1. Home   /  
  2. Privacy policy

Privacy policy and use of cookies on webellian.com website

1 DEFINITIONS

Whenever the terms listed below are used in this Privacy Policy, they should be understood in accordance with the definitions indicated below.

1.1 Controller or Webellian – Webellian Sp. z o.o. with its registered office in Warsaw, at ul. Domaniewska 45 (02-672).

1.2 Personal Data or Data – any information about a natural person identified or identifiable by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity, including the IP of the device, location data, online identifier, information collected through cookies and other similar technology.

1.3 Policy – this Privacy Policy, located at: https://webellian.com/privacy/

1.4 GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

1.5 Website – a website with a collection of all data, information, content and functionalities available through it, located at: www.webellian.com.  

1.6 User – any natural person visiting the Website or using one or more of the functionalities described in the Policy.

1.7 Social Media – the Controller’s profiles in social media (e.g. Facebook, Instagram).

2 DATA PROCESSING IN CONNECTION WITH THE USE OF THE WEBSITE

2.1 In connection with the User’s use of the Website, the Controller collects personal data to the extent necessary to provide the services offered, as well as information about the User’s activity on the Website. Detailed rules and purposes of the processing of personal data collected when using the Website by the User are described below.

2.2 Contact with the Controller is possible through:

  • 2.2.1 E-mail address: hello@webellian.com
  • 2.2.2 Correspondence address: 45 Domaniewska Street (02-672).

3 PURPOSES AND LEGAL BASES OF DATA PROCESSING

OPERATING THE WEBSITE 

3.1 Personal data of all persons using the Website are processed by the Controller in order to provide services by electronic means in the scope of making available to Users the content collected on the Website – the legal basis for the processing is the necessity of processing for the performance of a contract to which the data subject is a party (legal basis for processing: Article 6(1)(b) of the GDPR).

3.2 As part of the above purpose, the IP address or other online identifiers and information collected through cookies or other similar technologies may be processed – more information in the section COOKIES). 

3.3 The data will be processed for the duration of providing the service, and after that time for the period necessary to establish, pursue or defend against any claims.

3.4 To the extent that the processing of data is necessary to ensure the possibility of using the Website, providing data is voluntary, but necessary to use the Website, and in the remaining scope it is voluntary. You can withdraw your consent at any time through the consent management platform available on the Website. However, the withdrawal of consent does not affect the lawfulness of the previous processing.

DIRECT MARKETING, OFFERS

3.5 The Controller processes personal data for the purpose of conducting direct marketing activities, i.e.:

  • 3.5.1 Conducting direct marketing of the Controller’s products or services through the communication channels indicated in the consent (e-mail, phone, SMS) (legal basis: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Controller consisting in conducting direct marketing of own products or services).
  • 3.5.2 Conducting direct marketing of the Controller’s products or services addressed to business partners through the communication channels indicated in the content of the consent (legal basis: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Controller consisting in conducting direct marketing of own products or services).
  • 3.5.3 Consideration of complaints (legal basis: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the controller consisting in the possibility of defending and responding to the submitted claims).

3.6 The Controller may make personal data available to external entities providing services in the field of postal or courier activities and banks.

3.7 The Controller may entrust the processing of personal data in connection with the implementation of the marketing processes to other entities, in particular an external marketing agency and other entities providing technical support for the process.

RECRUITMENT

3.8 The Controller processes personal data for the purpose of: 

  • 3.8.1 conducting recruitment proceedings aimed at concluding an agreement with a person whose qualifications and skills best meet the needs of the Controller (legal basis – activities aimed at concluding a contract – Article 6(1)(b) of the GDPR). 
  • 3.8.2 selection of candidates for a specific position (legal basis – Article 6(1)(f) of the GDPR – legitimate interest of the controller consisting in selecting candidates with the required competences).
  • 3.8.3 In the event of additional consent, the data will also be processed for the purposes of future recruitment conducted by the Controller (legal basis – consent of the data subject – Article 6(1)(a) of the GDPR).

3.9 You can withdraw your consent at any time. Its withdrawal does not affect the lawfulness of the data processing conducted before its withdrawal.

3.10 Personal data will be processed until the end of the recruitment process, and in the case of a separate consent to the processing of data for the purposes of future recruitment – no longer than 2 years from the date of consent or until its withdrawal.

3.11 The recipients of personal data may be: entities that are providers of ICT solutions, couriers and post offices.

3.12 Providing data is a condition for taking part in the recruitment process, and failure to provide them will prevent the application for the indicated position.

SOCIAL MEDIA

3.13 The Controller processes the personal data of Users who follow Webellian’s profiles on social networks such as Facebook, Linkedin, Instagram, TikTok, and Youtube and interact with them in order to: 

  • 3.13.1 informing about our activities, products or services and building a positive image of Webellian, including through dedicated groups addressed to the users of the portal (legal basis: Article 6(1)(f) of the GDPR), which is the legitimate interest of the Controller consisting in undertaking activities in the field of marketing and building the recognition of Webellian; 
  • 3.13.2 responding to inquiries and comments received via social media (legal basis: Article 6(1)(f) of the GDPR), which is the legitimate interest of the Controller consisting in responding to inquiries and comments of followers.

3.14 The following data may be processed: name and surname or nickname, other information that is publicly available on the Social Media profile or that is voluntarily provided to Webellian.

3.15 The provision of personal data is necessary to participate in Webellian groups, to follow Webellian’s social media profiles and to respond to queries and comments via these media.

3.16 Detailed information on data processing by the portals can be found at the following link: 

ENQUIRIES AND COMMUNICATION

3.21 The Controller processes personal data in order to identify the sender and to handle the inquiry, request or notification sent via the contact form available on the Website or sent by e-mail by the User to the following address: hello@webellian.com, which constitutes the legitimate interest of the Controller (legal basis: Article 6(1)(f) of the GDPR) consisting in responding to the submitted inquiry.

3.22 The following data may be processed: name and surname, e-mail address or other information that will be provided to us as part of the contact.

3.23 The Controller processes the Users’ personal data in order to possibly establish and pursue claims or defend against claims (legal basis: Article 6(1)(f) of the GDPR), which is the legitimate interest of the Controller.

3.24 Depending on the basis of a possible claim, data related to a specific claim may be processed, in particular correspondence and possible orders.

COOKIES

3.25 On the Website, the Controller and trusted partners use the technology of cookies and other similar technologies. Cookies are small text files installed on the device of the User browsing our Website. Cookies collect information that facilitates the use of the Website – e.g. by remembering the User’s visits to the Website and the activities performed by the User. The use of the Website by the User is associated with sending queries to our server. This includes, among others, IP address, as well as information about your web browser and operating system. This data is not associated with specific people using the Website. They only serve to administer the website more efficiently. We analyse these log file data records in order to optimise the Webellian offering, as well as to detect and rectify errors faster and to manage server performance. The above technologies will be collectively treated as cookies under the Privacy Policy.

3.26 The Controller processes Users’ personal data in order to: 

  • 3.26.1 To provide services – in order to provide Users with the services and functionalities of the Website that the User wants to use. Necessary cookies may be installed only by the Controllers via the Website (legal basis: Article 6(1)(b) of the GDPR); 
  • 3.26.2 For analytical purposes – for the purpose of conducting analytics and achieving statistical purposes – the legal basis for the processing consisting in the analysis of the Users’ activity in order to improve the functionality and services provided is the legitimate interest of the administrator consisting in keeping statistics on the use of the Website in connection with the consent expressed by the User via the cookie banner (legal basis: Article 6(1)(f) of the GDPR); 
  • 3.26.3 For marketing purposes – in order to provide advertisements and assess their functioning on the Website – the legal basis for the processing consisting in the analysis of the Users’ activity in order to improve the functionality and services provided is the legitimate interest of the administrator consisting in conducting advertising activities based on the consent expressed by the User via the cookie banner (legal basis: Article 6(1)(a) of the GDPR).

3.27 The following User data may be processed: IP address, other identifiers and data saved in cookies or other similar technologies.

3.28 The use of cookies for the purpose of providing services is necessary to use the Website. The use of cookies for analytical and marketing purposes is voluntary and takes place in accordance with the consent expressed by the User. The consent may be withdrawn at any time using the functionalities of the Website.

3.29 If consent is given, it is voluntary and can be withdrawn at any time via the consent management platform. Cookies can be managed through the consent management platform available on the Website, which allows the cookies used to be adapted to the User’s preferences.

3.30 You can change your browser settings accordingly to prevent cookies. Changing your browser settings may restrict the use of both service and analytical and marketing cookies. However, please be advised that this may significantly hinder or prevent the use of the Website.

3.31 To do this, use the option of the web browser used to connect to the Website and select the option of automatic rejection of cookies. These settings usually also allow you to manage cookies.

3.32 Below you will find links to examples of official websites of the manufacturers of the most commonly used web browsers, where you can find information about the steps needed to change the settings of a given browser in the above-described scope: 

4 DATA RETENTION

4.1 As a rule, the data is processed for the duration of the service, until the consent is withdrawn or an effective objection to the processing of data is made in cases where the legal basis for data processing is the legitimate interest of the Controller.

4.2 The period of data processing may be extended if the processing is necessary to establish and pursue possible claims or defend against claims, and after this time only in the case and to the extent required by law. After the expiry of the processing period, the data is irreversibly deleted or anonymized.

5 DATA RECIPIENTS

5.1 In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as courier companies, efficient return and complaint handling system, hosting, customer communication system, payment systems and banks, accounting, legal, auditing, consulting services,

5.2 Personal data may be transferred outside the European Economic Area (“EEA”) to third countries that do not guarantee the same level of protection as is required in the EU. In order to protect your personal data, Webellian will only transfer data (i) on the basis of a decision of the European Commission that allows it, or (ii) on the basis of EU-approved standard contractual clauses. We inform you that Webellian, on the basis of the EU Standard Contractual Clauses, has concluded agreements for the transfer of personal data from the EEA to third countries, including the USA. To access the documents that Webellian uses to transfer your personal data from the EEA, please contact the Controller.

6 RIGHTS OF DATA SUBJECTS

6.1 Each person has the right to request access to their data, rectification, deletion, transfer, restriction of processing, to lodge a complaint with the President of the Office for Personal Data Protection, as well as to withdraw consent at any time without affecting the lawfulness of the processing that was made on the basis of consent before its withdrawal.

6.2 The right to object to data processing is granted in the case of data processing on the basis of the legitimate interest of the data administrator.

7 CHANGES TO THE PRIVACY POLICY

7.1 The provisions of the Privacy Policy may be improved or amended, and the latest versions will be published on the Webellian Website from time to time and will be marked with the date of the last update.

7.2 In matters not covered by the Privacy Policy, the provisions of the Civil Code and relevant acts of Polish law, as well as European Union law, in particular the GDPR, shall apply.

7.3 The policy has been in force since 21.08.2025