Privacy Policy
version effective from 01-12-2021
WHAT IS A PRIVACY POLICY?
We would like to provide you with details regarding our processing of your personal data in order to give you full knowledge and comfort when using our website.
As we operate in the online industry ourselves, we know how important the protection of your personal data is. Therefore, we make special efforts to protect your privacy and the information you provide to us.
We carefully select and apply appropriate technical measures, in particular those of a software and organisational nature, ensuring the protection of processed personal data. Our website uses encrypted data transmission (SSL), which protects data that identifies you.
In our Privacy Policy you will find all the most important information regarding our processing of your personal data. Please read it — we promise it will not take you more than a few minutes.
Who is the administrator of the agregaty24.pl website?
The administrator of the website is APEX M.J. PSIUK - SPÓŁKA JAWNA with its registered office in Starogard Gdański, at ul. Lubichowska 130, 83-200 Starogard Gdański, registered by Sąd Rejonowy Gdańsk-Północ w Gdańsku, VII Wydział Gospodarczy Krajowego Rejestru Sądowego, KRS No. 0000298809, NIP 5921006187, REGON 190918450, BDO 000108748 (i.e.: us).
PERSONAL DATA
Which legal act governs the processing of your personal data?
Your personal data is collected and processed by us in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly referred to as: RODO. In matters not regulated by RODO, the processing of personal data is governed by the Personal Data Protection Act of 10 May 2018.
Who is the controller of your personal data?
The controller of your personal data is APEX M.J. PSIUK - SPÓŁKA JAWNA with its registered office in Starogard Gdański, at ul. Lubichowska 130, 83-200 Starogard Gdański, registered by Sąd Rejonowy Gdańsk-Północ w Gdańsku, VII Wydział Gospodarczy Krajowego Rejestru Sądowego, KRS No. 0000298809, NIP 5921006187, REGON 190918450, BDO 000108748, phone: +48 (58) 5620931, e-mail: kontakt@agregaty24.pl.
Regarding your personal data, you may contact us via:
- e-mail: kontakt@agregaty24.pl,
- traditional mail: ul. Lubichowska 130, 83-200 Starogard Gdański,
- phone: +48 (58) 5620931.
HOW DO WE PROCESS YOUR PERSONAL DATA THAT YOU PROVIDE TO US?
What personal data do we process and for what purposes?
On our website we offer you many different services for which we process various personal data, based on different legal grounds.
| Purpose | Personal data | Legal basis for processing | Data retention period |
|---|---|---|---|
| concluding and performing a contract | first name, last name, correspondence address, NIP, e-mail address, phone number | Art. 6(1)(b) RODO, i.e. processing to take steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are a party | until the limitation period for claims related to contract performance expires |
| creating and maintaining an account | first name, last name, e-mail address, phone number | Art. 6(1)(b) RODO, i.e. processing to take steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are a party | until the limitation period for claims related to contract performance expires |
| contact form | first name, last name, e-mail address | Art. 6(1)(f) RODO, i.e. processing necessary for the purposes of our legitimate interests consisting in maintaining continuity of communication and enabling contact with us regarding our business activity | until you object to the processing of personal data |
| analysis of traffic on the online store website | IP address | Art. 6(1)(f) RODO, i.e. processing necessary for the purposes of our legitimate interests consisting in analysing customer traffic on the store website | until you object to the processing of personal data |
| direct marketing of our own goods and services, including remarketing | IP address | Art. 6(1)(f) RODO, i.e. processing necessary for the purposes of our legitimate interests consisting in direct marketing of our own services, including remarketing | until you object to the processing of personal data |
| establishing, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities | first name, last name, residential address, PESEL number, NIP, REGON, e-mail address, phone number, IP number, bank account number, payment card number | Art. 6(1)(f) RODO, i.e. processing necessary for the purposes of our legitimate interests consisting in establishing, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities | until the limitation period for claims related to contract performance expires |
| fulfilling legal obligations arising from legal provisions, in particular tax and accounting regulations | first name, last name, company, PESEL number, NIP or REGON, e-mail address, phone number, correspondence address, payment card number | Art. 6(1)(c) RODO, i.e. processing is necessary for compliance with a legal obligation to which we are subject, arising from legal provisions, in particular tax and accounting regulations | until the legal obligations incumbent on the Controller that justified the processing of personal data expire |
Voluntary provision of personal data
Providing the required personal data is voluntary, but it is a condition for us to provide services for your benefit (e.g. sending a newsletter or creating an account).
Recipients of personal data
The current list of entities to whom we disclose your personal data can be found HERE
Automated decision-making (including profiling)
We do not make decisions about you in an automated manner and we do not use profiling.
Will we transfer your personal data outside the EEA or to an international organisation?
In order to use Google measurement and marketing tools, your personal data may be transferred to the United States, where Google LLC servers are located.
Google LLC is listed among the entities participating in the Privacy Shield programme (link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) and also applies standard contractual clauses on data security approved by the European Commission
WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?
Under RODO you have the right to:
- request access to your personal data,
- request rectification of your personal data,
- request erasure of your personal data,
- request restriction of processing,
- object to the processing of personal data,
- request data portability.
If you submit any of the above requests, without undue delay — and in any event within one month of receipt of the request — we will provide you with information on the actions taken in connection with your request.
If necessary, we may extend the one-month period by a further two months due to the complexity of the request or the number of requests.
In each case, within one month of receiving the request, we will inform you about the extension and provide the reasons for the delay.
Right of access to personal data (Art. 15 RODO)
You have the right to obtain information whether we process your personal data. If we process your personal data, you have the right to:
- access personal data,
- obtain information about the purposes of processing, categories of personal data processed, recipients or categories of recipients, the planned retention period or criteria for determining it, your rights under RODO and the right to lodge a complaint with the President of the Personal Data Protection Office, the source of the data, automated decision-making including profiling, and safeguards applied in connection with transfers outside the European Union;
- obtain a copy of your personal data.
If you want to request access to your personal data, submit your request to: kontakt@agregaty24.pl.
Right to rectification of personal data (Art. 16 RODO)
If your personal data is inaccurate, you have the right to request that we rectify it without undue delay. You also have the right to request completion of your personal data. If you want to request rectification or completion of your personal data, submit your request to: kontakt@agregaty24.pl.
Right to erasure of personal data, the so-called “right to be forgotten” (Art. 17 RODO)
You have the right to request erasure of your personal data when:
- your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you have withdrawn a specific consent, to the extent the personal data was processed based on your consent;
- your personal data was processed unlawfully;
- you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent the processing is related to direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by us or a third party.
Despite a request for erasure, we may continue to process your data for the purpose of establishing, pursuing or defending claims, of which you will be informed.
If you want to request erasure of your personal data, submit your request to: kontakt@agregaty24.pl.
Right to request restriction of processing (Art. 18 RODO)
You have the right to request restriction of processing of your personal data when:
- you contest the accuracy of your personal data — in such a case we will restrict processing for a period enabling verification of the accuracy;
- the processing is unlawful and you request restriction instead of erasure;
- we no longer need the personal data for processing purposes, but you need it to establish, pursue or defend your claims;
- you have objected to the processing — pending verification whether our legitimate grounds override those indicated in your objection.
If you want to request restriction of processing, submit your request to: kontakt@agregaty24.pl.
Right to object to processing (Art. 21 RODO)
You have the right at any time to object to the processing of your personal data, including profiling, in connection with:
- processing necessary for the performance of a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by the controller or a third party;
- processing for direct marketing purposes.
If you want to lodge an objection, submit your request to: kontakt@agregaty24.pl.
Right to data portability (Art. 20 RODO)
You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to transmit it to another controller.
As a standard, we will provide your personal data in CSV format. If you prefer the data to be provided in another format, indicate the preferred format in your request. Where possible, we will try to provide the data in your preferred format.
You may also request that we transmit your personal data directly to another controller (where technically feasible).
If you want to request data portability, submit your request to: kontakt@agregaty24.pl.
Complaint to a supervisory authority
If you believe that the processing of your personal data violates personal data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
In Poland, the supervisory authority within the meaning of RODO is the President of the Personal Data Protection Office, who as of 25 May 2018 replaced GIODO.
More information can be found HERE