Dear Users,
By visiting our website, we process certain information about you, such as data about your device, country of origin, web browser, and IP address, including personal data that you provide to us when contacting us at the email address provided on our website. Any personal data we collect in this way will be used in accordance with applicable law, including Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter "GDPR"). This privacy policy applies to how we process your personal data collected through our website (hereinafter the "Website") or by means of remote communication.
1. WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?
The administrators of all personal data collected through the Website are us.
PC-Akme Gitarowa Street 3/1 51-531 Wrocław
You can contact us at any time regarding the personal data we process. Contact details are available on the Website.
2. WHAT DATA DOES THIS POLICY COVER?
This privacy policy applies to all information, including personal data, collected by us:
- - through the Website and by means of remote communication;
- - through mobile and computer applications that form your interaction system with the Website without relying on web browsers;
- - in connection with your interaction with advertising materials and applications located on third-party websites or as part of services provided by these persons, provided that these applications or advertising materials contain a link or reference to this policy.
The policy does not apply to information we collect offline.
The term "personal data" used in this policy refers to any information about an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
3. PERSONS UNDER THE AGE OF 16
The Website is not intended for use by persons under 16 years of age. We do not knowingly collect personal data about persons under 16 years of age. If you are under 16 years old, you cannot use or provide any information through the Website.
If it turns out that we have collected or received any personal data about a person under 16 years of age without the consent and knowledge of their legal guardians, we will promptly delete such personal data. If you suspect that we have such personal data, please contact us.
4. INFORMATION COLLECTED THROUGH THE WEBSITE
We collect information, including personal data:
- - directly from you or automatically when you enter and use the Website, always with your consent; or
- - automatically, when you enter and use the Website, collected through necessary cookies or performance cookies, without your explicit consent. The information collected in this way relates in particular to your use of the Website, information about your device, the country you are from, the web browser you use, or your IP address.
We do not collect other personal data in this way, such as your name, surname, or email address.
If your consent is required for the collection of personal data, personal data will only be processed to the extent provided by that consent. You can withdraw the consent you have given us at any time, but this will not affect the legality of processing your personal data before withdrawing your consent.
Personal data collected for purposes other than fulfilling legal obligations may be subject to profiling, i.e., the automated analysis of your data to develop predictions about preferences or future behaviors (e.g., to tailor the content of the Website or marketing materials sent to you). This applies to services like Google or Meta Platforms marketing services.
We do not carry out automated data processing that would affect your situation, nor do we make decisions concerning you based on it. Providing any personal data is not mandatory, but it is necessary for browsing and using the Website and its functionalities.
5. COOKIES
The Website uses cookies. Cookies are small data files stored on the User's device, used to browse the Website. They typically contain the name of the website, the duration of storage, and a unique number.
The Website operator places and accesses cookies on the User's device. These files are used to create usage statistics for the website and maintain the User's session.
There are two types of cookies used by the Website: "session" (session cookies) and "permanent" (persistent cookies). Session cookies are temporary and stored until logout, while permanent cookies are stored for a specified time or until they are deleted.
Web browsers usually accept cookies by default, but users can change these settings. Limiting the use of cookies may affect the Website's functionality.
Cookies may also be used by the Website's partners. It is recommended to review the privacy policies of these companies.
Google Analytics
Server logs.
User behavior information is logged at the server layer. These data are used only for the administration of the website and to ensure the most efficient handling of the services provided.
Resources are identified by URL addresses. In addition, the following information may be logged:
- time of the request,
- time of sending the response,
- client station name - identification performed by HTTP/HTTPS protocol,
- information about errors that occurred during the HTTP/HTTPS transaction,
- URL of the previously visited page (referer link) – in case the transition to the Website was made via a link,
- information about the user's browser,
- Information about the IP address.
The above data are not associated with specific persons browsing the site.
The above data are used only for server administration purposes.
6. PROCESSING INFORMATION
We may use properly collected information to provide goods/services available on the Website and personalize the Website. Information collected from you will enable us to inform you about significant Website functionalities and changes and will be used for statistical analysis to improve the quality of services offered to you.
We may process the collected information, except for personal data (the processing of which is detailed below), for business purposes, including:
- presenting the Website and its content and enabling the use of the Website's functionalities and its content;
- communicating with you through various communication channels;
- publishing reviews or comments submitted by you about products and services;
- fulfilling legal obligations, including protecting against illegal transactions, managing complaints, and enhancing network security;
- controlling your compliance with legal obligations, policies, and other regulations; establishing, defending, and asserting our claims, including the transfer of receivables;
- creating summaries, analyses, and statistics to implement, evaluate, and improve our business operations, products, services, and management of the Website and applications;
- direct marketing;
- other purposes for which the information was collected;
- carrying out any other purposes with your consent.
Following personal data collected through the Website and by means of remote communication are processed by us for the following purposes and legal bases:
- Purpose: Conclusion and performance of a sales contract for goods, services, and products via remote communication.
- Personal data: Identification and billing information such as name, surname, address, VAT number, email, phone number.
- Legal basis: Article 6(1)(b) GDPR – performance of the contract.
- Time: For the duration necessary to perform the contract and also for the limitation of mutual claims related to the contract.
- Purpose: Presentation of the Website and its content, enabling the use of the Website's functionalities and its content, and enhancing network security.
- Personal data: Automatically received data from devices used to access the Website, such as IP address, location, and time.
- Legal basis: Article 6(1)(f) GDPR – legitimate interest.
- Time: For the duration of the Website visit and after leaving the site until the browser is closed.
- Purpose: Creation of summaries, analyses, and statistics to implement, evaluate, and improve the functioning of the Website, our business, goods, and services.
- Personal data: Automatically received data from devices used to access the Website, such as IP address, location, and time.
- Legal basis: Article 6(1)(f) GDPR – legitimate interest, and in the case of processing these data through cookies – Article 6(1)(a) GDPR – consent.
- Time: For the duration necessary to perform these actions, no longer than 14 months.
- Purpose: Recognizing and responding to inquiries, requests, and applications submitted via remote communication.
- Personal data: Contact and identification data obtained from you, such as name, surname, email address.
- Legal basis: Article 6(1)(a) GDPR – consent.
- Time: For the time necessary to complete the communication and 3 years after its completion or until consent is withdrawn.
- Purpose: Communicating with you through various communication channels, including for sending marketing materials, although we never initiate contact.
- Personal data: Contact and identification data obtained from you, such as name, surname, email address, phone number.
- Legal basis: Article 6(1)(a) GDPR – consent.
- Time: Until consent is withdrawn.
- Purpose: Fulfillment of legal obligations imposed on us, including protection and prevention of illegal transactions, managing complaints, and enhancing network security.
- Personal data: Automatically received data from devices used to access the Website, such as IP address, location, and time; contact and identification data obtained from you, such as name and email address.
- Legal basis: Article 6(1)(c) GDPR – legal obligation.
- Time: For the time necessary to perform the obligation.
- Purpose: Controlling your compliance with legal obligations, policies, and our regulations; determining, defending, and asserting our claims, including the sale of receivables due to us from you.
- Personal data: Automatically received data from devices used to access the Website, such as IP address, location, and time; contact and identification data obtained from you, such as name and email address.
- Legal basis: Article 6(1)(f) GDPR – legitimate interest.
- Time: Until the limitation of claims.
- Purpose: Re-targeting marketing.
- Personal data: Automatically received data from devices used to access the Website, such as IP address, location, and time.
- Legal basis: Article 6(1)(a) GDPR – consent.
- Time: No longer than 180 days in the case of Facebook Pixel or until consent is withdrawn.
- Purpose: Other purposes, as agreed upon.
- Personal data: As agreed upon.
- Legal basis: Article 6(1)(a) – consent.
7. DATA SHARING
We use third-party services to perform certain actions on our behalf. Examples of such actions include the management of IT systems, including email services, web hosting, provision of IT resources, data analysis, marketing support, customer service, legal services, accounting, auditing, etc. These third parties process personal data on our behalf only for the purpose of performing their functions and may not process personal data for their own purposes. We ensure that the processing of your personal data by data processors on our behalf is in accordance with the principles set out in the GDPR, in particular that each such entity is aware of its GDPR obligations and complies with them. We ensure that each entity processing personal data on our behalf will provide appropriate technical and organizational safeguards, no weaker than those required by applicable law.
We may also share your personal data with other data controllers, especially if necessary to fulfill legal obligations, such as ensuring the protection of rights or security on the Website, other users, or third parties (e.g., for the purpose of crime investigation, settlements). For example, this also applies to situations where we provide personal data to government authorities, local government authorities, or law enforcement bodies, entities running economic information offices, or purchasers of receivables. Each time we assess the legality of sharing personal data, taking into account the type of applicant, the type of requested personal data, and the impact that such sharing may have on your rights and the purposes for which the data was collected. In the event of sharing personal data, we will take all possible steps to ensure that the scope of shared personal data is as minimal as possible, e.g., by redacting the transmitted information.
We may disclose the personal data collected as described in this Privacy Policy to a buyer or another successor in the event of a restructuring, reorganization, diversification, or sale of all or part of the business, whether as an independent transaction or as part of a bankruptcy or restructuring proceeding or the cessation of business if personal data is part of the transferred assets.
We may share your personal data with carefully selected third parties for marketing or other purposes, provided that you have given your consent.
Data recipients may be located in different countries, including those where data protection laws provide a lower level of protection than European Union law, particularly in countries outside the European Union ("third countries"). We may transfer your personal data to a third country only if: - the competent EU authority determines by means of an implementing act that the third country, territory, or specified sector or sectors within that third country or international organization provide an adequate level of protection, or - in the absence of the decision referred to above, only if adequate safeguards are provided, and on condition that enforceable data subjects' rights and effective legal remedies are available, in particular through standard contractual clauses or other requirements set out in the GDPR.
Currently, we transfer personal data obtained through the website to the following entities in connection with the services provided to us: - Google LLC, based in California, USA, and Google Ireland Ltd – the entity responsible for the traffic analysis tool and cookie file of this website (Google Analytics) and for the operation of the Google Ads cookie. Details on the functioning of cookies can be found in section 5 of this Privacy Policy. Data transfer to the USA is based on an agreement containing Standard Contractual Clauses, approved by the European Commission.
8. SECURITY
We apply administrative, technical, and physical security measures designed to protect personal data from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. However, we do not guarantee that as a result of applying these measures, your personal data will always be fully secure, given the inherent risk and uncertainty of the Internet and IT systems, and the possibility of illegal hacking attacks. Any transmission of personal data over the Internet is not fully secure. We strive to fully secure the personal data you provide, but we do not guarantee the security of the information/personal data transmitted through the Website. The transmission of personal data is at your own risk. We are not responsible for any circumvention of security settings and security measures applied on the Website.
9. YOUR RIGHTS
The GDPR grants you the following rights regarding your personal data:
- access to personal data (including obtaining a copy of the data) – under the terms set out in Article 15 GDPR;
- rectification (correction) of personal data – under the terms set out in Article 16 GDPR;
- deletion of personal data – under the terms set out in Article 17 GDPR;
- restriction of processing – under the terms set out in Article 18 GDPR;
- data portability to another data controller – under the terms set out in Article 20 GDPR.
You can exercise these rights by submitting a request to the email address:
ludwig@pc-akme.pl
When submitting a request or during contact, we may ask you to provide additional information to enable us to verify your identity.
Objection
In addition to the rights mentioned in the previous paragraphs, you may object at any time to the processing of your personal data (including profiling) for direct marketing purposes. Upon objection, we will stop processing the data for this purpose.
Due to your particular situation, you may object at any time to the processing of your personal data (including profiling) where the basis for processing is a legitimate interest or public interest. In the event of an objection, we will stop processing your personal data unless there are legally justified grounds for processing the data, which under the law should be overriding your interests, rights, and freedoms, or there are grounds for establishing, pursuing, or defending our claims.
Complaint
You have the right to lodge a complaint with the President of the Personal Data Protection Office. Details and contact information can be found on the office's website: https://uodo.gov.pl/, if you believe that the processing of your personal data violates the law.