Privacy Policy

www.maropak.com.pl 

§ 1

GENERAL PROVISIONS

1. The controller of personal data collected through the website www.maropak.com.pl is Z.Z. MAROPAK SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, entered in the Register of Entrepreneurs by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under KRS number: 0000861471, place of business and mailing address: 67 Rzeźbiarska St., 04-620 Warsaw, NIP: 9522209726, REGON: 387142869, email address: biuro@maropak.com.pl, phone number: +48 226136404, hereinafter referred to as the “Controller” and also acting as the “Service Provider.”

2. Personal data collected by the Controller through the website is processed in accordance with Regulation (EU) (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR.

§ 2

TYPE OF PERSONAL DATA PROCESSED, PURPOSE, AND SCOPE OF DATA COLLECTION

  1. PURPOSE OF PROCESSING AND LEGAL BASIS. The Data Controller processes the personal data of users of the www.maropak.pl website when they use the contact form to send a message to the Data Controller, pursuant to Article 6(1)(f) of the GDPR (legitimate interests of the business).
  2. TYPE OF PERSONAL DATA PROCESSED. When filling out the contact form, the service user provides: first and last name, company name, email address, and phone number.
  3. RETENTION PERIOD FOR PERSONAL DATA. The Controller retains service users’ personal data:: 

3.1. where the basis for data processing is the performance of a contract, for as long as necessary to perform the contract, and thereafter for a period corresponding to the statute of limitations for claims,

3.2. where the basis for data processing is consent, for as long as the consent remains in effect, and, after the consent is revoked, for a period corresponding to the statute of limitations for claims that the Controller may assert and that may be asserted against it,

3.3. where the basis for data processing is the business operator’s legitimate interest, for the duration of the legitimate interest pursued by the Controller, and thereafter for a period corresponding to the statute of limitations for claims. 

4. Unless otherwise provided by a specific provision, the statute of limitations is six years; for claims for periodic payments and claims related to the conduct of business activities, it is three years..

5. While using the website, additional information may be collected, including, in particular: the IP address assigned to the user’s computer or the external IP address of the Internet service provider, the domain name, the browser type, the time of access, and the operating system type.

6. Navigation data may also be collected from users, including information about the links and hyperlinks they choose to click on or other actions they take on the website. The legal basis for such activities is the Controller’s legitimate interest (Article 6(1)(f) of the GDPR), which consists of facilitating the use of electronically provided services and improving the functionality of those services.

7. The provision of personal data by the service recipient is voluntary.

8. The data controller exercises due diligence to protect the interests of data subjects and, in particular, ensures that the data it collects is:

8.1. processed lawfully,

8.2. collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes,

8.3. factually accurate and relevant to the purposes for which they are processed, and stored in a form that allows for the identification of the data subjects for no longer than is necessary to achieve the purpose of the processing.

§ 3

DISCLOSURE OF PERSONAL DATA

1. The personal data of service users is disclosed to service providers used by the Controller in operating the website, and in particular to:

1.1. hosting providers,

1.2. providers of software necessary to operate the website.

2. Service providers (referred to in point 1 of this paragraph) to whom personal data is transferred – depending on contractual arrangements and circumstances – either follow the Controller’s instructions regarding the purposes and means of processing such data (processors) or independently determine the purposes and means of processing (controllers).

3. The personal data of service recipients is stored exclusively within the European Economic Area (EEA), subject to § 5(5) of the Privacy Policy.

§ 4

RIGHT TO CONTROL, ACCESS, AND CORRECT ONE’S OWN PERSONAL DATA

1. The data subject has the right to access their personal data, as well as the right to rectify, erase, or restrict the processing of such data; the right to data portability; the right to object; and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

2. Legal basis for the data subject’s request:

2.1. access to data – Article 15 of the GDPR,

2.2. rectification of data – Article 16 of the GDPR,

2.3. erasure of data (the so-called “right to be forgotten”) – Article 17 of the GDPR,

2.4. restriction of processing – Article 18 of the GDPR,

2.5. data portability – Article 20 of the GDPR,

2.6. objection – Article 21 of the GDPR,

2.7. withdrawal of consent – Article 7(3) of the GDPR.

3. To exercise the rights referred to in point 2, you may send an email to the following address: biuro@maropak.com.pl.

4. If a data subject exercises a right under the provisions above, the Controller shall comply with the request or refuse to comply with it without delay, but no later than one month after receiving it. However, if – due to the complexity of the request or the number of requests – the Controller is unable to comply with the request within one month, they will comply with it within the following two months, provided they notify the service user in advance—within one month of receiving the request—of the intended extension of the deadline and the reasons for it.

5. If it is determined that the processing of personal data violates the provisions of the GDPR, the data subject has the right to file a complaint with the President of the Personal Data Protection Office.

§ 5

COOKIES

1. The Controller’s website uses cookies.

2. The use of cookies is necessary for the proper provision of services on the website. Cookies contain information necessary for the proper functioning of the website and also enable the compilation of general statistics regarding website visit.

3. The website uses two types of cookies: „session” cookies and „persistent” cookies.

3.1. „Session” cookies are temporary files that are stored on the user’s device until the user logs out (leaves the website),

3.2. „Persistent” cookies are stored on the user’s device for the period specified in the cookie settings or until the user deletes them.

4. The Controller uses its own cookies to better understand how users interact with the website’s content. These cookies collect information about how a user interacts with the website, the type of website from which the user was redirected, as well as the number of visits and the duration of the user’s visit to the website. This information does not record any specific personal data of the user but is used to compile statistics on website usage.

5. The Controller also uses third-party cookies to collect general and anonymous statistical data through Google Analytics (third-party cookie administrator: Google LLC, based in the U.S.).

6. Cookies may also be used by advertising networks (in particular, the Google network) to display ads tailored to the way the user interacts with the website. To this end, they may store information about the user’s navigation path or the amount of time spent on a given page.

7. The user has the right to control whether cookies can access their computer by:

7.1. selecting the types of cookies you consent to having collected immediately upon entering the website and seeing the cookie notice,

7.2. changing the settings in your browser window.  Detailed information about the options and methods for managing cookies is also available in your software (web browser) settings.

§ 6

FINAL PROVISIONS

1. The Controller shall implement technical and organizational measures to ensure the protection of the personal data being processed, commensurate with the risks and the category of data being protected; in particular, the Controller shall protect the data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of applicable laws, and alteration, loss, damage, or destruction.

2. The Controller shall implement appropriate technical measures to prevent unauthorized persons from accessing or modifying personal data transmitted electronically.

3. In matters not covered by this privacy policy, the provisions of the GDPR and other applicable provisions of Polish law shall apply accordingly.