Data is processed for the purpose of providing services, including the performance of contracts, including contracts for the sale of Products, and also where this is necessary for the achievement of the legitimate objectives of the Controller, in particular for the direct marketing of the Controller's own products or services, or for other purposes to which the user gives their consent, if such consent is required under the applicable regulations. In particular, it may be the consent to receive correspondence and commercial information concerning the Controller's own products and services as well as those of the Controller's business partners, such correspondence and information to be provided by email and telephone. The data subject has the right to withdraw such consent at any time.
The Controller processes data in compliance with the law, collects data for specified, legitimate purposes, and does not process them further in a way incompatible with such purposes. Data is collected only to the extent adequate, necessary and appropriate for the purposes for which it is to be processed. The Controller does not process special categories of personal data.
The Controller makes every effort to protect the personal data of its customers and users against unauthorized access by third parties and to this end, it applies high level organizational and technical security measures. The Controller does not make personal data available to any unauthorized recipients in accordance with the applicable legal regulations. The Controller may entrust another entity, under a relevant written agreement, with the processing of personal data on behalf of the Controller. Personal data may be made available only to entities authorized to receive such data under the applicable legal regulations.
The Controller keeps personal data for a period necessary for the performance of a contract and for a period specified in the applicable legal regulations and not longer than necessary for the purposes resulting from the legitimate interests pursued by the Controller or by a third party, i.e., among others, for the purpose of pursuing claims related to its business activities. For the purposes for which the data subject has given their consent with respect to personal data processing, personal he data is stored until the withdrawal of the relevant consent.
The data subject has the right to demand that the Controller provide them with access to the content of their personal data, the right to correct, erase or limit the processing of such data, and the right to object to the processing of such data in cases provided for in the applicable legal regulations, as well as the right to transfer such data. The data subject also has the right to lodge a complaint with the supervisory authority if they find that their personal data is being processed unlawfully.
If the data subject has consented to the processing of their personal data for one or more specified purposes, they have the right to withdraw their consent at any time.
Providing personal data is voluntary, however, failure to provide data marked as necessary makes it impossible to make a registration or place an Order. Where personal data processing is necessary for the performance of a contract to which the data subject is party or to take action at the request of the data subject prior to the execution of a contract, it is necessary to specify the required and specific scope of such data.
In order to ensure the most advantageous, adjusted, personalized offer for its clients and users and for the purposes necessary for the execution or performance of a contract between the data subject and the Controller, as well as in the case of the explicit consent of the data subject, the Controller may use “profiling”, which means a form of automated processing of personal data involving the use of personal data for the assessment of certain personal factors of an individual, in particular for analysing or forecasting aspects concerning personal preferences and interests. Decisions on sending a personalized offer or granting a discount or other benefit are made automatically based on criteria such as gender, date of birth, etc. Once the fulfilment of such criteria has been established, the IT system automatically sends information about a granted benefit, e.g. a discount. A granted benefit may be either enjoyed under the terms of a granting notice or waived. In the case of personal data processing for the purposes of direct marketing, including profiling, processing based on the legitimate interest of the Controller, for the purposes of scientific, historical and statistical research, the data subject has the right to object in view of their specific personal situation. The Controller does not make decisions having significant impact on the data subject based solely on automated processing, including profiling. The Controller implements appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, and at least their right to obtain human intervention on the part of the Controller, to express their views, and to challenge a decision resulting from automated processing.