Privacy Policy

Privacy policy for customers of Amplus S.C. Witold Wlazeł Paweł Wlazeł.

I. Data Administrator Details:
We kindly inform you that the administrator of your personal data is Witold Wlazeł, Paweł Wlazeł, with its registered office at 191 Aleksandrowska Street, 91-155 Łódź, Entrepreneur register no: 24301, issued by the office of the city of Łódź, Łódź Widzew delegation, Entrepreneur register no: 52860, issued by the office of the city of Łódź, Łódź Górna delegation, and using NIP No. 728-279-09-32, hereinafter referred to as the “Company”. Contact with the Company regarding the protection of personal data is possible at the following e-mail address: biuro@foliaokienna.pl.

II. Purposes and grounds for processing personal data
In order to provide services in accordance with the scope of our activities, the Company processes your personal data – for various purposes, but always in accordance with the law. Below you will find the specified purposes of processing your personal data, together with the legal basis.

In order to process the order placed by you, we process such personal data as:
Name,
Address of residence/delivery address,
Tax identification number (NIP) – in the case of natural persons conducting business activity,
E-mail address – if the order was placed through it
Phone number – if provided

The legal basis for such processing is Article 6(1)(b) of the RODO, which allows us to process personal data if the processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject prior to entering into a contract.

In order to process a complaint, we process such personal data as:
name (if provided),
e-mail address,
order number,
possibly residential address – if a refund is made,
possibly bank account number – if a refund is made.
The legal basis for such data processing is Article 6(1)(b) of the RODO, which allows us to process personal data if it is necessary for the performance of a contract or taking steps to enter into a contract;

In order to inform you about our offers (after signing up for the newsletter), we process such personal data as:
E-mail address,
Name,
Address of residence,

The legal basis for such processing is Article 6(1)(a) of the RODO, which allows us to process personal data if the data subject has consented to the processing of his/her personal data for this purpose.

In order to contact us by phone on matters related to the execution of the contract, we process such personal data as:
telephone number,
order number

• insofar as you are interested in the form of telephone contact (we do not require mandatory provision of a telephone number).

The legal basis for such processing is Article 6(1)(a) of the RODO, which allows us to process personal data on the basis of voluntarily given consent;

In order to issue an invoice and fulfill other obligations under tax law, such as keeping accounting records for 5 years, we process such personal data as:
name,
company,
residential or business address,
tax identification number,
order number.

The legal basis for such processing is Article 6(1)(c) of the RODO, which allows processing of personal data if such processing is necessary for the Data Controller to comply with its obligations under the law;

In order to create records and registers related to the RODO, including, for example, a register of customers who have objected in accordance with the RODO, we process such personal data as:
name,
email address,
because firstly, the RODO regulations impose certain documentation obligations on us to demonstrate compliance and accountability, and secondly, if you object, for example, to the further processing of your personal data for marketing purposes (marketing purposes are always carried out only with prior consent and after signing up for a newsletter), we need to know to whom not to apply direct marketing because they do not wish it.

The legal basis for such processing is, first, Article 6(1)(c) of the RODO, which allows us to process personal data if such processing is necessary for the Data Controller to comply with its obligations under the law; second, Article 6(1)(f) of the RODO, which allows us to process personal data if, by doing so, the Data Controller pursues its legitimate interest (in this case, the Company’s interest is to have knowledge of individuals who are exercising their rights under the RODO);

For the purpose of establishing, investigating or defending against claims, we process such personal data as:
name or possibly company,
residence/delivery address (if provided),
PESEL number or NIP number (if provided),
e-mail address,
IP,
order number.

The legal basis for such processing is Article 6(1)(f) of the RODO, which allows us to process personal data if, by doing so, the Data Controller pursues its legitimate interest (in this case, the Company’s interest is to have personal data to establish, assert or defend against claims, including those of customers and third parties);

For archival and evidentiary purposes, we process such personal data as:
name,
residence/delivery address,
e-mail address,
order number

• for the purpose of securing information that can be used to prove facts of legal significance. The legal basis for such processing is Article 6(1)(f) of the RODO, which allows us to process personal data if, by doing so, the Data Controller pursues its legitimate interest (in this case, the Data Controller’s interest is to have personal data to prove certain facts related to the performance of services, e.g. when some state authority requests it);

In order to use cookies on the website, we process such textual information (cookies will be described in a separate section). The legal basis for such processing is Article 6(1)(a) of the RODO, which allows us to process personal data on the basis of voluntarily given consent (the first time you access the website, you are asked to consent to the use of cookies);

In order to administer the website, we process such personal data as:
IP address,
date and time of the server,
web browser information,
information about the operating system

• This data is recorded automatically in the so-called server logs, every time the website belonging to the Company is used. Administration of the website without the use of the server and without this automatic recording would not be possible. The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows the processing of personal data if by doing so the Data Controller pursues its legitimate interest (in this case the Company’s interest is the administration of the website the Company);
  

  III. Right to withdraw consent
  1.If the processing of personal data is based on consent, you may withdraw that consent at any time – at your discretion.

If you would like to withdraw your consent to the processing of personal data, it is sufficient to:
-send an email directly to the Company at biuro@foliaokienna.pl or
-click on the link in the e-mail, attached at the end of the message

If the processing of your personal data was carried out on the basis of your consent, revoking it does not make the processing of your personal data illegal up to that point. In other words, until you revoke your consent, we have the right to process your personal data, and revoking it does not affect the legality of the previous processing.

IV. Requirement of personal data.
1.Providing any personal data is voluntary and at your discretion. However, in some cases, the provision of certain personal data is necessary to meet your expectations in using the services we offer.

In order to transfer the goods purchased from us, it is necessary to provide your name and delivery address – without this we are unable to fulfill the contract concluded with you.

To be able to contact us by e-mail, it is necessary to provide your e-mail address-without this we are not able to respond to questions asked via e-mail.

V. Automated decision-making and profiling
We kindly inform you that we do not perform automated decision-making, including based on profiling.

VI. Recipients of personal data

Like most businesses, we use other entities in our operations, which sometimes involves the transfer of personal data. Therefore, if necessary, we transfer your personal data to our contractors (accounting office, courier – for the purpose of delivery).

In addition to this, it may happen that, for example, on the basis of a relevant legal provision or a decision of a competent authority, we may also have to provide your personal data to other entities, whether public or private. Therefore, it is extremely difficult for us to predict who may come forward with a request for personal data. Nevertheless, for our part, we assure you that we analyze each case of request for sharing personal data very carefully and very thoroughly, so that we do not inadvertently provide information to an unauthorized person.

VII. Transfer of personal data to third countries
We kindly inform you that your personal data is not transferred outside the European Economic Area.

VIII. Period of processing of personal data

In accordance with applicable laws, we do not process your personal data “indefinitely”, but for the period of time that is necessary to achieve the designated purpose. After this period, your personal data will be irreversibly deleted or destroyed.

In a situation where we do not need to perform operations on your personal data other than storing them (e.g., processing of complaints), until permanent deletion or destruction we additionally secure them – by pseudonymization. Pseudonymization involves encrypting personal data or a set of personal data in such a way that it cannot be read without an additional key, and therefore such information becomes completely useless to an unauthorized person.

2.1 Regarding the specific processing periods for personal data, we kindly inform you that we process personal data for the period:
duration of the contract – with regard to personal data processed for the purpose of concluding and performing the contract;
3 years or 10 years + 1 year – with regard to personal data processed for the purpose of establishing, asserting or defending claims (the length of the period depends on whether both parties are entrepreneurs or not);
6 months – with regard to personal data that was collected in the valuation of a service, while there was no immediate conclusion of the contract;
5 years – for personal data involving compliance with tax law obligations;
until the withdrawal of consent or the achievement of the purpose of processing, but for no longer than 5 years – with regard to personal data processed on the basis of consent;
until an effective objection is raised or the purpose of the processing is achieved, but for no longer than 5 years – with respect to personal data processed on the basis of the legitimate interests of the Personal Data Administrator or for marketing purposes;
until obsolete or no longer useful, but for no longer than 3 years – with respect to personal data processed primarily for analytical purposes, use of cookies and website administration.

2.2 We count periods in years from the end of the year in which we began processing personal data in order to streamline the process of deletion or destruction of personal data. Counting the period separately for each concluded contract would involve significant organizational and technical difficulties, as well as a significant financial outlay, so establishing a single date for the deletion or destruction of personal data allows us to manage this process more efficiently. Of course, in the event that you exercise your right to forget, such situations are considered on a case-by-case basis.

2.3 The additional year associated with the processing of personal data collected for the performance of a contract is dictated by the fact that, hypothetically, you may make a claim moments before the expiration of the statute of limitations, the demand may be served with a significant delay, or you may misstate the statute of limitations for your claim.

IX. Rights of data subjects

We kindly inform you that you have the right to:
access to your personal data;
rectification of your personal data;
erasure of personal data;
restriction of the processing of your personal data;
object to the processing of your personal data;
portability of personal data.

We respect your rights under data protection laws and strive to facilitate the exercise of these rights to the greatest extent possible.

We point out that the enumerated rights are not absolute, and therefore, in certain situations, we may lawfully refuse you. However, if we refuse to grant a request, we do so only after careful consideration and only in situations where denial of the request is necessary.

Regarding your right to object, we explain that you have the right to object at any time to the processing of personal data on the basis of the Data Controller’s legitimate interests (these are listed in Section III) in relation to your particular situation. However, you must keep in mind that, in accordance with the regulations, we may refuse to consider your objection if we demonstrate that:
there are legitimate grounds for processing that override your interests, rights and freedoms, or
there are grounds for establishing, asserting or defending claims.

In addition, you may object at any time to the processing of your personal data for marketing purposes. In such a situation, upon receipt of your objection, we will cease processing for this purpose.

You may exercise your rights by:
sending an email directly to the Company at biuro@foliaokienna.pl

X. Right to file a complaint
If you believe that your personal data is being processed in violation of applicable law, you may file a complaint with the President of the Office for Personal Data Protection.

XI. Final provisions

To the extent not regulated by this Privacy Policy, the provisions of data protection law shall apply.

You will be notified by email of any changes made to this Privacy Policy.

This Privacy Policy is effective as of May 25, 2018.