Privacy &
cookie policy

Effective from: 19 October 2026

This is an English translation provided for information. The Polish version is legally binding.

1. General provisions and the Controller

1. This policy is for information purposes and describes how personal data is processed and how cookies are used on the website optrel.pl, including its English version at optrel.pl/en/ (the “Website”), dedicated to welding helmets, respiratory protection systems and other personal protective equipment by optrel. It fulfils the information obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”). This is a translation; in case of any discrepancies the Polish version prevails.
2. The controller of personal data is SPIDWELD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (a limited liability company) with its registered office in Toruń, Poland (registered office and address for service: ul. Równinna 24/2, 87-100 Toruń), entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0001088466; registry court: District Court in Toruń, 7th Commercial Division of the National Court Register; NIP (tax ID) 8792715166; REGON 384126580; share capital PLN 230,000.00 (the “Controller”).
3. The Controller is the authorised distributor of optrel products in Poland. The Website is not the manufacturer's website — the products are manufactured by optrel AG (Industriestrasse 2, 9630 Wattwil, Switzerland), which does not operate the Website and does not receive visitors' personal data through it. Product data, images and documents (e.g. user manuals, technical data sheets, declarations of conformity) are provided by the manufacturer; images shown on the Website are loaded from the Website's own server.
4. Contact with the Controller: email [email protected], phone +48 530 009 555, or in writing to the registered office address.
5. The Controller has appointed a Data Protection Officer: Michał Wojciechowski, email [email protected], phone +48 530 009 555 ext. 9. You may contact the Data Protection Officer on all matters relating to the processing of your personal data and the exercise of your rights.
6. The Website is informational. It does not sell products and does not contain contact forms, user accounts, a newsletter or social media plug-ins; fonts and scripts are loaded from its own server (except the Google Analytics script — only with your consent). optrel products can be purchased in the Controller's online shop centrumspawalnicze.pl (in Polish), which is governed by a separate shop privacy policy.

2. Purposes, legal bases and retention periods

The Controller processes personal data for the following purposes, on the following legal bases and for the following periods:

Where processing is based on the Controller's legitimate interest, the data is processed until an effective objection is raised, but no longer than for the periods indicated above.

3. Recipients and transfers outside the EEA

1. Personal data may be entrusted to processors acting on behalf of the Controller, only to the extent necessary for the given purpose and on the basis of data processing agreements, in particular:
   • the provider of hosting and infrastructure for the Website — EXEA sp. z o.o., Toruń (ul. Włocławska 167, 87-100 Toruń, Poland), KRS 0000394866; the Website is hosted in a data centre in Poland,
   • the provider of the content delivery network (CDN) and protection of the Website against attacks — Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA); traffic to the Website passes through the Cloudflare network, which processes IP addresses and technical request data (e.g. page address, browser type, connection error reports) in order to deliver the website quickly and securely,
   • providers of email and IT services,
   • entities providing accounting, legal and advisory services to the Controller,
   • Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — for Google Analytics, only with your consent.
2. Once a YouTube video player is loaded (after you click a video or — if you have consented to marketing cookies — automatically), technical data about your device is received by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as an independent controller — see section 4.
3. Data may be disclosed to public authorities where required by law.
4. The Website's server logs are stored in a data centre in Poland. Cloudflare processes technical request data, as a rule, in the data centre of its network closest to the visitor; the data may, however, be transferred to the United States. Cloudflare, Inc. participates in the EU-US Data Privacy Framework — the transfer is based on Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 on the adequate level of protection (Art. 45 GDPR) and, additionally, on standard contractual clauses (Art. 46(2)(c) GDPR) included in the data processing agreement. More information: Cloudflare privacy policy.
5. Data transmitted to Google in connection with YouTube videos and Google Analytics may be processed by Google LLC in the United States. Google LLC participates in the EU-US Data Privacy Framework — the transfer is based on the same Commission Implementing Decision (EU) 2023/1795 (Art. 45 GDPR).
6. If any other service provider processes data outside the European Economic Area, the transfer takes place on the basis of a European Commission adequacy decision or standard contractual clauses approved by the Commission (Art. 46(2)(c) GDPR). You can obtain a copy of these safeguards by contacting the Controller.

4. Embedded YouTube videos

1. The Website shows videos from YouTube (including the manufacturer's optrel channel), a service operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Videos are embedded in privacy-enhanced mode (the youtube-nocookie.com domain). According to Google, views of videos embedded in this mode are not used to personalise content on YouTube; this mode does not, however, prevent Google from processing data once the player has been loaded.
2. Until you click a video or consent to marketing cookies, the Website only displays a preview image loaded from the Website's own server — your browser does not connect to Google's servers.
3. The YouTube player is loaded only after you click a particular video (this applies to that single playback) or — once you have consented to marketing cookies — without asking again. Google may then process your IP address, information about your device and browser (e.g. type, version, language, screen resolution), the address of the page on which the video is embedded and information about your use of the player, and may store cookies and similar data on your device (e.g. in your browser's local storage) — see the “Marketing” category in section 7. If you are signed in to a Google account in your browser, Google may link this information to that account.
4. The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Act). The Controller decides to embed videos on the Website and — once you have consented — to transmit the data described above to Google; the Controller does not store this data itself. Google is responsible, as an independent controller, for any further processing of this data, including its use for Google's own purposes. The data may be transferred to Google LLC in the United States under the EU-US Data Privacy Framework (section 3).
5. You can withdraw your consent at any time by switching off the “Marketing” category in the cookie settings — videos will then not be loaded unless you click them. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal. Cookies previously stored by Google on the youtube-nocookie.com and youtube.com domains can be deleted in your browser settings (section 7).
6. More information: Google Privacy Policy and how Google uses information from sites that use its services.

5. Voluntary provision of data, profiling

1. The Website does not collect data through forms. Contacting the Controller by email or phone is voluntary; however, without your contact details we will not be able to respond to your enquiry. Server log data is recorded automatically when you use the Website.
2. The Controller does not make decisions about you based solely on automated processing, including profiling, as referred to in Art. 22 GDPR.

6. Your rights

In connection with the processing of your personal data, you have the right to:

• access your data and obtain a copy (Art. 15 GDPR),
• rectification of your data (Art. 16 GDPR),
• erasure of your data — the “right to be forgotten” (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on the Controller's legitimate interest (Art. 21 GDPR),
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal — for cookies and YouTube videos, simply change your choice in the cookie settings,
• lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl — if you consider that the processing infringes the GDPR.

To exercise your rights, write to [email protected] or to the Controller's registered office. We will respond without undue delay and in any event within one month of receiving the request (in specific cases this period may be extended by a further two months, of which we will inform you — Art. 12(3) GDPR).

7. Cookies

1. Cookies are small text files stored on your terminal device (computer, phone) by your web browser. The same rules apply to other data stored on your device, e.g. in your browser's local storage.
2. In accordance with Art. 399 of the Polish Electronic Communications Act of 12 July 2024, the Website stores information on your device without consent only where this is strictly necessary to provide the service (necessary cookies). Other categories of cookies are used only with your consent.
3. On your first visit we display a banner in which you can accept all categories, reject the optional ones or choose them in the settings. Until you make a choice, the Website uses only necessary cookies — unless you play a particular YouTube video (section 4). You can change your choice at any time:Cookie settings
4. Cookies used on the Website, by category:

5. The Website does not use advertising pixels or remarketing tools. The “Marketing” category currently covers only the YouTube videos described in section 4.
6. You can also delete or block cookies in your browser settings. Blocking necessary cookies will cause the consent banner to be shown on every visit. Instructions for popular browsers: Google Chrome, Mozilla Firefox, Microsoft Edge, Safari, Opera.
7. With your consent, the Website uses Google Analytics 4 (Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland)) to produce aggregated visit statistics. We use Google Consent Mode — without consent the tool does not store cookies. You can also install the Google Analytics opt-out browser add-on.

8. External links and social media

1. The Website contains only plain links (no plug-ins) to the Controller's profiles on: Facebook, Instagram, YouTube. No data is transferred to the operators of these services unless you click a link.
2. The Website also links to the manufacturer's website optrel.com (e.g. product registration and warranty extension), to YouTube and to the centrumspawalnicze.pl shop. Once you go to an external service (e.g. Facebook and Instagram — Meta Platforms Ireland Ltd.; YouTube — Google Ireland Limited; optrel.com — optrel AG; the centrumspawalnicze.pl shop — the Controller), the privacy policies of those services apply.
3. If you contact us via our social media profiles, we process your data in order to handle that communication on the basis of Art. 6(1)(f) GDPR (legitimate interest: responding to messages).

9. Data security

The Controller applies technical and organisational measures appropriate to the risk, in particular an encrypted HTTPS connection, a Content Security Policy that blocks resources from external services other than those listed in this policy, limiting the data collected to the necessary minimum and not storing personal data on the Website itself.

10. Final provisions

1. This policy may be updated, in particular in the event of changes in the law or the introduction of new tools on the Website. The current version is always available on this page together with its effective date.
2. This English version is a translation. In case of any discrepancies, the Polish version is binding.
3. Matters not regulated herein are governed by the GDPR, the Polish Personal Data Protection Act of 10 May 2018 and the Polish Electronic Communications Act of 12 July 2024 (Prawo komunikacji elektronicznej).