Privacy Policy

This Privacy Policy has been drawn up on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as the GDPR.

PERSONAL DATA CONTROLLER

  1. The controller of the personal data of users who are natural persons is IMPALL Rozwandowicz Bocheński Sp.K., with its registered office at ul. Pojezierska 95A, Łódź, Poland, entered in the register of entrepreneurs under KRS number: 0000971230, NIP (Polish tax ID): 729-261-96-25, whose registration files are kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register (Sąd Rejonowy dla Łodzi-Śródmieścia, XX Wydział Gospodarczy KRS). The Controller can be contacted Monday to Friday, 8:00-17:00 CET/CEST, by email at: impall@impall.pl, or by telephone at: +48 42 640 30 13. Website: Impall industrial sewing machines.

REQUIREMENT TO PROVIDE PERSONAL DATA AND CATEGORIES OF PERSONAL DATA PROCESSED

  1. The Controller processes the following personal data of users:

  1. full name,

  2. email address.

  1. Providing the personal data specified in point 2 is not a statutory requirement and is voluntary, but it is a condition for concluding with the Controller a contract for the provision of services by electronic means, hereinafter referred to as the “Contract”. If the user does not provide these data, the Contract will not be concluded.

  2. While the Contract is in force, the Controller may come into possession of other data of the user: the IP address of the device used by the user and data on the user’s use of a particular ICT network, software or devices, as well as on the way the Controller’s website is used.

PURPOSES OF PROCESSING PERSONAL DATA

  1. The Controller processes the personal data of users for the following purposes:

  1. concluding and performing the Contract between the parties, in particular the proper performance of services and the handling of complaints,

  2. fulfilling the legal obligations incumbent on the Controller, in particular issuing and storing invoices and other accounting documents,

  3. pursuing and defending against claims,

  4. detecting and preventing abuse,

  5. direct marketing,

  6. producing analyses and statistics for the Controller’s own needs, in particular reporting, marketing and market research, planning the development of services, and researching the preferences and behaviour of users in order to improve the quality of the services provided by the Controller,

  7. those specified in points 5e and f after the performance of the Contract, with the consent of the user,

  8. transfer to third parties, with the consent of the user, to the extent and for the purpose covered by that consent.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

  1. The legal basis for processing the personal data of users for the purpose specified:

  1. in point 5a is Article 6(1)(b) GDPR (performance of the Contract),

  2. in point 5b is Article 6(1)(c) GDPR (legal obligation),

  3. in points 5c-f is Article 6(1)(f) GDPR (legitimate interest of the Controller),

  4. in points 5g and h is Article 6(1)(a) GDPR (consent of the user).

PERSONAL DATA RETENTION PERIOD

  1. The Controller will store personal data processed for the purpose specified:

  1. in point 5a, for the duration of the Contract and of the settlements after its termination,

  2. in point 5b, for as long as the law requires the Controller to do so,

  3. in points 5c and d, until the claims arising from the Contract become time-barred,

  4. in points 5e and f, for the duration of the Contract,

  5. in points 5g and h, until the user withdraws consent.

  1. Pursuant to Article 19(2) of the Act on the Provision of Services by Electronic Means, after the use of the services has ended, the Controller may process only those personal data of users that are:

  1. necessary for settling the service and pursuing claims for payment for the use of the service,

  2. necessary for advertising, market research and research into the behaviour and preferences of users, with the results of that research used to improve the quality of the services provided by the Controller, with the consent of the user,

  3. necessary to clarify the circumstances of unauthorised use of the service,

  4. permitted to be processed under mandatory provisions of law or under a contract.

RECIPIENTS OF PERSONAL DATA

  1. The Controller does not transfer the personal data of users to third parties unless it obtains the prior, explicit consent of the user or the right or obligation to transfer those data arises from generally applicable law.

  2. The Controller entrusts the personal data of users to the following processors:

  1. entities providing marketing and advertising services on behalf of the Controller,

  2. entities operating the Controller’s ICT systems,

  3. entities providing the Controller with postal, courier, payment, auditing, legal and accounting services.

TRANSFER OF PERSONAL DATA

TO THIRD COUNTRIES AND INTERNATIONAL ORGANISATIONS

  1. The personal data of users will not be transferred outside the European Economic Area.

RIGHTS OF USERS

  1. The user has the following rights:

  1. the right to request access to their data, i.e. to obtain confirmation as to whether personal data concerning them are being processed,

  2. the right to rectification of data, i.e. to request the rectification of personal data concerning them that are inaccurate,

  3. the right to request the erasure of their personal data,

  4. the right to request restriction of the processing of their personal data,

  5. the right to object to the processing of data,

  6. the right to data portability.

  1. The scope of each of the rights specified in point 12 and the situations in which they can be exercised are set out in generally applicable law, in particular the GDPR.

  2. The user may exercise the rights specified in point 12 by contacting the Controller.

RIGHT TO WITHDRAW CONSENT

  1. If the processing of the user’s personal data is based on their consent, the user has the right to withdraw it at any time, without affecting the lawfulness of processing carried out on the basis of that consent before its withdrawal.

PROFILING

  1. For the purposes specified in points 5c-f, the Controller may carry out automated analysis of users’ data and make predictions about their preferences or future behaviour. Profiling may be used in particular to analyse and forecast the personal preferences or interests of users. Such activity of the Controller will not produce any legal effects for users, nor will it similarly significantly affect their situation.

COOKIES

  1. For the purposes specified in points 5c-f, the Controller may use cookies. These are small text files placed on the user’s device, on the basis of which information is collected that makes it possible, in particular, to identify the user’s device, its IP address and the browser used by the user.

  2. The user can set their browser, using the appropriate options available in it, to disable the automatic installation of cookies, prevent their use or delete them completely from their device. The procedure for handling and deleting cookies differs depending on the browser used by the user.

  3. Cookies are divided into:

  1. temporary (session) cookies: files stored temporarily in the browser cache that remain there until the end of the session,

  2. persistent cookies: files that remain in the browser cache for as long as the browser settings chosen by the user allow,

  3. first-party cookies: files managed by the Controller,

  4. third-party cookies: files managed by third parties,

  5. configuration cookies: files related to the user’s movement around the pages of the Controller’s website that ensure correct navigation on it. In particular, they make it possible to track the choices made by the user (choice of language, font size used), recognise the device used by the user and manage the browsing session,

  6. analytical cookies: files used for statistical and analytical purposes,

  7. advertising cookies: files used for advertising purposes, e.g. to display personalised advertisements.

  1. The detailed rules for the operation of the cookies placed on the Controller’s website are set out at the following links:

  1. https://policies.google.com/privacy/update?hl=en-GB

  2. https://www.google.com/analytics/learn/privacy.html?hl=en-GB

COMPLAINT TO THE SUPERVISORY AUTHORITY

  1. The user has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, if they consider that the processing of their personal data infringes the law.

SECURITY OF USERS’ PERSONAL DATA

  1. The Controller applies appropriate technical and organisational measures to protect the personal data of users against loss, misuse or modification. Rights of access to the personal data of users have been strictly limited so that these data do not fall into the hands of unauthorised persons.