Privacy and Cookies Policy

1. The Administrator of the Website and your personal data is Welkard Sp. z o. o., with its registered office in Kochanowice (42-713), ul. Lubliniecka 13, entered into the Register of Entrepreneurs of the National Court Register (KRS) under number 0000841992, NIP (Tax Identification Number) 5751900787, REGON (National Business Registry Number) 386084940 (“Administrator”).

2. If you have any questions or comments regarding data processing, please contact us at the e-mail address: biuro@weldkar.pl

3. The scope and purpose of data collection depend on how you use the Administrator’s services, including how you use the Administrator’s Website.

I. User data collected automatically upon entering the Website

To provide Services—browsing the Website’s pages, using the content or service search engine—we process personal data about your activity on the Website, i.e., data about the content or services you view, data about your device session, operating system, browser, location, unique ID, and IP address.

The Website does not store any information about your computer’s hardware configuration or programs installed on your computer.

The IT system used by the Website automatically collects data in logs related to the device used by the User when connecting to the Website. This data is collected only for statistical purposes and is used only in the Website optimization process to ensure the greatest possible convenience of use, which constitutes a legitimate interest.

This data is never combined with other data and constitutes only material for statistical analysis and system error correction mechanisms.

II. Personal data of potential clients/partners/contractors

We process data of potential clients/partners/contractors, including name and surname, and contact details, in order to:

• propose services of ours or our partners, which constitutes our legitimate interest;

• take steps aimed at concluding a contract—the legal basis is taking action at the request of the data subject before concluding a contract.

Personal data of persons who are:

• clients;

• contractors;

• suppliers;

• our partners; or

• persons representing our clients; and

• persons designated for contact with the client

If you belong to one of the categories listed above, we process your data in order to:

• perform a contract (including handling potential complaints)—the legal basis for processing is the necessity of processing for the performance of a contract;

• fulfill legal obligations incumbent on the administrator, resulting in particular from tax and accounting regulations, consisting, among other things, of the need to issue an invoice or other accounting proof and archive it—the legal basis for processing is a legal obligation;

• potentially establish, pursue, or defend against claims and for the proper performance of the concluded contract—the legal basis for processing is a legitimate interest, consisting of protecting our rights;

• personal data of persons authorized to represent is processed to identify the persons authorized to represent the client to prepare and properly conclude the contract—the legal basis for processing is a legitimate interest consisting of preparing and properly concluding the contract;

• personal data of persons designated for contact is processed to maintain contact during the performance of the contract—the legal basis for processing is a legitimate interest, consisting of the performance of concluded contracts;

• the image of partners is processed based on consent.

IV. Placing an order for products in the online store

If you place an order for products in our online store, we collect the data necessary to process the order in the form of name, surname, e-mail address, phone number, NIP (Tax Identification Number).

Providing data marked as mandatory is necessary to process the order, and failure to provide it results in the order not being accepted.

Personal data is processed:

• to process the order (including handling potential complaints) and communication related to the order processing—the legal basis for processing is the necessity of processing for the performance of a contract;

• to fulfill legal obligations incumbent on the administrator, resulting in particular from tax and accounting regulations, consisting, among other things, of the need to issue an invoice for the sale of goods and archive it—the legal basis for processing is a legal obligation;

• to potentially establish, pursue, or defend against claims—the legal basis for processing is a legitimate interest, consisting of protecting our rights;

V. Placing an order for a personalized diet

If you place an order for a personalized diet by filling out a survey, you are required to provide your personal data including: name, surname, e-mail address, age, height, weight, gender, information about pregnancy, information about illnesses, allergies, medications taken, and other substances.

Providing the data is necessary to prepare and send the personalized diet, and failure to provide it results in the order for diet preparation not being accepted.

Personal data is processed:

• to process the order (including handling potential complaints) and communication related to the order processing, i.e., preparing and sending the personalized diet—the legal basis for processing is the necessity of processing for the performance of a contract;

• to fulfill legal obligations incumbent on the administrator, resulting in particular from tax and accounting regulations, consisting, among other things, of the need to issue an invoice for the sale of goods and archive it—the legal basis for processing is a legal obligation;

• to potentially establish, pursue, or defend against claims—the legal basis for processing is a legitimate interest, consisting of protecting our rights;

• personal data concerning health status is processed based on your express consent for its processing to prepare a personalized diet;

• the image included in sent reports is processed based on consent.

VI. Provision of the newsletter service

If you have provided us with your e-mail address for this purpose, we provide newsletter services, i.e., delivering commercial information about products or services we offer and our news. Providing data is voluntary but necessary to send the newsletter.

You can unsubscribe at any time. Every newsletter contains an unsubscribe link.

Personal data is processed:

• when directing marketing content to you within the newsletter—the legal basis for processing is our legitimate interest in connection with the consent you have given;

• for analytical and statistical purposes—the legal basis for processing is a legitimate interest, consisting of conducting analyses of user activity on the Website, to improve the functionalities used and our offer;

• to potentially establish, pursue, or defend against claims—the legal basis for processing is a legitimate interest, consisting of protecting our rights.

VII. Contact via e-mail message

If you contact us via e-mail, you provide us with your e-mail address as the sender. Furthermore, you may also include other personal data in the message content. We may ask you to provide additional data only if it is necessary to handle the matter the contact concerns. The legal basis, in this case, is our legitimate interest in connection with the consent given, consisting of the need to resolve the reported issue related to the Website or to answer the question asked, and potential pursuit and defense against potential claims.

VIII. Data of social media profile users

Our profiles on: Facebook, Instagram, YouTube, TikTok, LinkedIn are public. If you visit our profile, you provide us with your personal data (e.g., account name, comments, likes, online identifiers, and the IP address of the device you use).

This data is processed to: (i) enable us to effectively manage our profile on the given service or application in connection with promoting various events, services, and products, and (ii) communicate with users. The legal basis for processing personal data is our legitimate interest, consisting of promoting our brand, improving the quality of services we provide, and ongoing communication with fanpage users.

NOTE: The above information does not apply to the processing of your personal data by the administrators of the respective services.

4. How long do we process personal data?

The data processing period depends on the legal basis and purpose of processing. As a rule, data is processed:

• for the duration of the service provision;

• until the express consent for personal data processing is withdrawn;

• until an effective objection is submitted;

• until an effective request for data deletion is made,

• until the expiration of legal obligations incumbent on the Administrator, which justified the processing of personal data.

The data processing period may be extended if processing is necessary to establish, pursue, or defend against possible claims, and after this period, only if and to the extent required by law.

5. What rights do you have in connection with the processing of personal data?

Based on the GDPR, you have the right to:

• request access to your personal data,

• request rectification (correction) of your personal data,

• request the erasure of your personal data,

• request the restriction of processing of personal data,

• object to the processing of personal data,

• request data portability.

If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

6. To whom is personal data disclosed?

Personal data, based on relevant agreements, is transferred to entities processing data on our behalf, providing services for us. Such entities process data only in accordance with our instructions, maintaining its confidentiality and security. We have the right to control how the data we entrust is processed.

We transfer your personal data to service providers we use when running the Website, e.g., to process an order and enable the use of the Avodiet Application. Depending on contractual arrangements and circumstances, these entities act on our behalf or independently determine the purposes and methods of their processing.

In particular, regarding the provision of dietary services via the Avodiet Application, Users’ personal data is processed using software provided by JustForFood sp. z o.o. with its registered office in Gdańsk (ul. Lęborska 3B, 80-386 Gdańsk), which acts as an entity processing personal data on behalf of the Administrator, in accordance with Art. 28 of the GDPR, only to the extent and for the purpose necessary to ensure the proper functioning of the Application. As part of cooperation with the Application Provider, only personal data necessary to create a diet may be transferred, in particular, identification data and data necessary to develop and provide a personalized nutrition plan.

In other cases, personal data may be disclosed to entities authorized solely based on legal provisions.

7. Transfer of data outside the EEA.

Due to our use of certain IT solutions, some personal data may be transferred outside the EEA. The Administrator transfers personal data outside the EEA as part of using the services of a subcontractor such as Google LLC, which is based in the USA.

Before transferring your personal data, we verify whether third countries, i.e., countries outside the European Economic Area, ensure an adequate level of protection for your personal data. In certain situations, however, transferring your personal data to third countries may involve risks due to the lack of a decision finding an adequate level of protection outside the European Economic Area and the lack of safeguards and effective legal protection measures in third countries.

8. Social media

The Website uses plugins and other social tools provided by social networking services, such as Facebook, Instagram, Tiktok, and Youtube.

In connection with using a website that contains such a plugin, the User’s browser establishes a direct connection with the servers of the social network administrators (service providers). The content of the plugin is transmitted by the respective service provider directly to the User’s browser and integrated into the page. Thanks to this integration, the service providers receive information that the browser has displayed the website, even if the User does not have a profile with that service provider or is not currently logged in. This information (along with the IP address) is sent by the browser directly to the respective service provider’s server (some servers are located in the USA) and stored there.

If you have logged into one of the social networking services, that service provider will be able to directly associate the visit to the Website with your profile on that social network. If you use a given plugin, e.g., the “Like” button, the relevant information will also be sent directly to the respective service provider’s server and stored there. Furthermore, this information will be published on the respective social network and will appear to people added as your contacts.

The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the possibility of making settings to protect his privacy are described in the privacy policy of the individual service providers:

• Instagram – https://help.instagram.com/519522125107875/?maybe_redirect_pol=0.

• Facebook – https://m.facebook.com/privacy/policy/version/20220104/.

• Tiktok – https://www.tiktok.com/legal/page/eea/privacy-policy/pl

• Youtube – https://policies.google.com/privacy?hl=pl

If you do not want social networking services to associate the data collected during your visit to the Website directly with your profile on a given service, you must log out of that social network before visiting the Website. It is also possible to completely prevent plugins from loading on the page by using appropriate browser extensions, e.g., script blockers.

9. Cookies policy

General information

When browsing the Website’s pages, “cookies” files, hereinafter referred to as Cookies, are used, which are small text files stored on your end device in connection with using the Website. Their use is aimed at the correct operation of the Website’s pages.

These files allow identifying the software you use and adapting the Website individually to your needs.

“Cookies” files usually contain the name of the domain they come from, their storage time on the device, and an assigned value.

Security

The “cookies” we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to get into your devices through “cookies” files.

Types of “cookies”

We use two types of cookies:

• Session cookies: they are stored on your device and remain there until the end of a given browser session. The saved information is then permanently deleted from your device’s memory. The session cookies mechanism does not allow collecting any personal data or any confidential information from your device.

• Persistent cookies: they are stored on your device and remain there until they are deleted. Ending a browser session or turning off the device does not delete them from your device. The persistent cookies mechanism does not allow collecting any personal data or any confidential information from your device.

Purposes

We also use third-party “cookies” for the following purposes:

• Website configuration;

• creating statistics—helping to understand how Users use the Website, which allows for improving its structure and content via Google Analytics tools;

• promoting the Website using the social network Facebook.com,

• promoting the Website using the social network Instagram.com,

• promoting the Website using the Tiktok service,

• promoting the Website using the YouTube service.

To learn the rules for using Cookies, we recommend reading the privacy policies of the companies indicated above.

Cookies may be used by advertising networks, particularly the Google network, to display ads tailored to your preferences. For this purpose, information about how you navigate the web or the time you use the website may be retained.

To view and edit information about your preferences collected by the Google advertising network, you can use the tool located at the link https://www.google.com/ads/preferences/.

Using your web browser settings or service configuration, you can independently change your Cookie settings at any time, specifying the conditions for their storage and access by Cookies to your device. You can change these settings to block the automatic handling of Cookies in your web browser settings or to be informed each time they are placed on your device. Detailed information about the possibilities and methods of handling Cookies is available in your software (web browser) settings.

10. Changes to the privacy policy

The policy is reviewed on an ongoing basis and updated as necessary. The current version of the policy was adopted and is effective from 03.11.2025.