PRIVACY POLICY AND COOKIE POLICY
PERSONAL DATA PROTECTION
P.P.H.U. TACHOTRONIC based in Zielona Góra
ADDRESS: ul. Naftowa 1, 65-705 Zielona Góra
NIP 9730673360
1. GENERAL INFORMATION
1.1.
The privacy policy sets out the rules and principles for the processing of personal data by P.P.H.U. TACHOTRONIC, in particular in the scope of using the online store available at http://martom-hurtownia.pl/, but also in the scope of processing data of job candidates or in connection with processing data of the Company’s employees or associates.
1.2.
This Privacy Policy available at http://martom-hurtownia.pl/ sets out the rules for processing personal data and the conditions for maintaining the confidentiality of Customer data, including Users and recipients of the MARTOM Store’s NEWSLETTER.
1.3.
The administrator of personal data is:
P.P.H.U. TACHOTRONIC based in Zielona Góra, ul. Naftowa 1, 65-705 Zielona Góra
Email address: tachotronic@o2.pl
In case of any problems regarding personal data, you can contact our Customer Service Department, whose details are provided above.
1.4.
The Privacy Policy aims to inform you what data we collect, for what purpose we do it and how we use it. All information entrusted to us by you is extremely important to us, therefore we protect it at the highest level.
2. WHAT DATA DO WE COLLECT?
2.1.
The data collected by P.P.H.U. TACHOTRONIC is provided by the Customer to whom it relates through the completion of contact forms available in the online store, in connection with creating a user account on our Site – Store at www.martom-hurtownia.pl, fulfilling orders and payments for orders or registering for our NEWSLETTER, during contact via electronic messages or telephone contact, and is also collected automatically by the IT system used by the Personal Data Administrator during the Customer’s visit to our website http://martom-hurtownia.pl/.
Upon entering our website, we automatically recognize the IP address of the computer or other mobile device you are using (the IP number is the number by which each computer connected to the Internet is identified. When using the Site via a mobile device with the geolocation function enabled, we can also recognize data about your location).
Upon registering on our Site and completing the user form in the “MY ACCOUNT” section, we start processing your data. In connection with this, we collect your data in the form of: first names, surname, electronic address – email. To place an order, we collect the following data: first and last name/company name, address (country, city, postal code, street and number), phone number, email address, it is possible to provide an alternative delivery address, payment method information (credit card number, cardholder data, card expiry date), for individuals conducting business activities – NIP number. In connection with using our Site, we also collect your IP addresses of computers or other mobile devices you use.
When placing an order, P.P.H.U. TACHOTRONIC collects your name data through the form available in the “ORDERS” section, also without the need to create a user account. On this occasion, we also collect the above data collected during registration, except for information collected to create a user account.
The information we collect and which we need to be able to respond to your requests and orders is indicated in the link to the forms filled out. If you do not fill in the fields that are mandatory, we will not be able to respond to your requests and orders.
Providing your personal data is completely voluntary, but necessary for the implementation of the contract, its supervision, and for you to receive our NEWSLETTER. Each time to conclude a sales contract, providing a certain minimum of personal data is a condition for its conclusion.
2.2.
Personal data of Customers is used for handling and processing orders, as well as for the performance of contracts for the provision of services by electronic means, including the NEWSLETTER service.
2.4.
Personal data and information about orders and payments are protected against unauthorized access by technical security systems. Data transfer is carried out using a secure SSL (Secure Socket Layer) transmission protocol with a 256-bit key. This technique offers the highest security and is therefore also used by, for example, banks to protect online banking data. The transfer of encrypted data can be recognized by the presentation of encrypted keys or possible key symbols in the lower status bar of the browser.
2.5.
Since the Customer provides their personal data voluntarily, they have the right to access their personal data, correct, rectify, supplement it, and may also contact the Personal Data Administrator with a request to delete previously provided personal data from the data sets maintained by the Administrator, which they can do by contacting the data administrator via email at: tachotronic@o2.pl, in writing to the Company’s address provided in the Privacy Policy. The Administrator may refuse to delete the data if the Customer’s previous behavior in the Online Store violated the provisions of the Privacy Policy or the Store’s Regulations or applicable law, and retaining the data is necessary to explain these circumstances and determine the Customer’s responsibility.
2.6.
In the case of subscribing to the NEWSLETTER by the Customer, the Personal Data Administrator will send to the email address provided by the Customer messages containing information about products and services available in the Online Store, as well as information about organized competitions, promotions.
2.7.
P.P.H.U. TACHOTRONIC informs about the possibility of using the right to collect and/or publish information regarding the statistical characteristics of users of our Store, however, without disclosing the personal data of our Customers, in particular in the scope of determining sales statistics, how individual sections are used, the country from which the order was placed, etc., which serves to analyze the market, Customer preferences, in particular to improve the quality of services and develop services in accordance with market trends.
SECURITY POLICY PROVISIONS. PURPOSES AND LEGAL BASES FOR PROCESSING CUSTOMER’S PERSONAL DATA AND PROCESSING PERIOD
3.1.
The Customer voluntarily provides personal data specified in the Store’s Regulations and forms, which are necessary to complete the transaction concluded via the Store. Upon using our Site or in connection with placing an order, your personal data is processed for the purpose of fulfilling your order by P.P.H.U. TACHOTRONIC and its service providers, to whom we may entrust the processing of this data for the purpose and scope necessary to perform the sales contract or NEWSLETTER.
3.2.
The data of Customers who have placed an order and Customers who have registered an account in the Online Store and/or ordered a NEWSLETTER are processed with their consent, but this is necessary for the purposes of concluding and performing the contract.
3.3.
Personal data provided during email or/and telephone contact with the Personal Data Administrator will be used solely for the purpose of responding to the Customer’s inquiry in connection with the performance of the sales contract and/or NEWSLETTER service, as well as for direct marketing of P.P.H.U. TACHOTRONIC services and products.
3.4.
The Personal Data Administrator does not share personal data with third parties without the prior express consent of the Customer for the purpose and scope of data sharing.
3.5.
The Personal Data Administrator communicates with the Customer mainly via email or/and possibly by phone or mail regarding matters related to the performance of sales contracts concluded with P.P.H.U. TACHOTRONIC.
3.6.
The Personal Data Administrator uses the latest technologies and special data protection procedures. Personal data is stored in a database, which implements technical and organizational measures ensuring the protection of processed data in accordance with the requirements specified by generally applicable laws regarding personal data protection.
3.7.
Only persons authorized in writing to process personal data in the Administrator’s system have access to personal data processed in the Administrator’s system.
3.8.
Personal data is stored for the period necessary for the purposes for which it is collected as provided by law.
3.9.
Personal data is processed based on consent until the consent is withdrawn, and after the consent is withdrawn for the period provided by law for the pursuit of any claims and rights and in accordance with accounting regulations. You can do this by sending a declaration of intent to the address tachotronic@o2.pl. After receiving the withdrawal, your data will not be used for purposes other than solely to fulfill your order.
3.10.
Data processed based on legitimate interest, for marketing purposes, is stored for the duration of the contract, and then for the period of limitation of claims arising from the provision of services and the time resulting from the legal obligation arising from accounting regulations, provisions regarding the provision of sales services and in accordance with received consents, as well as until an objection is raised to the processing of data, depending on which facts occur first. The Administrator and the Data Processor will cease processing data used for profiling and analytical purposes earlier upon the submission of an objection to the processing of your data for these purposes if the law entitles to such an objection (e.g., for direct marketing purposes).
We process or store your data during the validity of the sales contract or NEWSLETTER, also after its termination for the purpose of:
– pursuing claims and rights for the period provided by law on the limitation of claims;
– fulfilling tax, accounting obligations in accordance with the law;
– statistical and archival purposes;
– accountability to demonstrate compliance with legal requirements regarding personal data protection for the period during which the Administrator will be obliged to retain data or documents that document compliance with legal requirements and enable control by supervisory authorities.
3.11.
Legally justified interests regarding direct marketing realized by us consist of offering you services within our business activities.
The Administrator may also process information regarding your preferences, which may sometimes be personal data, and have been provided to the Administrator by you voluntarily, in particular through the functionality of the Administrator’s website, including to limit the presentation of services or product promotions and services.
Thanks to this, we will be able to maintain contact with you for purposes related to direct marketing, in particular through personal contact, telephone, email, mail.
We process your data also for analytical purposes, conducting research and analysis, including statistical analysis, regarding the operation of our systems, website, improving the provision of services, including profiling for monitoring and analyzing the product and service offering to ensure the possibility of offering the product and services most tailored to the requirements and needs of our Customers. The basis for processing is the necessity to achieve the purpose resulting from the legitimate interest pursued by the Administrator, which is to offer you the most appropriate product to the requirements and needs (Art. 6(1)(f) GDPR), in particular in the scope of monitoring your activity in searching for so-called keywords, presenting offers and managing your activity on our website, including matching advertisements according to the content viewed by you regarding the products and services we offer.
We process your data and then store the data for our archiving purposes and fulfilling the accountability principle of processing your data.
We process your data to pursue our claims or in the framework of defending against claims related to the offer of an insurance product presented to you. The legal basis for processing such data is the necessity of processing to achieve the legitimate interest of the administrator or processor, which is to ensure the possibility of pursuing and defending against claims.
You have the right to object to data processing for profiling purposes.
4. What data do we process?
The Company processes personal data in the form of first and last name, business name, phone number, account number, email address, residential address (business address), correspondence data, information on the IP number, NIP information received from the person directly or through electronic, telephone communication, date and time of visit to the Store’s website, or viewed products and services, as well as the history of service orders, on the principles of data profiling, as well as any necessary information that constitutes personal data necessary for concluding and performing the sales contract for goods, in particular regarding information provided in correspondence regarding the order and contract performance.
The Administrator processes your personal data to the extent that it is made available by publicly accessible sources, obtained from publicly accessible sources, i.e., among others, from the Register of Entrepreneurs of the National Court Register (KRS), the Central Register and Information on Economic Activity (CEIDG), the Central Statistical Office (GUS).
If you choose the payment method for the order using electronic payment instruments or other bank instruments, such payment includes the processing of personal data for the purpose and scope of verifying the security of the payment transaction (entrusting the processing of personal data to entities specialized in detecting online payment fraud) and for the protection of the rights of P.P.H.U. TACHOTRONIC in the scope of pursuing claims and confirming payment rules.
5. SHARING DATA IN SOCIAL MEDIA (FACEBOOK).
P.P.H.U. TACHOTRONIC informs that you have the option to share information or content contained on the Site on social media (Facebook). Such content is subject to legal reservations formulated by P.P.H.U. TACHOTRONIC and disclosed on the Site. By clicking on the appropriate button on our website referring to social media, the content marked by the user is transferred from the server of P.P.H.U. TACHOTRONIC and sent to the social media website. The use of such content after its transfer due to user actions is governed by the terms of use of the website to which the link leads. We recommend reading their content. The transfer of content from our website to the social media website occurs solely at your initiative and at the sole responsibility of the User. P.P.H.U. TACHOTRONIC is not responsible for the use or utilization of the transferred content or any other action related to the content from the moment the content is sent from our Site to another website.
6. INFORMATION OBLIGATION
6.1.
If personal data, for which P.P.H.U. TACHOTRONIC is the Administrator, is collected directly from the person concerned (for the purpose of concluding and performing the contract), the Personal Data Administrator is obliged to inform about the address of its headquarters and place of business, the purpose of processing this data, and in particular the known recipients or categories of recipients of the data, the right of the client to access their data and correct it, the voluntariness or obligation to provide it along with the legal basis introducing the aforementioned obligation.
6.2.
If the Client submits a written objection in connection with the processing of their personal data by P.P.H.U. TACHOTRONIC for marketing and advertising purposes of its own products, then the processing of the disputed personal data for the above-mentioned purpose should be suspended.
6.3.
P.P.H.U. TACHOTRONIC processes personal data of its clients for the purpose of conducting business activities in accordance with the Company’s agreement in the field of providing sales services directly in stationary stores and via the P.P.H.U. TACHOTRONIC online store, as well as sales portals with which the Company cooperates.
6.4.
P.P.H.U. TACHOTRONIC processes data to ensure proper, lawful, and goal-compliant personnel policy of P.P.H.U. TACHOTRONIC and the current handling of employment relationships, as well as other civil-law relationships entered into by P.P.H.U. TACHOTRONIC, acting as an employer or contracting party of other civil-law relationships, as well as for the realization of other justified goals and tasks of P.P.H.U. TACHOTRONIC – respecting the rights and freedoms of persons entrusting P.P.H.U. TACHOTRONIC with their data.
6.5.
The business activities of Martom sp. o.o. consist of:
– concluding sales contracts for goods and services for clients in stationary and online stores;
– concluding sales contracts for goods and services for individual clients and entrepreneurs;
– selling goods and services via online sales portals with which P.P.H.U. TACHOTRONIC cooperates;
– concluding employment contracts, cooperation with employees, associates of P.P.H.U. TACHOTRONIC and for collecting data of candidates for positions or cooperation with P.P.H.U. TACHOTRONIC.
6.7.
Personal data in Martom sp. z p.o. may be processed only for the purpose for which it was collected and no longer than necessary to achieve these goals, taking into account the requirements resulting from the provisions regarding the sales contract and the provision of services of the Civil Code, as well as claims arising from sales contracts and the provision of services.
7. SECURITY OF YOUR PERSONAL DATA
7.1.
Before processing personal data, P.P.H.U. TACHOTRONIC is obliged to apply appropriate technical and organizational measures ensuring the protection of processed data in IT systems, in particular to secure data against unauthorized access, acquisition by an unauthorized person, processing in violation of personal data protection regulations.
7.2.
The Data Administrator is responsible for monitoring the proper functioning of security measures in the Company.
8. COOKIE POLICY
8.1.
When visiting the P.P.H.U. TACHOTRONIC online store, the Administrator’s system automatically retrieves so-called “cookies.” Accepting cookies is a condition enabling the use of the P.P.H.U. TACHOTRONIC online store website. If the Customer blocks the use of cookies, the website and online store service will only operate to a limited extent. The term “cookies” should be defined as IT data, including text files, stored on end devices of users, Clients of P.P.H.U. TACHOTRONIC intended for using websites. These files allow the User’s device to be recognized and appropriately display the website tailored to their individual preferences. “Cookies” usually contain the name of the website from which they originate, the time they are stored on the end device, and a unique number. These files are placed in the http protocol used for communication between the web server and the web browser. It consists of: a key specifying the name of the value, the value, and the lifetime after which the browser should delete the cookie. Their functions are mostly standard for the settings provided by browsers. Cookies are used to adapt the content of the pages to the preferences of the User/Client of P.P.H.U. TACHOTRONIC and to increase the usability and personalization of website content. Cookies are used to adjust the content of the Store to the Customer’s preferences and to increase the usability and personalization of the content of other websites.
8.2.
Most of the cookies used are automatically deleted from the user’s hard drive after the end of the browser session (so-called session cookies), which serve to offer the Customer the shopping cart function on many pages of the online store. P.P.H.U. TACHOTRONIC also uses cookies stored on the Customer’s hard drive. During the next visit of the Customer to the P.P.H.U. TACHOTRONIC website, the online store service automatically recognizes the Customer and the information and settings preferred by them. Temporary and permanent cookies (storage period from 1 month to 10 years) are saved on the Customer’s hard drive and are automatically deleted after a specified time. “Cookies” collect personal data and may be collected only and exclusively for the purpose of performing specific functions for the Customer. In connection with the privacy policy, this data is encrypted, making it impossible for unauthorized persons to access it. Commonly used web browsing software by default allows the placement of “cookies” on the end device. These settings can be changed in such a way as to block the automatic handling of “cookies” in the web browser settings or inform about their each transmission to the user’s device. Detailed information on the possibilities and ways of handling “cookies” is available in the settings of the software (web browser) you use.
9. RECIPIENTS TO WHOM THE CUSTOMER’S PERSONAL DATA IS TRANSFERRED
9.1.
Customer data may be transferred to entities processing personal data on behalf of the administrator, including IT service providers, marketing agencies, etc. These entities process data based on an agreement with the administrator and solely according to the administrator’s instructions. Customer data may be transferred by the administrator to entities entitled to obtain them based on applicable law, e.g., law enforcement authorities if a request is made by the authority on an appropriate legal basis (e.g., for the purposes of ongoing criminal proceedings). Customer data may, in occasional cases, be transferred to recipients from third countries, i.e., countries outside the European Economic Area, e.g., if necessary to provide services to the Customer or if conditioned by another important legal basis.
8. PROTECTION AND DELETION OF PERSONAL DATA
Most credit card operators and electronic transfers PayU, meeting certain requirements, protect against any losses that may arise from the illegal use of a credit card or PayU account. If you have questions regarding data protection standards, seek information, or want to delete data, direct them in writing to P.P.H.U. TACHOTRONIC by sending an email to: tachotronic@o2.pl or by mail to the contact address provided for the Store.
9. RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA
The Customer has the following rights in connection with the processing of personal data by the Administrator:
9.1. request from the Administrator access to personal data,
9.2. request from the Administrator rectification of personal data,
9.3. request from the Administrator deletion of personal data (right to be forgotten), if permitted by law,
9.4. request from the Administrator restriction of personal data processing,
9.5. object to the processing of personal data, in particular regarding data processing for direct marketing purposes, profiling (if permitted by law),
9.6. transfer of personal data, if technically possible, i.e., to receive from the administrator personal data in a structured, commonly used machine-readable format. You can transfer this data to another data administrator, under the conditions provided by law and internal regulations,
9.7. due to automated decision-making in the field of insurance by the insurance company and financial institutions, have the right to challenge this decision, the right to express your position, and request a reassessment of your case and decision-making by an employee of the insurance company cooperating with the Company under the entrustment agreement, within the limits and in accordance with applicable law regarding the scope of permissible profiling by the insurance company,
9.8. lodge a complaint with the supervisory authority (from 25.05.2018 – to the President of the Office for Personal Data Protection).
9.9. If the Customer’s data is processed based on consent, the Customer may additionally exercise the following rights: the right to withdraw consent to the extent that it is processed on this basis. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
9.10. To exercise the above rights, contact the administrator.
You can exercise the rights indicated in item 9 by contacting via email at: tachotronic@o2.pl or by written contact, by traditional mail to the address: ul. Objazdowa 35, 65-001 Zielona Góra, in accordance with the provisions of personal data protection law.
10. FINAL PROVISIONS
The personal data administrator reserves the right to introduce changes to the Security Policy. Changes will be published on the P.P.H.U. TACHOTRONIC website for informational purposes.
