PRIVACY POLICY

In light of the entry into force on May 25, 2018, of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”, we inform you that:

  • The administrator of personal data is Agencja Wdrażania Systemów Bezpieczeństwa HEKTOR Sp. z o.o. 00-526 Warsaw, ul. Krucza 16/22 NIP: 526-24-79-029 (hereinafter referred to as “Administrator”),
  • You can contact the Administrator in writing by traditional mail, by email, and also by phone in the following ways: tel. +48 512 248 914, e-mail: it@euroholding.pl
  • The Administrator provides appropriate physical, technical, and organizational measures to protect personal data from accidental or intentional destruction, loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable laws.
  • The Administrator processes personal data for the following purposes:

a) sale of products and services offered by the Administrator – the legal basis for data processing is the performance of the contract (Article 6(1)(b) GDPR),

b) marketing purposes – the legal basis for data processing is the legitimate interest of the Administrator – marketing of its own products and services (Article 6(1)(f) GDPR),

c) consideration of complaints, pursuing and defending in the event of mutual claims – the legal basis for data processing is the legitimate interest of the Administrator (Article 6(1)(f) GDPR),

d) in order to comply with legal obligations, e.g., issuing and storing invoices and accounting documents, responding to complaints within the period and form provided by law – for the duration of the obligations and the period in which the law requires the storage of documents (Article 6(1)(c) GDPR),

e) sending commercial information electronically – only with the consent of the User. The legal basis for data processing is consent (Article 6(1)(a) GDPR).

  • The Administrator processes personal data of persons visiting the Administrator’s profiles on social media (Facebook, Instagram, Twitter, LinkedIn). The personal data disclosed there is processed solely for the purpose of managing the profile, as well as promoting the products and activities of the Administrator, and for active communication with profile visitors using the functionalities offered by social media platforms. The legal basis for processing personal data by the Administrator for this purpose is its legitimate interest, related to promoting products and building a positive image (Article 6(1)(f) GDPR).
  • In order to conclude a contract with a Client and its further implementation, the Administrator needs to obtain the following personal data: identification data (first name, last name, and possibly the company and VAT number, phone number), address data (email address, street, place of residence or business, postal code). Failure to provide this data prevents the conclusion and execution of the contract.
  • The Administrator may additionally ask the Client to provide additional data (e.g., contact number), which does not affect the conclusion of the contract but facilitates contact with the Client, thus ensuring efficient order fulfillment.
  • Providing personal data is voluntary but necessary to conclude a contract with the Administrator and execute that contract.
  • The Administrator uses cookies on its website. Cookies are text files stored on the device (computer, phone, tablet, etc.) of the person visiting the Administrator’s website. Cookies are mainly used to maintain a session. Thanks to cookies, the user does not have to enter the same information each time they return to the site or move from one page to another.
  • Cookies collect information to facilitate the use of the website – for example, by remembering visits to the Administrator’s website and actions taken there, as well as helping with:

a) maintaining the user’s session;

b) saving the state of the user’s session;

c) restoring the user’s session;

d) enabling authorization when logging into the Administrator’s website;

e) saving information allowing for anonymous user login;

f) saving information necessary for the operation of the shopping cart on the Administrator’s website.

  • The Administrator also uses service cookies to provide services electronically and improve the quality of these services. Therefore, the Administrator uses cookies, storing information or accessing information already stored on the device (computer, phone, tablet, etc.) of the person visiting the Administrator’s website, but only with the consent of the visitor.
  • The Administrator also uses cookies for marketing purposes, related to the products and services it offers. The use of cookies and the personal data collected through them for marketing purposes requires the consent of the visitor to the Administrator’s website.
  • The above consent may be given, in particular, through the appropriate configuration of the web browser. Consent may be withdrawn at any time, also by deleting the browser history or changing the settings in the cookie banner.
  • Personal data will be processed for the period necessary to perform the contract, and after that period for the purposes and time and to the extent required by law or to secure any claims – no longer than for a period of 6 years, or until the consent is withdrawn.
  • The recipients of personal data will be:

a) entities providing and supporting the Administrator’s IT systems for operating the website and entities providing services related to the ongoing activities of the Administrator,

b) entities providing courier and postal services,

c) entities providing tax and accounting services to the Administrator,

d) entities providing subcontracting services to the Administrator.

  • Every person, within the scope resulting from legal provisions, has the right to access their data, correct it, delete it, or limit its processing, the right to object to the processing, the right to transfer data, and the right to withdraw consent at any time.
  • Withdrawing consent does not affect the legality of processing based on consent before its withdrawal.
  • In case of doubts related to the processing of personal data, every person can contact the Administrator for information. The Administrator may request additional information to authenticate the person exercising these rights, when necessary to provide information.
  • Every person has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.