Privacy policy
This document sets out the principles for processing and protecting the personal data of current and potential business partners (including clients and suppliers) by [company], hereinafter referred to as the Data Controller.
I. Definitions
- Cookies - means information stored in small text files on devices used by the User to access the Website.
- Website - means the website owned by the Data Controller.
- Device - means the electronic device through which the User accesses the Website.
- User - means the individual or entity using the content and functions available on the Data Controller’s Website or to whom services may be provided electronically under applicable law or agreements.
II. Data Controller
[company]
III. Legal basis
The Data Controller processes personal data in accordance with applicable law, including the Act of 29 August 1997 on the Protection of Personal Data and the EU General Data Protection Regulation (Regulation (EU) 2016/679) on the protection of natural persons with regard to the processing of personal data and the free movement of such data ("GDPR").
IV. Purposes and storage period of data
The Data Controller processes personal data exclusively for acquiring clients/suppliers, managing quotations, executing orders/agreements, providing after-sales services, and sending personalized commercial information, including:
- creating an account on the Website
- contact via phone, email, or in person
- sending ordered informational or promotional materials
- executing orders/agreements
- handling service or complaint requests
- after-sales support
- potentially pursuing claims
- customizing the Website to User needs
- creating reports and statistical analyses, including traffic statistics
Data is stored for the period necessary to execute agreements and provide services (including warranty and post-warranty services). Afterward, data is kept only for pursuing claims and sending commercial information.
V. Scope and storage of data
The Data Controller collects personal data when acquiring clients/suppliers, managing quotations, executing orders/agreements, and providing after-sales services. This includes names, addresses, tax IDs, contact persons, their position, department, email, phone, and, for website users, IP addresses. Data is stored in a format that allows portability.
Providing data is voluntary but required to use certain website functionalities and for sending offers, executing orders, agreements, or services.
Data may only be shared with third parties if necessary to perform agreements, handle complaints or warranty issues, or send catalogues via postal services. This applies to shipping, courier, assembly, or service companies.
The Data Controller may delegate data storage and processing to service providers (hosting, automated marketing, website optimization) under written agreements. With separate user consent, data may also be processed for receiving marketing communications, including newsletters.
VI. Automatically collected data
The Data Controller automatically collects certain data through Cookies and automated marketing systems, including IP addresses, device types, connection times, and general usage activity, for technical purposes, website optimization, and statistics.
Cookies are used for:
- Website configuration
- customizing content to user preferences
- recognizing user devices and location for appropriate display
- remembering user-selected settings, such as language or region
- tracking visited pages for content recommendations
- Ensuring full website functionality
- detecting basic device parameters for proper content display
- Security and reliability
- Displaying multimedia from external sites (e.g., YouTube)
- Collecting anonymous statistics (e.g., Google Analytics)
- Interactive functions via social networks (e.g., Facebook)
- Content profiling based on user interests
Users can modify cookie settings or location sharing in their browser, delete cookies, or block automatic cookie handling. These actions may limit some website functionalities.
VII. Rights of access, correction, deletion, restriction, objection, and data portability
Individuals whose data is processed may request:
- access to personal data
- correction of data
- deletion of data
- restriction of processing
- objection to processing
- data portability
Objections to profiling or processing can also be submitted. Requests are handled within 30 days (extendable to 90 days if justified). Exercising these rights may affect services.
Consent to marketing communications can be withdrawn anytime via the unsubscribe link or by email: [mail].
VIII. Data security
The Data Controller ensures a high level of data security. Security incidents should be reported to: [mail].
Data may be processed by service providers (hosting, automated marketing, website optimization) and, for order/service handling, by courier, assembly, and service companies, under written agreements.
IX. Final provisions
Individuals may lodge complaints with the relevant supervisory authority if processing violates applicable data protection laws. The Data Controller reserves the right to update this Privacy Policy by publishing a new version on this page.