Privacy policy

This Privacy Policy sets out the rules for the processing and protection of Personal Data provided by Users in connection with their use of the Website's services.

In the interests of the security of the data entrusted to us, we have developed internal procedures and recommendations to prevent disclosure of data to unauthorized persons. We control their performance and constantly check their compliance with the relevant legal acts - the Personal Data Protection Act, the Electronic Services Provision Act, as well as all types of executive acts and the GDPR.

§ 1. DEFINITIONS

Administrator - Aprox Sp. z o. o. with its seat in Nowa Wieś, ul. Polna 26, 05-806 Nowa Wieś (which is also the delivery address), entered into the register of entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under the number KRS 0000899614, NIP: 534-264-00-76 and REGON: 388966012, e-mail address: biuro@aproxpolska.com, contact telephone number: +48 539 660 207.
Personal Data - information with an identified or identifiable natural person, in particular on the basis of an identifier such as name and surname, identification number, location data, internet identifier or one or more specific factors determining its physical, physiological, genetic, mental, economic, cultural or social identity including information collected through cookies or other similar technology.
Privacy Policy - this privacy policy.
GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (General Data Protection Regulation (Acts. Office. UE.L No. 119, p. 1).
Service - Internet run by the Administrator at the internet address: www.aproxpolska.com.
User - any natural person visiting the Website or using one or more services or functionalities described in the Privacy Policy.

§ 2. PERSONAL DATA The

Administrator collects the User's personal data in connection with the User's use of the Website - to the extent necessary to provide individual services offered.
Providing Personal Data by the User is voluntary, but the lack of consent to the processing of personal data marked as mandatory will prevent the Administrator from providing services and concluding and implementing Sales Agreements.
The User's Personal Data are processed by the Administrator:

1) Pursuant to Article 6 (1) (a) of the GDPR. b) and lit. c) RODO, if the processing is necessary in order to:

a) take action before concluding the contract at the request of the data subject or performance of a contract, which is party to the data subject, ie .: the provision of services related to the conduct and operation accounts on the Website, handling Orders, including Orders placed by Users without registration, handling complaints,

b) fulfilling legal obligations incumbent on the Administrator, resulting in particular from tax regulations and accounting regulations;

2) Pursuant to Article 6 (1) (a) f) GDPR, if processing is necessary for purposes resulting from the legitimate interest of the Administrator, i.e .: in order to:

a) marketing the Administrator's own products or services;

b) pursuing, securing or protecting against claims;

c) conducting technical quality analyzes of the services provided;

3) Pursuant to Article 6 (1) (a) of the GDPR a) GDPR, if the data subject has consented to their processing in order to:

a) verify the User's payment credibility;

b) providing the User with information about changes to the Regulations, about changing the address or registered office of the Administrator, confirmation of accepting the complaint and responding to it to the indicated e-mail address (e-mail);

c) direct marketing of Aprox Sp. z o. o., implemented by means of electronic communication (e.g. SMS, MMS, email) and telecommunications terminal devices (e.g. telephone, tablet).
The period for which the data will be stored:

1) personal data processed in order to conclude or perform the contract and fulfill the Administrator's legal obligation will be kept for the period necessary for:

a) post-sale service of Users (e.g. handling complaints);

b) securing or pursuing any claims due to Aprox Sp. z o. o. or protection against them;

c) fulfillment of the Administrator's legal obligation (e.g. resulting from tax or accounting regulations);

2) personal data processed for the purposes of marketing of Aprox Sp. z o. o. on the basis of a legitimate legal interest, will be processed until the data subject submits an objection;

3) personal data processed on the basis of a separate consent will be kept until its revocation.
The rights of the data subject:

1) the right to access their Personal Data, i.e. the right to obtain confirmation whether the Administrator processes data and information regarding such processing,

2) the right to rectify incorrect Personal Data or supplement incomplete Personal Data,

3) the right to request the Administrator to delete Personal Data ("the right to be forgotten"), the processing of which is no longer necessary to achieve any of the purposes for which they were collected,

4) the right to request the Administrator to limit the processing of Personal Data,

5) the right to transfer of Personal Data, i.e. the right to receive the Personal Data provided to the Administrator in a computer-readable format and to send this Personal Data to another entity - another administrator,

6) the right to object to the processing of Personal Data based on the legitimate interest of the Administrator or wobe c the processing of Personal Data for the purpose of direct marketing,

7) the right to lodge a complaint with the Polish supervisory authority or supervisory authority of another European Union Member State competent for the place of habitual residence or work of the data subject or the place of the alleged violation of the GDPR,

8) the right to withdraw consent to the processing of Personal Data at any time (without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal),

9) the right to obtain human intervention on the part of the Administrator, expressing one's own position and challenging the decision based on automated data processing, including profiling.

The rights listed in items 1) -6) and items 8) -9) above can be exercised, inter alia, by contacting Aprox Sp. z o. o. (address provided at the beginning, with the annotation: "Personal data protection").
Users' personal data may be entrusted for processing to data recipients (entities processing personal data on behalf of Aprox sp. Z oo based on an entrustment agreement) only for the purpose of implementing Sales Agreements and contracts for the provision of electronic services by Aprox sp. Z oo Categories of data recipients : companies providing accounting services for Aprox sp. z oo, companies developing and maintaining IT systems and websites, courier companies, debt collection companies and banks. Personal data collected by the Administrator may also be made available to relevant state authorities at their request on the basis of relevant legal provisions or other persons and entities in cases provided for by legal provisions.
The disclosure of personal data to unauthorized entities may take place only with the consent of the User to whom the data relates.
If the Administrator obtains information about the User's use of the service provided electronically in violation of the Regulations or applicable regulations, the Administrator reserves the right to process the Customer's personal data to the extent necessary to determine the User's liability.

§ 3. SECURITY.

The Administrator uses technical and organizational measures to ensure protection of the processed Personal Data appropriate to the threats and categories of data protected, in particular, protects Personal Data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of applicable regulations and change, loss, damage or destruction.
The Administrator provides the following technical measures to prevent the acquisition and modification of Personal Data sent electronically by unauthorized persons:

a. Securing the data set against unauthorized access,

b. SSL certificate on the websites of the Online Store where Users' Personal Data are provided,

c. Encryption of data used to authorize Users,

d. access to the Account only after providing an individual Login and Password.
The administrator points out that the use of the Internet and electronic services may be associated with specific ICT threats, such as the presence of worms, spyware or malware (including computer viruses) and others. The administrator recommends obtaining detailed information on maintaining security on the Internet from entities specializing in this type of services.
The Online Store may contain links to other websites. The administrator recommends that after switching to other websites, read the privacy policy established there. This Privacy Policy applies only to the Administrator's indicated activities.

§ 4. COOKIES

The Online Store uses technology that stores and accesses information on a computer or other User's device connected to the network (in particular using cookies), in order to provide the User with maximum comfort when using the Online Store, including statistical purposes and to adapt the advertising content presented to the User's interests, including the Administrator's partners and advertisers. During the User's visit to the Online Store, data regarding the visit may be automatically collected, in the form of: domain name of the website from which the Customer was sent to the Online Store website, browser type, operating system type, IP address, Customer ID, other information transmitted by the protocol http. In addition, the Administrator may process operational data or information about the location of the device by means of which access to the Online Store is made.
A cookie is small text information sent by the server and saved on the side of the User's device (usually on the hard drive of the computer or on the mobile device). It stores information that the Online Store may need to adapt to the ways in which the User uses it and to collect statistical data on the Online Store,
Online Store cookies are safe for the User's devices, therefore the Administrator recommends not turning them off in browsers.
The Online Store uses two types of cookies: session cookies, which remain stored on the User's computer or mobile device until logging out of the website or turning off the software (web browser) and permanent cookies, which remain on the User's device for the time specified in the cookie parameters or until they are manually deleted in the web browser.
Based on cookies, it is not possible to determine the User's identity.
The user may independently change the cookie settings at any time, including blocking or removing those that come from the Online Store (and other websites) by changing the browser settings. Detailed information on the use of cookies is available in the settings of the web browser used by the User.

§ 5. FINAL PROVISIONS: The

Administrator reserves the right to change the Privacy Policy in the future - it may take place, inter alia, due to changes in applicable regulations, in particular in the field of Personal Data protection or the development of functionalities or electronic services dictated by the progress of internet technology.
The Administrator will each time post information on changes to the Privacy Policy on the Website. With each change, a new - current version of the Privacy Policy will be made available on the Website on a new date.
In the event of doubts or contradictions between the Privacy Policy and the consents granted by the User, regardless of the provisions of the Privacy Policy, the basis for taking up and defining the scope of activities by the Administrator will always be the consent given by the User voluntarily or by law.
This version of the Privacy Policy is valid from 25/05/2018.