Industrial Hall

1. Data Controller and Definitions

1. The controller of personal data of Customers/Users of the Online Store, also referred to as the Seller, is: Bogumił Włosiński Firma Cracow Consulting Company, telephone number: 570150895, 510149017, NIP: 677-002-24-37, REGON: 350534590.
2. You can contact the Data Administrator:
   1. at the correspondence address: Stojowice 72, 32-410 Dobczyce;
   2. at the e-mail address: sklep@promiennik.sklep.pl.
3. User – a natural person entering the website/pages of the Online Store or using the services or functionalities described in this Privacy and Cookies Policy.
4. Customer – a natural person with full legal capacity, a natural person who is a Consumer, a legal person or an organizational unit without legal personality, to which the law grants legal capacity, who concludes a Distance Selling Agreement with the Seller.
5. Online Store – an internet service operated by the Seller, available at the following electronic addresses (websites): https://promiennik.sklep.pl , through which the Customer/User may obtain information about the Goods and their availability, as well as purchase the Goods or order the provision of a service.
6. Newsletter – information, including commercial information within the meaning of the Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws of 2020, item 344) originating from the Seller sent to the Customer/User electronically; its receipt is voluntary and requires the consent of the Customer/User.
7. Account – a set of data stored in the Online Store and in the Seller’s IT system regarding a given Customer/User and the orders placed by him/her and the contracts concluded, with the use of which the Customer/User may place orders and conclude contracts.
8. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

2. Purposes, legal basis and duration of data processing

1. In order to execute the Distance Selling Agreement, the Seller processes:
   1. information about the User’s device in order to ensure the correct operation of the services: the computer’s IP address, information contained in cookies or other similar technologies, session data, web browser data, device data, data about activity on the Website, including on individual subpages;
   2. geolocation information, if the User has consented to the service provider’s access to geolocation. Geolocation information is used to provide more tailored product and service offers;
   3. Users’ personal data: first name, last name, registered office address, correspondence address, e-mail address, telephone number, Tax Identification Number, bank account number or other personal data the provision of which is necessary to complete the purchase and which the Administrator requires to be provided in the purchasing process.
2. This information does not contain data regarding the identity of Users, but in combination with other information may constitute personal data and therefore the Administrator provides it with full protection under the GDPR.
3. These data are processed in accordance with Article 6(1)(b) of the GDPR, for the purpose of providing the service, i.e., the contract for the provision of services electronically in accordance with the Terms and Conditions, and in accordance with Article 6(1)(a) of the GDPR, in connection with consent to the use of certain cookies or other similar technologies, expressed through appropriate browser settings in accordance with the Telecommunications Law, or in connection with consent to geolocation. The data are processed until the Customer/User terminates their use of the Online Store.
4. The Controller undertakes to take all measures required under Article 32 of the GDPR, i.e., taking into account the state of technical knowledge, the cost of implementation and the nature, scope and purposes of processing as well as the risk of violation of the rights and freedoms of natural persons of varying likelihood and severity, the Controller implements appropriate technical and organisational measures to ensure a level of security appropriate to that risk.

3. Marketing activities of the administrator

1. The Data Controller may post marketing information about its products or services on the Online Store website. This content is displayed by the Data Controller in accordance with Article 6(1)(f) of the GDPR, i.e., in accordance with the Data Controller’s legitimate interest in publishing content related to the services provided and promotional content for campaigns in which the Data Controller is involved. At the same time, this activity does not violate the rights and freedoms of Customers/Users. Customers/Users expect to receive similar content, or even expect it, or it is their direct purpose in visiting the Online Store website(s).

4. Recipients of user data

1. The Data Controller discloses users’ personal data only to processors under concluded personal data processing agreements for the purpose of providing services to the Data Controller, e.g. hosting and operation of the Website, IT services, marketing and PR services.

5. Transfer of personal data to third countries

1. Personal data will not be processed in third countries.

6. Rights of data subjects

1. Every data subject has the right to:
   1. Access (Article 15 of the GDPR) – obtaining confirmation from the Data Controller as to whether their personal data are being processed. If data about a person is being processed, they are entitled to access it and obtain the following information: the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the data have been or will be disclosed, the data storage period or the criteria for determining them, the right to request rectification, erasure, or restriction of the processing of personal data of the data subject, and to object to such processing;
   2. to receive a copy of the data (Article 15, paragraph 3 of the GDPR) – to obtain a copy of the data subject to processing, the first copy being free of charge, and for subsequent copies the Data Controller may impose a reasonable fee resulting from administrative costs;
   3. to rectify (Article 16 of the GDPR) – to request the rectification of personal data concerning you that is incorrect or the completion of incomplete data;
   4. to delete data (Article 17 of the GDPR) – to request the deletion of your personal data if the Data Controller no longer has a legal basis for processing them or the data are no longer necessary for the purposes of processing;
   5. to restrict processing (Article 18 of the GDPR) – request the restriction of the processing of personal data when:
      1. the data subject questions the accuracy of the personal data – for a period enabling the Data Controller to check the accuracy of such data,
      2. the processing is unlawful and the data subject opposes their deletion, requesting the restriction of their use,
      3. The data controller no longer needs the data, but the data subject requires it to establish, pursue or defend legal claims,
      4. the data subject has objected to the processing – until it is determined whether the legitimate grounds on the part of the controller override the grounds for objection of the data subject;
   6. to transfer data (Article 20 of the GDPR) – to receive personal data concerning him/her, which he/she provided to the Data Controller, in a structured, commonly used and machine-readable format, and to request the transmission of such data to another Data Controller, if the data are processed on the basis of the consent of the data subject or a contract concluded with him/her and if the data are processed by automated means;
   7. To object (Article 21 of the GDPR) – to object to the processing of their personal data for the legitimate purposes of the controller, for reasons relating to their particular situation, including profiling. In such a case, the Data Controller assesses the existence of compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subjects, or grounds for establishing, pursuing, or defending legal claims. If, according to the assessment, the interests of the data subject outweigh the interests of the Controller, the Data Controller will be obliged to cease processing the data for these purposes;
   8. to withdraw consent at any time and without providing any reason, but the processing of personal data carried out prior to the withdrawal of consent will continue to be lawful. Withdrawal of consent will result in the Controller ceasing to process personal data for the purpose for which consent was given.
2. In order to exercise the above-mentioned rights, the data subject should contact the Data Controller using the contact details provided and inform him/her which right and to what extent he/she wishes to exercise.

7. President of the Personal Data Protection Office

1. The data subject has the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office with its registered office in Warsaw, ul. Stawki 2, who can be contacted as follows:
2. by post: ul. Stawki 2, 00-193 Warsaw;
3. via the electronic mailbox available at: https://www.uodo.gov.pl/pl/p/kontakt ;
4. Hotline: 606-950-000.

8. Data Protection Officer

1. The Data Controller has not appointed a Data Protection Officer. In all matters relating to the processing of personal data and the exercise of rights under the GDPR, data subjects may contact the Data Controller directly using the contact details provided in this Privacy Policy.

9. Changes to the Privacy Policy

1. The privacy and cookies policy may be supplemented or updated in accordance with the current needs of the Administrator in order to provide up-to-date and reliable information to Customers/Users.

10. Cookies

1. The online store performs the functions of obtaining information about Customers, Users and their behavior in the following way:
   1. through information voluntarily entered in forms for purposes resulting from the function of a specific form;
   2. by saving cookie files (so-called “cookies”) in end devices;
   3. by collecting web server logs by the hosting operator of the Online Store (necessary for the proper operation of the website).
2. Cookies are computer data, specifically text files, stored on the Customer’s/User’s end device and intended for use with the Online Store. Cookies typically contain the name of the website they originate from, the duration of their storage on the end device, and a unique number.
3. The Online Store uses cookies only after the Customer/User has provided prior consent in this regard. Consent to the Online Store’s use of all cookies is granted by clicking the “Close” button when the Online Store’s cookie usage notification is displayed, or by closing the notification.
4. If the Customer/User of the Online Store does not consent to the use of cookies by the Online Store, they may use the option: “I do not consent”, also available in the communication on the use of cookies by the Online Store, or make changes to the settings of the web browser they are currently using (however, this may result in incorrect operation of the Online Store website).
5. To manage cookie settings, select your web browser/system from the list and follow the instructions: Internet Explorer, Chrome, Safari, Firefox, Opera, Android, Safari (iOS), Windows Phone.
6. The legal basis for the processing of personal data from cookies is the legitimate interests of the Data Controller, consisting in providing high-quality services and ensuring the security of services.
7. The Online Store uses two basic types of cookies: “session cookies” and “persistent cookies.” “Session” cookies are temporary files that are stored on the User’s end device until logging out, leaving the Online Store, or disabling the software (web browser). “Persistent” cookies are stored on the Customer/User’s end device for the time specified in the cookie parameters or until they are deleted by the Customer/User.

8. Cookies are used for the following purposes:
   1. creating statistics that help understand how Customers/Users of the Online Store use websites, which allows for the improvement of their structure and content;
   2. maintaining the Customer/User session (after logging in), thanks to which the Customer/User does not have to re-enter the login and password on each subpage of the Online Store;
   3. determining the Customer/User profile in order to display product recommendations and tailored materials in advertising networks, in particular the Google network.
9. Web browsing software (web browser) typically allows cookies to be stored on the Customer/User’s end device by default. Customers/Users can change their settings in this regard. The web browser allows for the deletion of cookies. It is also possible to automatically block cookies.
10. Restrictions on the use of cookies may affect some of the functionalities available on the Online Store websites.
11. Cookies placed on the Customer/User’s end device may also be used by advertisers and partners of the Online Store cooperating with it.
12. Cookies may be used by the Google network to display advertisements tailored to the way the Customer/User uses the Online Store. For this purpose, they may store information about the user’s navigation path or the duration of their stay on a given page: https://policies.google.com/technologies/partner-sites .
13. We recommend that the Customer/User read the privacy policies of these companies to learn about the rules for using cookies used in statistics: Google Analytics Privacy Policy.
14. In terms of information about the Customer/User’s preferences collected by the Google advertising network, the Customer/User may view and edit information derived from cookies using the tool: https://www.google.com/ads/preferences/ .
15. The Online Store website contains plug-ins that can transfer Customer/User data to Administrators such as: Google Maps, Google Ads, PayPal, Google reCAPTCHA, IdoAccounts, IdoSell, IAI SA, Google.
16. For the proper implementation of the Distance Selling Agreement, the Data Controller may share Customer/User data with courier companies. The currently available delivery methods in the Online Store are available at: https://promiennik.sklep.pl/pl/delivery.html .
17. For the proper implementation of the Distance Selling Agreement, the Administrator may share Customer/User data with online payment systems. Currently available prepayment methods in the Online Store are available at: https://promiennik.sklep.pl/pl/payments.html .
18. For more information about terms and privacy, please also visit the Google Privacy & Terms page .

11. Newsletter

1. The Customer may consent to receiving commercial information electronically by selecting the appropriate option in the registration form or later in the appropriate tab. If such consent is granted, the Customer/User will receive information (Newsletter) from the Online Store, as well as other commercial information sent by the Seller, to the email address provided.
2. The Customer may at any time unsubscribe from receiving the Newsletter by unchecking the appropriate box on the Account page or by going to the form https://promiennik.sklep.pl/pl/newsletter.html , clicking the appropriate link contained in the content of each Newsletter or via the Customer Service Office.

12. Account

1. The Customer/User may not post any content in the Online Store or provide the Seller with any content, including opinions and other data of an unlawful nature.
2. The Customer/User obtains access to the Account after registration.
3. During registration, the Customer/User provides their account type or gender, first name, last name, company name, Tax Identification Number (NIP), sales document issuing information, shipping information, email address, and selects a password. The Customer/User warrants that the information they provide in the registration form is accurate. Registration requires a thorough review of the Terms and Conditions and acknowledgment on the registration form that the Customer/User has read the Terms and Conditions and fully accepts all their provisions.
4. When the Customer/User is granted access to the Account, an agreement for the provision of electronic services relating to the Account is concluded between the Seller and the Customer for an indefinite period. The Consumer may withdraw from this agreement under the terms set forth in the Terms and Conditions.
5. Registering an Account on one of the pages of the Online Store also means registering to access other pages where the Online Store is available.
6. The Customer/User may terminate the contract for the provision of services by electronic means at any time with immediate effect by informing the Seller by e-mail or in writing to the address of the Data Controller, provided in section 1, point 2 of this Privacy and Cookies Policy.
7. The Seller has the right to terminate the Account service agreement in the event of discontinuation or transfer of the Online Store service to a third party, violation of the law or these Terms and Conditions by the Customer/User, or in the event of Customer/User inactivity for a period of six months. Termination of the agreement is subject to a seven-day notice period. The Seller may stipulate that re-registration of the Account will require the Seller’s consent.

13. Google Ads i remarketing

The Website may use Google Ads and Google Remarketing services. These services allow the display of advertisements to users who have previously visited the Website. Information collected through cookies may be used to measure advertising effectiveness and provide personalised advertising content. Users can manage their advertising preferences through their Google account settings.

14. Contact the administrator

For all matters relating to personal data protection, please contact:

Bogumił Włosiński – Cracow Consulting Company

E-mail: promiennik@promiennik.pl

Address: Stojowice 72, 32-410 Dobczyce, Poland