Privacy Policy of the website www.drekon.eu operated by Drekon Kondys spółka jawna, with its registered office at 34-600 Limanowa, ul. Fabryczna 11, NIP 7372251073, REGON 540974356, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0001157464, whose registration files are kept by the District Court for Kraków-Śródmieście in Kraków, 12th Commercial Division of the National Court Register.
§ 1 General Provisions
- This Privacy Policy sets out the rules for processing and protecting personal data collected from Users in connection with the use of the website available at www.drekon.pl, in particular in connection with making purchases in the online store operating within this website. The online store regulations are available in a separate tab on the website.
- The controller of Users’ personal data is Drekon Kondys spółka jawna, with its registered office at 34-600 Limanowa, ul. Fabryczna 11, NIP 7372251073, REGON 540974356, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0001157464, hereinafter referred to as the “Controller”.
- The Controller can be contacted by e-mail at biuro@drekon.pl or in writing at the address indicated above in point 2.
- The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), as well as Polish data protection laws, in particular the Act of 10 May 2018 on the protection of personal data, as amended.
- The Controller makes every effort to protect the privacy of Users using the website and the Store. Personal data are collected with due care and adequately protected against access by unauthorized persons.
- Users’ personal data will not be transferred outside the European Economic Area (EEA) or to international organizations.
- User data will not be processed in an automated manner in a way that could result in decisions being made concerning them, subject to point 8.
- User data may be subject to profiling for the purpose of adjusting content, personalizing offers and advertisements, provided consent has been given. This may result in more relevant advertising content being displayed.
- In matters not regulated by this Privacy Policy, the provisions of GDPR and Polish law shall apply, in particular the Act on the protection of personal data.
§ 2 Purposes and Legal Grounds for Processing Personal Data
- The Controller processes Users’ personal data for the following purposes:
- To conclude and perform a sales contract in the online store, including order processing, delivery, payments and complaints, pursuant to Article 6(1)(b) GDPR.
- To process payments via external payment operators, pursuant to Article 6(1)(b) GDPR.
- To manage a user account in the store, pursuant to Article 6(1)(b) GDPR.
- To respond to inquiries and requests, pursuant to Article 6(1)(f) GDPR or Article 6(1)(b) GDPR.
- To send marketing information and newsletters, based on consent, pursuant to Article 6(1)(a) GDPR.
- To analyze website usage and statistics (e.g. Google Analytics), pursuant to Article 6(1)(f) GDPR.
- To establish, pursue or defend legal claims, pursuant to Article 6(1)(f) GDPR.
- To comply with legal obligations, including tax and accounting regulations, pursuant to Article 6(1)(c) GDPR.
§ 3 Types of Collected Personal Data
- The Controller may collect and process the following categories of personal data:
- Identification data (e.g. name and surname).
- Contact data (e.g. e-mail address, phone number, delivery address).
- Payment-related data (processed by payment operators).
- Order-related data.
- Website activity data (collected anonymously).
- Data provided in contact forms and correspondence.
- Data collected via cookies and similar technologies.
§ 4 Data Retention Period
- Personal data are stored for the period necessary to achieve the purposes for which they were collected, and no longer than 6 years unless required otherwise by law.
§ 5 Recipients of Personal Data
- Personal data may be disclosed to courier companies, payment operators, accounting service providers, hosting providers, IT service providers, marketing and analytics service providers, and public authorities if required by law.
§ 6 Rights of Data Subjects
- Users have the right to access, rectify, erase, restrict processing, transfer data, object to processing, withdraw consent, and lodge a complaint with the supervisory authority (President of the Personal Data Protection Office in Poland).
§ 7 Cookies
- The website uses cookies to ensure proper operation, improve functionality, analyze traffic, and display tailored advertisements.
§ 8 Changes to the Privacy Policy
- The Controller reserves the right to amend this Privacy Policy. Changes take effect upon publication on the website.
§ 9 Contact Details of the Controller
- For any questions regarding this Privacy Policy or personal data processing, please contact the Controller using the details provided above.