e-darmet.com

Privacy Policy

This Privacy Policy sets out the rules for processing personal data obtained through the online store operating at www.e-darmet.com.

General information

The owner of the Online Store and the personal data controller is Zakład Obróbki Skrawaniem DARMET Sp. z o.o., with its registered office in Białystok, Poland, at ul. Komunalna 4c, 15-197 Białystok, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Białystok, 12th Commercial Division of the National Court Register, under KRS number 0000025604, share capital PLN 150,000, NIP: 9661524555, REGON: 050699567, hereinafter referred to as Darmet sp. z o.o..

Personal data collected by Darmet sp. z o.o. through the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, also known as the General Data Protection Regulation or GDPR.

Darmet sp. z o.o. makes every effort to respect the privacy of Customers visiting the Online Store.

Contents

1. Types of processed data, purposes and legal basis
2. Recipients of data and data retention period
3. Cookies and IP address
4. Rights of data subjects
5. Security management — password
6. Changes to the Privacy Policy

§ 1. Types of processed data, purposes and legal basis

Darmet sp. z o.o. collects information concerning natural persons performing legal acts not directly related to their business activity, natural persons conducting business or professional activity in their own name, and natural persons representing legal persons or organisational units without legal personality but having legal capacity under the law, hereinafter jointly referred to as Customers.

Personal data is collected in particular in the following cases:

• account registration in the Online Store, in order to create and manage an individual Customer account; legal basis: necessity for the performance of the account service agreement (Article 6(1)(b) GDPR);
• placing an order in the Online Store, in order to perform the sales agreement; legal basis: necessity for the performance of the sales agreement (Article 6(1)(b) GDPR);
• subscribing to the Newsletter, in order to provide an electronically supplied service; legal basis: consent of the data subject (Article 6(1)(a) GDPR).

Data provided during account registration

• e-mail address;
• address details: postal code, city, street, house/apartment number;
• first name and surname;
• telephone number.

During registration, the Customer independently sets an individual account password. The password may later be changed in accordance with the rules described in § 5.

Data provided when placing an order

• e-mail address;
• address details: postal code, city, street, house/apartment number;
• first name and surname;
• telephone number.

In the case of Entrepreneurs, the scope of data is additionally extended to include the company name and tax identification number (NIP).

In the case of Newsletter subscription, the Customer provides only an e-mail address.

When using the Online Store website, additional information may also be collected, in particular: the IP address assigned to the Customer’s computer or the external IP address of the internet service provider, domain name, browser type, access time and operating system type.

Navigation data may also be collected, including information about links and references clicked by the Customer or other actions taken in the Online Store. Legal basis: legitimate interest (Article 6(1)(f) GDPR), consisting in facilitating the use of electronically supplied services and improving their functionality.

In order to establish, pursue and enforce claims, certain personal data provided by the Customer when using the Online Store may be processed, such as first name, surname, data concerning the use of services, and other data necessary to prove the existence of a claim and the extent of damage. Legal basis: legitimate interest (Article 6(1)(f) GDPR), consisting in establishing, pursuing and enforcing claims and defending against claims before courts and other public authorities.

Providing personal data to Darmet sp. z o.o. is voluntary, but necessary for concluding sales agreements or using services provided through the Online Store. Failure to provide data required in registration forms prevents registration and creation of a Customer Account, while failure to provide data required for placing an order without registration prevents placing and fulfilment of the order.

§ 2. Recipients of data and data retention period

Customer personal data is transferred to service providers used by Darmet sp. z o.o. in operating the Online Store. Depending on contractual arrangements and circumstances, these service providers either process data on the instructions of Darmet sp. z o.o. as processors, or independently determine the purposes and means of processing as separate controllers.

• Processors include, among others, providers of hosting services, accounting services, marketing systems, traffic analysis systems in the Online Store and systems for analysing the effectiveness of marketing campaigns.
• Independent controllers include providers of electronic payment and banking services.

Service providers are established in Poland and in other countries of the European Economic Area (EEA).

Retention period

If the processing is based on consent, Customer personal data is processed until the consent is withdrawn, and after withdrawal for a period corresponding to the limitation period for claims that may be raised by Darmet sp. z o.o. or against it. Unless a specific provision provides otherwise, the limitation period is six years, and for claims concerning periodic benefits and claims related to business activity — three years.

If the processing is based on the performance of a contract, Customer personal data is processed for as long as necessary to perform the contract, and thereafter for a period corresponding to the limitation period for claims.

In the case of purchases made in the Online Store, personal data may be transferred to courier companies in order to deliver the ordered goods.

Navigation data may be used to provide better service to Customers, analyse statistical data, adapt the Online Store to Customer preferences and administer the Online Store.

If the Customer subscribes to the Newsletter, Darmet sp. z o.o. will send electronic messages containing commercial information about promotions and new products available in the Online Store to the Customer’s e-mail address.

Upon request, Darmet sp. z o.o. discloses personal data to authorised public authorities, in particular prosecution units, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.

§ 3. Cookies and IP address

The Online Store uses small files called cookies. They are saved by Darmet sp. z o.o. on the terminal device of the person visiting the Online Store if the web browser allows it. A cookie usually contains the domain name from which it originates, its expiry time and a unique randomly selected number identifying the file.

Information collected using cookies helps adapt the products offered by Darmet sp. z o.o. to individual preferences and actual needs of visitors to the Online Store, and enables the preparation of general statistics on visits to products presented in the Online Store.

Types of cookies used

• Session cookies — after the browser session ends or the computer is switched off, stored information is deleted from the device memory. The session cookie mechanism does not allow any personal data or confidential information to be collected from Customer computers.
• Persistent cookies — stored in the memory of the Customer’s terminal device until they are deleted or expire. The persistent cookie mechanism does not allow any personal data or confidential information to be collected from Customer computers.

Own cookies are used for:

• authenticating the Customer in the Online Store and maintaining the Customer’s session after logging in;
• analytics, research and audience measurement, in particular creating anonymous statistics to understand how Customers use the Store website and improve its structure and content.

External cookies are used for:

• promoting the Online Store through Facebook.com; external cookie controller: Meta Platforms Ireland Limited, Ireland;
• collecting general and anonymous statistical data through Google Analytics; external cookie controller: Google LLC, USA;
• presenting the Rzetelny Regulamin certificate through rzetelnyregulamin.pl; external cookie controller: Rzetelna Grupa sp. z o.o., Warsaw, Poland.

Cookies are safe for the computers of Online Store Customers. In particular, it is not possible for viruses or other unwanted or malicious software to enter Customers’ computers through cookies. Customers may restrict or disable cookies in their web browsers. If this option is used, the Online Store may still be used, except for functions that by their nature require cookies.

Cookie settings can be changed in popular browsers such as Internet Explorer, Microsoft Edge, Mozilla Firefox, Chrome and Chrome Mobile, Safari and Safari Mobile, and Opera.

Darmet sp. z o.o. may collect Customer IP addresses. An IP address is used to access the Internet and is often assigned dynamically. IP addresses are used for diagnosing technical server issues, preparing statistical analyses, administering and improving the Online Store, security purposes and identifying unwanted automated programs browsing Store content and overloading the server.

The Online Store may contain links and references to other websites. Darmet sp. z o.o. is not responsible for the privacy protection rules applicable on those websites.

§ 4. Rights of data subjects

Customers have the following rights in relation to the processing of their personal data:

In the event of a request based on the above rights, Darmet sp. z o.o. fulfils the request or refuses to fulfil it without undue delay, no later than within one month of receipt. If the request is complex or numerous requests are submitted, this period may be extended by a further two months, with prior notification.

Customers may submit complaints, inquiries and requests concerning the processing of personal data and the exercise of their rights to the Controller.

Customers have the right to lodge a complaint with the President of the Personal Data Protection Office if their rights to personal data protection or other rights under GDPR are infringed.

§ 5. Security management — password

Darmet sp. z o.o. provides Customers with a secure and encrypted connection when personal data is transmitted and when logging in to the Customer Account. Darmet sp. z o.o. uses an SSL certificate issued by a leading global provider of security and encryption solutions.

If a Customer with an account in the Online Store loses the account password, the Online Store enables generating a new password. Darmet sp. z o.o. does not send password reminders. The password is stored in encrypted form, making it impossible to read.

To generate a new password, the Customer should provide the e-mail address in the form available under the “Forgotten password” link next to the login form. The Customer will receive an e-mail containing a redirect to a dedicated form where a new password may be set.

Darmet sp. z o.o. never sends any correspondence, including e-mail correspondence, asking the Customer to provide login credentials, in particular the password to the Customer Account.

§ 6. Changes to the Privacy Policy

This Privacy Policy may be amended. Darmet sp. z o.o. will inform Customers of any changes 7 days in advance.

Questions related to this Privacy Policy should be sent to: sales@e-darmet.com

Date of last modification: 15.10.2019.