Privacy Policy

PRIVACY POLICY

This Privacy Policy defines the principles of processing personal data obtained through the online store www.euromagnesy.com (hereinafter referred to as the "Online Store").

The owner of the Online Store and the data administrator is EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA, ul. Igańska 30/uż/5, 04-083 Warsaw, NIP: 5322049078, REGON: 147374583; email: magnesy@euromagnesy.com, hereinafter referred to as EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA.

Personal data collected by EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA through the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.

EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA takes special care to respect the privacy of customers visiting the Online Store.

§ 1 Types of Data Processed, Purposes, and Legal Basis

EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA collects information regarding natural persons performing legal actions not directly related to their business activity, natural persons conducting business or professional activity on their own behalf, and natural persons representing legal entities or organizational units without legal personality, to which the law grants legal capacity, hereinafter collectively referred to as Clients.

Personal data of Clients is collected in the following cases:

1. Registration of an account in the Online Store, in order to create an individual account and manage it. Legal basis: necessity to perform the contract for the provision of the Account service (Article 6(1)(b) GDPR);

2. Placing an order in the Online Store, in order to perform the sales contract. Legal basis: necessity to perform the sales contract (Article 6(1)(b) GDPR);

3. Subscription to the newsletter (Newsletter), in order to perform the contract for the service provided electronically. Legal basis: consent of the data subject for the performance of the Newsletter service contract (Article 6(1)(a) GDPR).

In the case of registering an account in the Online Store, the Client provides:

1. Email address;

2. Password;

3. First and last name.

During the registration of an account in the Online Store, the Client sets an individual password to access their account. The Client can change the password later, according to the rules described in §5.

When placing an order in the Online Store, the Client provides the following data:

1. Email address;

2. Address data:

Postal code and city;

Street with house/apartment number.

3. First and last name;

4. Phone number.

In the case of Entrepreneurs, the above scope of data is additionally extended by:

1. The name of the Entrepreneur;

2. NIP number.

When using the Newsletter service, the Client only provides their email address.

During the use of the Online Store website, additional information may be collected, in particular: the IP address assigned to the Client's computer or external IP address of the Internet provider, domain name, browser type, access time, and operating system type.

Navigation data may also be collected from Clients, including information about links and references they decide to click or other actions taken in the Online Store. Legal basis: legitimate interest (Article 6(1)(f) GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.

To establish, assert, and enforce claims, some personal data provided by the Client within the use of functionalities in the Online Store, such as name, surname, data on the use of services if the claims result from the way the Client uses the services, other data necessary to prove the existence of the claim, including the extent of the damage suffered, may be processed. Legal basis: legitimate interest (Article 6(1)(f) GDPR), consisting in establishing, asserting, and enforcing claims and defending against claims in proceedings before courts and other state authorities.

Providing personal data to EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA is voluntary in connection with concluded sales contracts or the provision of services through the Online Store website, with the reservation that failure to provide the data specified in the forms in the Registration process will prevent Registration and the creation of a Client Account, and in the case of placing an order without Registration of the Client Account will prevent the submission and execution of the Client's order.

§ 2 To whom data is disclosed or entrusted, and how long is it stored?

Personal data of Clients is transferred to service providers used by EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA in operating the Online Store. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, are either subject to EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA instructions regarding the purposes and methods of data processing (processors) or determine the purposes and methods of processing data themselves (controllers).

1. Processors. EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA uses service providers who process personal data only on the instruction of EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA. These include providers of hosting services, accounting services, marketing systems, traffic analysis systems in the Online Store, and systems for analyzing the effectiveness of marketing campaigns;

2. Controllers. EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA uses service providers who do not act solely on instructions and determine the purposes and methods of using Clients' personal data themselves. They provide electronic payment and banking services.

Location. Service providers are based in Poland and other countries of the European Economic Area (EEA).

Clients' personal data is stored:

1. If the basis for processing personal data is consent, then the Client's personal data is processed by EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA as long as the consent is not withdrawn, and after withdrawal of consent for the period corresponding to the limitation period of claims that EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA may raise and that may be raised against it. Unless a specific provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activities - three years.

2. If the basis for data processing is the performance of the contract, then personal data of the Client is processed by EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA as long as it is necessary to perform the contract, and after that time for the period corresponding to the limitation period of claims. Unless a specific provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activities - three years.

In the case of a purchase in the Online Store, personal data may be transferred for the purpose of delivering the ordered goods:

1. to InPost Paczkomaty Sp. z o.o. based in Krakow, providing courier services and delivery and handling of the parcel locker system (Paczkomaty).

If the Client chooses to pay through the Przelewy24 system, their personal data is transferred to the extent necessary for payment processing to PayPro S.A. based in Poznań (60-198), ul. Pastelowa 8, registered in the Register of Entrepreneurs maintained by the District Court Poznań - Nowe Miasto and Wilda in Poznań, VIII Commercial Division of the National Court Register under the number KRS 0000347935.

Navigation data may be used to provide Clients with better service, analyze statistical data, adjust the Online Store to Clients' preferences, and administer the Online Store.

If the Client subscribes to the newsletter (Newsletter), EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA will send commercial information about promotions and new products available in the Online Store to the provided email address.

Upon request, EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA provides personal data to authorized state authorities, in particular organizational units of the Prosecutor's Office, Police, President of the Office for Personal Data Protection, President of the Office of Competition and Consumer Protection, or President of the Office of Electronic Communications.

§ 3 Mechanism of cookies, IP address

The Online Store uses small files called cookies. They are saved by EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA on the end device of the person visiting the Online Store if the web browser allows it. A cookie file usually contains the name of the domain from which it originates, its "expiry time," and an individual, randomly selected number identifying the file. Information collected using this type of files helps adjust the products offered by EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA to the individual preferences and actual needs of visitors to the Online Store. It also enables the creation of general statistics of visits to the presented products in the Online Store.

EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA uses two types of cookies:

1. Session cookies: after the session of a given browser is ended or the computer is turned off, the saved information is deleted from the memory of the device. The mechanism of session cookies does not allow the collection of any personal data or any confidential information from the Client's computer.

2. Persistent cookies: they are stored in the memory of the Client's end device and remain there until they are deleted or expired. The mechanism of persistent cookies does not allow the collection of any personal data or any confidential information from the Client's computer.

EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA uses its own cookies for:

1. Authenticating the Client in the Online Store and ensuring the Client's session in the Online Store (after logging in), thanks to which the Client does not have to enter the login and password on each subpage of the Online Store;

2. Analysis, research, and audit of viewing figures, in particular to create anonymous statistics that help understand how Clients use the Online Store's website, which allows improving its structure and content.

The cookie mechanism is safe for Clients' computers of the Online Store. In particular, it is not possible for viruses or other unwanted software or malware to get to Clients' computers this way. However, in their browsers, Clients have the option to restrict or disable access of cookies to computers. If this option is used, the use of the Online Store will be possible, except for functions that by their nature require cookies.

Below are instructions on how to change cookie settings in popular web browsers:

1. Internet Explorer browser;

2. Microsoft EDGE browser;

3. Mozilla Firefox browser;

4. Chrome browser;

5. Safari browser;

6. Opera browser.

EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA may collect IP addresses of Clients. An IP address is a number assigned to the computer of a person visiting the Online Store by the Internet service provider. The IP number allows access to the Internet. In most cases, it is assigned to the computer dynamically, i.e., it changes with each connection to the Internet. The IP address is used by EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA for diagnosing technical problems with the server, creating statistical analyses (e.g., determining from which regions we record the most visits), as information useful for administering and improving the Online Store, as well as for security purposes and possible identification of unwanted automatic programs for viewing the content of the Online Store that overload the server.

The Online Store contains links and references to other websites. EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA is not responsible for the privacy policies applicable to them.

§ 4 Rights of persons whose data is processed

Right to withdraw consent - legal basis: Article 7(3) GDPR.

1. The Client has the right to withdraw any consent given to EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA.

2. Withdrawal of consent is effective from the moment of withdrawal.

3. Withdrawal of consent does not affect the processing carried out by EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA in accordance with the law before its withdrawal.

4. Withdrawal of consent does not entail any negative consequences for the Client but may prevent further use of services or functionalities that, according to the law, EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA can provide only with consent.

Right to object to data processing - legal basis: Article 21 GDPR.

1. The Client has the right to object at any time - for reasons related to their particular situation - to the processing of their personal data, including profiling, if EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA processes their data based on a legitimate interest, e.g., marketing of EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID products and services, statistics on the use of specific functionalities of the Online Store, and facilitating the use of the Online Store, as well as satisfaction surveys.

2. Resignation in the form of an email message from receiving marketing communications regarding products or services will mean the Client's objection to the processing of their personal data, including profiling for these purposes.

3. If the Client's objection proves justified and EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA has no other legal basis for processing personal data, the Client's personal data will be deleted in relation to the processing of which the Client objected.

Right to data deletion ("right to be forgotten") - legal basis: Article 17 GDPR.

1. The Client has the right to request the deletion of all or some personal data.

2. The Client has the right to request the deletion of personal data if:

Personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

They withdrew specific consent to the extent that personal data was processed based on their consent;

They objected to the use of their data for marketing purposes;

Personal data is processed unlawfully;

Personal data must be deleted to comply with a legal obligation under Union law or the law of the Member State to which EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA is subject;

Personal data was collected in connection with the offering of information society services.

3. Despite the request to delete personal data in connection with the objection or withdrawal of consent, EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA may retain certain personal data to the extent that processing is necessary to establish, assert, or defend claims, as well as to fulfill a legal obligation requiring processing under Union law or the law of the Member State to which EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA is subject. This applies in particular to personal data including: first name, last name, email address, which data is retained for the purpose of handling complaints and claims related to the use of EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA services, or additionally the address of residence/correspondence address, order number, which data is retained for the purpose of handling complaints and claims related to concluded sales contracts or the provision of services.

Right to restrict data processing - legal basis: Article 18 GDPR.

1. The Client has the right to request the restriction of processing their personal data. Submitting a request, until its consideration, prevents the use of certain functionalities or services, the use of which will involve processing data covered by the request. EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA will also not send any communications, including marketing ones.

2. The Client has the right to request the restriction of the use of personal data in the following cases:

When they question the correctness of their personal data - then EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA restricts its use for the time needed to check the correctness of the data, not longer than 7 days;

When data processing is unlawful, and instead of deleting data, the Client requests restriction of its use;

When personal data is no longer necessary for the purposes for which it was collected or used but is needed by the Client to establish, assert, or defend claims;

When they objected to the use of their data - then the restriction occurs for the time needed to consider whether - due to the particular situation - the protection of the Client's interests, rights, and freedoms prevails over the interests pursued by the Administrator by processing the Client's personal data.

Right of access to data - legal basis: Article 15 GDPR.

1. The Client has the right to obtain from the Administrator confirmation of whether they process personal data, and if so, the Client has the right to:

Access their personal data;

Obtain information about the purposes of processing, categories of processed personal data, recipients or categories of recipients of this data, the planned period of storage of the Client's data or the criteria for determining this period (if it is not possible to determine the planned period of data processing), the rights vested in the Client under GDPR, and the right to file a complaint with a supervisory authority, the source of this data, automated decision-making, including profiling, and safeguards applied in connection with the transfer of this data outside the European Union;

Obtain a copy of their personal data.

Right to rectify data - legal basis: Article 16 GDPR.

1. The Client has the right to request the Administrator to immediately rectify their personal data that is incorrect. Considering the purposes of processing, the Client to whom the data relates has the right to request the completion of incomplete personal data, including by submitting an additional statement, by directing a request to the email address in accordance with §6 of the Privacy Policy.

Right to data portability - legal basis: Article 20 GDPR.

1. The Client has the right to receive their personal data, which they provided to the Administrator, and then send it to another data controller of their choice. The Client also has the right to request that personal data be sent by the Administrator directly to such an administrator, if technically possible. In such a case, the Administrator sends the Client's personal data in the form of a csv file, which is a commonly used, machine-readable format that allows the received data to be sent to another data controller.

When the Client exercises a right arising from the above rights, EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA complies with the request or refuses to comply immediately, but no later than within one month of receiving it. However, if - due to the complex nature of the request or the number of requests - EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA cannot meet the request within a month, it will fulfill it within the next two months by informing the Client in advance within a month of receiving the request - about the intended extension of the deadline and its reasons.

The Client can submit complaints, inquiries, and requests to the Administrator regarding the processing of their personal data and the exercise of their rights.

The Client has the right to request EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA to provide a copy of standard contractual clauses by directing an inquiry in the manner indicated in §6 of the Privacy Policy.

The Client has the right to file a complaint with the President of the Office for Personal Data Protection regarding the violation of their rights to the protection of personal data or other rights granted under GDPR.

§ 5 Security management - password

EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA provides Clients with a secure and encrypted connection when transmitting personal data and when logging into the Client Account in the Service. EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA uses an SSL certificate issued by one of the world's leading companies in the field of security and encryption of data transmitted over the Internet.

If the Client with an account in the Online Store has lost their access password in any way, the Online Store allows for generating a new password. EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA does not send password reminders. The password is stored in an encrypted form, preventing its reading. To generate a new password, provide the email address in the form available under the "forgot password" link, provided with the login form to the account in the Online Store. The Client will receive an electronic message containing a redirection to a dedicated form available on the Online Store website, where the Client will have the opportunity to set a new password.

EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA never sends any correspondence, including electronic correspondence, requesting login details, especially the Client Account access password.

§ 6 Changes to the Privacy Policy

The Privacy Policy may change, which EURO MAGNESY GIGAURI GOCZA GIGAURI DAWID, SPÓŁKA JAWNA will inform Clients about 7 days in advance.

Questions regarding the Privacy Policy should be directed to: magnesy@euromagnesy.com

Date of last modification: 05.09.2023.