At EST Poland, we are committed to protecting our customers’ personal data. This document will help you understand how we collect, manage and use their and their users’ personal data as part of our provision of our products and services to you.
The website administrator is European Security Trading Polska Sp. z. o.o. Taxpayer Identification Number 701-036-32-22 . Nowogrodzka 11, 00-513 Warsaw
If they have questions, questions or suggestions related to the document below – please contact us by e-mail at email@example.com.
- • The data operating by your parties as part of using the website will require personal data (setting up via the website, placing an order, subscribing to the newsletter, contact information (contact form, e-mail). We guarantee your confidentiality and security.
- We only work with trusted entities. It also applies to issues related to personal data. We entrust them only to proven and safe entities.
– Google Analytics analytical tools (collecting information about your visit to our website – time, subpages, etc.). For this purpose, we use Google LLC cookies,
– Marketing tools such as Facebook Pixel to target your advertisements. For this purpose, we use Facebook cookies,
– Google AdWords remarketing tools. For this purpose, we use Google LLC cookies,
– advertising tools – Google AdSense. For this purpose, we use Google LLC cookies,
– we place videos from YouTube on our website. Google LLC cookies are reproduced for their production,
– we enable the use of social media and the functions assigned to them, e.g. content sharing, profile subscription, etc. For this purpose, there are cookies for the administrators of these websites, including Facebook, Instagram, YouTube, Twitter, Google+, LinkedIn.
- We also use our own cookies to ensure the website functions properly.
The administrator of your personal data is European Security Trading Polska sp. z o.o. Taxpayer Identification Number 701-036-32-22 Nowogrodzka 11, 00-513 Warszawa.
The purposes, legal basis and period of personal data processinghave been indicated separately for each purpose of their processing (description of the individual purposes of personal data processing below).
The GDPR grants you the following potential rights related to the processing of your personal data:
- the right to access personal data,
- the right to rectify personal data,
- the right to delete personal data,
- the right to limit the processing of personal data,
- the right to object to the processing of personal data,
- the right to data portability,
- the right to lodge a complaint with a supervisory authority,
- the right to withdraw consent to the processing of personal data, if you have given such consent.
We encourage you to read the rules regarding the implementation of individual rights – art. 16-21 RODO. (Polish RODO). We feel obliged to inform you that the above rights are not absolute and do not apply to all personal data processing activities (except for the right to lodge a complaint with the supervisory authority). Taking care of your time, we have tried to indicate your rights in specific personal data processing operations.
As we have already mentioned, you always have one of the above rights – to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection. If, in your opinion, there was a breach of the provisions on their protection during the processing of personal data – you have the right to lodge a complaint.
We have made every effort to ensure that all issues relevant to you related to the processing of your personal data are included in this document. However, if you have any questions, doubts, etc. regarding this matter, please send a message to the address firstname.lastname@example.org. In addition, you can always contact us with a request to provide information about the data we hold about you and the purpose of its processing. In such a situation, please send a message to the address email@example.com.
We ensure the security and confidentiality of the personal data provided to us. We guarantee that we apply all security and personal data protection measures imposed by the provisions of the Personal Data Protection Act. We store and collect them with the utmost care and accuracy, and protect them against unauthorized access.
List of assignments:
We entrust the processing of your personal data to the following entities:
- Server owner – to store data on the server,
- WIZOKO Joanna Paterek-Michalska – in order to use IT support services, which are related to the possibility of the entity providing the services to obtain access to your personal data.
The entities responsible for the processing of your personal data guarantee the security of their processing and the use of appropriate measures for their protection required by law.
Processing purposes and activities:
Creating and having a user account.
In order to set up a user account, an e-mail address and a password are required. Their indication is voluntary, but necessary to create an account on the website. When editing a profile, the system will require more detailed data, such as name, surname, shipping address, contact telephone number. Their provision is voluntary, but necessary for the further implementation of the indicated activity (e.g. order fulfillment).
The data provided in this activity is processed in order to maintain the account and the possibility of using it. This process is to make it easier for you to place orders and contact the administrator.
The legal basis for the processing of personal data in the context of creating an account is Art. 6 sec. 1 letter b of the GDPR. The data
collected in the user’s account is processed as part of the website and stored on the server.
The period of data processing as part of the user’s account is the same as the period when you have this account. After its removal, the data will be deleted from the database (apart from information about placed orders, etc.).
You have access to your data processed as part of your account all the time by logging in to the user’s panel. After doing this, you have the option of modifying your data and deleting it at any time (apart from the data on submitted orders). You can also delete your account at any time,
Pursuant to Art. 20 GDPR (Polish RODO), you have the right to data portability in relation to the data stored in your account.
In order to complete the order placed, it is necessary to provide the personal data required for this purpose. Their application is voluntary, but necessary to complete the order.
The legal basis for the processing of personal data in the context of placing an order is Art. 6 sec. 1 letter b of the GDPR (Polish RODO), issuing an invoice and including it in accounting documents – Article 6 par. 1 letter c of the GDPR (Polish RODO), taking into account the invoice for archival and statistical purposes – art. 6 (1) (a) f GDPR (Polish RODO).
The data collected in the user’s account is processed as part of the website and stored on the server.
Having a user account, you can view your order in the order history.
Each order is documented with an invoice, which is then forwarded to the accounting office. In addition, the orders placed are collected in our internal database for statistical and archival purposes.
Information and data in connection with the order placed are processed for the period necessary for their implementation, and then until the expiry of the limitation of claims. In addition, after this time, we may store your order data for statistical purposes, and we are obliged to store invoices with your data for a period of 5 years from the end of the tax year in which the tax obligation arose.
In the context of order data, you cannot rectify them after the order has been processed. Until the expiry of the limitation period for claims under the contract, you may not object to the processing of data, or demand their removal. The situation is similar in the context of the data presented in the invoice. After the expiry of the limitation period for claims under the contract, you have the option to object to the processing of your personal data by us for statistical purposes, as well as to delete data from our database.
You also have the option of data portability – in accordance with art. 20 GDPR (Polish RODO).
Subscribing to the newsletter is possible after providing us with your e-mail address via the appropriate form.
The legal basis for the processing of data collected for this purpose is Art. 6 sec. 1 lit. a GDPR (Polish RODO).
The data is processed as part of the mailing system and stored on the server.
The period of data processing in the context of the newsletter is the same as the period of its functioning, unless you resign from receiving it earlier. Such resignation will delete your data from the database.
At the same time, we would like to inform you that you can correct your data stored in the newsletter database at any time, as well as request their removal – by resigning from receiving it.
Pursuant to Art. 20 GDPR (Polish RODO), you have the right to data portability.
Complaints and withdrawal from the contract.
When submitting a complaint or withdrawal from the contract, you provide us with the data contained in the content of the complaint or the declaration of withdrawal, respectively.
These data will be used to implement the complaint process or to withdraw from the contract in accordance with art. 6 (1) (c) of the GDPR (Polish RODO).
The period of their processing is the period necessary to complete the entire complaint / withdrawal procedure. Additionally, they can be archived for statistical purposes.
In the context of the data contained in the complaint / withdrawal from the contract, you are not able to rectify the data, object to their processing and request their removal until the expiry of the limitation period for claims under the contract. After this time, you can object to our processing of your data for statistical purposes and request the deletion of data from our database.
By contacting us via the contact form or by sending an e-mail, you provide us with your e-mail address and other data contained in the content.
In this case, your data is processed in order to establish contact with you, in accordance with Article 6 (1) (f) of the GDPR. a GDPR (Polish RODO), and initiating contact from you shall be deemed consent. The processing of data after the end of contact for the purposes of archiving correspondence is art. 6 sec. 1 lit. c GDPR (Polish RODO).
Regarding the content of the correspondence, we would like to inform you that it may be archived and we are not able to clearly define the period in which it will be deleted. You have the right to request the history of correspondence (if it has been archived), its removal (unless its archiving is justified by our overriding interests, e.g. defense against claims on your part).
Cookies and other tracking technologies
We distinguish between own and third party cookies.
Consent to cookies.
You can change cookie settings at any time from the level of your browser, and you can also delete them completely. However, it should be remembered that disabling them completely may disrupt the correct functionalities available on the website and make it difficult to use.
Our own cookies.
Using our own cookies, we can adjust the content of our website to your preferences and properly display the page tailored to your individual needs. In addition, they help us create statistics based on the behavior of website users and on their basis work on improving its content and structure.
Third party cookies.
Our website includes functionalities that are available thanks to functions provided by third parties. This is synonymous with the use of their cookies.
Google Analytics analytical tools (collecting information about your visit to our website – time, subpages, etc.) For this purpose, we use Google LLC cookies,
Marketing tools such as Facebook Pixel to target your advertisements. For this purpose, we use Facebook cookies,
– Google AdWords remarketing tools. For this purpose, we use Google LLC cookies,
HotJar tools that allow us to track your browsing behavior. For this purpose, HotJar cookies are used,
advertising tools – Google AdSense. For this purpose, we use Google LLC cookies,
we place videos from YouTube on our website. Google LLC cookies are reproduced for their production,
we enable the use of social media and the functions assigned to them, e.g. content sharing, profile subscription, etc. For this purpose, there are cookies for the administrators of these websites, including Facebook, Instagram, YouTube, Twitter, Google+, LinkedIN.
When using the website, a request is sent to the server. Each of them is saved in the server logs. They include, among others Your IP address, server date and time, browser and operating system information. These data are not associated with specific persons and are not used for your identification. They are only auxiliary material in the administration of the website. Their content is not made available to anyone except those authorized to administer the server.