Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored and protected in connection with the website https://defsensor.com/ (the “Website”), including when you browse the Website, contact us, create an account or place an order.

1. Data controller

The controller of your personal data is:

ENEGO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄul. Joachima Lelewela 2341-219 Sosnowiec, PolandTax Identification Number (NIP): 6312627114Email: info@defsensor.com

You may contact us at the above email address regarding any matter related to your personal data or this Privacy Policy.

2. Personal data we collect

Depending on how you use the Website, we may process the following categories of personal data:

identification details, such as your first and last name and company name;

contact details, such as your email address, telephone number, billing address and delivery address;

order and transaction information, such as products ordered, order value, payment status, delivery method, invoices, returns and complaints;

account information, such as your login details and order history;

correspondence, including information provided through the contact form, by email or by telephone;

technical and usage data, such as your IP address, device and browser information, operating system, timestamps, referring pages, pages visited and cookie identifiers;

marketing preferences and records of any consent you provide;

any other information you voluntarily provide to us.

Please do not send us special-category personal data, such as health, biometric, religious or political information, unless it is strictly necessary and we have expressly requested it.

3. Purposes and legal bases for processing

We process personal data for the following purposes:

a. Processing orders and providing services

We process your data to accept and fulfil orders, take payment, arrange delivery, manage returns and complaints, provide customer support and communicate with you about your purchase. The legal basis is the performance of a contract or taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).

b. Customer accounts

If you create an account, we process your data to create and maintain it, provide access to order history and facilitate future purchases. The legal basis is the performance of the account service agreement (Article 6(1)(b) GDPR).

c. Contact and enquiries

When you contact us, we process the information you provide in order to answer your enquiry and manage our correspondence. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in communicating with Website users and customers (Article 6(1)(f) GDPR).

d. Accounting, tax and legal obligations

We process transaction and invoice data to comply with accounting, tax, consumer-protection and other legal obligations. The legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).

e. Establishing, exercising or defending legal claims

We may retain and use relevant information to prevent fraud, resolve disputes and establish, exercise or defend legal claims. The legal basis is our legitimate interest in protecting our rights and business (Article 6(1)(f) GDPR).

f. Website security and administration

We process technical data and server logs to keep the Website secure and operational, diagnose errors, prevent misuse and protect users and our systems. The legal basis is our legitimate interest in maintaining the security and proper operation of the Website (Article 6(1)(f) GDPR).

g. Analytics, advertising and non-essential cookies

Where the Website uses optional analytics, advertising or similar technologies, we process data collected through them only on the basis of your consent (Article 6(1)(a) GDPR and applicable electronic communications law). You may refuse or withdraw consent at any time through the Website’s cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

h. Direct marketing

If you separately subscribe to marketing communications, we may use your contact details to send them on the basis of your consent (Article 6(1)(a) GDPR). Where permitted by law, we may also rely on our legitimate interest in promoting our own products or services to existing customers (Article 6(1)(f) GDPR), subject to applicable electronic communications rules. You may opt out at any time by using the unsubscribe method provided in the message or by contacting us.

4. Is providing personal data mandatory?

Providing personal data is voluntary. However, certain information is necessary to enter into and perform a contract, process an order, issue required accounting documents, deliver products or answer your enquiry. If you do not provide the required information, we may be unable to complete these activities. Information marked as optional is not required.

5. Recipients of personal data

We may disclose personal data, only where necessary, to trusted service providers and other recipients, including:

hosting, website maintenance, IT and cybersecurity providers;

e-commerce platform and online store support providers;

payment service providers and financial institutions;

couriers, postal operators, freight and fulfilment providers;

accounting, tax, legal and professional advisers;

email, customer-service and communication providers;

analytics, advertising or consent-management providers, where you have consented to their technologies;

public authorities, courts or law-enforcement bodies where disclosure is required by law.

Service providers that process personal data on our behalf are required to protect it and may use it only in accordance with our instructions and applicable law. Some recipients, such as payment providers, banks, couriers or public authorities, may act as independent controllers under their own privacy notices.

6. International data transfers

We aim to use providers that process data within the European Economic Area (“EEA”). However, some providers may process personal data outside the EEA. Where this occurs, we use a lawful transfer mechanism required by the GDPR, such as an adequacy decision adopted by the European Commission or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where necessary.

You may contact us for more information about the safeguards applicable to a particular transfer and how to obtain a copy of them.

7. Retention periods

We retain personal data only for as long as necessary for the purpose for which it was collected and as required by law. In particular:

order, contract, payment and complaint data is retained for the duration of the contract and afterwards for the period required by tax, accounting and consumer-protection law and until relevant claims become time-barred;

accounting and tax documents are retained for the period required by applicable law;

account data is retained until the account is deleted or the account service ends, and afterwards where necessary to comply with legal obligations or handle claims;

enquiry and correspondence data is retained until the matter is resolved and afterwards for the period necessary to document the communication and handle possible claims;

security logs are retained for a limited period appropriate for security, diagnostics and fraud prevention, unless a longer period is necessary to investigate an incident or comply with law;

data processed on the basis of consent is retained until consent is withdrawn or the relevant purpose ends, subject to any data needed to demonstrate that valid consent was obtained;

data processed for direct marketing is retained until you object, withdraw consent or we determine that it is no longer useful for that purpose.

When the applicable retention period expires, personal data is deleted or anonymised unless further retention is required by law.

8. Cookies and similar technologies

The Website may use cookies and similar technologies. Cookies are small files stored on your device or information accessed from it.

We may use:

strictly necessary cookies, required for functions such as the shopping cart, checkout, security, session management and saving your privacy choices;

preference cookies, which remember selected settings;

analytics cookies, which help us understand how visitors use the Website;

advertising cookies, which may be used to measure campaigns or personalise advertising.

Strictly necessary cookies may be used without consent where permitted by law. Optional cookies and similar technologies are used only after you provide consent through the cookie banner or settings panel. You can change or withdraw your choices at any time using the Website’s cookie settings. You can also control cookies through your browser, but blocking necessary cookies may prevent parts of the Website, including the shopping cart or checkout, from working correctly.

Detailed and current information about particular cookies, their providers, purposes and lifetimes should be available in the Website’s cookie settings panel.

9. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

obtain information about the processing of your personal data and request access to it;

request correction of inaccurate data and completion of incomplete data;

request deletion of your personal data;

request restriction of processing;

object, on grounds relating to your particular situation, to processing based on legitimate interests;

object at any time to the processing of your personal data for direct marketing;

receive personal data you provided to us in a structured, commonly used and machine-readable format and request its transmission to another controller where the right to data portability applies;

withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;

lodge a complaint with a competent data protection authority.

In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). Further information is available at https://uodo.gov.pl/.

To exercise your rights, contact us at info@defsensor.com. We may need to verify your identity before completing your request.

10. Automated decision-making

We do not use personal data to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, unless we inform you separately where such processing is introduced or required for a particular service.

11. Data security

We apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures are reviewed and adjusted according to the nature of the data, the processing and the risks involved. No internet transmission or storage method can, however, be guaranteed to be completely secure.

12. Third-party websites

The Website may contain links to websites or services operated by third parties. We do not control their processing of personal data. Before providing data to a third party, please review its privacy notice.

13. Children’s privacy

The Website and our products are not directed to children. We do not knowingly collect personal data from children through the Website. If you believe that a child has provided us with personal data without an appropriate legal basis or required parental authorisation, please contact us.

14. Changes to this Privacy Policy

We may update this Privacy Policy when our processing activities, Website functions or legal requirements change. The current version will be published on the Website with its effective date. Where appropriate, we will provide additional notice of material changes.

15. Contact

For questions about this Privacy Policy or the processing of your personal data, contact:

ENEGO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄul. Joachima Lelewela 2341-219 Sosnowiec, PolandEmail: info@defsensor.com