Administrator – WASKO S.A. based in Gliwice (ul. Berbeckiego 6, 44-100 Gliwice) entered into the Register of Entrepreneurs of the National Court Register kept by the District Court in Gliwice, 10th Commercial Division of the National Court Register under the number KRS 0000026949, REGON: 276703584,NIP: 9542311706.
Personal data – information about a natural person identified or identifiable by one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, internet identifier and information collected via cookies and other similar technology.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC.
Website – website run by the Administrator at www.waskogroup.com
User – any natural person visiting the Website or using one or more services or functionalities described in the Policy.
DATA PROCESSING IN CONNECTION WITH THE USE OF THE WEBSITE
In connection with the User’s use of the Website, the Administrator collects data to the extent necessary to provide individual services offered, as well as information about the User’s activity on the Website. The detailed rules and purposes of processing Personal Data collected during the use of the Website by the User are described below.
PURPOSES AND LEGAL BASIS FOR DATA PROCESSING ON THE WEBSITE
Personal data of all persons using the Website (including IP address or other identifiers and information collected via cookies or other similar technologies) are processed by the Administrator:
in order to provide services by electronic means in the scope of providing Users with content collected on the Website – then the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR);
for analytical and statistical purposes – then the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in conducting analyzes of Users’ activity, as well as their preferences in order to improve the functionalities used and the services provided;
in order to possibly establish and pursue claims or defend against claims – the legal basis for processing is the Controller’s legitimate interest (Article 6 (1) (f) of the GDPR), consisting in the protection of its rights;
for the marketing purposes of the Administrator and other entities, in particular related to the presentation of behavioral advertising – the rules for the processing of Personal Data for marketing purposes are described in the MARKETING section.
The User’s activity on the Website, including his Personal Data, is recorded in system logs (a special computer program used to store a chronological record containing information about events and activities related to the IT system used to provide services by the Administrator). The information collected in the logs is processed primarily for purposes related to the provision of services. The administrator also processes them for technical and administrative purposes, for the purposes of ensuring the security of the IT system and managing this system, as well as for analytical and statistical purposes – in this respect, the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) GDPR).
The Administrator processes Users’ Personal Data in order to carry out marketing activities, which may include:
displaying to the User marketing content corresponding to his interests (behavioral advertising);
sending e-mail notifications about interesting offers or content, which in some cases contain commercial information (newsletter service);
conducting other types of analytical and statistical activities, as well as those related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).
In order to carry out marketing activities, the Administrator uses profiling in some cases. This means that thanks to automatic data processing, the Administrator assesses selected factors concerning Users in order to analyze their behavior or create a forecast for the future. This allows for a better adjustment of the displayed content to the individual preferences and interests of the User.
The subscription to the newsletter by the Website User involves the processing of his Personal Data. Providing data marked as mandatory is required in order to accept and service the order, and failure to do so results in the failure to fulfill the orders and a. Providing other data is optional.
Personal data is processed:
in order to provide the newsletter shipping service – the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR); in the scope of optional data, the legal basis for processing is consent (Article 6 (1) (a) of the GDPR);
in the case of sending marketing content to the User as part of the newsletter – the legal basis for processing, including the use of profiling, is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) in connection with the consent expressed to receive the newsletter;
for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in conducting analyzes of Users’ activity on the Website in order to improve the functionalities used;
in order to possibly establish and pursue claims or defend against claims – the legal basis for processing is the Controller’s legitimate interest (Article 6 (1) (f) of the GDPR), consisting in the protection of its rights.
If the User publishes any Personal Data of other people on the Website (including their name, address, telephone number or e-mail address), they may do so only on condition that the law and personal rights of these persons are not infringed.
The User’s personal data may also be used by the Administrator to direct marketing content to him through various channels, i.e. via e-mail, MMS / SMS or by phone. Such actions are taken by the Administrator only if the User has consented to them, which may be withdrawn at any time.
The administrator may, in some cases, also carry out direct marketing via traditional mail. The User will be informed separately about the intention to conduct this type of marketing. The User has the right to object to this type of marketing.
COOKIES AND SIMILAR TECHNOLOGY
The administrator uses the necessary cookies primarily to provide Users with services and functionalities of the Website, which the User wants to use. Necessary cookies may be installed only by the Administrator via the Website.
The legal basis for data processing in connection with the use of necessary cookies is the necessity of processing to perform the contract (Article 6 (1) (b) of the GDPR).
FUNCTIONAL AND ANALYTICAL COOKIES
Functional cookies are used to remember and adapt the Website to the User’s choices, including in terms of language preferences. Functional cookies may be installed by the Administrator and its partners via the Website.
Analytical cookies enable obtaining information such as the number of visits and traffic sources on the Website. They are used to determine which pages are more or less popular and to understand how Users move around the site by keeping statistics on traffic on the Website. Data processing takes place in order to improve the performance of the Website. The information these cookies collect is aggregated so it is not intended to identify you. Functional cookies may be installed by the Administrator and its partners via the Website.
The legal basis for the processing of Personal Data in connection with the use of necessary and analytical cookies by the Administrator, for this purpose, is its legitimate interest (Article 6 (1) (f) of the GDPR), consisting in ensuring the highest quality of services provided on the Website.
The processing of Personal Data in connection with the use of functional and analytical cookies depends on the User’s consent to the use of (separately) functional and analytical cookies via the cookie consent management platform. This consent may be withdrawn at any time via this platform.
Advertising cookies make it possible to adjust the displayed advertising content to the interests of Users within the Website and outside the Website. Based on the information from these cookies and the User’s activity on other websites, there is bsuccessful profile of the User’s interests. Advertising cookies may be installed by the Administrator and its partners via our website.
The legal basis for the processing of Personal Data in connection with the use of advertising cookies by the Administrator, for this purpose, is its legitimate interest (Article 6 (1) (f) of the GDPR), consisting in ensuring the highest quality of services provided on the Website.
The processing of Personal Data in connection with the use of advertising cookies is possible after obtaining the User’s consent to use the consent through the consent management platform. This consent may be withdrawn at any time via this platform.
PERIOD OF PROCESSING OF PERSONAL DATA
The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, the data is processed for the duration of the service or the performance of the order, until the consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the legitimate interest of the Administrator.
The data processing period may be extended if the processing is necessary to establish and pursue any claims or defend against claims, and after that time only if and to the extent that it will be required by law. After the expiry of the processing period, the data is irreversibly deleted or anonymized.
The User has the right to access the data and request rectification, deletion, processing restrictions, the right to transfer data and the right to object to data processing, as well as the right to lodge a complaint with the supervisory body dealing with the protection of personal data.
To the extent that the User’s data is processed on the basis of consent, this consent may be withdrawn at any time by contacting the Administrator by e-mail to the address email@example.com or by traditional mail to the address WASKO S.A., ul. Berbeckiego 6, 44-100 Gliwice.
The User has the right to object to the processing of data for marketing purposes, if the processing takes place in connection with the legitimate interest of the Administrator, and – for reasons related to the specific situation of the User – in other cases where the legal basis for data processing is the legitimate interest of the Administrator ( e.g. in connection with the implementation of analytical and statistical purposes).
More information about the rights resulting from the GDPR can be found in the Transparency Policy available at: https://www.waskogroup.com/privacy-policy-2022/
In connection with the provision of services, Personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as banks and payment operators, entities providing accounting services, couriers (in connection with the implementation of the order), marketing agencies (in the scope of marketing services) and entities related to the Administrator, including companies from its capital group.
The Administrator reserves the right to disclose selected information about the User to the competent authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with the provisions of applicable law.
TRANSFER OF DATA OUTSIDE EEA
The level of protection of Personal Data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers Personal Data outside the EEA only when it is necessary and with an adequate level of protection, primarily through:
cooperation with entities processing Personal Data in countries for which an appropriate decision of the European Commission has been issued regarding the assurance of an adequate level of protection of Personal Data;
use of standard contractual clauses issued by the European Commission;
application of binding corporate rules approved by the competent supervisory authority.
The Administrator always informs about the intention to transfer Personal Data outside the EEA at the stage of collecting them.
SECURITY OF PERSONAL DATA
The administrator conducts a risk analysis on an ongoing basis to ensure that personal data is processed by him in a safe manner – ensuring, above all, that only authorized persons have access to the data and only to the extent that it is necessary due to the tasks they perform. . The administrator makes sure that all operations on Personal Data are recorded and performed only by authorized employees and associates.
The administrator takes all necessary steps to ensure that his subcontractors and other cooperating entities guarantee the application of appropriate security measures in each case when they process Personal Data on behalf of Administrator.
Contact with the Administrator is possible via the e-mail address firstname.lastname@example.org or the correspondence address: WASKO S.A., ul. Berbeckiego 6, 44-100 Gliwice.
The policy is verified on an ongoing basis and updated if necessary.
The current version of the Policy was adopted and is effective from January 24, 2022.