PRIVACY POLICY

For the Owner of this website, the protection of Users' personal data is a matter of the utmost importance. The Owner makes every effort to ensure that Users feel safe when entrusting their personal data while using the website.

A User is a natural person, a legal person, or an organisational unit without legal personality to which the law grants legal capacity, using the electronic services available through the website.

This privacy policy explains the rules and scope of the processing of the User's personal data, the rights to which the User is entitled and the obligations of the controller of that data, and also provides information on the use of cookies.

The Controller applies state-of-the-art technical measures and organisational solutions that ensure a high level of protection of the personal data processed and safeguard it against access by unauthorised persons.

The controller of personal data is PROFIALU Sp. z o.o. with its registered office at: 05-090 Dawidy Bankowe, ul. Rumiankowa 7, Poland, entered in the register of entrepreneurs kept by the District Court in Warsaw, 14th Commercial Division, under KRS number 0000926446, NIP (tax identification number): 5342644163 (hereinafter: the “Owner”).

The Controller processes the User's personal data for the purpose of:

– establishing contact in connection with the User's enquiry,
– properly presenting commercial offers,
– concluding sales contracts
– analytical purposes, including optimising service processes on the basis of the course of sales and after-sales service processes, including complaints

This means that the data is needed in particular to:

conclude a contract;

settle accounts;

deliver the goods ordered by the User or perform the services;

The User may also consent to receiving information about new products and promotions, in which case the controller will also process personal data in order to send the User commercial information concerning, among other things, new products or services, promotions or sales.

Personal data is also processed in order to fulfil the legal obligations incumbent on the data controller and to carry out tasks in the public interest, including tasks related to security and defence or the storage of tax documentation.

Personal data may also be processed for the purposes of direct marketing of products, securing and pursuing claims or defending against claims by the User or a third party, as well as marketing of the services and products of third parties or own marketing that is not direct marketing.

The Controller processes the following personal data, the provision of which is necessary to:

make purchases through the website:

– first name and surname;
– gender;
– delivery address;
– telephone number;
– email address;

Data provided by the User optionally:

– date of birth;
– PESEL number (Polish national identification number), where an invoice is requested;
– NIP number (tax identification number), where an invoice is requested for a business.

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, p. 1–88, hereinafter: the “GDPR”.

The Controller processes personal data solely after obtaining the User's consent at the moment of confirming a transaction made on the website.

3. Giving consent to the processing of personal data is entirely voluntary; however, failure to give it makes it impossible to make purchases through the website.

The User may at any time request information from the controller on the scope of the processing of personal data.

The User may at any time request the correction or rectification of their personal data.

The User may at any time withdraw their consent to the processing of their personal data, without giving a reason. A request to cease processing may relate to a specific purpose of processing indicated by the User, e.g. withdrawal of consent to receive commercial information, or to all purposes of data processing. Withdrawal of consent for all purposes of processing will result in the User's account being deleted from the website, together with all of the User's personal data previously processed by the controller. Withdrawal of consent will not affect actions already taken.

The User may at any time request, without giving a reason, that the controller delete their data. A request for deletion of data will not affect actions already taken. Deletion of data means the simultaneous deletion of the User's account, together with all personal data stored and processed by the controller to date.

The User may at any time object to the processing of personal data, either in respect of all of the User's personal data processed by the controller, or only to a limited extent, e.g. in respect of processing for a specifically indicated purpose. An objection will not affect actions already taken. Lodging an objection will result in the deletion of the User's account, together with all personal data stored and processed by the controller to date.

The User may request a restriction on the processing of personal data, whether for a specified period or without a time limit but within a specified scope, which the controller will be obliged to comply with. This request will not affect actions already taken.

The User may request that the controller transfer the User's processed personal data to another entity. To do so, the User should write a request to the controller, indicating to which entity (name, address) the User's personal data is to be transferred and precisely which data the User wishes the controller to transfer. After the User confirms their request, the controller will transfer the User's personal data to the indicated entity in electronic form. Confirmation of the request by the User is necessary for the security of the User's personal data and to make certain that the request comes from an authorised person.

The Controller will inform the User of the actions taken within one month of receiving any of the requests listed in the preceding points.

As a rule, personal data is stored only for as long as is necessary to fulfil the contractual or statutory obligations for which it was collected. This data will be deleted immediately once its storage is no longer necessary for evidentiary purposes under civil law or in connection with a statutory obligation to retain data.

Information concerning a contract is stored for evidentiary purposes for a period of three years, starting from the end of the year in which the business relationship with the User ended. The data will be deleted after the statutory limitation period for pursuing contractual claims has expired.

In addition, the controller may retain archival information concerning concluded transactions, as its storage is connected with claims to which the User is entitled, e.g. under a statutory warranty.

If no contract has been concluded between the User and the Owner, the User's personal data is stored until the User's account on the website is deleted. The account may be deleted as a result of a request by the User, withdrawal of consent to the processing of personal data, or an objection to the processing of that data.

The Controller may entrust the processing of personal data to entities cooperating with the controller, to the extent necessary to carry out a transaction, e.g. in order to prepare the ordered goods and deliver shipments, or to pass on commercial information originating from the controller (the latter applies to Users who have consented to receiving commercial information).

Apart from the purposes indicated in this Privacy Policy, Users' personal data will not be disclosed to third parties in any way or passed on to other entities for the purpose of sending those third parties' marketing materials.

The personal data of the website's Users is not transferred outside the European Union.

4. This Privacy Policy complies with the provisions of Article 13(1) and (2) of the GDPR.

The website uses cookies or similar technology (hereinafter collectively referred to as: “cookies”) to collect information about the User's access to the website (e.g. via a computer or smartphone) and the User's preferences. They are used, among other things, for advertising and statistical purposes and to tailor the website to the User's individual needs.

Cookies are pieces of information containing a unique reference code, which the website sends to the User's device in order to store, and sometimes track, information about the device being used. They do not usually allow the User to be identified as a person. Their main purpose is to better adapt the website to the User.

Some of the cookies present on the website are available only for the duration of a given internet session and expire when the browser is closed. Other cookies are used to remember the User, who is recognised when returning to the website. They are then retained for a longer period.

The cookies used on this website are:

esci: 1 month, __Secure_CASTGC: deleted when the browser is closed, __Secure_ECAS_SESSIONID: deleted when the browser is closed, has_js: deleted when the browser is closed

All cookies present on the website are set by the controller.

All cookies used by this website comply with applicable European Union law.

Most Users and some mobile browsers automatically accept cookies. Unless the User changes the settings, cookies will be saved in the device's memory.

The User may change their preferences regarding the acceptance of cookies or change the browser in order to receive an appropriate notification each time the cookie function is set. To change the cookie acceptance settings, adjust the settings in the browser.

Please remember that blocking or deleting cookies may make it impossible to make full use of the website.

Cookies will be used for essential session management, including:

Creating a special login session for the User of the website, so that the website remembers that the User is logged in and that their requests are delivered effectively, securely and consistently;

Recognising a User who has previously visited the website, which makes it possible to identify the number of unique users who have used the service and to ensure that the service has sufficient capacity for the number of new users;

Recognising whether a person visiting the website is registered on the website;

Recording information from the User's device, including cookies, IP address and information about the browser used, in order to be able to diagnose problems, administer the site and track its use;

Adapting elements of the graphic layout or the content of the website;

Collecting statistical information on how the User uses the site, in order to be able to improve the site and determine which areas of the website are most popular with Users.