Privacy Policy

TABLE OF CONTENTS:

  1. Introduction – contact details
  2. Laws on the protection of personal data
  3. Rules for processing your personal data
  4. Users’ rights related to the processing of personal data
  5. Security of personal data
  6. How we process your data
  7. Consent – withdrawal of consent
  8. Data storage
  9. Recipients of data. Sharing data with other entities.
  10. Data processing with the use of cookies and other Internet technologies
  11. Changes to Policy
  12. Price lists

Introduction – contact details

This Privacy Policy contains general information regarding the use (processing) by www.dezx.pl of personal data of visitors or users of services provided by the site owned by Iris Investments Sp. z o.o. Przędzalnicza 16, 66-400 Gorzów Wielkopolski.

We respect the privacy of our Users; therefore, we provide this Privacy Policy so that each User knows to what extent his / her personal data is processed, including the ability to independently, consciously and freely decide whether to use our store or not.

As part of this Privacy Policy, we decided to generally describe how and to what extent we collect Users’ personal data, for what purposes we use this data, with whom we share it and how we protect it. In this Privacy Policy, the User will also find information about his/her rights under the applicable provisions on the protection of personal data.

This Policy is general and presents only some issues related to the processing of personal data. More detailed information can be found in the Terms and Conditions section and in information clauses that will be presented to the Users at the time of collecting their personal data.

More information on the extent to which we use cookies or other Internet technologies that collect data on our websites can be found in the Cookie Policy.

Controller’s contact details, i.e. Iris Investments Sp. z o.o. Przędzalnicza 16, 66-400 Gorzów Wielkopolski.

Address: Przędzalnicza 16, 66-400 Gorzów Wielkopolski.

Website: www.dezx.pl

E-mail: zamowienia@dezx.pl

  1. I Laws on the protection of personal data

The Privacy Policy is based on the following provisions:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (published in the Official Journal of the European Union L 119, p 1) – also known as “GDPR”
  • the Act of 16 July 2004 — Telecommunications law (i.e. Journal of Laws of 2017, item 1907, as amended)
  • the Act of 18 July 2002 on the provision of electronic services (i.e. Journal of Laws of 2017, item 1219, as amended)

III. Rules for processing your personal data

We appreciate the trust that Users have placed in us. As part of processing Users’ personal data, make sure that these data are processed in a safe, reliable, and lawful manner that is transparent to the User.

Below you will find the most important principles we follow:

  • We collect personal data only to the minimum extent necessary to achieve the purposes for which they are collected.
  • The purposes of collecting Users’ personal data are clearly defined and based on legal provisions – we do not process data in a manner inconsistent with these purposes.
  • We care about the timeliness and correctness of Users’ personal data and immediately respond to any requests for correction or updating of data.
  • We exercise the Users’ right to access their personal data and correct them.
  • We also exercise Users’ rights to delete personal data, withdraw consent, restrict processing, transfer data, the right to object to data processing, the right not to be subject to a decision based solely on automated data processing, including profiling.
  • We limit the storage of personal data, in accordance with the law, only to the period necessary to achieve the purposes for which they are collected, unless there are events that may extend the period of data storage.
  • We protect Users’ personal data against loss, unauthorized access, accidental loss or alteration, and other unlawful forms of processing.
  • If personal data are shared with other entities, it is done in a safe, contractually secured manner and in accordance with applicable law.
  1. Users’ rights related to the processing of personal data

The Store exercises Users’ rights related to the processing of their personal data. These rights arise from applicable law in the field of personal data, particularly the GDPR (Articles 16-21).

The User has the right to:

  • Withdrawal of consent to the processing of personal data at any time, if data are processed on the basis of consent (see section VII below). Details on the use of cookies can be found in the Cookies Policy.

 

  • Access to data: you have the right to receive a confirmation from the Store as to whether your personal data is processed by the Store and how.
  • Rectification of outdated or inaccurate personal data, as well as the right to supplement the data in case they are incomplete.
  • Objection to the processing of your personal data if we process personal data based on our legitimate interest (e.g. analytical, statistical, evidentiary or archiving purposes), then in case of your objection, we will cease data processing unless we prove the existence relevant legitimate grounds for the processing which should objectively take precedence over your interest or which are necessary to establish, assert or defend claims (e.g. evidence purposes, or in the event of pursuing claims by/against the Store). The right to object is also applicable if the processing relates to direct marketing, including profiling (regardless of whether the legal basis for such processing is consent or our legitimate interest; in any case, your objection or withdrawal of consent in this regard will cause that we will cease to process your data for these purposes). For the use of cookies see more in the Cookies Policy.
  • Deletion of personal data by the Store (“the right to be forgotten”) consists, in principle, in requiring that the data controller deletes your personal data without delay; however, according to Article 17 of the GDPR, there are exceptions to this right (in particular, for the purposes of establishing, pursuing or defending claims),
  • Restrictions on the processing of personal data, which in practical terms, may consist in temporarily blocking access to your data or transferring data to another system.
  • Transfer of data: you have the right to receive a copy of the personal data that you have provided us with if the processing is based on your consent or based on a contract and in an automated manner.
  • Filing a complaint to the supervisory authority – to the President of the Personal Data Protection Office.

All requests concerning the processing of personal data, including the exercise of your rights, should be sent by e-mail to the following address: zamycji@dezx.pl or in writing to the following address: Iris Investments Sp. z o.o., ul. Przędzalnicza 16, 66-400 Gorzów Wielkopolski. In the case of an application for withdrawal of consent, see also point VII below.

Responses to such requests will be given without undue delay, not later than within one month after receipt. This period may be extended by further two months due to the complexity of the request or the number of requests, of which we will inform you. However, until the request has been processed, the person concerned may receive information which they cancelled by withdrawing their consent.

If you send a request to the Store, please provide your full name and contact details (telephone number or e-mail address, in the case of written applications also your mailing address). In order to handle some requests, we may request additional information in order to confirm the identity of the requester.

  1. Security of personal data

The Store takes technical and organisational measures to protect personal data against illegitimate or unauthorised access or use, as well as against accidental destruction, loss or violation of integrity. The principle of ensuring safety guided us during the design of IT infrastructure and designing standards and business practices. Our security procedures include in particular: security of access, a backup system, monitoring, review and maintenance, and management of security incidents.

As part of ensuring the security of personal data processed, we undertake to take the following into account:

  • confidentiality – we will protect your data against accidental disclosure to third parties,
  • integrity – we will protect data against unauthorised modification,
  • accessibility – we will provide authorised persons with access to your data if needed.

Your personal data may be processed by third parties only if such a party undertakes to provide appropriate technical and organisational measures to ensure the security of personal data processing, as well as to keep such data confidential. Any employee of the Store who has access to personal data holds a relevant authorisation and is obliged to maintain confidentiality.

The personal data that you provided on our websites are encrypted and protected by an SSL certificate.

  1. How we process your data

What is the purpose and basis for processing Users’ data?

The Store processes your personal data only for specified, unambiguous and lawful purposes. We will not process your data in a manner incompatible with these purposes.

The Store informs the User each time of the purpose and legal basis for processing personal data in a separate message.

The main grounds for processing your personal data by the Store may include:

  • Consent – for one or several specific purposes (for example, when sending commercial and marketing information, sending a Newsletter, providing information of a marketing nature). Consent may be given either through the User’s active action (e.g. providing the data and sending a form) or by ticking the checkbox.
  • Implementation of an agreement or actions aimed at concluding an agreement (e.g. in connection with the provision of electronic services).
  • Legitimate interests, except where your interests or your fundamental rights and freedoms take precedence over these interests (each time described in information clauses, e.g. evidentiary purposes).

In some cases, the basis for the processing of personal data may also be the protection of the vital interests of a person or compliance with a legal obligation of the controller (this applies in particular to the obligations incumbent on the Store as a seller of goods).

Information on how we use cookies or other Internet technologies on our websites and process personal data using them can be found in the Cookie Policy.

Data collection method

The company collects Users’ personal data when they complete forms on the website, contact the customer service office or send questions or messages using our social networking sites (we can then keep the information that Users voluntarily provided by writing or contacting us) and automatically collect the data contained in the system logs and cookie files (more on this in the Cookie Policy).

Providing personal data is voluntary, but often necessary to process the User’s order or inquiry using web forms. In this case, providing your data is voluntary, but necessary to perform such service (in each case with your consent given through providing the data and sending the form).

What kind of data may we process?

The personal data we mentioned may include a different range of data, depending on the category of the data subject and whether you are already our Customer, or a person potentially interested in our products or services.

Each time we will specify and process only the necessary range of data.

As part of the Store’s activities, we may process personal data such as identification data (e.g. first name, surname), contact details (e.g. phone number, email address, residential address), location data, data regarding your orders, complaints, and in case of business entities, also the company name and tax identification number (NIP).

The range of data collected in connection with the use of cookies is described in detail in the Cookie Policy.

VII. Consent – withdrawal of consent

In communication with the User, also as part of the services offered through the website consisting in providing commercial and marketing information, the User may be asked to consent to the processing of personal data for marketing purposes regarding products or services offered by the Store, including electronic marketing, if it is your consent that can provide the appropriate legal basis for the processing of personal data. Consent may also be given via the so-called “explicit action”, e.g. resulting from the fact that a person voluntarily provides their data and asks for contact or sends an inquiry within the scope specified in the consent.

For Users and Customers or Potential Customers of the Store, withdrawal of consent may occur at any time by direct contact with the data Controller.

If you subscribe to the Newsletter, your consent may be withdrawn via the “unsubscribe” link available in each email.

In other cases of the consents obtained by the company, the course of action should be in accordance with the information indicated in the relevant information clauses.

Withdrawal of consent is not associated with any negative consequences or unpleasantness, however, you must know that its withdrawal may result in the inability to use such services as, for example, receiving Newsletter, receiving responses, receiving offers or advertisements, invitations to events, open doors and servicing for which the provision of law requires us to obtain your consent.

Withdrawal of consent does not affect the lawfulness of processing of personal data, which was made on the basis of consent before its withdrawal.

A request for withdrawal of consent will be handled promptly. After the request has been processed, we will cease to process personal data for marketing purposes, including receiving marketing and commercial information electronically and by phone. However, until the request has been processed, the person concerned may receive information which they cancelled by withdrawing their consent, due to the time needed for the processing of the request in our systems.

If we hold Users’ data for purposes other than those for which the processing was based on consent (e.g. performance of an agreement or service, proof of evidence, making claims), we may still process such data for these purposes on a different legal basis.

In terms of withdrawing consent to the installation and use of cookies, more information can be found in the Cookies Policy.

VIII. Data storage

The data will be kept for as long as is necessary to achieve the purposes of which the User has been informed. The period of storage of personal data is determined in accordance with applicable law. The User has the right to obtain information from us about the probable time of storing personal data.

  1. Recipients of data. Sharing data with other entities.

With the User’s consent, depending on the purpose of data processing and the content of the consent for processing and sharing, your personal data may be disclosed to the entities indicated in the consent.

In some cases, data may also be made available to other data controllers if there is an important legal basis for doing so.

Personal data may also be made available to other recipients who are data processors and who provide services for us and on our behalf and who have been commissioned to perform activities that require data processing, in particular with regard to IT services, marketing, services (including marketing agencies), and order delivery services.

In terms of marketing purposes (e.g. answering questions about the offer or giving additional consents for future marketing), the recipients of your personal data as data processors may be Authorized Distributors of goods offered by the Store.

We point out that if the recipients of the data process Users’ data independently and on their own behalf, e.g. if they offer products and services through their own channels without the involvement of the Store, or if they provide services on their own behalf, in this case, they become separate data administrators and bear their own responsibility for the processing of such personal data in this respect, without being subject to the terms of our Privacy Policy.

The Store’s website may contain links to other websites, social media sites or websites of cooperating entities. When accessing a third-party website, Users will be subject to separate privacy policies and data protection policies for those websites. Please read the privacy and data protection policies of the respective websites accessed.

  1. Data processing with the use of cookies and other Internet technologies

In connection with Users’ use of the Store’s website, we collect data contained in system logs and cookies or we may use other similar Internet technologies (e.g. codes, pixels, plug-ins). For more information on the use of cookies and other Internet technologies, see the Cookie Policy.

  1. Changes to Policy

We reserve the right to introduce changes to this Privacy Policy, which may result from the need to adapt to changes in the legislation or applicable privacy standards or extending our offer. Therefore, we will provide relevant updates about any changes by making announcements on our website.

XII. Price lists

Price lists and other information contained on websites do not constitute an offer.