Privacy Policy

INFORMATION CLAUSE ON PERSONAL DATA PROTECTION

1. We pay special attention to the protection and processing of your personal data. We make every effort to ensure that the personal data entrusted to us is safe with us and we process it in accordance with the relevant legal provisions, in particular in accordance with the general regulation of the European Parliament and the Council of the European Union 2016/679 of 27 April 2016 on the protection of individuals in connection with with personal data processing and on the free movement of such personal data and repealing directive 95/46/W („GDPR”).
2. If you use our website farby-prochem.pl, the administrator of your personal data is Industrial Paints Company PROCHEM Sp. z o. o. located in Kłomnice, 57 Nieznanicka Street, 42-270 Kłomnice, identified with tax number NIP 573-02-10-149 and REGON 1346344.
3. Administrator appointed Personal Data Protection Inspector. You can contact him using e-mail address iod@farby-prochem.pl
4. Your personal data is processed for the following purposes and on the basis of the following legal regulations:
   
   
   Lawfulness of processing

   The purpose of personal data processing

   
   art. 6 par. 1 p. a) GDPR, i.e. the data subject has given consent to the processing of his or her personal data

   
   - response to inquiries addressed to the Administrator via e-mail or contact form on the website, the legal basis for such processing is the consent given by the person;
   - possibilities of facilitating the use of individual website in the domain farby-prochem.pl (in the scope of "cookie" files);
   - other marketing activities that go beyond the legitimate interest of the administrator.

   
   art. 6 par. 1 p. b) GDPR, i.e. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

   
   - performance of contracts for the sale of administrator's goods and in order to take action at the request of buyers before concluding a sales contract and related to handling complaints.

   
   art. 6 par. 1 p. c) GDPR, i.e. processing is necessary for compliance with a legal obligation to which the controller is subject

   
   - fulfilling the administrator's obligations under the law, in particular accounting and tax obligations arising in connection with the sale of goods.

   
   art. 6 par. 1 p. f) GDPR, i.e. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party

   
   - protection against claims due to buyers and possible pursuit of claims due to the personal data administrator.
   - direct product marketing.
5. Your personal data might be redirected (shared or entrusted):
   
   1. entities, institutions and state authorities authorized to access personal data on another legal basis;
   2. services providers, i.e. IT systems maintenance, sales brokerage services, payment services in order to finalize transactions, accounting and marketing services etc.
6. We store personal data in the European Economic Area (EEA). They can also be sent outside this area and processed there. Whenever we transfer data, we do so in accordance with applicable law. If we transfer data outside the EEA, we use standard contractual clauses taking into account, for example, the rules resulting from the Contractual clauses that secure this data outside the EEA.
7. Personal data will be processed depending on the legal basis:
   
   1. If your personal data processing is based on consent, they will be processed until the consent is withdrawn.
   2. If your personal data will be processed on the basis of a contract, they will be stored by the administrator for as long as it is necessary to perform the contract between us or a contract concluded by another entity on your behalf, and after that time for a period corresponding to the period of limitation of claims.
   3. If your personal data will be processed in order to fulfill the legal obligation imposed on the administrator, personal data will be kept for the time necessary to fulfill this obligation.
   4. If your personal data will be processed on the basis of the legitimate interest of the administrator, then the basis for this processing is the performance of the contract concluded with the administrator on your behalf, the data will be processed until the legitimate interest constituting the basis for this processing is fulfilled. If your personal data will be processed on the basis of the legitimate interest of the administrator, when the basis for this processing is direct marketing of your products, your personal data will be processed until you object.
8. You have the following rights:
   
   1. The right to request the Administrator to access personal data.
   2. The right to rectify personal data.
   3. The right to remove or limit processing of personal data (in cases provided by law).
   4. Right to object the processing.
   5. Right to data portability.
9. If we process your data on the basis of consent, you have the right to withdraw it at any time without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
10. You always have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.
11. Providing personal data is voluntary, but necessary to achieve selected goals, for example contact or order finalization.
12. Your data is not profiled.