Privacy policy

Exalo website's policy on privacy and the use of cookies

In order to comply with current data protection regulations, in particular the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: GDPR), also with the Act of 10 May 2018. on the protection of personal data, we ask you to read the ‘Privacy Policy’, which describes the method of collection, use and sharing of personal data of newsletter subscribers and people who contact the Company via the electronic contact form and the use of ‘cookies’.

The Controller and owner of the website www.exalo.pl is Exalo Drilling S.A. with its registered office in Piła, pl. Staszica 9, 64-920 Piła. On the Website, you may find information on current events and projects carried out by Exalo Drilling S.A., read announcements, watch photos and videos, read descriptions of services and products, learn about employment opportunities and receive the latest information and offers.

I. Personal data protection

Your data shall be processed for the purpose of performance of the Services of Exalo Drilling S.A.. Your data shall also be processed for the purpose of adapting the Website to your usage patterns, statistical measurements, and for the purpose of responding to your queries. In addition, your data shall be processed with your consent for the purpose of sending information requested from the Website.

1. The Controller of the personal data is Exalo Drilling S.A. with its registered office in Piła, pl. Staszica 9, 64-920 Piła, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań, 9th Economic Division of the National Court Register (KRS) under the KRS number 0000428139.
2. In all matters concerning personal data protection, you can contact the Controller at the above address, marked ‘Personal data’, or the Controller's appointed Data Protection Officer, at the email address: iod@exalo.pl
3. Only persons authorised by the Controller have access to the personal data, newsletter subscribers and persons contacting via the electronic contact form, and only to the extent necessary for efficient and satisfactory service to people.
4. The Controller of the personal data shall be processed only to the extent that they are provided in the forms (‘Contact Form’, ‘Newsletter’). The provision of personal data in the ‘Contact Form’ marked with an asterisk as mandatory is necessary for the purpose of receiving and handling the query, and failure to do so shall result in the impossibility of handling the query, which includes responding to the query. The provision of other personal data is voluntary.
5. Purpose and legal basis for processing personal data:
   a) data provided in the ‘Contact Form’ – data shall be processed by the Controller for the purpose of identifying the sender and handling correspondence with the sender to the extent specified in the form. The legal basis for the Controller's processing of the personal data is the consent of the sender of the information (Article 6 section 1 letter a of the GDPR);
   b) data provided in the ‘Newsletter Form’ – data shall be processed by the Controller for the purpose of sending by electronic means to newsletter subscribers notifications of interesting offers or content that may contain commercial, advertising and promotional information of the Controller. The legal basis for the Controller's processing of the personal data is the consent of the sender of the information (Article 6 section 1 letter a of the GDPR).
6. The Controller of the personal data shall be processed only during the period of partnership with a specific User until the User withdraws the granted consent. The processing period may be extended each time by the period for the Controller to assert possible claims or protect against such claims.
7. The Controller shall not transfer, sell or exchange the data for any purpose, including marketing with other entities. Data may only be passed on to ‘Trusted Partners’, i.e. third-party providers acting on behalf of the Controller, for example, IT service providers. Data transmitted to external entities (‘Trusted Partners’) is only used to provide services related to the operation of the website. At the same time, such entities process data on the basis of the agreement concluded with the Controller and in accordance with the rules of personal data protection. In addition, the Controller may make the data available to entities entitled to obtain it on the basis of applicable law, offices and bodies authorised to process data on the basis of specific legal provisions.
8. Rights of persons whose data is processed by the Controller:
   a) the right of access to data – the data subject shall be entitled to obtain from the Controller confirmation as to whether or not the Controller is processing their data and, if this is the case, they shall be entitled to access the data, which includes obtaining a copy of the data;
   b) the right to rectification – the data subject shall have the right to request the Controller to rectify (amend) without delay personal data concerning them which is inaccurate and to complete incomplete data;
   c) the right to erasure (‘the right to be forgotten’) – the data subject has the right to demand from the Controller the immediate erasure of the personal data concerning them, and the Controller is obliged to erase the personal data without undue delay where the data subject has withdrawn the consent on which the processing is based in accordance with Article 6 section 1 letter a of the GDPR, and there is no other legal basis for the processing. The withdrawal of the consent may be done by activating the links at the end of the correspondence and read:
   - in the case of the ‘Contact Form’ – ‘If you do not wish to correspond – ‘UNSUBSCRIBE’;
   - in the case of the ‘Newsletter form’ – ‘If you no longer wish to receive messages of this type‘ - ‘UNSUBSCRIBE’;
   d) the right to restrict processing – the data subject has the right to request the Controller to restrict processing in the following cases:
   - the data subject challenges the accuracy of the personal data – for a period of time allowing the Controller to verify the accuracy of the data;
   - the processing is unlawful and the data subject objects to the erasure of the personal data, requesting instead the restriction of their use;
   - The Controller no longer needs the personal data for the purpose of the processing, but the data is needed by the data subject to establish, assert or defend a claim;
   e) the right to data portability – if data is processed by automated means, the data subject shall have the right to receive, in a structured, commonly used machine-readable format, the personal data concerning them which they have supplied to the Controller, and shall have the right to transmit such personal data to another Controller without hindrance from the Controller to which the personal data has been supplied;
   f) the right to lodge a complaint - the data subject also has the right to lodge a complaint with a supervisory authority (the President of the Personal Data Protection Office) if they consider that the Controller's processing of their data is in breach of the law.
9. The provision of data is voluntary, but necessary for the purposes of processing. Failure to provide data marked as necessary for the provision of services shall make it impossible to provide them.
10.  This ‘Privacy Policy’ is reviewed on an ongoing basis and updated as necessary.

II. Cookies

In order for the website to function correctly, it is sometimes necessary to place small data files, known as cookies, on the user's device. These are small text files sent by the server and stored on the device on which the web pages are viewed. They make it possible to remember information sent between the website and the browser. Thanks to them it is possible to remember form data and page settings, operate visitor counters, use polls and remember the selected language version. Properly configured cookies are safe and allow information to be read only by the server that created them.

Cookies are IT data, in particular text files, which are stored in the Website User's device and are intended for use on the Website. Cookies usually contain the name of the website they come from, the time they are stored on the user's device and a unique number.

The Website where cookies may be used is owned by Exalo Drilling S.A. with its registered office in Piła, pl. Staszica 9, 64-920 Piła,

Why does our website use cookies?

Cookies allow you to customise the way you browse websites. Cookies make it possible to distinguish between visitors and display content intended for specific users. They allow you to receive fully personalised content. The storage of information sent in cookies is in no way associated with the collection of personal data or the storage of other confidential information.

What cookies can www.exalo.pl use?

Three types of cookies can be used on the website. Session cookies (temporary cookies) are files generated while browsing the website's pages, stored until the browser session ends. Without them, some applications or functionalities may not work properly. Persistent cookies are stored on your device when you visit the website, so that during your next visit you can be recognised and your preferences remembered. Third-party cookies make it possible to optimise marketing communications, count user traffic and personalise content (e.g. advertising) from external sources.

How do I modify my cookie settings?

The mechanism for storing and sending cookies depends on the configuration of the browser installed on the device used to browse the internet. The automatic handling of cookies can be blocked in the settings of each browser, but this may result in restrictions related to the use of the website www.exalo.pl.

For some types of cookies, your consent is required, which you can change or revoke at any time by setting your preferences in the banner (window).

III. Final provisions

The features and scope of services on the Website may expand over time. It may therefore amend this document. Announcement of changes shall be made by posting information about the changes to the Privacy Policy on the Website. This document is intended for information purposes only.