version valid from June 24, 2024
WHAT IS THE PRIVACY POLICY?
We would like to familiarize you with the details of our processing of your personal data to give you full knowledge and comfort in using our website.
Since we operate in the internet industry ourselves, we know how important it is to protect your personal data. That's why we make special efforts to protect your privacy and the information you provide to us.
We carefully select and apply appropriate technical measures, in particular those of a programming and organizational nature, ensuring the protection of processed personal data. Our website uses encrypted data transmission (SSL), which ensures the protection of data identifying you.
In our Privacy Policy you will find all the most important information regarding our processing of your personal data. We ask you to read it and we promise that it will not take you more than a few minutes.
Who is the administrator of the website www.kemplast.pl?
The administrator of the website is Mariusz Bajer, Krzysztof Suszek, running a business under the name KEMPLAST S.C. KRZYSZTOF SUSZEK, MARIUSZ BAJER entered into the register of entrepreneurs of the Central Registration and Information on Economic Activity kept by the minister responsible for economy at ul. Kanada 124A 32-650 Witkowice, NIP 5512068989, REGON 70901740 (i.e.: us).
PERSONAL DATA
What legal act regulates the processing of your personal data?
Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly known as: GDPR. To the extent not regulated by the GDPR, the processing of personal data is regulated by the Personal Data Protection Act of May 10, 2018.
Who is the administrator of your personal data?
The administrator of your personal data is Mariusz Bajer, Krzysztof Suszek, running a business under the name KEMPLAST S.C. KRZYSZTOF SUSZEK, MARIUSZ BAJER entered into the register of entrepreneurs of the Central Registration and Information on Economic Activity kept by the minister responsible for economy at ul. Kanada 124A 32-650 Witkowice, NIP 5512068989, REGON 70901740, telephone: +48 601 776 143, e-mail: biuro@kemplast.pl.
Concerning your personal data, you can contact us via:
- email: biuro@kemplast.pl,
- traditional mail: ul. Kanada 124A 32-650 Witkowice,
- telephone: +48 601 776 143.
HOW DO WE PROCESS YOUR PERSONAL DATA THAT YOU PROVIDE TO US?
What personal data do we process and for what purposes do we process it?
On our website, we offer you many different services, for the purposes of which we process various personal data, based on various legal bases.
Target |
Personal data |
Legal basis for processing |
Data storage time |
conclusion and performance of the contract |
name, surname, correspondence address, tax identification number, e-mail address, telephone number |
art. 6 section 1 letter b) GDPR, i.e. processing in order to take action at your request, before concluding a contract and processing necessary to perform a contract to which you are a party |
until the expiry of the limitation period for claims regarding the performance of the contract |
setting up and maintaining an account |
name, surname, e-mail address, telephone number, mailing address |
art. 6 section 1 letter b) GDPR, i.e. processing in order to take action at your request, before concluding a contract and processing necessary to perform a contract to which you are a party |
until the expiry of the limitation period for claims regarding the performance of the contract |
contact form |
email address |
art. 6 section 1 letter f) GDPR, i.e. processing in order to pursue our legitimate interest, consisting in maintaining continuity of communication and enabling contact with us in matters of our business activities |
until you object to the processing of personal data |
analysis of traffic on the online store's website |
IP address, browser data |
Art. 6 section 1 letter f) GDPR, i.e. processing in order to pursue our legitimate interest in analyzing customer traffic on the store's website |
until you object to the processing of personal data |
direct marketing of own goods and services, including remarketing |
IP address, browser data |
Art. 6 section 1 letter f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in direct marketing of our own services, including remarketing |
until you object to the processing of personal data |
determining, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities |
name, surname, residential address, PESEL number, NIP, REGON, e-mail address, telephone number, IP number, bank account number, payment card number |
art. 6 section 1 letter f) GDPR, i.e. processing in order to pursue our legitimate interest, consisting in determining, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities |
until the expiry of the limitation period for claims regarding the performance of the contract |
fulfilment of legal obligations arising from legal provisions, in particular tax and accounting provisions |
name, surname, company, PESEL number, NIP or REGON number, e-mail address, telephone number, correspondence address, payment card number |
Art. 6 section 1 letter c) GDPR, i.e. processing is necessary to fulfill our legal obligations arising from legal provisions, in particular tax and accounting provisions |
until the expiry of the legal obligations imposed on the Administrator that justified the processing of personal data |
Voluntary provision of personal data
Providing the required personal data by you is voluntary, but it is a condition for us to provide services to you (e.g. sending a newsletter or creating an account).
Recipients of personal data
The current list of entities to which we disclose your personal data can be found here.
- PayPro S.A. based in Poznań - Payment processing
- Google Ireland Ltd. (Google Cloud, Google Analytics, Google Analytics 360, Fabric Software) based in Ireland - Measuring website traffic, reporting application errors, creating statistics
- Meta Platforms Ireland Limited - Popularization of the Online Store using the social networking sites Facebook.com, Instagram.com
Automated decision-making (including profiling)
We do not make decisions about you in an automated manner and we do not use profiling.
Will we transfer your personal data outside the EEA or to an international organization?
In order to use Google tools, your personal data may be transferred to the United States, where Google LLC servers are located.
Google LLC is included in the list of entities participating in the Data Privacy Framework (link: https://www.dataprivacyframework.gov/s/participant-search), therefore the protection of personal data is adequate to the regulations applicable in European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data in accordance with the EU-USA Data Privacy Framework (link: https://commission.europa.eu /system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework.pdf).
In order to use Facebook tools, your personal data may be transferred to the United States, where the Meta Platforms Inc. servers are located.
Meta Platforms Inc. is included in the list of entities participating in the Data Privacy Framework program (link: https://www.dataprivacyframework.gov/s/participant-search), therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data in accordance with the EU-USA Data Privacy Framework (link: https://commission.europa.eu/system/files/ 2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework.pdf).
In order to use the Hotjar statistical tool, your personal data may be transferred to the United States. In accordance with the privacy policy of the designated tool, Hotjar has taken appropriate safeguards to ensure that your personal data remains protected and requires that third-party service providers and partners also have appropriate safeguards in place. More information in the Hotjar Privacy Policy at the following link: https://www.hotjar.com/legal/policies/privacy/.
WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?
Based on the GDPR, you have the right to:
- request access to your personal data,
- request rectification of your personal data,
- request deletion of your personal data,
- request restriction of the processing of personal data,
- object to the processing of personal data,
- requests for the transfer of personal data.
If you submit any of the above requests to us, we will provide you with information about the actions taken in response to your request without undue delay - and in any case within one month of receiving the request.
If necessary, we may extend the monthly deadline by another two months due to the complexity of the request or the number of requests.
In any case, we will inform you within one month of receiving the request about the extension of the deadline and provide you with the reasons for the delay.
Right to access personal data (Article 15 of the GDPR)
You have the right to obtain information whether we process your personal data. If we process your personal data, you have the right to:
- access to personal data,
- obtaining information about the purposes of processing, categories of personal data processed, about the recipients or categories of recipients of this data, the planned period of storage of your data or the criteria for determining this period, about your rights under the GDPR and the right to lodge a complaint to the President of the Office for Personal Data Protection Personal Data, about the source of this data, about automated decision-making, including profiling, and about the safeguards used in connection with the transfer of this data outside the European Union;
- obtain a copy of your personal data.
If you want to request access to your personal data, please submit your request to: biuro@kemplast.pl.
The right to rectify personal data (Article 16 of the GDPR)
If your personal data is incorrect, you have the right to request that we immediately correct your personal data. You also have the right to request that we complete your personal data. If you want to request correction or supplementation of your personal data, please submit your request to: biuro@kemplast.pl.
The right to delete personal data, the so-called "right to be forgotten" (Article 17 of the GDPR)
You have the right to request the deletion of your personal data when:
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you have withdrawn specific consent, to the extent that personal data were processed based on your consent;
- Your personal data was processed unlawfully;
- you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of personal data is related to direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by us or a third party.
Despite requesting the deletion of personal data, we may continue to process your data in order to establish, pursue or defend claims, of which you will be informed.
If you want to request the deletion of your personal data, please submit your request to: biuro@kemplast.pl.
The right to request the restriction of the processing of personal data (Article 18 of the GDPR)
You have the right to request the restriction of the processing of your personal data when:
- you question the accuracy of your personal data - in such a case, we will limit the processing of your personal data for a period of time enabling us to check the accuracy of this data;
- the processing of your data is unlawful, and instead of deleting your personal data, you request the restriction of the processing of your personal data;
- Your personal data are no longer necessary for the purposes of processing, but they are needed to establish, pursue or defend your claims;
- you have raised an objection to the processing of your personal data - until it is determined whether our legitimate interests override the grounds indicated in your objection.
If you want to request the restriction of the processing of your personal data, please submit your request to: biuro@kemplast.pl.
The right to object to the processing of personal data (Article 21 of the GDPR)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
- processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Personal Data Administrator or a third party;
- processing for direct marketing purposes.
If you want to object to the processing of your personal data, please submit your request to:biuro@kemplast.pl.
The right to request the transfer of personal data (Article 20 of the GDPR)
You have the right to receive your personal data from us in a structured, commonly used, machine-readable format and to send it to another personal data administrator.
By default, we will provide you with your personal data in CSV format. If you prefer that the data be made available to you in a different format, please indicate your preferred format in your request. Whenever possible, we will try to provide you with the data in the format you prefer.
You can also request that we send your personal data directly to another administrator (if technically possible).
If you want to request the transfer of your personal data, please submit your request to: biuro@kemplast.pl.
Can you withdraw your consent to the processing of personal data?
You can withdraw your consent to the processing of your personal data at any time. Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out by us on the basis of your consent before its withdrawal.
If you want to withdraw your consent to the processing of your personal data, please submit your request to: biuro@kemplast.pl.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates the provisions on the protection of personal data, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office, who replaced the GIODO on May 25, 2018.
More information can be found here https://uodo.gov.pl/pl/492/2464.
Cookies
General information
When browsing the websites of the Online Store, "cookies" files are used, hereinafter referred to as Cookies, i.e. small text information that is saved on your end device in connection with the use of the Online Store. Their use is aimed at the correct operation of the Online Store's websites.
These files allow you to identify the software used by you and adapt the Online Store individually to your needs.
Cookies usually contain the name of the domain they come from, the time they are stored on the device and the assigned value.
Security
The cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to enter your devices through cookies.
Types of cookies
We use two types of cookies:
- Session cookies: are stored on your device and remain there until the end of the browser session. The saved information is then permanently deleted from your device's memory. The session cookies mechanism does not allow you to download any personal data or any confidential information from your device.
- Persistent cookies: they are stored on your device and remain there until you delete them. Ending a given browser session or turning off your device does not delete them from your device. The persistent cookies mechanism does not allow you to download any personal data or any confidential information from your device.
Goals
We also use third-party cookies for the following purposes:
- configuration of the Online Store;
- creating statistics that help understand how users of the Online Store use websites, which allows improving their structure and content via Google Analytics analytical tools, the administrator of which is Google Ireland Ltd. based in Ireland, Privacy Policy Google is available at the following link: https://policies.google.com/privacy?fg=1;
- determining the Customer's profile in order to display tailored materials in advertising networks, using the Google Ads online advertising tool, the administrator of which is Google Ireland Ltd. based in Ireland, the Google Privacy Policy is available at the following link: https:// policies.google.com/privacy?fg=1;
- collecting information about the User's behavior using the Facebook Pixel tool, the administrator of which is Meta Platforms Ireland Limited, based in Ireland, Facebook's Privacy Policy is available at the following link: https://www.facebook.com/help/cookies /;
- using Google Signals, a Google Analytics feature that combines information about visits collected from this Store with Google information from the accounts of logged in Google account users who have consented to this connection in order to personalize ads. Google's privacy policy is available at the following link: https://policies.google.com/privacy?fg=1;
To learn about the rules of using Cookies, we recommend reading the privacy policies of the above-mentioned companies.
Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences. For this purpose, information about how you navigate the Internet or the time you use the website may be stored.
To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at the link https://www.google.com/ads/preferences/.
Using your web browser settings or using the service configuration, you can change the cookie settings yourself and at any time, specifying the conditions for storing them and accessing cookies to your device. You can change these settings to block the automatic handling of Cookies in your web browser settings or to notify you each time they are placed on your device. Detailed information about the possibilities and methods of handling Cookies is available in the settings of your software (web browser).