Privacy Policy

1. GENERAL PROVISIONS

1.1. This privacy policy of the Online Store is for information purposes only, which means that it does not create obligations for Service Users or Customers of the Online Store.

1.2. The controller of personal data is ALLBOARDS GROUP NYCZ Spółka jawna, with its registered office in Kraków, ul. Kamienna 10, 31-403 Kraków, entered in the register of entrepreneurs of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS number: 0000900719, NIP: 6772389024, REGON: 361509758, share capital PLN 50,000.00, [email protected], (12) 380-76-00, which is also the Service Provider of the Online Store and the Seller.

1.3. The Customer’s/Service User’s personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Polish Personal Data Protection Act of 10 May 2018 and the Polish Act on Providing Services by Electronic Means of 18 July 2002.

1.4. The Controller takes particular care to protect the interests of data subjects and, in particular, ensures that the data it collects is processed lawfully, collected for specified and lawful purposes and not further processed in a manner incompatible with those purposes, accurate and adequate in relation to the purposes for which it is processed, and stored in a form enabling identification of data subjects for no longer than is necessary to achieve the purpose of processing.

1.5. All words, expressions and acronyms appearing on this page and beginning with a capital letter (e.g. Seller, Online Store, Electronic Service) should be understood in accordance with their definition in the Terms and Conditions of the Online Store available on the Online Store pages.

2. PURPOSE AND SCOPE OF DATA COLLECTION AND DATA RECIPIENTS

2.1. Personal data of Customers and Service Users will be processed for the purpose of:

  • 2.1.1. providing Electronic Services/concluding a Sales Agreement and fulfilling an order placed by the Customer through the Online Store at https://sklep-allboards.pl, including defending against claims or pursuing claims arising from it until they become time-barred in accordance with applicable law,
  • 2.1.2. fulfilling the obligation to store documentation resulting from the provisions of the Accounting Act and tax law,
  • 2.1.3. optionally (if consent is given): marketing goods offered by the Controller, including telephone contact with the Customer,
  • 2.1.4. optionally (if consent is given): sending commercial information about the Controller’s products, services and promotional campaigns by electronic means (newsletter),
  • 2.1.5. optionally (if consent is given): expressing an opinion about the Sales Agreement concluded with the Controller in an opinion survey system,

– pursuant to Article 6(1)(a) GDPR.

2.2. Recipients of personal data will include:

  • 2.2.1. authorities of the National Revenue Administration,
  • 2.2.2. the bank providing the bank account service to the Controller,
  • 2.2.3. entities handling electronic payments,
  • 2.2.4. entities delivering ordered goods,
  • 2.2.5. entities providing accounting and legal services to the Controller,
  • 2.2.6. entities providing IT services to the Controller, including technical support and servicing of computer software used by the Controller in the order fulfilment process and for sending commercial information,
  • 2.2.7. if consent is given – the entity operating the opinion survey system concerning sales agreements concluded with the Controller.

2.3. The Controller carries out processing operations for the following categories of personal data:

  • 2.3.1. first name and surname,
  • 2.3.2. residential address,
  • 2.3.3. email address,
  • 2.3.4. telephone number,
  • 2.3.5. bank account number,
  • 2.3.6. optionally – company name, business address, tax identification number (NIP).

2.4. Providing the personal data indicated above is necessary to conclude and perform a Sales Agreement or an Agreement for the provision of Electronic Services. If the above data is not provided, it will not be possible to conclude and perform such agreements. The scope of data required to conclude the above agreements is indicated each time on the Online Store website in the Terms and Conditions of the Online Store.

3. COOKIES AND USAGE DATA

3.1. Cookies are small text information files sent by the server and saved on the device of the person visiting the Online Store website (e.g. on the hard drive of a computer or laptop, or on a smartphone memory card, depending on the device used by the visitor to our Online Store). Detailed information about cookies and the history of their creation can be found, among others, here: http://pl.wikipedia.org/wiki/Ciasteczko.

3.2. The Controller may process data contained in Cookies when visitors use the Online Store website for the following purposes:

  • 3.2.1. identifying Service Users as logged into the Online Store and showing that they are logged in;
  • 3.2.2. remembering Products added to the cart in order to place an Order;
  • 3.2.3. remembering data from completed Order Forms, surveys or login details for the Online Store;
  • 3.2.4. adapting the content of the Online Store website to the individual preferences of the Service User (e.g. regarding colours, font size, page layout) and optimising the use of the Online Store pages;
  • 3.2.5. keeping anonymous statistics showing how the Online Store website is used.

3.3. By default, most web browsers available on the market accept the saving of cookies. Everyone may define the conditions for using cookies through the settings of their own web browser. This means that it is possible, for example, to partially limit (e.g. temporarily) or completely disable the possibility of saving cookies. In the latter case, however, this may affect some functionalities of the Online Store (for example, it may not be possible to complete the Order path through the Order Form because Products will not be remembered in the cart during subsequent steps of placing the Order).

3.4. Web browser settings regarding cookies are important from the point of view of consent to the use of cookies by our Online Store. In accordance with the regulations, such consent may also be expressed through web browser settings. If such consent is not given, the web browser settings regarding cookies should be changed accordingly.

3.5. Detailed information on changing cookie settings and deleting cookies independently in the most popular web browsers is available in the browser help section and on the following pages (click the relevant link):

  • 3.5.1. in Chrome,
  • 3.5.2. in Firefox,
  • 3.5.3. in Internet Explorer,
  • 3.5.4. in Opera,
  • 3.5.5. in Safari,
  • 3.5.6. in Microsoft Edge.

3.6. The Controller also processes anonymised usage data related to the use of the Online Store (IP address, domain) to generate statistics helpful in administering the Online Store. This data is aggregated and anonymous, i.e. it does not contain features identifying visitors to the Online Store website. This data is not disclosed to third parties.

4. RIGHT TO CONTROL, ACCESS AND RECTIFY DATA

4.1. The Customer/Service User has the right to:

  • 4.1.1. request from the Controller access to their personal data, correction, rectification, erasure or restriction of processing of personal data,
  • 4.1.2. object to such processing,
  • 4.1.3. data portability,
  • 4.1.4. withdraw consent to the processing of personal data.

4.2. The Customer/Service User has the right to lodge a complaint with the President of the Personal Data Protection Office if there is a justified suspicion that their personal data is processed contrary to the General Data Protection Regulation of 27 April 2016 and/or the Personal Data Protection Act.

4.3. The Customer’s/Service User’s personal data will be stored by the Controller for the period of:

  • 4.3.1. performance of agreements and/or provision of services referred to in this clause, and then until the expiry of the mandatory data storage period – where data storage is based on national or Member State law (including tax law),
  • 4.3.2. until the limitation period for claims arising from the above agreements and/or related to the services provided expires – for the purposes of defence against claims or securing/pursuing them (debt collection purposes),
  • 4.3.3. for the period during which the Controller conducts marketing activities or until consent to data processing for these purposes is withdrawn,
  • 4.3.4. for the period during which the Newsletter is operated or until consent to receive it is withdrawn,
  • 4.3.5. until consent to express an opinion about the sales agreement concluded with the Controller is withdrawn.

4.4. Personal data of Customers and Service Users is subject to profiling in terms of personal preferences and interests, based on orders placed and searches on the online store website https://sklep-allboards.pl, for statistical and marketing purposes (if consent is given).

4.5. Personal data of Customers/Service Users will not be transferred to third countries.

4.6. To exercise the rights referred to in point 4.1, the Controller may be contacted by sending an appropriate written message to ul. Kamienna 10, 31-403 Kraków or by email to the Controller’s address: [email protected].

5. FINAL PROVISIONS

5.1. The Online Store may contain links to other websites. The Controller recommends that, after moving to other websites, users read the privacy policy established there. This privacy policy applies only to this Online Store.

5.2. The Controller applies technical and organisational measures ensuring protection of the processed personal data appropriate to the threats and categories of data covered by protection, and in particular protects data against disclosure to unauthorised persons, taking by an unauthorised person, processing in breach of applicable regulations, and alteration, loss, damage or destruction.

5.3. In matters not regulated by this privacy policy, the relevant provisions of the General Data Protection Regulation and Polish law apply, in particular the provisions of the Personal Data Protection Act and the Civil Code.

5.4. This privacy policy has been in force since 25 May 2018.