Privacy Policy

Last updated: January 2025

1. Data Controller

The controller of your personal data is F.H. „Olimp”, Laczna 3/U2, 22-100 Chelm, Poland (NIP: 536-192-55-08, REGON: 110272101), operating the website x-tool.org (hereinafter “we”, “us” or “the Operator”).

2. What Data We Collect

We collect only the data you provide to us. Depending on how you interact with our services, this may include:

  • name and surname
  • e-mail address
  • postal/shipping address
  • telephone number
  • company name and tax identification number (for business customers)
  • order and transaction history

We also automatically collect certain technical data when you visit our website, such as your IP address, browser type, operating system and pages viewed. This data is collected through cookies and similar technologies (see Section 9 below).

3. Purpose of Data Processing

Your personal data is processed for the following purposes:

  • Performance of a contract – to process your orders, deliver products or services, and handle returns or warranty claims (Art. 6(1)(b) GDPR).
  • Legal obligations – to comply with tax, accounting and other legal requirements (Art. 6(1)(c) GDPR).
  • Legitimate interests – for website analytics, fraud prevention, improving our services and protecting our legal rights (Art. 6(1)(f) GDPR).
  • Consent – to send you marketing communications, newsletters or promotional offers, only if you have given your explicit consent, which you may withdraw at any time (Art. 6(1)(a) GDPR).

4. Data Recipients

To ensure the highest quality of our services, we may share your personal data with the following categories of recipients:

  • courier and postal services (for order delivery)
  • payment processors and banks
  • accounting and bookkeeping service providers
  • IT and hosting service providers
  • customer support tools

All third-party service providers are contractually obligated to protect your data in accordance with applicable data protection laws. We do not sell your personal data to third parties.

5. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If any data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contract data – for the duration of the contract and up to 6 years after its termination (statutory limitation period).
  • Tax and accounting data – for 5 years from the end of the tax year in which the obligation arose.
  • Marketing data – until you withdraw your consent or object to processing.
  • Cookie data – for periods specified in Section 9 below.

7. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access – to obtain confirmation of whether your personal data is being processed and to access that data.
  • Right to rectification – to request correction of inaccurate or incomplete personal data.
  • Right to erasure (“right to be forgotten”) – to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
  • Right to restriction – to request limitation of the processing of your data in certain circumstances.
  • Right to data portability – to receive your personal data in a structured, commonly used and machine-readable format.
  • Right to object – to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@x-tool.org.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include SSL/TLS encryption for data in transit, secure server infrastructure and restricted access to personal data on a need-to-know basis.

Cookie Policy

9. Cookies

9.1. This website uses cookies – small text files placed on your device by your web browser. Cookies typically contain the name of the originating website, their storage duration and a unique identifier.

9.2. The entity placing cookies on your device and accessing them is the Operator: F.H. „Olimp”, Laczna 3/U2, 22-100 Chelm, Poland.

9.3. We use the following types of cookies:

  • Strictly necessary cookies – essential for the website to function properly (e.g. session management, authentication). These cannot be disabled.
  • Functional cookies – remember your preferences such as language, region and display settings to provide a personalised experience.
  • Performance / analytical cookies – collect anonymous information about how visitors use the website, helping us improve its structure and content.

9.4. Based on their duration, cookies are classified as:

  • Session cookies – temporary files stored until you log out, close the browser or leave the website.
  • Persistent cookies – stored on your device for a period defined in the cookie parameters or until you delete them manually.

9.5. You can manage cookie settings in your browser at any time. Most browsers allow you to block or delete cookies. Please note that disabling cookies may affect some features and functionality of our website.

9.6. For more information about cookies, visit www.allaboutcookies.org.

10. Third-Party Links

Our website may contain links to external websites (e.g. YouTube, payment providers, forum). We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.

12. Contact & Complaints

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

E-mail: support@x-tool.org
Address: F.H. „Olimp”, Laczna 3/U2, 22-100 Chelm, Poland

You also have the right to lodge a complaint with a supervisory authority. In Poland, the competent authority is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.