Who is the controller of the personal data?
The administrator of personal data is a company under the name: Wajnert Meble Sp. z o.o.with headquarters in Międzybórz at ul. Kolejowej 67, 56-513 Międzybórz, NIP: 911-200-60-47, REGON: 021935154, KRS: 0000429627, with share capital: PLN 5,348,400.00 (hereinafter referred to as the “Company”), phone: 62 786 97 10, e-mail: email@example.com, unless explicitly stated otherwise.
2. Where do we get your personal data from?
We obtained the data:
- directly from you,
- from an entity that concluded a contract with our Company for the provision of services for your benefit,
- from a partner / third party cooperating with our Company who provided your personal data on the basis of your consent,
- from publicly available sources, e.g. from the National Court Register, Business Activity Central Register and Information Record, industry databases: Polish furniture manufacturers, suppliers for the wood industry, suppliers for the furniture industry, furniture stores, door showrooms, door and hardware manufacturers in Poland and many other similar bases.
3. What personal data do we process?
The company processes the following categories of data, potentially including the following categories of data:
- contact details, including (name of the company or first name and surname, if you run a business on your own name),
- telephone data, including contact telephone numbers previously provided by you (landline or mobile),
- postal address and e-mail address data,
- location data,
- data required for identification and for the purposes of concluding a contract, selling goods and services, including issuing VAT invoices, notes, corrections,
- identification data necessary to provide online services,
- data obtained through the use of technology,
- data needed to prepare the most appropriate marketing offer and products for you (e.g. about the Company’s products that you have used before).
4. What will we use your personal data for?
We will process your personal data for one or more of the following purposes:
- using the website based on your interest in our offer,
- in order to carry out activities performed at your request,
- in order to perform the contract concluded with the Company on your behalf as a third party (Article 393 of the Civil Code), when another entity is a party to the contract,
- in order to fulfill the legal obligation of the Company, e.g. issuing a VAT invoice, correcting invoice, note or bill,
- for marketing purposes for the Company’s products and services,
- for informational purposes, i.e. providing you, on the basis of your prior consent to, receive the Newsletter and other information from the Company by electronic means,
- for courtesy purposes, i.e. sending you occasional wishes, including birthday and name day wishes, gifts,
- for the organization of work within the Company in the form of telephone blocks, i.e. contacting you individually and directly,
- for analytical purposes, e.g. adjustment of services to your needs; optimization of products or services on the basis of the submitted comments or on the basis on your interest, in order to provide optimization based on the course of service processes, including complaints, which is our legitimate interest,
- in order to collect the above-mentioned data in the Company’s internal databases for more efficient data management,
- for archival (evidence) purposes to secure information in the event of a legal need to prove facts, which is our legitimate interest,
- in order to possibly establish, investigate or defend against claims, which is our legitimate interest,
- to offer you products and services directly (direct marketing),
- if you give your consent and only to the extent that you agree, we will process the data: in order to conduct the following types of market and opinion research: quantitative and generic research (surveys and tests) or qualitative and opinion-forming research (personal interviews).
5. Are you required to provide personal data?
To the extent that the processing of data takes place in order to perform the contract with the Company, providing your data by you is a condition for concluding this contract. Providing data is voluntary, but it is necessary to conclude and perform the contract. If personal data is not provided, the contract will not be concluded. Providing the data necessary to issue an invoice is a statutory obligation and results from the Goods and Services Tax and Excise Duty Act. In the remaining scope, providing personal data is voluntary, it is not a statutory or contractual requirement and is not a condition for concluding a contract.
6. How can you withdraw your consent?
You can withdraw any consent given to the Company in connection with the processing of personal data at any time without incurring negative consequences. It is enough to send an e-mail, call or send a message by traditional mail to the indicated contact details of the data administrator. The will to withdraw consent may be expressed in any way, the only condition is that it reaches the Company. Withdrawal of consent does not affect the lawfulness of the processing of your data before it is made, i.e. until the consent is withdrawn, the processing of data by the Company is legal.
7. How to contact our information security administrator?
It can reached by phone at the number: 62 59 96 716 or by e-mail at the address: firstname.lastname@example.org.
8. On what basis will we process your personal data?
The basis for the processing of personal data is, depending on the activities performed:
- signing and performance of a contract with the Company,
- fulfilling the legal obligation incurred on the Company (e.g. issuing an invoice),
- the legitimate interest of the Company (direct marketing of its products and services or performance of a contract signed with the Company on your behalf as a third party, when a party to the contract is another entity),
- consent expressed by you.
9. When and to whom can we provide data, and to whom we will not provide it?
We may disclose your data to recipients, in the form of companies cooperating with us and performing tasks on our behalf and for us, e.g. (debt collection agencies, transport, shipping, legal, IT companies).
10. Where is the data stored?
The collected personal data is stored in the European Economic Area (“EEA”).
11. What can you do with the personal data provided to us?
You have the right to request the Company to access your personal data, rectify it, delete it or limit processing, and at your request, the Company may transfer the data to another data controller. Regarding the processing of your data for the purpose of marketing the Company’s own products or services, you may object.
12. Until when will we store your data?
Your personal data will be kept for as long as it is necessary to perform the contract between you and the Company or a contract concluded by another entity on your behalf, and after that time for a period of time corresponding to the period of limitation of claims that may be raised by the Company and which may be raised against the Company.
If your personal data will be processed in order to fulfill the legal obligation incurred on the administrator, personal data will be kept for the time necessary to fulfill this obligation.
Data processed on the basis of consent will be processed until this consent is withdrawn.
If your personal data will be processed on the basis of the legitimate interest of the administrator, when the basis for such processing is the performance of a contract concluded with the Company for your benefit, the data will be processed until the fulfillment of the legitimate interest constituting the basis for this processing.
If your personal data will be processed on the basis of the legitimate interest of the administrator, when the basis for this processing is direct marketing of your products and services, your personal data will be processed until you object.
13. Where can you file a complaint against the processing of personal data by the Company?
Currently, such complaints should be submitted to the President of the Office of the Personal Data Protection.
14. How will we not process personal data?
15. Data protection
We declare that we process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 EC (general regulation on the protection of personal data) (“GDPR”) and the Act of May 10, 2018 on the protection of personal data. Your personal data is processed with appropriate technical and organizational measures ensuring the protection of such data. Despite the application of security measures in line with current knowledge and legal standards, the risk of using personal data by unauthorized persons as a result of the crime of data theft cannot be ruled out.
16. Contact with the Administrator