PRIVACY POLICY

We present you the rules for the protection of personal data, established on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”).

DATA ADMINISTRATOR

The administrator, i.e. the entity deciding about the purposes and methods of personal data processing, is Ariatech Sp. z o.o. established in Wola Mielecka 643A, 39 – 300 Mielec (KRS 0000750823). In matters related to the processing of personal data, you can also contact us by e-mail at: biuro@ariatech.pl.

ACQUISITION OF DATA AND THE PURPOSE OF THEIR PROCESSING

Registering an account in the online store without making a purchase – potential customers
Purpose of processing:
 – Account registration in the online store by filling out the form on the website;
Legal basis for processing:
 – Art. 6 sec. 1 lit. b GDPR, i.e. the necessity of processing in order to provide the service in the form of keeping an account in the online store;
Data storage period:
 – Until an objection is raised, i.e. a request to delete the account is submitted;

Account registration in the online store along with the purchase – customers
Purpose of processing:
 – Implementation of the contract with the client;
 – Investigation and defense of claims;
Legal basis for processing:
 – Art. 6 sec. 1 lit. b GDPR, i.e. the necessity of processing for the performance of the contract;
 – Art. 6 sec. 1 lit. f GDPR, i.e. the implementation of the Administrator’s legitimate interests in the form of pursuing and defending claims;
Data storage period:
 – For the duration of the contract, and after its termination – until the expiry of the time limits for claims arising therefrom;

Submission of inquiries, complaints and complaints by e-mail and via the website
Purpose of processing:
 – Consideration of complaints and complaints as well as answering notifications and inquiries sent by e-mail and via the website;
Legal basis for processing:
 – Art. 6 sec. 1 lit. b GDPR, i.e. the necessity of processing for the performance of the contract;
 – Art. 6 sec. 1 lit. c GDPR, i.e. legal obligation related to the consideration of complaints and complaints;
 – Art. 6 sec. 1 lit. f GDPR, i.e. the implementation of the Administrator’s legitimate interests in the form of providing all information related to the implementation of its business goals;
Data storage period:
 – For 1 year after the expiry of the warranty or settlement of the complaint;
 – For 1 year after answering an inquiry not related to a warranty or complaint;

Negotiating and implementing contracts with contractors (applies to employees and associates of the contractor, as well as contractors who are natural persons)
Purpose of processing:
 – Conclusion and implementation of the contract with the contractor;
Legal basis for processing:
 – Art. 6 sec. 1 lit. b GDPR, i.e. the necessity of processing for the performance of the contract   – in the case of contractors who are natural persons;
 – Art. 6 sec. 1 lit. c GDPR, i.e. the legal obligation incumbent on the Administrator in connection with the performance of the contract, in particular in the field of accounting and tax settlements;
 – Art. 6 sec. 1 lit. f GDPR, i.e. implementation of the Administrator’s legitimate interests in the form of enabling the conclusion and performance of a contract with a contractor – applies to the contractor’s employees and associates;
 – Art. 6 sec. 1 lit. f GDPR, i.e. implementation of the Administrator’s legitimate interests in the form of pursuing and defending claims arising from the concluded contract;
Data storage period:
 – Until the expiry of the limitation periods for claims under the contract;
 – Until the expiry of the data storage periods specified in the law;
 – Until an effective objection is lodged (when the processing is based on the legitimate interest of the Administrator).

DATA RECIPIENTS

In connection with the conducted activity, Ariatech Sp. z o.o. will disclose your personal data to the following entities:
a) state authorities or other entities authorized under the provisions – if it is necessary to fulfill legal obligations,
b) entities supporting us in our activities on our behalf, in particular: suppliers of external ICT systems supporting our activities, subcontractors, entities auditing our activities, appraisers, or entities cooperating with the Administrator as part of marketing campaigns, where such entities will process data on on the basis of a contract with the Administrator and only in accordance with his instructions,
c) banks – if it is necessary to conduct settlements,
d) an entity providing accounting or legal services – to the extent necessary to ensure the fulfillment of legal obligations or to establish, assert and defend claims,
e) companies that utilize or archive documents and other media – to the extent that the data is stored in.

RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED

Each person whose data is processed by the Administrator has the right to:
a) access to your personal data,
b) rectify your personal data,
c) delete your personal data,
d) limitations on the processing of your personal data,
e) object to the processing of your personal data,
f) transfer your personal data, g) if the processing takes place on the basis of consent – its withdrawal at any time without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
Moreover, the data subject has the right to lodge a complaint with the supervisory body, i.e. the President of the Personal Data Protection Office.

DO YOU HAVE TO PROVIDE YOUR PERSONAL DATA?

Providing data is necessary for the conclusion and implementation of sales contracts and the settlement of business activities, as well as the Administrator’s compliance with the obligations imposed by law. This means that in order to take advantage of the offer of Ariatech Sp. zoo. you must provide your personal details.
In the remaining scope (in particular as part of processing for marketing purposes), providing data is voluntary.

TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

The data will be processed within the European Economic Area, which means that we do not transfer data to third countries. The possible transfer may take place in the context of the IT infrastructure used by the Administrator. In this case, the transfer will take place only on the condition that appropriate safeguards specified in the GDPR are ensured.

PROCESSING OF PERSONAL DATA IN AN AUTOMATED MANNER

Personal data will not be processed in a way that leads to automated decision-making causing legal effects or otherwise significantly affecting the persons whose data we process.

COOKIES

During your visit to our website, data such as: IP address, domain name, browser type are automatically collected. Cookies are used to create statistics, allow you to automatically recognize the computer’s IP address on the next visit and maintain the logged-in user’s session. They are also used for advertising purposes to provide users with advertising content tailored to their interests. If you do not want to receive cookies, please configure your web browser to delete such files, block them or warn you about their behavior each time.

CHANGE OF THE PRIVACY POLICY

The data controller reserves the right to make changes to the Privacy Policy, after prior notification of the changes and after setting an appropriate time from which the changes to the Ariatech Privacy Policy will apply.