Privacy Policy

www.sitodrukarniapolska.pl

Data Controller of the Website available at: www.sitodrukarniapolska.pl hereinafter referred to as the Website, is BIMAX PRINT sp. z o.o. with its registered office in Krosno at: ul. Armii Krajowej 3, 38-400 Krosno, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Rzeszów, XII Economic Department of the National Court Register, under KRS number: 0000575049, NIP: 6842641292, REGON: 362458075, hereinafter referred to as the Data Controller.
2. Any enquiries, requests, complaints regarding the processing of personal data by the Personal Data Controller, hereinafter referred to as Submissions, should be addressed to the following e-mail address: kontakt@sitodrukarniapolska.pl or in writing to Armii Krajowej 3, 38-400 Krosno. The content of the Notification must clearly indicate:
1. the details of the person or persons to whom the Report relates,
2. the event that gave rise to the complaint,
3. present your demands and the legal basis for these demands,
4. indicate the expected manner of settling the case.
We collect the following personal data on our Website:
1. name – may be processed when you, as a user of our Website, provide it to us by email, when contacting us by telephone, via the contact form available on our Website or by traditional means,
2. telephone number – this may be processed when you contact us by telephone, or when you provide it to us via e-mail, via the contact form available on our Website, or by post,
3. e-mail address – may be processed when you, as a user of the Website, provide it to us via e-mail, the contact form available on our Website, by post as well as when contacted by telephone,
4. IP address of the device and potential personal data contained in cookies – information resulting from the general principles of Internet connections, such as IP address (and other information contained in system logs), is used for technical and statistical purposes, including in particular the collection of general demographic information (e.g. about the region from which the connection is made). This type of data is also used for marketing and analytical purposes if consent is given under Article 173(1) of the Telecommunications Act,
5. possibly other data may be collected as part of the handling of specific cases or may be given to users of our Website via email, post or telephone contact.
Each person using our Website shall be able to choose whether and to what extent they wish to use our services and share information and data about themselves, to the extent set out in the contents of this Privacy Policy.
We process personal data for the purpose of:
1. concluding and performing contracts in connection with the services we offer (Art. 6(1)(b) GDPR) – in this respect, data will cease to be processed when the contract in question is fulfilled,
2. to comply with legal obligations incumbent on the Data Controller, in particular record keeping, issuing invoices, etc. (Art. 6(1)(c) GDPR) – in this respect, personal data will be deleted once certain legal obligations have been fulfilled,
3. targeting marketing content concerning the Data Controller and conducting website analytics in connection with the use of cookies (Article 6(1)(a) GDPR) – in this regard, personal data is processed until the end of the session or the deletion of cookies by the user, the withdrawal of consent or until an effective objection is made to processing for this purpose,
4. the operation of the website (Article 6(1)(f) GDPR in conjunction with Article 173(1) of the Telecommunications Law) – in this regard, personal data will cease to be processed when the cookie file expires, when the user deletes cookies or when the session in question ends, respectively,
5. ongoing communication related to the operation of the Website (Article 6(1)(f) GDPR, i.e. legitimate interest of Data Controller) – in this regard, your personal data will cease to be processed at the moment of answering a given question or inquiry,
6. to establish, assert or defend against claims (Article 6(1)(f) GDPR, i.e. the legitimate interest of the Personal Data Controller) – in this regard, your personal data will be deleted when the claims in question expire, but as a general rule after the expiry of the 3-year limitation period for claims.
The source of the Personal Data processed by the Controller is the data subjects.
We do not share any personal data with third parties without the express consent of the data subject. Personal data without the consent of the data subject may only be disclosed to entities under public law, i.e. authorities and administrations (e.g. tax authorities, customs and excise, law enforcement agencies and other entities empowered by generally applicable laws).
Personal data may be entrusted for processing to entities processing such data on our behalf as Personal Data Controller. In such a situation, we as the Personal Data Controller shall enter into an entrustment agreement with the processor for the processing of personal data. The processor shall process the entrusted personal data only for the purposes, to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence. Without the entrustment of personal data for processing, we would not be able to carry out our activities on the Website. As Data Controller, we entrust personal data for processing to the following entities in particular:
1. providing hosting services for the website on which our Website operates,
2. operating a CRM.
Personal data is not subject to profiling by us as a Personal Data Controller within the meaning of the provisions of the GDPR.
In accordance with the provisions of the GDPR, any person whose personal data we process as a Personal Data Controller has the right to:
1. access to his/her personal data, as referred to in Article 15 of the GDPR,
2. to be informed of the processing of their personal data as referred to in Article 12 of the GDPR,
3. to correct, complete, update, rectify personal data as referred to in Article 16 of the GDPR,
4. to withdraw consent at any time, as referred to in Article 7(3) GDPR,
5. erasure of data (right to be forgotten) as referred to in Article 17 GDPR,
6. the restriction of processing referred to in Article 18 GDPR,
7. data portability as referred to in Article 20 GDPR,
8. to object to the processing of personal data as referred to in Article 21 GDPR,
9. where the legal basis is consent, the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal,
10. not to be subject to the proﬁling referred to in Article 22 in conjunction with Article 4(4) of the GDPR,
11. to lodge a complaint with the supervisory authority (i.e. the President of the Office for the Protection of Personal Data) referred to in Article 77 of the GDPR.
If you wish to exercise your rights referred to in the preceding paragraph, please send a message by e-mail to the e-mail address or in writing to the postal address referred to in paragraph 2 above.
Each identified security breach shall be documented and, in the event of the occurrence of one of the situations set out in the provisions of the GDPR or the Act, the data subjects and, if applicable, the PUODO shall be informed of such security breach.
The Cookies Policy is a separate document located at: https://sitodrukarniapolska.pl/en/cookie-policy/
In matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply accordingly. In the event of any inconsistency between the provisions of this Privacy Policy and the aforementioned provisions, these provisions shall prevail.