§1 Definitions used
- Personal Data Privacy Policy – this Policy, defining the purposes and scope of data processing, the entities to which data will be transferred, and the rights of data subjects in connection with the use of the Website's services.
- Data Controller, Operator – the entity determining the purposes and means of data processing. The Data Controller of the Website Users' personal data is: Atribu S.C., registered office address: ul. Dworcowa 15A, 42-140 Panki; correspondence address: ul. Dworcowa 15A, 42-140 Panki.
- Data subject – a natural person who, while using the Website, provides personal data in order to subscribe to the newsletter or contact via the contact form.
- Website – the website available at https://atribu-welding.com/, through which the User may browse blog post content, subscribe to the newsletter, or contact the Data Controller.
- User – a person who voluntarily uses the services and content available on the Website.
- Newsletter – a service provided electronically, consisting of sending marketing information electronically to the e-mail address provided by the User, with their prior consent.
- Contact Form – a service enabling the Buyer to send an inquiry to the Seller using a dedicated form on the Store's website.
- Personal data – any information that, without excessive time or cost, could lead to the identification of a natural person.
- Data processing – performing operations on personal data, such as collecting, modifying, archiving, or deleting data.
§2 General provisions
This policy applies to the Website operating at the URL: https://atribu-welding.com/. The Website Operator and Data Controller is: Atribu S.C. The Operator is the Controller of your personal data with respect to data provided voluntarily on the Website.
Personal data is processed in accordance with currently applicable law, i.e., Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Polish Act of 10 May 2018 on the Protection of Personal Data, and the Polish Act of 18 July 2002 on Providing Services by Electronic Means.
The Data Controller applies technical and organizational measures adequate to the risks and to the categories of data protected, to ensure the security of processed data.
The Controller has developed and implemented internal data security policies which all employees and collaborators are required to follow. Access to personal data is restricted solely to authorized persons.
§3 Purposes and scope of data processing
Personal data is collected directly from data subjects, including through:
- completing a contact-details form when submitting an inquiry,
- completing the newsletter subscription form,
- providing data by phone,
- providing data by sending an e-mail message,
- storing cookie files on end devices, in accordance with the Cookies Policy.
The Controller processes personal data for the purposes of:
- responding to a question asked via the contact form – Article 6(1)(b) GDPR;
- sending the Newsletter and commercial information electronically – Article 6(1)(a) GDPR (based on consent);
- marketing the Store's own products and services – Article 6(1)(f) GDPR (legitimate interest).
The scope of data processed is limited to the minimum necessary: for the contact form – identification data, phone number, e-mail address, and any other data provided voluntarily; for the newsletter – first name and e-mail address.
The Website may record information about connection parameters (timestamp, IP address).
§4 Data protection methods
- Login and data-entry areas are protected at the transmission layer (SSL certificate).
- Personal data stored in the database is encrypted.
- The Controller regularly performs backups.
- The software used to process data is regularly updated.
§5 Data processing period
- for the period resulting from legal provisions (e.g., tax settlement) – 5 years from the end of the calendar year in which the tax payment deadline fell,
- until consent is withdrawn, where processing is based on the consent of the data subject.
§6 Data recipients
Data may be entrusted to entities acting on the Controller's behalf, providing:
- website hosting, servicing, and IT system maintenance services,
- automation – newsletter (e-mail, first name),
- marketing services on behalf of the Controller.
§7 Rights of data subjects
- the right to access and correct their data,
- the right to withdraw consent to processing at any time,
- the right to erasure of data (the right to be forgotten),
- the right to data portability,
- the right to object to processing for direct marketing purposes,
- the right not to be subject to automated profiling,
- the right to control the processing of data and to obtain information about who the Data Controller is.
The data subject also has the right to lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO).
§8 Final provisions
The Controller reserves the right to amend this Privacy Policy where required by the technical solutions used or by changes in the law.
The current version of the Privacy Policy will always be posted on the Website, so it is recommended to review the currently applicable document each time.
Contact
stoly@atribu.pl · +48 696 778 473 · +48 696 896 969