Privacy policy
Firma PROFIL Spółka z ograniczoną odpowiedzialnością has prepared this Privacy Policy, which contains detailed information about the processing of personal data collected when visiting its websites.
1. General provisions.
- The owner of the website and, at the same time, the Controller of your personal data is Firma PROFIL Spółka z ograniczoną odpowiedzialnością,
z siedzibą w Słupsku, Przemyslowa 34. - Firma PROFIL Spółka z ograniczoną odpowiedzialnością has appointed a Data Protection Officer, who may be contacted in all matters concerning the processing of personal data and exercising rights related to such processing. To contact the Data Protection Officer of Firma Profil, you can send an email to iodo@profilgroup.com
- Because the use of our website involves collecting personal data of our users at various levels of detail, and guided by the requirements of applicable law as well as the need to respect and protect the privacy of our customers and other visitors to our website, we have created this privacy policy.
In particular, we state that the personal data of persons visiting our website
and using the offer of our online store are processed in accordance
with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the EU L No. 119, hereinafter referred to as the GDPR). - As the Controller, we have implemented the necessary technical and organizational measures to effectively protect the personal data we process against access by unauthorized persons. We encourage you to read this document, which explains in an accessible way the rules for collecting, modifying, sharing and deleting personal data.
2. Purpose of personal data processing.
- In the case of our website, our processing of personal data serves or may serve the following purposes:
- conducting correspondence with customers and providing them with all information
and answers to inquiries addressed to us, - personalizing the website, including presenting products and offers tailored to your needs,
- for our internal business purposes, such as data analysis, audits, developing new products, improving our website, improving our services and identifying user trends.
3. Voluntary provision of personal data.
- Providing your personal data is voluntary, but necessary for the provision of our services. If you do not provide this data, the service cannot be provided.
- Providing personal data for marketing purposes is voluntary. If you do not consent to the processing of personal data left by you while using websites, services and other functionalities, including data stored in cookies, your personal data will not be processed for this purpose. You can always delete cookies from your device, for example from your computer.
- Processing data for other purposes, such as adapting the content of the Service Provider websites to your interests, detecting bots and abuse in the services we provide, statistical measurements and improving these services, is necessary to ensure the high quality of our services. Failure to collect your personal data for these purposes may prevent the proper provision of services.
4. Method of data collection.
- When visiting our website, data is collected automatically or at the initiative of customers.
- Data such as the visitor IP address, internet service provider IP address, domain name, browser type and operating system will be collected automatically. This data is stored as system logs, but it is anonymous data and does not directly identify a person. Statistical data is also saved automatically, helping us better understand the needs of our customers and adapt our offer and the rules for using our website to those needs. Such statistical data includes, for example, visit time, region or country of visit. This data is completely anonymous and does not identify specific persons. It is collected only for statistical purposes.
5. Use and sharing of collected data.
- Collected personal data is used for statistical purposes to adapt and improve our website and is then completely anonymous.
- Under applicable law, as the personal data Controller we may be obliged to disclose the personal data of persons visiting our website to authorized authorities such as courts, the police or prosecutors. The group of entities authorized to obtain data and the rules for disclosing it are defined primarily by the Act of 29 August 1997 on personal data protection (Journal of Laws of 2002, No. 101, item 926, as amended).
6. Rights of persons whose personal data is processed by us.
- Every person has the right to access their personal data. Every person has the right to control the processing of personal data concerning them that is contained in the Controller data set.
- The right to request rectification and restriction of processing, for example if personal data is incorrect, imprecise or collected in an overly broad scope not justified by the purposes of processing, or deletion of data, for example when it was processed unlawfully.
- The right to withdraw consent given to the Controller for the processing of personal data, while withdrawal of consent does not affect processing carried out lawfully by the Controller before the withdrawal.
- The right to object to the processing of personal data carried out for the purposes of the legitimate interests pursued by the Controller or a third party, including in particular processing for marketing purposes, including profiling, if there are no other important legitimate grounds for processing overriding the interests of the customer.
- The right to data portability, meaning the right to receive from us your personal data in a structured, commonly used, machine-readable IT format. You may send this data to another data controller or request that we send your data to another controller. However, we will do this only if such transfer is technically possible. The right to data portability applies only to data that we process on the basis of a contract with you or on the basis of your consent.
- The right to lodge a complaint with the President of the Personal Data Protection Office.
7. Rules and period of personal data storage.
- Personal data of persons visiting our website, persons contacting us by email and persons using our NEWSLETTER is processed for different periods depending on the activity of those persons and the purposes of processing. Personal data is processed by us as the Controller in accordance with GDPR principles: lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, accountability, and may be processed only on one or more legal bases:
- the data subject has consented to the processing of their personal data for one or more specific purposes (Article 6(1)(a) GDPR).
- processing is necessary for compliance with a legal obligation to which the controller is subject (Article 6(1)(c) GDPR).
- processing is necessary to protect the vital interests of the data subject or another natural person.
- processing is necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring personal data protection, in particular where the data subject is a child. - Personal data collected by us is processed only for the period necessary to achieve the above purposes, and therefore in the case of:
- personal data collected on the basis of customer consent, for example NEWSLETTER, only until consent is withdrawn,
- data obtained in connection with correspondence, for the time necessary to provide an answer and information. - After the permitted period of personal data processing, we delete the data in a manner that prevents identification of the person whose data was processed.
8. Recipients of personal data.
- Personal data processed by us may be transferred by us to other entities, but only if we have an appropriate legal basis for doing so.
Such data may be transferred, for example, to state authorities such as courts, the police or prosecutors, supervisory authorities such as the President of the Personal Data Protection Office, our partners with whose help we perform contracts concluded with you or present our offer, for example an internet service provider, and our employees. Each transfer of personal data takes place only to the minimum extent necessary to achieve a given processing purpose, under our supervision and according to rules strictly agreed with the entity to which we transfer data.
9. Use of cookies.
- Our website uses cookies. These are small text files stored on the computers of persons visiting our store, including our customers. These files identify the visitor browser and are used for statistical purposes. They make it possible to assess how long someone uses our website, which subpages are used more often and what information users look for, which allows us to improve our website. In addition, cookies make it possible to maintain the session of a logged-in customer so that the customer does not have to re-enter their login and password on each subpage. The cookies we use do not negatively affect the operation of our customers computers and do not modify or damage data on those computers.
- We use two types of cookies:
- session cookies, meaning temporary files stored on the computer of a person visiting our store only until logging out or leaving our website.
- persistent cookies, meaning files stored on the computer of a person visiting our website for the time specified in the cookie parameters or until they are deleted by the user. - When opening our website, we clearly inform users about the use of cookies, ask for their consent and provide a link to the subpage containing this document, which sets out the rules for using these files.
- Visitors to our website and our customers do not have to consent to our use of cookies. Users may, by modifying the software installed on their computer, including by properly setting the parameters of their web browser, for example by selecting the option to automatically reject cookies, limit or even prevent cookies from accessing their computers. However, we note that rejecting all cookies may affect the efficiency and correctness of using our website, for example it may make it difficult to use functions that require cookies.
10. Changes to the Privacy Policy.
- The owner and Controller of the website reserves the right to change the applicable Privacy Policy, which may result from changes in applicable law or the need to adapt this policy to changes or expansion of our offer. All changes will be announced with an appropriate notice, the date of change and appropriate highlighting, in bold, of the changed provisions for 14 days.
- If you need additional information about the rules of the privacy policy we apply, please contact us by email at iodo@profilgroup.com