Legal
Privacy policyand cookies.
We use the data from our forms only to answer your enquiry, prepare a quotation and fulfil your order or retipping job. We do not sell it. Analytics and marketing cookies are only switched on with your consent.
In short
- Controller: ONLYTOOLS Sp. z o.o., Zagórze Śląskie, Poland. Contact: info@onlytools.pl.
- Why: answering enquiries, quotations, fulfilling orders and retipping jobs, accounting obligations.
- How long: for the duration of the discussion or contract, then until claims become time-barred; accounting records – 5 years.
- Cookies: analytics and marketing only with your consent, which you can change at any time.
- Your rights: access, rectification, erasure, objection, complaint to a supervisory authority.
1. Who is the controller of your data?
The controller of your personal data is ONLYTOOLS Spółka z ograniczoną odpowiedzialnością, registered office in Zagórze Śląskie, Poland (ul. Kolejowa 5, 58-321 Zagórze Śląskie, Lower Silesia), entered in the Polish National Court Register (KRS) under no. 0001088033, tax ID (NIP) 886-303-16-77, REGON 527783267 ("OnlyTools", "we").
For any matter relating to personal data, write to info@onlytools.pl or by post to our registered office. Our contact person for data protection is Zbyszek Zięba – info@onlytools.pl, at the registered office address.
2. What data do we collect and where from?
- From forms (quote request, test tool, custom tools, contact, retipping request): name, company, VAT number, job title, country, phone, email, message, technical parameters (material, machine, diameters, quantities), return shipping address and photos of tools you upload.
- From correspondence by email and phone – the data you provide.
- From performing a contract – invoicing and delivery details.
- Technical data – IP address (spam protection), the page from which a form was sent, campaign parameters (utm_source, utm_medium, utm_campaign, gclid).
- From cookies and browser storage – see section 9.
If you give us the details of colleagues (e.g. contact persons in your company), please inform them about this policy.
3. For what purposes, on what legal basis and for how long do we process data?
| Purpose | Legal basis (GDPR) | How long |
|---|---|---|
| Answering enquiries, preparing quotations, selecting and sending test tools | Art. 6(1)(b) – steps prior to entering into a contract; Art. 6(1)(f) – legitimate interest (answering correspondence, contact with a company representative) | Until the discussions end; if no contract is concluded – until any claims become time-barred |
| Fulfilling orders, retipping jobs, complaints and warranty | Art. 6(1)(b) – performance of a contract | For the duration of the contract, then until claims become time-barred |
| Accounting and tax | Art. 6(1)(c) – legal obligation | 5 years from the end of the year in which the tax payment deadline expired |
| Establishing, pursuing and defending claims | Art. 6(1)(f) – legitimate interest | Until claims become time-barred |
| Protecting forms against spam and abuse (IP address) | Art. 6(1)(f) – legitimate interest | Submission counter – 10 minutes; IP address in the message – together with the correspondence |
| Product news (marketing consent in the form) | Art. 6(1)(a) – consent, and electronic communications law | Until consent is withdrawn |
| Interest-based advertising on Google and Meta (remarketing) | Art. 6(1)(a) – consent | Until consent is withdrawn or the cookie expires |
| Visit statistics and advertising effectiveness (cookies) | Art. 6(1)(a) – consent | Until consent is withdrawn or the cookie expires |
You can withdraw your consent at any time – this does not affect the lawfulness of processing carried out before withdrawal.
4. Who do we share data with?
We share data only with parties we cannot operate without, and only to the extent necessary:
- hosting and email providers – home.pl S.A.;
- courier and shipping companies – for deliveries and retipping shipments;
- our accounting office and accounting software providers;
- IT service providers who maintain the website and systems;
- Google Ireland Ltd. (Google Tag Manager, Google Analytics 4, Google Ads) – analytics and advertising tools, within the scope of your cookie consent;
- Meta Platforms Ireland Ltd. (Meta Pixel) – measuring and tailoring advertising on Facebook and Instagram, only with your marketing cookie consent;
- public authorities – where required by law.
Processors acting on our behalf do so under data processing agreements and only on our instructions.
5. Is data transferred outside the European Economic Area?
As a rule, no. The exception may be Google and Meta tools activated with your consent – Google LLC and Meta Platforms, Inc. may transfer data to the USA. The basis is then the European Commission's adequacy decision on the EU-US Data Privacy Framework, supplemented by standard contractual clauses.
6. What are your rights?
- access to your data and a copy of it;
- rectification of inaccurate data;
- erasure of data ("right to be forgotten");
- restriction of processing;
- portability of data processed on the basis of consent or a contract;
- objection to processing based on legitimate interest – including at any time to marketing;
- withdrawal of consent at any time;
- lodging a complaint with a supervisory authority – in Poland the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), or the authority in your EU country of residence or work.
To exercise your rights, write to info@onlytools.pl. We will reply without undue delay and in any case within one month.
7. Do you have to provide data?
Providing data is voluntary, but without contact details we cannot answer your enquiry, and without invoicing and delivery details we cannot fulfil an order. Required fields are marked with an asterisk.
8. Do we make automated decisions?
No. Quotations, assessments and tool selection are prepared by people – our technical advisors and technologists. The calculators and configurators on this website run in your browser and do not store results on our server until you send a form.
9. Cookies and browser storage
Cookies are small files stored in your browser. We use them in the following groups:
| Type | Purpose | Consent |
|---|---|---|
| Necessary | Remembering your choices in the cookie banner; the quote list (browser storage rfqCart – the list of tools for a quotation, kept on your device until you send the form) | Not required |
| Analytics | Visit statistics, traffic sources and form performance – Google Analytics 4 (Google Ireland Ltd.) | Yes |
| Marketing | Measuring advertising effectiveness, remarketing and ad personalisation – Google Ads (Google Ireland Ltd.) and Meta Pixel (Meta Platforms Ireland Ltd. – Facebook, Instagram) | Yes |
| Tag management | Google Tag Manager – loads the tools above only within the scope of your consent; it does not set analytics or advertising cookies itself | Not required |
Until you give consent, Google Analytics 4 and Google Ads run in restricted mode (Consent Mode) and do not set analytics or advertising cookies, and Meta Pixel is not loaded. You can change your consent at any time using the button (also in the footer) or in your browser settings.
10. How do we protect data?
Forms are protected against automated spam, and only people who need them for their work have access to submissions. Tool photos sent with the retipping form go only to our email inbox and are never published.
11. Changes to this policy
We update this policy when the law, our tools or the way the website works change. The date of the last change is shown at the top of the page. In case of any discrepancy, the Polish version of this policy prevails [to be confirmed with legal counsel].