Dear Users,

in connection with your visit to our website, we process certain information about you, such as data about your device, country of origin, internet browser, and IP address, including personal data, which you provide when contacting us at the email address listed on our website. All personal data collected by us in this manner will be used in accordance with applicable regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"). This privacy policy covers how we process your personal data collected through our website (hereinafter referred to as the "Site") or by means of remote communication.

1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

The controllers of all personal data collected through the Site are us.

      PC-Akme
      ul. Gitarowa 3 lok. 1
      51-531 Wrocław
      

You can contact us at any time regarding the personal data we process. Contact information is available on the Site.

2. WHAT DATA DOES THIS POLICY COVER?

This privacy policy covers all information, including personal data, collected by us:

• - through the Site and by means of remote communication;
• - through mobile and computer applications that create a system of your interaction with the Site not based on web browsers;
• - in connection with your interaction with advertising materials and applications located on third-party websites or as part of services provided by these parties, provided that these applications or advertising materials contain a link or reference to this policy.

This policy does not apply to information collected by us offline.

The term "personal data" used in this policy refers to all information about an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name and surname, identification number, location data, online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

3. PERSONS UNDER THE AGE OF 16

The Site is not intended for use by persons under the age of 16. We do not intentionally collect personal data about persons under the age of 16. If you are under 16 years old, you may not use or submit any information through the Site.

If it turns out that we have collected or received any personal data about a person under the age of 16 without the consent and knowledge of their legal guardians, we will immediately delete such personal data. If you suspect that we have such personal data, please contact us.

4. INFORMATION COLLECTED THROUGH THE SITE

We collect information, including personal data:

• - directly from you or automatically, during your access and use of the Site, always with your consent; or
• - automatically, during your access and use of the Site, collected through so-called necessary cookies or performance cookies, without your explicit consent. Information collected in this way mainly relates to how you use the Site, information about the device you are using, the country from which you originate, the browser you are using, or your IP address.

We do not collect other personal data in this way, e.g., first name, last name, or email address.

If consent is required for the collection of personal data, personal data will be processed only to the extent provided by this consent. You can withdraw your consent at any time, however, this will not affect the legality of the processing of your personal data that was done before the withdrawal of consent.

Personal data collected for purposes other than the performance of legal obligations may be subject to profiling, i.e., automated analysis of your data to develop predictions about your preferences or future behaviors (e.g., to tailor the content of the Site or marketing materials sent to you). This applies, for example, to marketing services from Google or Meta Platforms.

We inform you that we do not carry out automated data processing in a way that would affect your situation, nor do we make decisions about you on this basis. Providing all personal data is not mandatory, but it is necessary for browsing and using the Site and its features.

5. COOKIES

The Site uses cookies. Cookies, also called "cookies," are computer data stored in the User's end device, used to use the website pages of the Service. They usually contain the name of the website, the storage time, and a unique number.

The Service Provider places and accesses cookies on the User's end device. These files are used, among other things, to create statistics of the use of the page and to maintain the user's session.

Two types of cookies are used within the Service: "session" (session cookies) and "permanent" (persistent cookies). Session cookies are temporary and stored until you log out, while permanent cookies are stored for a specified time or until they are deleted.

Web browsers usually by default accept cookies, but users can change these settings. Restrictions on the use of cookies may affect the functionalities of the Service.

Cookies may also be used by the Service's partners. It is recommended to familiarize yourself with the privacy policies of these companies.

Google Analytics

Server logs.

Information about user behaviors is logged on the server layer. These data are used only for the administration of the service and to ensure the most efficient handling of the services provided.

The resources reviewed are identified by URLs. In addition, the following may be recorded:

• the time of arrival of the query,
• the time of sending the response,
• the name of the client station - identification carried out by the HTTP/HTTPS protocol,
• information about errors that occurred during the HTTP/HTTPS transaction,
• the URL of the page previously visited by the user (referer link) - if the transition to the Service was made via a link,
• information about the user's browser,
• Information about the IP address.

This data is not associated with specific individuals browsing the pages.

This data is used only for the purposes of administering the server.

6. PROCESSING INFORMATION

We may use properly collected information to deliver goods/services available on the Site and to personalize the Site. Information collected from you will enable us to inform you about important functionalities of the Site and their changes and will be used for statistical analysis, to increase the quality of services offered to you.

We may process collected information, except for personal data (whose processing is described in detail below), for business purposes, in particular for:

• presenting the Site and its content and enabling the use of the functionalities of the Site and its content;
• communicating with you through various communication channels;
• publishing product and service reviews or comments submitted by you;
• fulfilling legal obligations, including protection and prevention of illegal transactions, managing complaints, and increasing network security;
• controlling your compliance with any legal obligations as well as policies and other regulations; establishing, defending, and asserting claims by us, including the assignment of claims against you;
• creating compilations, analyses, and statistics to carry out, evaluate, and improve our business activities, goods, services (including the development of new products and services; managing communication; determining and managing the effectiveness of advertising and marketing; analyzing products, services, websites, and applications; managing the Site and applications);
• direct marketing;
• carrying out other purposes for which information was collected;
• carrying out any other purposes with your consent.

The following personal data collected through the Site and by means of remote communication are processed by us for the following purposes and on the following legal bases:

• Purpose: Conclusion and performance of the contract for the sale of goods, services, and products by means of remote communication.
• Personal data: Identification and billing data, such as first and last name, address, NIP, email, phone number.
• Legal basis: Art. 6 para. 1 lit b GDPR – performance of the contract.
• Duration: For the duration necessary to perform the concluded contract and until the expiration of mutual claims related to the contract.

• Purpose: Presentation of the Site and its content and enabling the use of the functionalities of the Site and its content and increasing network security.
• Personal data: Data automatically received from devices used to access the Site, such as IP address, location, and time.
• Legal basis: Art. 6 para. 1 lit. f GDPR – legitimate interest.
• Duration: For the duration of the stay on the Site and after leaving it until the browser is closed.

• Purpose: Creating compilations, analyses, and statistics to carry out, evaluate, and improve the functioning of the Site, our business activities, goods, services.
• Personal data: Data automatically received from devices used to access the Site, such as IP address, location, and time.
• Legal basis: Art. 6 para. 1 lit. f GDPR – legitimate interest, and in the case of processing these data through cookies – Art. 6 para. 1 lit. a - consent.
• Duration: For the duration necessary to carry out these activities, not longer than 14 months.

• Purpose: Recognition and response to inquiries, requests, and applications made by means of remote communication.
• Personal data: Contact and identification data obtained from you, such as first name, last name, email address.
• Legal basis: Art. 6 para. 1 lit. a GDPR – consent.
• Duration: For the time needed to end communication and 3 years after ending or until consent is withdrawn.

• Purpose: Communicating with you through various communication channels, including sending marketing materials, provided that we never initiate contact.
• Personal data: Contact and identification data obtained from you, such as first name, last name, email address, phone number.
• Legal basis: Art. 6 para. 1 lit. a GDPR – consent.
• Duration: For the time until the given consent is withdrawn.

• Purpose: Fulfilling legal obligations incumbent on us, including protection and prevention of illegal transactions, managing complaints, and increasing network security.
• Personal data: Data automatically received from devices used to access the Site, such as IP address, location, and time; contact and identification data obtained from you, such as first name and last name, email address.
• Legal basis: Art. 6 para. 1 lit. c GDPR – legal obligation.
• Duration: For the time needed to perform the obligation.

• Purpose: Controlling your compliance with any legal obligations as well as our policies and other regulations; establishing, defending, and asserting claims by us, including the assignment of claims against you.
• Personal data: Data automatically received from devices used to access the Site, such as IP address, location, and time; contact and identification data obtained from you, such as first name and last name, email address.
• Legal basis: Art. 6 para. 1 lit. f GDPR – legitimate interest.
• Duration: For the time until the claims expire.

• Purpose: Re-targeting marketing.
• Personal data: Data automatically received from devices used to access the Site, such as IP address, location, and time.
• Legal basis: Art. 6 para. 1 lit. a GDPR – consent.
• Duration: For no longer than 180 days in the case of Facebook Pixel or until consent is withdrawn.

• Purpose: Other purposes, according to agreements.
• Personal data: According to agreements.
• Legal basis: Art. 6 para. 1 lit. a - consent.

7. TRANSFERRING INFORMATION

We use third parties to perform certain activities on our behalf. Examples of such activities may include handling IT systems, including email, website hosting, sharing IT resources, data analysis, marketing support, customer service, legal, accounting, auditing services, etc. These third parties process personal data on our behalf solely for the purpose of performing their functions and may not process personal data for their own purposes. We ensure that the processing of your personal data by entities processing personal data on our behalf is in accordance with the principles specified in the GDPR, in particular, that each of these entities is aware of the obligations arising from the GDPR and complies with them. We ensure that each of the entities processing personal data on our behalf will provide appropriate technical and organizational measures of protection, no weaker than required by applicable law.

We may also share your personal data with other data controllers, especially if it is necessary to fulfill legal obligations, e.g., to ensure the protection of rights or security on the site, other users, or third parties (e.g., for law enforcement, settlements). For example, this also refers to situations in which we provide personal data to state authorities, local government bodies, or the judiciary, entities running economic information offices, or debt purchasers. Each time we will assess the permissibility of sharing personal data, taking into account the type of requester, the type of personal data requested, and the impact that such sharing may have on your rights and the purposes for which the data was collected. In the event of sharing personal data, we will take all possible actions to ensure that the scope of personal data shared is as limited as possible, e.g., by redacting the information conveyed.

We may share collected personal data described in this Privacy Policy, to a purchaser or other legal successor in the event of restructuring, reorganization, diversification, or sale of all or part of the business, whether as a standalone method or as part of bankruptcy or restructuring proceedings or cessation of operations, if personal data are part of the assets transferred.

We may share your personal data with carefully selected third parties for marketing purposes or other purposes, provided that you have given your consent.

Data recipients may be located in different countries, including in countries where the law relating to personal data protection provides a lower level of protection than the law of the European Union, in particular countries located outside the territory of the European Union ("third countries"). We may transfer your personal data to a third country only on the condition that: - the appropriate body of the European Union has determined by means of an implementing act that the third country, territory or specified sector or specified sectors in that third country or an international organization provides an adequate level of protection, or - in the absence of a decision as mentioned above, only when appropriate safeguards are provided, and on condition that enforceable rights of data subjects and effective legal remedies are available, in particular through standard contractual clauses, or other requirements of the GDPR are met.

Currently, we transfer personal data obtained through the site to the following entities in connection with services provided on our behalf: - Google LLC based in California, USA, and Google Ireland Ltd – the entity responsible for the tool and cookie for analyzing traffic within this website (Google Analytics) and for the operation of the Google Ads cookie. Details concerning the operation of cookies can be found in chapter 5 of this Privacy Policy. Data transfers to the USA are based on a contract containing Standard Contractual Clauses, approved by the European Commission.

8. SECURITY

We apply administrative, technical, and physical security measures aimed at protecting personal data against accidental, illegal, or unauthorized destruction, loss, alteration, access, disclosure, or use. However, we do not guarantee that as a result of applying these measures, your personal data will always be fully secure, due to the inherent risk and uncertainty in the operation of the Internet and computer systems and potential illegal hacker attacks. Any transmission of personal data through the Internet is not fully secure. We strive to fully secure the personal data you provide, but we do not guarantee the security of information/personal data transmitted through the Site. Transmission of personal data is at your risk. We are also not responsible for any circumvention of security settings and security measures applied on the Site.

9. YOUR RIGHTS

The GDPR grants you the following rights regarding your personal data:

• access to personal data (including obtaining a copy of the data) – under the terms specified in Art. 15 GDPR;
• rectification (correction) of personal data – under the terms specified in Art. 16 GDPR;
• deletion of personal data – under the terms specified in Art. 17 GDPR;
• restriction of processing – under the terms specified in Art. 18 GDPR;
• transfer of data to another data controller – under the terms specified in Art. 20 GDPR.

You can exercise the above rights by submitting a request to the email address:

ludwig@pc-akme.pl

When submitting a request or during contact, we may ask you to provide additional information, allowing us to verify your identity.

Objection

In addition to the rights mentioned in the preceding paragraphs, you may at any time object to the processing of your personal data (including profiling) for direct marketing purposes. Upon raising an objection, we will cease processing data for this purpose. For reasons related to your particular situation, you may object at any time to our processing of personal data (including profiling), if the basis for processing is a legitimate or public interest. In case of objection, we will cease processing your personal data, unless there are valid legally justified reasons for processing data, which according to the law should prevail over your interests, rights, and freedoms; or there are grounds for establishing, pursuing, or defending our claims.

Complaint

You have the right to file a complaint with the President of the Personal Data Protection Office. Details and contact information can be found on the website of the authority: https://uodo.gov.pl/, if you believe that our processing of personal data violates the law.