PRIVACY POLICY

PRIVACY POLICY GONDEK SP. Z O.O.

Effective date: 7 December 2018

This privacy policy describes the rules concerning the processing and protection of personal data collected and processed as part of the use of the gondek.com.pl website, including the rules on the collection and processing of cookies.

• DEFINITIONS

• 1. The terms indicated below and appearing in the text of this privacy policy have the following meanings:

• CONTROLLER

• 1. Gondek sp. z o.o. is the Controller of your personal data concerning, collected and processed in connection with your use of the website.
  2. The Controller collects your personal data by way of forms on the website (contact, registration, newsletter, other forms).
  3. Personal data collected by the Controller include:

• for use of the contact form – e-mail address; first name and last name
• for use of the registration form – e-mail address, name, address, telephone number; details of business (company name, registered office address, VAT number, if applicable, delivery address)
• for the use of the newsletter form – e-mail address

• PURPOSES OF DATA PROCESSING

• 1. The Controller processes personal data concerning you for the purposes and on the basis of the legal grounds indicated below:

• where the processing is necessary for the performance of a contract to which the Controller and the user are parties, or to take steps prior to entering into a contract, i.e. based on Article 6(1)(b) of RODO – 
  
  • fulfilment of contractual obligations, including order processing,
  • contacting the user who is a party to the contract, 
  • the provision of electronic services in the form of account registration on the website and providing access to the website’s functionality,
  • handling complaints. 
• when the processing is necessary for the fulfilment of a legal obligation incumbent on the Controller, i.e. based on Article 6(1)(c) of RODO – billing, keeping accounts,
• when the processing is necessary for the purposes of the Controller’s legitimate interests, i.e. based on Article 6(1)(f) of RODO:
  
  • answering a question submitted by using the contact form,
  • carrying out direct marketing of the Controller’s products and services, including by way of sending an ordered newsletter,
  • establishing, seeking or defending claims.

• COOKIES AND OTHER TECHNOLOGIES

• 1. Cookies are small files stored on the user’s terminal device when the user uses the website. The use of the website involves the collection of cookies by the Controller.
  2. The Controller collects cookies in two ways: (1) through the website, which collects and saves information only on the most recently viewed products (approximately 10 most recently viewed products); (2) through integration with external tools, resulting in the collection of data through the website under the terms of the third parties indicated in point 4.9 of this policy.
  3. Cookies allow the Controller to adapt the website and the offer to the needs and interests of the user.
  4. The information in the collected cookies may be data regarding the user’s visit to the website, including in particular the user’s IP address, domain name and browser, information about the operating system of the user’s device.
  5. The Controller uses the indicated cookies to:

• facilitate your use of the website, including maintaining your session on the website, remembering your settings, etc.;
• tracking user traffic on the website;
• statistical purposes; and
• advertising purposes, for example by providing users with advertising content.

1. Cookies are not used to send you information by telephone, e-mail or post – they are only used for the purposes indicated under point 4.5 above using the website.
2. The website may use technologies similar to cookies, for example plug-ins.
3. The Controller uses the types of cookies indicated below:
   
   • session cookies – these are used to remember a particular user for a single visit to the site and, among other things, to maintain a login session for that visit;
   • functional cookies – used for basic website functionality, e.g. to remember pages visited by the user;
   • analytical cookies – these are used to obtain analytical and statistical information about the user’s visits to the website;
   • advertising cookies – these are used to measure the effectiveness of advertisements targeted at website users.

1. The following third parties may collect cookies during your visits to the website, according to the terms specified by them:

1. • tools for statistical and advertising purposes:
     
     • eDrone – https://edrone.me/pl/cookie 
     • Google Analytics – https://policies.google.com/privacy; https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage 
   • price comparison sites:
     
     • Ceneo.pl – http://info.ceneo.pl/polityka_plikow_cookies 
     • Okazje.info – http://grupa.okazje.info.pl/polityka-cookie.html 
   • online shop rating services:
     
     • Opineo – https://www.opineo.pl/i/informacje-o-ciastkach 

1. You can manage their cookie settings from the web browsers they use. Examples of information from individual browser providers are listed below:

1. • Chrome – https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=pl
   • Firefox – https://support.mozilla.org/pl/kb/ciasteczka
   • Internet Explorer – https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-cookies 
   • Opera – http://help.opera.com/Windows/12.10/pl/cookies.html
   • Safari – https://support.apple.com/kb/ph21411?locale=pl_PL
   • Other – http://wszystkoociasteczkach.pl/

1. Session cookies are stored on the user’s device until the end of the relevant session, i.e. until the user logs out or leaves the website. Persistent cookies are stored on the user’s terminal device for a limited period of time (between 1 month and 2 years) or until they are deleted from the terminal device.
2. The Controller stipulates that deleting or disabling the collection of certain types of cookies may result in the incorrect operation of selected parts of the website and may impair the quality of use of the website. This effect is caused by the structure of the website and the dependence of the functioning of selected parts of the website on the information contained in the cookies (e.g. the function of remembering the login data between sessions after disabling the collection of session cookies will not function properly).

• RIGHTS CONCERNING DATA PROCESSING

• 1. You the following rights with regard to the personal data concerning you:

• Right to information – you have the right to be informed about the processing of personal data concerning you by the Controller; 
• Right of access – you have the right to be informed by the Controller whether or not your personal data are being processed and to obtain access to them;
• Right to rectification of data – you have the right to request the Controller to immediately rectify any inaccurate data concerning you; in addition, you have the right to request the Controller to complete any incomplete personal data concerning you;
• Right to erasure (“right to be forgotten”) – you have the right, in the cases set out in Article 17(1) of RODO, to request the Controller to erase personal data concerning you;
• Right to restrict processing – you have the right to request the Controller to restrict the processing of data relating to you in the cases indicated in Article 18(1) of RODO; in this case, the Controller may only process personal data relating to you (in addition to storage) with your consent or in order to establish, investigate or defend claims, or to protect the rights of another natural or legal person, or for compelling reasons of public interest of the European Union or of a Member State;
• Right to data portability – you have the right to receive data concerning you from the Controller in a structured, commonly used, machine-readable format, as well as the right to have such data sent to another controller if the processing is carried out by automated means; 
• Right to object to data processing – you have the right to object to the processing of your data on grounds relating to your particular situation, where the data are processed for the performance of a task carried out in the public interest or resulting from the legitimate interests of the Controller;
• Right to withdraw consent – you have the right to withdraw your consent to the processing of your personal data if it is the basis for the Controller’s processing of your data; however, the withdrawal of consent does not affect the lawfulness of the processing carried out before the withdrawal of consent;
• Right not to be subject to automated decision-making – you have the right not to be subject to decisions based solely on automated data processing, including in particular profiling, except as indicated in Article 22(2) of RODO (e.g. the processing is based on your consent);
• The right to lodge a complaint with a supervisory authority – you have the right to lodge a complaint with a supervisory authority (in Poland this is the President of the Office for Personal Data Protection) if you consider that the processing of personal data concerning you is taking place in violation of the provisions of the Regulation.

1. You may exercise your rights by sending the relevant notification to gondek@gondek.com.pl or in writing to: GONDEK Sp. z o.o., ul. 3 Maja 14, 34-143 Lanckorona or via the contact form available on the Controller’s website. Your notification should contain information allowing for the verification of your identity.
2. In order to lodge a complaint with a supervisory authority, a corresponding notification must be sent to the President of the Data Protection Authority (more information is available at https://uodo.gov.pl/).

• DATA PROCESSING PERIOD

• 1. The Controller will process personal data for the period necessary for the purposes for which the data were collected, in accordance with the applicable legal provisions; thereafter, the data will be stored for the purposes, to the extent and for as long as required by law, including for the establishment, investigation or defence of claims.
  2. If your personal data is processed on the basis of your consent, the Controller will process it until you withdraw your consent; however, withdrawal of consent does not affect the lawfulness of the processing carried out prior to its withdrawal.
  3. Where personal data is processed on the basis of a legitimate interest of the Controller, the processing will continue until an objection to such processing is lodged, subject to the exceptions indicated in Article 21(1) RODO.

• DATA PROTECTION MEASURES

• 1. The Controller will apply technical and organisational measures designed to protect personal data against breaches.
  2. The Controller’s measures include: securing IT systems with anti-virus software, implementing security procedures, encrypting connections using SSL.

• RECIPIENTS OF THE DATA

• 1. The Controller uses the personal data collected in accordance with the purposes indicated in this policy.
  2. The Controller may transfer the personal data collected to the following categories of recipients: web hosts, commercial agents, postal operators, couriers, hosting/server service providers and IT entities, legal and debt recovery service providers.
  3. The Customers’ data may be made available to entities authorised to receive them under applicable laws, including the competent judicial authorities. The Customers’ personal data may be transferred to third parties in cases indicated by GONDEK Sp. z o.o. and with the Customers’ consent.

• TRANSFER OF DATA TO THIRD COUNTRIES
• The Controller does not currently transfer your personal data to third countries (located outside the European Economic Area).
• If a decision is made to transfer data to a third country, you will be informed accordingly of the terms and purposes of such transfer.

• PROTECTION OF CHILDREN

• 1. The content on the website is not intended for persons under the age of 18.
  2. If the Controller becomes aware of the transmission of data concerning a person under 18 years of age, the Controller will immediately cease the processing of such data and, in addition, delete it and call upon the recipients of such data to do the same.

• FINAL PROVISIONS

• 1. Any queries or comments regarding this policy should be sent to the following address: gondek@gondek.com.pl. 
  2. In matters not covered by this policy, the provisions of Polish law and RODO are applicable.
  3. This policy is available for download here: https://gondek.com.pl/polityka-prywatności