING COOKIES SETTINGS
9.1.The use of cookies to collect data through them, including access to data stored on the User's device, requires the User's consent. This consent may be withdrawn at any time.
9.2.Permission is not required only for cookies, the use of which is necessary to provide a telecommunications service (data transmission to display content).

9.3.Withdrawal of consent to the use of cookies is possible through the browser settings. Detailed information on this can be found at the following links:

9.3.1.Internet Explorer: support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-cookies
9.3.2.Mozilla Firefox: support.mozilla.org/pl/kb/ciasteczka
9.3.3.Google Chrome: support.google.com/chrome/bin/answer.py
9.3.4.Opera: help.opera.com/Windows/12.10/pl/cookies.html
9.3.5.Safari: support.apple.com/kb/PH5042
9.4.The user may at any time verify the status of his current privacy settings for the browser used using the tools available at the following links:
9.4.1.www.youronlinechoices.com/pl/twojewybory
9.4.2.optout.aboutads.info

10. PERIOD OF PROCESSING OF PERSONAL DATA
10.1.The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, the data is processed for the duration of the service or the performance of the order, until the consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the legitimate interest of the Administrator.

10.2.The data processing period may be extended if the processing is necessary to establish and pursue any claims or defend against claims, and after that time only if and to the extent that it will be required by law. After the expiry of the processing period, the data is irreversibly deleted or anonymized.

11. USER RIGHTS
11.1.The User has the right to access the data and request rectification, deletion, processing restrictions, the right to transfer data and the right to object to data processing, as well as the right to lodge a complaint with the supervisory body dealing with the protection of personal data.
11.2.To the extent that the User's data is processed on the basis of consent, this consent may be withdrawn at any time by contacting the Administrator.
11.3.The User has the right to object to the processing of data for marketing purposes, if the processing takes place in connection with the legitimate interest of the Administrator, and - for reasons related to the specific situation of the User - in other cases where the legal basis for data processing is the legitimate interest of the Administrator ( e.g. in connection with the implementation of analytical and statistical purposes).

12. DATA RECIPIENTS
12.1.In connection with the provision of services, Personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as banks and payment operators, entities providing accounting services, couriers (in connection with the implementation of the order), marketing agencies (in the scope of marketing services) and entities related to the Administrator, including companies from its capital group.

12.2.The Administrator reserves the right to disclose selected information about the User to the competent authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with the provisions of applicable law.

13. TRANSFER OF DATA OUTSIDE EEA
13.1.The level of protection of Personal Data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers Personal Data outside the EEA only when it is necessary and with an adequate level of protection, in particular through:
13.1.1.cooperation with entities processing Personal Data in countries for which an appropriate decision of the European Commission has been issued regarding the assurance of an adequate level of protection of Personal Data;
13.1.2.use of standard contractual clauses issued by the European Commission;
13.1.3.application of binding corporate rules approved by the competent supervisory authority;
13.1.4.in the case of data transfer to the USA - cooperation with entities participating in the Privacy Shieldprogram, approved by a decision of the European Commission.
13.2.The Administrator always informs about the intention to transfer Personal Data outside the EEA at the stage of collecting them.

14. SECURITY OF PERSONAL DATA
14.1.The administrator conducts a risk analysis on an ongoing basis to ensure that personal data is processed by him in a safe manner - ensuring, above all, that only authorized persons have access to the data and only to the extent that it is necessary due to the tasks they perform. . The Administrator makes sure that all operations on Personal Data are recorded and performed only by authorized employees and associates.
14.2.The Administrator takes all necessary steps to ensure that its subcontractors and other cooperating entities guarantee the application of appropriate security measures in each case when they process Personal Data on behalf of the Administrator.

15. CONTACT DETAILS
15.1.Contact with the Administrator is possible via the correspondence address of ESCO SC ul. Wilanowska 2, 05-509 Józefosław

16. CHANGES TO THE PRIVACY POLICY
16.1. The policy is verified on an ongoing basis and updated if necessary