Strumet website privacy policy

Table of contents:

1. General provisions
2. Basics of data processing
3. Purpose, basis and period of data processing on the website.
4. Recipients of data on the website.
5. Profiling on the website
6. Rights of the data subject
7. Cookies on the website and analytics
8. Final Provision

1. General provisions

This Website Privacy Policy is for informational purposes only, meaning it does not constitute a source of obligations for Service Users or Customers of the Website. The Privacy Policy primarily contains principles regarding the processing of personal data by the Administrator on the Website, including the basis, purposes, and duration of personal data processing and the rights of data subjects, as well as information regarding the use of cookies and analytical tools on the Website.
The controller of personal data collected via the Website is Zakład Wyrobów Metalowych STRUMET Sp. z o.o. conducting business under the name Zakład Wyrobów Metalowych STRUMET Sp. z o.o. entered into the National Court Register of the Republic of Poland, maintained by the minister responsible for justice, with: business address: ul. Ks. Londzina 61, 43-246 Strumień, POLAND, e-mail address: [email protected], telephone number: +48 881 973 400 – hereinafter referred to as the "Controller".
Dane osobowe na Stronie Internetowej przetwarzane są przez Administratora zgodnie z obowiązującymi przepisami prawa, w szczególności zgodnie z rozporządzeniem Parlamentu Europejskiego i Rady (UE) 2016/679 z dnia 27 kwietnia 2016 r. w sprawie ochrony osób fizycznych w związku z przetwarzaniem danych osobowych i w sprawie swobodnego przepływu takich danych oraz uchylenia dyrektywy 95/46/WE (ogólne rozporządzenie o ochronie danych) – zwanym dalej „RODO” lub „Rozporządzeniem RODO”. Oficjalny tekst Rozporządzenia RODO: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679
Use of the Website is voluntary. Similarly, the provision of personal data by the Service User using the Website is voluntary.
The Controller takes special care to protect the interests of the persons whose personal data it processes, and in particular is responsible for and ensures that the data it collects are: (1) processed in accordance with the law; (2) collected for specified, legitimate purposes and not subject to further processing incompatible with these purposes; (3) factually correct and adequate in relation to the purposes for which they are processed; (4) stored in a form which allows identification of the persons to whom they relate, no longer than is necessary to achieve the purpose of processing, and (5) processed in a way that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organizational measures.
Taking into account the nature, scope, context, and purposes of processing, as well as the risk of varying likelihood and severity of violations of the rights and freedoms of natural persons, the Controller implements appropriate technical and organizational measures to ensure that processing is carried out in accordance with this Regulation and to be able to demonstrate this. These measures are reviewed and updated as necessary. The Controller implements technical measures to prevent unauthorized access and modification of personal data transmitted electronically.

2. Basics of data processing

  1. The Controller is entitled to process personal data in cases where – and to the extent that – at least one of the following conditions is met: (1) the data subject has consented to the processing of his or her personal data for one or more specific purposes; (2) processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract; (3) processing is necessary for compliance with a legal obligation to which the Controller is subject; or (4) processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
  2. The processing of personal data by the Administrator always requires the existence of at least one of the grounds indicated in point 2.1 of the privacy policy. The specific grounds for processing Service Users' personal data by the Administrator are indicated in the next point of the privacy policy – in relation to the given purpose of personal data processing by the Administrator.

3. Purpose, basis and period of data processing on the website

  1. Each time, the purpose, basis and period as well as the recipients of personal data processed by the Controller result from the actions undertaken by a given Service User or by the Controller. 
  2. The Administrator may process personal data within the Website for the following purposes, on the basis and during the periods indicated in the table below: The processing of personal data by the Administrator always requires the existence of at least one of the grounds indicated in point 2.1 of the privacy policy. The specific grounds for processing Service Users' personal data by the Administrator are indicated in the next point of the privacy policy – in relation to the given purpose of personal data processing by the Administrator.

Purpose of data processing

Legal basis for data processing

Data storage period

Using the Website and ensuring its proper functioning

Article 6(1)(f) of the GDPR Regulation (legitimate interest of the controller) – processing is necessary for the purposes of the legitimate interests of the Controller 

Data is stored for the duration of the legitimate interest pursued by the Controller, but no longer than the limitation period for the Controller's claims against the data subject arising from the Controller's business activities. The limitation period is specified by law, in particular the Civil Code (the basic limitation period for claims related to business activities is three years, and for Sales Agreements, two years).

Maintaining statistics and analyzing website traffic

Article 6(1)(f) of the GDPR Regulation (legitimate interest of the controller) – processing is necessary for the purposes of the legitimate interests of the Controller 

Data is stored for the duration of the legitimate interest pursued by the Controller, but no longer than the limitation period for the Controller's claims against the data subject arising from the Controller's business activities. The limitation period is specified by law, in particular the Civil Code (the basic limitation period for claims related to business activities is three years, and for Sales Agreements, two years).

4. Recipients of data on the website

  1. For the Website to function properly, the Controller must utilize the services of external entities. The Controller only utilizes the services of processors who provide sufficient guarantees to implement appropriate technical and organizational measures to ensure that processing meets the requirements of the GDPR and protects the rights of data subjects.
  2. The Controller does not transfer data in every case and not to all recipients or categories of recipients indicated in the privacy policy – the Controller transfers data only when it is necessary to achieve a given purpose of personal data processing and only to the extent necessary to achieve it.
  3.  The personal data of the Website Service Users may be transferred to the following recipients or categories of recipients: tax office
    3.1 providers of accounting, legal and advisory services providing the Controller with accounting, legal or advisory support (in particular an accounting office, law firm or debt collection company) – the Controller makes the collected personal data of the Client available to a selected provider acting on its behalf only in the case and to the extent necessary to achieve a given purpose of data processing in accordance with this privacy policy.
    3.2 providers of social plugins, scripts and other similar tools placed on the Website that enable the browser of a visitor to the Website to download content from the providers of said plugins (e.g. logging in using social networking site login details) and to transmit the visitor’s personal data to these providers for this purpose, including:
    3.2.1. Facebook Ireland Ltd. – The Administrator uses Facebook social plugins on the Website (e.g. the Like button, Share button or logging in using Facebook login details) and therefore collects and shares personal data of the Service User using the Website with Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland) to the extent and in accordance with the privacy policies available here: https://www.facebook.com/about/privacy/ (this data includes information on activities on the Website – including information about the device, websites visited, purchases, displayed advertisements and how the services are used – regardless of whether the Service User has a Facebook account and is logged in to Facebook).

5. Profiling on the website

  1. The GDPR requires the Controller to provide information about automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR, and – at least in these cases – meaningful information about the principles underlying such decision-making, as well as the significance and anticipated consequences of such processing for the data subject. With this in mind, the Controller provides information about possible profiling in this section of the privacy policy.
  2.  The Administrator may use the Website for profiling purposes, but decisions made on its basis by the Administrator do not concern the possibility of using Electronic Services on the Website.
  3. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar manner.

6. Rights of the data subject

  1. Right of access, rectification, restriction, erasure, or portability – the data subject has the right to request from the Controller access to their personal data, rectification, erasure ("right to be forgotten"), or restriction of processing, and has the right to object to processing, as well as the right to transfer their data. Detailed conditions for exercising the above-mentioned rights are set out in Articles 15-21 of the GDPR.
  2. The right to withdraw consent at any time – a person whose data is processed by the Controller on the basis of expressed consent (pursuant to Article 6 paragraph 1 letter a) or Article 9 paragraph 2 letter a) of the GDPR Regulation) has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  3. The right to lodge a complaint with a supervisory authority – an individual whose data is processed by the Controller has the right to lodge a complaint with a supervisory authority in the manner and procedure specified in the provisions of the GDPR and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office.
  4. Right to object – the data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them based on Article 6(1)(e) (public interest or task) or (f) (legitimate interest of the controller), including profiling based on these provisions. In such a case, the controller is no longer permitted to process the personal data unless the controller demonstrates compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defense of legal claims.
  5. Right to object to direct marketing – if personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.
  6. In order to exercise the rights referred to in this section of the privacy policy, you can contact the Controller by sending an appropriate message in writing or by e-mail to the Controller's address indicated at the beginning of the privacy policy or by using the contact form available on the Website. 2. The Controller may use the Website for profiling purposes for direct marketing purposes, but decisions made on its basis by the Controller do not affect the possibility of using Electronic Services on the Website.

7. Cookies on the website and analytics

  1. Cookies are small pieces of information in the form of text files, sent by the server and stored on the website visitor's computer or laptop hard drive, or on the smartphone's memory card, depending on the device used by the visitor to our website. Detailed information about cookies and their history can be found here: https://pl.wikipedia.org/wiki/HTTP_cookie.
  2. Cookies that may be sent by the Website can be divided into different types, according to the following criteria:

Due to their supplier

  1. own (created by the Administrator's Website) and 
  2. belonging to third parties/entities (other than the Administrator)

Due to their storage period on the device of the person visiting the Website

  1. session (stored until you log out of the Website or close your web browser) and 
  2. persistent (stored for a specified period of time, defined by the parameters of each file, or until manually deleted)

Due to the purpose of their use

  1. necessary (enabling the proper functioning of the Website), 
  2. functional/preferential (enabling the customisation of the Website to the preferences of the website visitor), 
  3. analytical and performance (collecting information about how the Website is used), 
  4. marketing, advertising and social media (collecting information about the person visiting the Website in order to display personalized advertisements to that person and conduct other marketing activities, including on websites separate from the Website, such as social networking sites)
  1. The Administrator may process data contained in Cookies when visitors use the Website for the following specific purposes:

The purposes of using cookies on the Administrator's website

identifying Service Users as logged in to the Website and showing that they are logged in (essential cookies)

keeping anonymous statistics showing how the Website is used (statistical cookies)

  1. You can check in the most popular web browsers which Cookies (including the cookie lifespan and their provider) are currently being sent by the Website in the following way:

In the Chrome browser:
(1) in the address bar, click the lock icon on the left, (2) go to the "Cookies" tab.

In Firefox:
(1) in the address bar, click the shield icon on the left, (2) go to the "Allowed" or "Blocked" tab, (3) click the "Cross-site tracking cookies", "Social media trackers" or "Content with trackers" box

In Internet Explorer:
(1) click the "Tools" menu, (2) go to the "Internet Options" tab, (3) go to the "General" tab, (4) go to the "Settings" tab, (5) click the "View files" box

In the Opera browser:
(1) in the address bar, click the lock icon on the left, (2) go to the "Cookies" tab.

in Safari browser:
(1) click the "Preferences" menu, (2) go to the "Privacy" tab, (3) click the "Manage website data" box

Regardless of the browser, using the tools available e.g. on the website: https://www.cookiemetrix.com/ or: https://www.cookie-checker.com/

 

    1. By default, most web browsers accept cookies by default. Everyone can specify the terms of use of cookies through their own web browser settings. This means, for example, that you can partially restrict (e.g., temporarily) or completely disable the ability to save cookies. However, this may affect some of the Website's functionalities (for example, it may be impossible to complete the ordering process via the Order Form due to the Products not being saved in the shopping cart during subsequent steps of the ordering process).
    2. Your web browser's cookie settings are important for consenting to the use of cookies by our Website. In accordance with the law, such consent can also be expressed through your web browser settings. Detailed information on changing cookie settings and deleting cookies yourself in the most popular web browsers is available in your browser's help section and on the following websites (just click the appropriate link):

    in Chrome

    in Firefox

    in Internet Explorer

    in the Opera browser

    in Safari browser

    in the Microsoft Edge browser

    1. The Administrator may use Google Analytics and Universal Analytics services on the Website, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). These services help the Administrator compile statistics and analyze traffic on the Website. The collected data is processed as part of these services to generate statistics that aid in administering the Website and analyzing traffic on the Website. This data is aggregated. By using these services on the Website, the Administrator collects data such as the sources and means of acquiring visitors to the Website and their behavior on the Website, information about the devices and browsers used to visit the Website, IP address and domain, geographic data, demographic data (age, gender), and interests.
    2. It is possible for a given person to easily block the provision of information about their activity on the Website to Google Analytics – for this purpose, you can, for example, install a browser add-on provided by Google Ireland Ltd., available here: https://tools.google.com/dlpage/gaoptout?hl=pl.

8. Final provisions

  1. The Website may contain links to other websites. The Administrator encourages users to review the privacy policies posted there after visiting other websites. This privacy policy applies only to the Administrator's Website.