Privacy policy

The Controller respects the right to privacy and ensures data security. For this purpose, appropriate technical and organisational measures are applied to protect personal data. These measures are adequate to the nature, scope, context, and purposes of processing, as well as to the risk of infringement of the rights or freedoms of natural persons.
Personal data are processed:
a. in accordance with the provisions on personal data protection
b. in accordance with the implemented Privacy Policy
c. for the purpose of conducting ongoing business activities and pursuing the interests of our Users, Customers, to the extent necessary to prepare answers to enquiries, commercial offers, to process orders, and to prepare accounting settlements and maintain accounting records, pursuant to Article 6(1)(b) and (c) of the GDPR
d. to the extent necessary to fulfil legitimate interests, legally justified purposes, provided that the processing does not infringe the rights and freedoms of the data subject, pursuant to Article 6(1)(f) of the GDPR
e. on the basis of consent given by the User, Customer, for specific purposes such as direct marketing, pursuant to Article 6(1)(a) of the GDPR

The Controller collects and processes personal data via the webside and other communication channels. These data are provided when creating an account (ERP or webside) or placing an order and include first name, last name, residential address, email address, and phone number.

An account on the website is created based on ERP data exclusively for Customers who are partners and only at their request.

Data processed on the basis of consent, for example for direct marketing, will be stored until the User, Customer withdraws consent, but no longer than 3 years from the last contact.

The Controller does not profile Users, Customers.

Hosting and website display services are partially provided to the Controller, the Seller, by service providers acting as data processors. Access data and data collected via dedicated forms are processed on their servers.
These service providers are KEI and CyberFolks.

Providing data is voluntary. The Controller collects data only when the Customer provides them while placing an order or contacting the Controller via a form or email. These data are necessary to perform the contract or handle the matter and provide a response. Without providing them, it is not possible to complete an order, perform the contract, or contact the Controller.

A customer account may be deleted at any time at the Customer’s request, sent to the address indicated above.
After full performance of the contract or deletion of the customer account, data processing will be restricted. After the expiry of retention periods specified in tax regulations and the Accounting Act, the data will be deleted.

For the purpose of performing the contract, meaning delivery, the Controller transfers Customer data to the courier company entrusted with delivering the ordered products. These companies are most often DHL and Raben.

For the purpose of fulfilling accounting and bookkeeping obligations and for protection against abuse and fraud, the Controller, the Seller transfers additional information to service providers. These data may be used together with information necessary to process payments. These service providers act on behalf of the Controller, the Seller as data processors and provide accounting, bookkeeping, fraud prevention, and payment process optimisation services.
Use of debt collection services
If, despite reminders and payment requests, the Seller’s claim for payment arising from a sales contract is not settled, the Seller reserves the right to transfer data to a debt collection company and or a legal services provider. The collection of outstanding receivables serves the performance of the contract and the protection of the Seller’s legitimate interests, consisting in the effective pursuit and enforcement of contractual claims.

To improve the attractiveness of visits to the website and to enable key functions, the Controller uses cookies and other technologies.
Cookies are small text files that are automatically stored on the User’s, Customer’s end device.
The User, Customer may choose which cookies are stored on their device by selecting options in the banner displayed on the website, known as consent mode.
Consent mode allows consent to the following cookies and related technologies:

• advertising cookies, used to tailor advertisements as closely as possible to the User’s, Customer’s preferences
• analytics cookies, which allow the transmission and collection of anonymous data about user behaviour on the website
• personalisation, consent to the use of data for detailed personalisation to help match content to your expectations
• user data, consent to the transfer of encrypted user data to advertising and analytics systems

Within consent mode, it is not possible to disable essential cookies, without which the website will not function properly.
The Controller informs the User, Customer that it is possible to configure the web browser in a way that prevents cookies from being stored on the User’s, Customer’s device. In such a case, using the website may be limited.

Cookies may be deleted by the User, Customer after being saved by the Controller, the Seller, using appropriate browser functions, dedicated software, or tools available within the operating system used by the User, Customer.
Information on how to change cookie storage settings, receive cookies, or delete cookies is available at:
for Chrome browser: https://support.google.com/chrome/answer/95647
for Mozilla Firefox browser: https://support.mozilla.org/pl/kb/ciasteczka
for Internet Explorer browser: https://support.microsoft.com/topic/how-to-delete-cookies-in-internet-explorer
for Opera browser: https://help.opera.com/pl/latest/web-preferences/#cookies
for Safari browser: https://support.apple.com/guide/safari/sfri11471/mac
Session cookies are automatically deleted when the browser is closed. Persistent cookies are stored for a specified period, up to a maximum of 13 months, or until manually deleted.
To ensure optimal presentation of the offer, the Controller uses technologies necessary for the proper and optimal operation of essential website functions, such as the shopping cart (partners only). These technologies process data such as IP address, visit time, device and browser information, and website usage data, for example shopping cart content.

The Controller also uses technological tools to fulfil legal obligations, such as proving receipt of consent for personal data processing, as well as for web analytics and online marketing.
Consent granted for the use of technological tools may be withdrawn at any time. For this purpose, please contact the Controller using the contact details provided above.
The Controller uses Google tools that may transfer data outside the European Economic Area based on Standard Contractual Clauses, SCC.

Detailed information on data processing by Google is available in Google’s privacy policy at: https://policies.google.com/privacy

The Controller, the Seller uses the following Google tools:
Google Analytics, a tool for analysing website traffic. It automatically collects data such as IP address, visit time, device and browser information, and user behaviour. On this basis, pseudonymous user profiles are created using cookies. Data processing takes place under a data processing agreement concluded with Google and, within the European Union, requires prior user consent for cookies and data processing.

Google Ads is an advertising tool used to promote websites in Google search results and on partner websites within the advertising network. As part of remarketing features, after obtaining the user’s consent, a cookie file may be stored on the user’s device. Based on a pseudonymous identifier assigned to the user, for example a cookie or a mobile device identifier, the system may process data about visited pages in order to display ads tailored to interests. Data processing, such as IP address, browser information, and on site activity, is carried out in accordance with applicable personal data protection regulations.

 

Further data processing takes place only if the User, Client, has enabled ad personalization in their Google account settings. In this case, if the User, Client, is simultaneously logged in to Google while visiting the website, Google will use the User’s, Client’s, data together with data collected via Google Analytics to create and define so called cross device remarketing lists.

The User may withdraw consent for these marketing activities at any time, for example by contacting the Administrator or through the cookie settings on the website.

The Controller, the Seller uses enhanced conversions if the User, Customer has given consent through consent mode by selecting the User Data option. If the User, Customer submits an enquiry form, an encrypted, hashed email address is sent to the Google Ads system and used to improve ad matching accuracy.

Google Ads Conversion Tracking is a web analytics tool used to measure and analyze the actions of a User, Client, who visited the website after clicking a Google Ads advertisement. For this purpose, cookies may be used and data such as IP address, visit time, device and browser information, and on site activity may be processed. This data is used to attribute conversions to specific advertising campaigns and may be used to create pseudonymized user profiles.

The Controller, the Seller uses enhanced conversions if the User, Customer has given consent through consent mode by selecting the User Data option. If the User, Customer submits an enquiry form, an encrypted, hashed email address is sent to the Google Ads system and used to improve ad matching accuracy.

YouTube
For presenting video content on the website, the Controller, the Seller uses the YouTube service. During video playback, Google processes the following data: IP address, visit time, and device and browser information.

Google Maps
To provide directions to the company’s registered office, the Controller, the Seller directs the User, Customer to Google Maps. Google Maps stores and processes information on how the maps and individual functions are used, including IP address and location data of the User, Customer.

Google Tag Manager
The Controller, the Seller uses Google Tag Manager, GTM, a tool for managing tracking code snippets such as Bing Ads, Google Ads, and Facebook Ads. GTM itself does not collect any personal data and does not use cookies.

Persons whose data are processed have the following rights:
the right to obtain information about data processing
the right to rectify inaccurate or incomplete personal data
the right to be forgotten, meaning the right to delete stored personal data
the right to restrict the processing of personal data
the right to object to data processing
the right to receive provided data in a structured, commonly used, and machine readable format and to transmit them to another controller
the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office, UODO

The Controller reserves the right to process data after the fulfilment of orders and the termination of the business relationship or withdrawal of consent, only to the extent necessary to pursue possible claims before a court or where national, EU, or international law requires data retention.

If you have any questions regarding the collection, processing, or use of personal data, or if you wish to request access, rectification, restriction, or deletion of data, withdraw consent, or object to the use of specific data, please contact the Controller, the Seller directly using the contact details provided above.