Privacy Policy and Cookies

2024-04-08

• § I – Personal Data Administrator Details
• § II – Data Protection Officer
• § III – Purposes and legal bases for processing personal data
• § IV – Cookies
• § V – Recipients of personal data
• § VI – Transfer of personal data to third countries
• § VII – Period of processing personal data
• § VIII – Information on the rights available
• § IX – Automated decision-making and profiling
• § X – Information on the voluntary provision of data
• § XI – Appropriate application
• § XII – Final provisions

§ I

Personal Data Administrator Details

1. The Administrator of your personal data is CREHLER® Sp. z o.o., a certified Shopware Gold Partner, located in Zielona Góra at ul. Generała Władysława Sikorskiego 4, 65-454 Zielona Góra, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court in Zielona Góra, VIII Economic Department of the National Court Register under the number KRS: 0000589243, NIP: 9731024669, REGON: 363109359 with a share capital of 48,000.00 PLN.
2. Contact with the Administrator regarding the protection of personal data is possible via email: [email protected]

§ II

Data Protection Officer

1. The Data Protection Officer has not been appointed by the Administrator.

§ III

Purposes and legal bases for processing personal data

1. The Administrator processes your personal data for the following purposes:
   • A) For the purpose of concluding and performing a contract, the following personal data are processed:
     •  Name and surname / company name;
     •  Residential address / company headquarters;
     •  Email address;
     •  Phone number;
     •  Bank account number;

The legal basis for such data processing is Article 6(1)(b) of the GDPR.

• • For the purpose of fulfilling legal obligations incumbent on the Administrator, such as issuing accounting documents, the following personal data are processed:
    •  Name and surname / company name;
    •  Residential address / company headquarters;
    •  VAT number – in the case of Entrepreneurs;

 The legal basis for such data processing is Article 6(1)(c) of the GDPR.

• • C) To inform you about activities related to the performance of our contract, we process the following personal data:
    •  Name and surname / company name;
    •  Phone number;
    •  Email;

 The legal basis for such data processing is Article 6(1)(a) of the GDPR.

• • D) For the purpose of establishing, defending, and pursuing claims, we process the following personal data:
    • Name and surname / company name;
    •  Residential address / company headquarters;
    •  Email address;
    •  VAT number;

 The legal basis for such data processing is Article 6(1)(f) of the GDPR.

• • E) For the purpose of storing unresponded offers, we process the following personal data:
    • Name and surname / company name;
    •  Email address;
    •  Phone number;

 The legal basis for such data processing is Article 6(1)(f) of the GDPR.

• • F) For archival and evidential purposes, we process the following personal data:
    •  Name and surname / company name;
    •  Residential address / company headquarters;
    •  VAT number;

 The legal basis for such data processing is Article 6(1)(f) of the GDPR.

• • G) For the purpose of administering the website, we process such personal data as:
    •  IP address;
    •  Server date and time;
    •  Information about the internet browser;
    •  Information about the operating system;

 The legal basis for such data processing is Article 6(1)(f) of the GDPR.

§ IV

Cookies

1. The Administrator, like other entities, uses so-called cookies on their website. Cookies are short text files saved on a computer, phone, tablet, or other user device. They can be read by our system as well as by the systems of other entities whose services we utilize.
2. Cookies serve many functions on a website, most of which are useful, and we will try to describe below (if the information is insufficient, please contact us):
   • Ensuring security — cookies are used to authenticate users.
   • Influencing the processes and performance of using the website — cookies are used to ensure the website operates smoothly and to allow the use of available features, partly by remembering settings between visits. This helps users navigate the website and its various pages efficiently.
   • Session state — cookies often store information about how visitors use the website, such as which pages are most frequently viewed. They also help identify errors on some pages. Cookies used to save the so-called “session state” thus help improve services and enhance browsing comfort.
   • Maintaining session status — if a client logs into their panel, cookies enable the session to be maintained.
   • Creating statistics — cookies are used to analyze how users use the website (how many people open the website, how long they stay, which content is most interesting, etc.). This information helps continually improve the website and tailor its operation to user preferences. To track activity and create statistics, we use Google tools like Google Analytics; in addition to reporting website usage statistics, the Google Analytics tracking pixel can also be used, along with some of the cookies described above, to help display more relevant content to the user in Google services (e.g., in the Google search engine) and across the web.
3. Importantly, many cookies are anonymized for us — without additional information, we cannot identify your identity based on them alone.
4. Your web browser by default allows the use of cookies on your device, so during your first visit, we ask for your consent to use cookies. However, if you do not wish to use cookies while browsing the website, you can change the settings in your web browser — either completely block the automatic handling of cookies or request notification each time cookies are placed on your device. Settings can be changed at any time.
5. Respecting the autonomy of everyone using the website, we feel obliged to warn that disabling or limiting the handling of cookies may cause quite serious difficulties in using the website, such as longer page loading times.

§ V

Recipients of personal data

1. Like most businesses, in our operations, we rely on the assistance of other entities, which often involves the need to share personal data. Therefore, when necessary, we transfer your personal data to the following recipients:
   • Entities providing us with legal, tax, and accounting assistance;
   • Entities involved in payment processing (banks, payment institutions);
   • Entities engaged in postal and courier activities.
2. Additionally, it may happen that, based on a relevant legal provision or decision of the appropriate authority, we will also need to transfer your personal data to other entities, whether public or private. We analyze each case of data sharing request with due diligence to ensure that no information is given to unauthorized persons.

§ VI

Transfer of personal data to third countries

1. Your personal data is not transferred outside the European Economic Area.

§ VII

Period of processing personal data

1. In accordance with applicable laws, we process your personal data for the period necessary to achieve the designated purpose. After this period, your personal data will be irreversibly deleted or destroyed.
2. Regarding specific periods of personal data processing, we kindly inform you that personal data is processed for the duration of:
   • The contract — in relation to personal data processed for the purpose of concluding and performing the contract;
   • Until the expiration of any claims — for data collected for legally justified interests pursued by the administrator, no longer than 6 years;
   • Until the expiration of obligations arising from legal regulations, particularly tax law, no longer than 5 years;
   • Until the data becomes outdated or loses its usefulness, but no longer than 5 years — in relation to personal data processed mainly for the purposes of using cookies and managing the website;
   • One year in relation to personal data that was collected in connection with sending an offer, where no contract was concluded;
3. In the event that you exercise your right to be forgotten, such situations are considered on a case-by-case basis.
4. Periods in years are counted from the end of the year in which we began processing the personal data.

§ VIII

Information on the rights available

1. We kindly inform you that you have the following rights regarding your personal data:
   • The right to access your data and receive a copy of it;
   • The right to rectification (correction) of your personal data;
   • The right to request the deletion of your data;
   • The right to restrict processing – you may request that we limit the processing of your personal data to storage or to perform agreed actions only if you believe we have incorrect data or are processing it without justification;
   • The right to object to data processing;
   • The right to data portability;
   • The right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office, if you believe that the processing of your personal data violates the law;
   • The right to withdraw consent to the processing of personal data.
2. To exercise your rights, please direct your request to:
   • E-Mail: [email protected]
   • tel.: +48 68 419 94 50
3. Before implementing the aforementioned rights, we will need to properly identify you to ensure who is the sender of the request.

§ IX

Automated decision-making and profiling

We kindly inform you that we do not engage in automated decision-making, including profiling. The content of inquiries sent via the contact form is not evaluated by any computer system.

§ X

Information on the voluntary provision of data

Providing your personal data is voluntary. However, in order to facilitate the conclusion and execution of a contract, providing personal data is necessary.

§ XI

Appropriate application

The rules established in this document apply appropriately to the personal data of your customers/contractors, to which the Administrator has gained access in the course of providing services in accordance with the Agreement. However, it should be noted that you are responsible for addressing this issue in the contracts you enter into with your customers/contractors.

§ XII

Final provisions

1. In areas not regulated by this Privacy Policy, the provisions concerning the protection of personal data apply.
2. In the event of disputes, the Polish version of this document shall prevail.  
3. This Privacy Policy is effective from April 8, 2024.

Privacy Policy and Cookies PolicyCREHLER Sp. z o.0.
From the day of 08.04.2024

[1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).