PRIVACY POLICY OF THE WEBSITE
www.stal-hermes.com.pl

The protection of Users’ privacy is particularly important to MAREK BEŁŻEK PRZEDSIĘBIORSTWO WIELOBRANŻOWE "HERMES". For this reason, Users of the www.stal-hermes.com.pl Website are guaranteed high standards of privacy protection. MAREK BEŁŻEK PRZEDSIĘBIORSTWO WIELOBRANŻOWE "HERMES", as the data Controller, ensures the security of the data provided by Users.

The Controller’s aim is also to properly inform Users about the rights and obligations related to the processing of personal data, especially in view of the provisions on personal data protection set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”). Therefore, taking care to protect the privacy of Website Users, in this document the Controller provides information on the legal grounds for processing personal data provided by Users in connection with their use of the www.stal-hermes.com.pl Website (hereinafter referred to as the “Website”), the methods of collecting, processing and protecting personal data, as well as Users’ rights.

A User is any natural person whose data is concerned and who uses the www.stal-hermes.com.pl website or electronic services available through the Website.

The Controller of personal data provided by the User on the www.stal-hermes.com.pl Website is MAREK BEŁŻEK PRZEDSIĘBIORSTWO WIELOBRANŻOWE "HERMES", Karola Marcinkowskiego 125B, 88-100 Inowrocław, Tax Identification Number (NIP): 5561051115, (hereinafter referred to as the “Controller”).

1. USER’S CONSENT
   

   The User’s use of the www.stal-hermes.com.pl Website means that the User accepts that the Controller collects and uses personal data in accordance with this Privacy Policy.

   The personal data of the Website User is processed by the Controller on the basis of the User’s consent and, in certain cases described in this document, within the scope of the Controller’s legitimate interest. The User has the right to withdraw previously granted consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

   If this Privacy Policy is amended and the User continues to use the Website, this shall be deemed as acceptance of the current terms of the Privacy Policy.

2. PERSONAL DATA PROCESSED BY THE CONTROLLER
   1. Method of obtaining personal data

      The Controller obtains personal data directly from the User through the Website, via the functionalities and communication tools available on it, and by messages sent to the Controller through those tools.

      Providing personal data by the User is voluntary.

   2. Types of personal data processed

      The Controller collects the following personal data concerning the User through the Website:

      1. First name and surname;
      2. E-mail address;
      3. Telephone number;
      4. Message content;
      5. Message subject.
3. PURPOSES OF PERSONAL DATA PROCESSING

   The way in which the Controller processes data concerning the User depends on the manner in which the User uses the Website and the functionalities available on it. The Controller processes the User’s personal data for the following purposes:

   1. Communication with the User.

      The Controller uses the User’s personal data to communicate with the User in a personalised manner. The information communicated to the User concerns the products or services offered, personal data security, network updates, reminders, as well as suggested offers from the Controller or its partners. Communication with the User also concerns User support. Personal data is used to assist the User, solve technical problems and respond to complaints or claims.

   2. Presenting commercial offers to the User electronically.

      The purpose of using the User’s personal data provided by the User through the functionalities and communication tools available on the Website is marketing communication conducted by the Controller as part of its business activity, in particular presenting commercial offers to the User electronically.

   3. Presenting commercial offers to the User by telephone.

      The purpose of using the User’s personal data provided by the User through the functionalities and communication tools available on the Website is marketing communication conducted by the Controller as part of its business activity, in particular by presenting commercial offers to the User by telephone.

   The Controller may also process the User’s personal data obtained through the Website for the following purposes:

   1. for the purpose of concluding and performing a possible agreement between the User and the Controller, and handling the User as the Controller’s customer, pursuant to Article 6(1)(b) of the GDPR;
   2. for the purpose of conducting financial settlements with the User who is the Controller’s customer in connection with the performance of a possible agreement concluded between the parties, as well as possible pursuit of claims against the User who is a customer within the scope of the Controller’s legitimate interest, pursuant to Article 6(1)(f) of the GDPR, and fulfilment of the Controller’s legal obligations towards tax authorities under separate provisions, pursuant to Article 6(1)(c) of the GDPR;
   3. for the purpose of carrying out the Controller’s marketing activities within the scope of the Controller’s legitimate interest within the meaning of Article 6(1)(f) of the GDPR, as well as in accordance with declarations of will concerning marketing communication submitted to the Controller. Consents granted in the field of marketing communication (e.g. for sending commercial information electronically or telephone contact for direct marketing purposes) may be withdrawn at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal;
   4. for the purpose of fulfilling the Controller’s legal obligations towards the User set out in the GDPR, within the meaning of Article 6(1)(c) of the GDPR.
4. DISCLOSURE OF PERSONAL DATA

   The User’s personal data is not transferred by the Controller to third parties.

5. USER’S RIGHTS
   1. User’s rights

      At every stage of the processing of their data, the User is provided with a number of rights enabling them to access their data, verify the correctness of data processing, correct the data, as well as the right to object to its processing, request deletion of the data, restriction of processing or data portability.

      If the User wishes to exercise their rights as a personal data subject, they may contact the Controller using the following contact details: MAREK BEŁŻEK PRZEDSIĘBIORSTWO WIELOBRANŻOWE "HERMES", Karola Marcinkowskiego 125B, 88-100 Inowrocław, This email address is being protected from spambots. You need JavaScript enabled to view it..
      The Controller has appointed a Data Protection Officer who can be contacted at the following address: This email address is being protected from spambots. You need JavaScript enabled to view it.,

   2. Right to lodge a complaint with a supervisory authority

      A User whose personal data is processed by the Controller has the right to lodge a complaint with the supervisory authority competent for personal data protection matters, namely the President of the Personal Data Protection Office.

6. COOKIES
   1. The Controller informs that when using the Website, code fragments called “cookies” are stored on the User’s end device; these are text files corresponding to HTTP requests sent to the Controller’s server. “Cookies” are installed by each browser from which the User visits the Website. “Cookies” are used on the Website for the purpose of:
      1. maintaining the technical correctness and continuity of the session between the Website server and the User’s end device;
      2. optimising the User’s use of the Website pages and adapting the way they are displayed on the User’s end device;
      3. ensuring the security of using the Website;
      4. collecting Website visit statistics supporting the improvement of their structure and content;
      5. displaying content adapted to the User’s preferences on the User’s end device.

      Detailed information regarding the cookies used by the Controller and their management is available in the Cookie Policy.

7. OTHER IMPORTANT INFORMATION
   1. Protection of personal data security

      The Controller implements appropriate measures to ensure the security of the User’s personal data. Safe use of the Website is ensured by the systems and procedures applied to protect against access to and disclosure of data to unauthorised persons. In addition, the systems and processes used by the Controller are regularly monitored in order to detect possible threats. Personal data obtained by the Controller is stored in computer systems to which access is strictly limited.

   2. Storage of personal data

      The period of storage of Users’ personal data depends on the purposes for which the data is processed by the Controller.
      The Controller stores personal data for the period necessary to achieve specific purposes, i.e.:

      • in the case of providing a service/delivering a product to the User - for the period necessary for the Controller to perform the ordered service or deliver the product to the User.

      In each of the above cases, after the necessary processing period has expired, the data may be processed only for the purpose of pursuing claims arising from the relationship between the parties until such claims are finally resolved by legal means.

   3. Changes to the Privacy Policy

      In order to update the information contained in this Privacy Policy and ensure its compliance with applicable law, this Privacy Policy may be amended. In the event of a change to the content of the Privacy Policy, the date of its update indicated at the end of its text will be changed. In order to obtain information on how personal data is protected, the Controller recommends that Users regularly review the provisions of the Privacy Policy.

   4. Contact information

      To obtain any information regarding this Privacy Policy, the User may contact the personal data Controller: MAREK BEŁŻEK PRZEDSIĘBIORSTWO WIELOBRANŻOWE "HERMES", Karola Marcinkowskiego 125B, 88-100 Inowrocław, using the following contact details: This email address is being protected from spambots. You need JavaScript enabled to view it..

      It is also possible to contact the Controller by post at the following address: Karola Marcinkowskiego 125B, 88-100 Inowrocław.

      The contact details of the Data Protection Officer are: Marek Bełżek, This email address is being protected from spambots. You need JavaScript enabled to view it..

This document was last updated on 29.11.2021.