Privacy policy

PRIVACY POLICY

i.e. information on processing of personal data

This Privacy Policy has been drafted as part of the performance by:

debesto sp. z o.o. with registered office in Oleśnica, Poland, at ul. Wały Jagiellońskie 14A, 56-400 Oleśnica, NIP (tax identification number) 911 203 71 54, operating an online store under the website address: www.debesto.com,

that is the controller of personal data provided by you, of the information obligation pursuant to Art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU, L 119 of 4 May 2016, p. 1), hereinafter referred to as the “Regulation 2016/679”.

1. WHO?

i.e. personal data controller

debesto sp. z o.o. with registered office in Oleśnica, Poland, at ul. Wały Jagiellońskie 14A, 56-400 Oleśnica, NIP (tax identification number) 911 203 71 54, is the controller of your personal data.

The controller can be contacted at the e-mail address: [email protected] or by phone: 0048 71 70 110 70.

2. WHAT, FOR WHAT, AND ON WHAT BASIS?

i.e. types and purposes of, and basis for, personal data processing

The controller processes any personal data provided by you solely:

1. – in order to: prepare the valuation of goods offered on the www.debesto.com website ordered by you, and provide information and answers to your questions regarding the goods and order processing prior to the placement of an order,

– pursuant to Art. 6(1)(b) of the Regulation 2016/679,

– type of the data: first name, surname, name, e-mail address, telephone number,

2. – in order to: conclude and perform a sale contract for goods ordered by you (order fulfilment),

– pursuant to Art. 6(1)(b) of the Regulation 2016/679,

– type of the data: first name, surname, name, e-mail address, telephone number, NIP (tax identification number), address,

3. – in order to: organise and carry out delivery (transport) of goods purchased by you,

– pursuant to Art. 6(1)(b) of the Regulation 2016/679,

– type of the data: first name, surname, name, e-mail address, telephone number, NIP (tax identification number), address,

4. – in order to: provide aftersales services for your order, i.e. handle any complaints regarding purchased goods and answer your questions regarding a completed order,

– pursuant to Art. 6(1)(b) of the Regulation 2016/679,

– type of the data: first name, surname, name, e-mail address, telephone number, NIP (tax identification number), address,

5. – in order to: pursue the controller’s legitimate interest, i.e. determine potential liability and protect the controller’s legitimate rights and claims,

– pursuant to Art. 6(1)(f) of the Regulation 2016/679,

– type of the data: first name, surname, name, e-mail address, telephone number, NIP (tax identification number), address.

6. In the United States, we anticipate SMS contact with local customers.

3. FOR HOW LONG?

i.e. data retention period

Your personal data whose processing is required by applicable laws will be stored for a period prescribed by the currently applicable laws.

Your personal data provided in a contact form via the www.debesto.com website will be kept for a period necessary to reply to a valuation or, in case you have any further questions or require additional information, until such answers or information are provided.

Your personal data included in your order will be stored for a period necessary to fulfil your order, including aftersales services, i.e. no longer than 2 years from the order completion.

4. WHO ELSE WILL RECEIVE YOUR DATA?

i.e. recipients of personal data

The recipients of your personal data may be:

• entities involved in the transport of goods, i.e. carriers or brokers which transport the goods at the controller’s request;

• entities that support electronic payments or payments by card which may gain access to your personal data for the purpose of payment processing;

• entities providing IT support for the controller, and providers of external systems supporting the controller’s activities;

• entities providing accounting and legal services for the controller;

• entities and bodies which are authorised to gain access to your personal data under applicable laws.

5. WHAT CAN I DO?

i.e. rights related to processing of your personal data

Pursuant to Art. 15-22 of the Regulation 2016/679, you have:

1. the right to access your data and receive a copy thereof;

2. the right to rectify (amend) your data;

3. the right to erase the data;

4. the right to restrict the data processing;

5. the right to the data portability;

6. the right to lodge a complaint with a supervisory body, i.e. the President of the Personal Data Protection Office, if a data subject considers that their personal data are processed in breach of personal data protection regulations.

In order to exercise any of the aforementioned rights (1-5 above), please complete an appropriate form and send it electronically to the e-mail address [email protected] or in writing to the following address: ul. Wały Jagiellońskie 14A, 56-400 Oleśnica, Poland.

The controller shall promptly process any requests for exercising the rights, in any case within one month from the date of the form receipt at the latest. In case of complex requests or a significant number of requests received by the controller in a given time, the indicated period may be prolonged by subsequent two months. In this case, the controller will inform you about such an extension, indicating a reason for the delay.

6. DO I HAVE TO?

i.e. voluntary provision of personal data

Any personal data are provided on a voluntary basis; however, failure to provide the data will prevent the controller from performing a valuation ordered by you, from contacting you with regard to an order, from fulfilling an order and from processing any complaint concerning an order.

7. IS IT SAFE?

i.e. safeguarding personal data processing

Taking care of the security of your personal data, the controller applies advanced safeguarding measures and maintains confidentiality of all the information provided. The controller has developed and implemented internal procedures and recommendations to prevent disclosure of your data to any unauthorised parties. In its capacity of a personal data controller, the controller fulfils all its obligations prescribed by generally applicable laws.

8. IS IT AUTOMATED?

i.e. automated decision-making

The controller will not make any automated decisions in reference to you, including decisions resulting from profiling.

1. Additional information

2. The controller reserves the right to amend this Privacy Policy. In this case, the controller shall promptly publish a new version of the Privacy Policy on the www.debesto.com website.

3. If you notice any irregularities regarding the security of the data processed by the controller, please report any comments to the e-mail address: g[email protected] or by phone at 0048 71 70 110 70.