Skip to content

Privacy policy

This Privacy Policy sets out the rules for protecting the personal data of Users of the website www.cameleo.pl

The Administrator declares that it processes Users’ personal data in accordance with the GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Not accepting this Privacy Policy still allows you to use the Website, but prevents you from submitting your personal data and from receiving our services. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

Who controls your data?

The Controller of Users’ personal data is CAMELEO DECO COATINGS, hereinafter referred to as the Administrator.

What data are we talking about?

The personal data we collect and process:
First and last name, e-mail address, phone number, company registration details.

Newsletter data
Subscribing to the newsletter requires entering your first name and e-mail address in the form. These fields are mandatory. The data obtained in this way is added to our mailing list.

Why do we process your data?

Users’ personal data is processed for the purpose of:

  1. Concluding and performing an agreement for the provision of services by electronic means – where the User uses such services.
  2. Responding to messages sent via the form on the Website.
  3. Sending information and marketing offers, surveys and invitations, and conducting correspondence by e-mail, SMS, RCS messages, WEBPUSH notifications, phone calls or traditional mail.
  4. Profiling, which helps tailor messages and offers to the User’s interests.

Providing personal data is voluntary,  but it is a condition for concluding an agreement for the provision of services by electronic means. A User who does not provide personal data will not be able to use the Administrator’s services.

Based on separate consent, we may also use personal data for other purposes. In such cases, these purposes are always specified in the content of the consent.

The User decides voluntarily whether to receive marketing content. Not providing personal data for marketing purposes means that such content will not be received.

What is the legal basis for processing your data?

The legal basis for processing Users’ personal data is:

  1. The necessity of processing data in order to conclude and perform an agreement for the provision of services by electronic means.
  2. The Administrator’s legitimate interest in handling correspondence and responding to messages received.
  3. Where the User wishes to receive marketing content concerning the Administrator – the necessity of processing data for the purposes of the legitimate interests pursued by the Administrator, i.e. carrying out marketing activities concerning the Administrator.
  4. The Administrator does not intend to transfer personal data to a third country.

How long do we store your data?

  1. We store personal data for as long as the User uses our services. After the User stops using the services, their personal data in the scope of first name, last name, e-mail address and phone number will be kept for a further 2 years for the purpose of handling complaints and claims related to the use of those services.
  2. Personal data processed in order to respond to messages sent via the contact form will be stored for 2 years from receipt of each message.

Your rights as a User

The User has full right to decide to what extent their personal data will be used. The User has the right to:

  • request access to their personal data,
  • have it rectified,
  • have it erased or its processing restricted,
  • data portability,
  • object at any time to the processing of their personal data, including profiling and direct marketing,
  • withdraw consent to the processing of personal data at any time, where processing is based on such consent; withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal,
  • lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (UODO) in Poland.

The User may withdraw consent to receiving marketing content at any time. Simply use the mechanisms provided with the marketing content, e.g. by clicking the unsubscribe link, or contact the Administrator.

Who do we share your personal data with?

When collecting personal data, the Administrator grants direct access only to authorised Employees, Subcontractors and Entities providing services to the Administrator (i.e. accounting, legal, audit, IT and technical support services), and only to the extent necessary to perform the services commissioned by the Administrator.

Users’ personal data may be disclosed to entities authorised to receive it under applicable law, in particular to competent judicial or law enforcement authorities.

As a rule, your personal data is not transferred outside the EEA (European Economic Area). However, your personal data may be transferred outside the EEA where this is necessary to provide your service, including where the service requires the involvement of Subcontractors based outside the EEA.

Security

Personal data is stored in a database protected by technical and organisational measures that ensure a level of protection appropriate to the importance of the stored personal data, in line with industry standards and the guidelines of the relevant authorities, and in particular with the GDPR.

Cookies

The Website uses cookies, i.e. small text files stored on your computer, tablet or smartphone.  They are saved by the server on the device of the person visiting the Website. The Administrator accesses the information they contain for statistical purposes and to ensure the Website works properly.

The Administrator processes cookies for the purpose of:

  • identifying the User and logging in
  • adapting the Website’s content and appearance to individual preferences
  • keeping anonymous statistics.

Web browsers store cookies on the User’s device by default. You can restrict or disable cookies in your browser settings. If you do so, some features may be limited or unavailable.

The Administrator collects the IP addresses of Website visitors, which are useful for diagnosing technical problems with the server, preparing statistical analyses and verifying the location of both real users and internet bots.

Third-party cookies

The Administrator uses third-party services for statistics, improvement and analysis of the Website. These third parties use cookies and include Google, Facebook, Hotjar, YouTube, Twitter, Instagram, Vimeo and GetResponse. Our Privacy Policy does not govern the use of cookies by third parties.

Contact regarding personal data protection

Please direct any questions regarding this Privacy Policy and the protection of personal data to the Administrator:

Changes and updates to our Privacy Policy

The Administrator reserves the right to amend this Privacy Policy and will inform Users in advance. Changes will be published on this page.

The latest and current version of this Privacy Policy is effective from: 25.09.2026