Privacy Policy

1. GENERAL INFORMATION

The information contained in this privacy policy pertains to data processing by the administrator:

NATAN PLAST Spółka z ograniczoną odpowiedzialnością, Nowy Dwór 4, 43-410 Zebrzydowice

tel.: +(48) 32 411 06 55

e-mail: natan@natanplast.pl

Contact with the Administrator is possible via e-mail: natan@natanplast.pl or by correspondence to NATAN PLAST Spółka z ograniczoną odpowiedzialnością, ul. Nowy Dwór 4, 43-410 Zebrzydowice. The Administrator has appointed a Data Protection Officer, who can be contacted via e-mail: natan@natanplast.pl for any matter concerning the processing of personal data.

2. DEFINITIONS

1. Administrator – NATAN Spółka z ograniczoną odpowiedzialnością with its registered office in Zebrzydowice;
2. Personal data – all information about an identified or identifiable natural person through one or more specific factors defining physical, physiological, genetic, mental, economic, cultural, or social identity, including device IP, location data, online identifier, and information collected via cookies and other similar technologies.
3. Policy – this Privacy Policy.
4. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
5. Service – the website operated by the Administrator at natanplast.pl

1.6. User – any natural person visiting the Service or using one or more services or functionalities described in the Policy.

3. DATA PROCESSING IN CONNECTION WITH THE USE OF THE SERVICE

In connection with the User’s use of the Service, the Administrator collects data to the extent necessary for the provision of individual offered services, as well as information about the User’s activity on the Service.

1. When visiting the Service

When displaying our Service, the browser used on your device automatically sends information to our website server. The following information is collected without your involvement and stored until automatic deletion:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the downloaded file,
• the website from which access is made,
• the browser used and, if necessary, the operating system on your computer, as well as
• your name

1. when registering for our newsletter

If you have given your explicit consent in accordance with Art. 6 para. 1 GDPR, we will use your e-mail address to send you our newsletter. To receive the newsletter, it is sufficient to provide an e-mail address. Unsubscription is possible at any time, for example, via the link at the end of each newsletter. Alternatively, you can also send an e-mail request for unsubscription to natan@natan.com.pl

1. contact via e-mail

For any questions, we offer you the possibility to contact us via the e-mail addresses provided on the website. It is necessary to provide a valid e-mail address so that you can send us an e-mail, and we know who sent the inquiry and can respond to it. Other information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 lit. a GDPR based on your voluntarily given consent. Personal data collected through contacting us via e-mail will be automatically deleted after your request has been processed.

4. PURPOSES AND LEGAL BASES FOR DATA PROCESSING IN THE SERVICE

The personal data of all persons using the Service are processed by the Administrator:

• for the purpose of providing electronic services in the scope of making content collected in the Service available to Users, purchasing products, including purchases made without registration in the Service, handling product complaints – the legal basis

for processing is the necessity of processing for the performance of a contract (Art. 6 para. 1 lit. b GDPR);

• for analytical and statistical purposes – in which case the legal basis for processing is the legitimate interest of the Administrator (Art. 6 para. 1 lit. f GDPR) consisting of conducting analyses of User activity and their preferences to improve the functionalities used and services provided;
• for marketing purposes of the Administrator and other entities;
• for the purpose of possible establishment and assertion of claims or defense against them – the legal basis for processing is the legitimate interest of the Administrator (Art. 6 para. 1 lit. f GDPR) consisting of protecting its rights.

5. PLACING ORDERS

Placing an order (purchase of goods) by a User of the Service involves the processing of their personal data. Providing data marked as mandatory is required for accepting and processing the order, and failure to provide it will result in its non-fulfillment. Providing other data is optional. Personal data are processed:

• for the purpose of fulfilling the placed order – the legal basis for processing is the necessity of processing for the performance of a contract (Art. 6 para. 1 lit. b GDPR); for data provided optionally, the legal basis for processing is consent (Art. 6 para. 1 lit. a GDPR);
• for the purpose of fulfilling statutory obligations incumbent on the Administrator, resulting in particular from tax regulations and accounting regulations

– the legal basis for processing is a legal obligation (Art. 6 para. 1 lit. c GDPR);

• for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Administrator (Art. 6 para. 1 lit. f GDPR) consisting of conducting analyses of User activity on the Service and their purchasing preferences to improve the functionalities used;
• for the purpose of possible establishment and assertion of claims or defense against them – the legal basis for processing is the legitimate interest of the Administrator (Art. 6 para. 1 lit. f GDPR) consisting of protecting its rights.

6. MARKETING

The Administrator processes Users’ personal data for marketing activities, which may include:

• sending e-mail notifications about interesting offers or content, which in some cases contain commercial information;
• conducting other types of direct marketing activities for goods and services (sending commercial information electronically and telemarketing activities).

To carry out marketing activities, the Administrator in some cases uses profiling. This means that, through automated data processing, the Administrator assesses selected factors concerning natural persons to analyze their behavior or create a future forecast.

7. SOCIAL MEDIA

The Administrator processes the personal data of Users visiting the Administrator’s profiles on social media (Facebook). This data is processed solely in connection with maintaining the profile, including for the purpose of informing Users about the Administrator’s activities and promoting products, as well as for communication with users via functionalities available on social media. The legal basis for the Administrator’s processing of personal data for this purpose is its legitimate interest (Art. 6 para. 1 lit. f GDPR) consisting of promoting its own brand and building and maintaining a community associated with the brand.

8. PERIOD OF PERSONAL DATA PROCESSING

The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, data are processed for the duration of the service provision or order fulfillment, until the expressed consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the legitimate interest of the Administrator. The data processing period may be extended if processing is necessary for the establishment and assertion of possible claims or defense against them, and after this period only if and to the extent required by law. After the processing period, the data are irreversibly deleted or anonymized.

9. USER RIGHTS

The User has the following rights:

1. Right to information about personal data processing – pursuant to Art. 15 GDPR, the User may request information about personal data processed by the Administrator; In particular, you may request information regarding the purposes of processing, categories of personal data, planned retention period, the existence of the right to rectification, erasure, restriction of processing or objection, the existence of the right to lodge a complaint;
2. Right to rectification – pursuant to Art. 16 GDPR, the User may request immediate correction (rectification) of incorrect data or completion of personal data stored by the Administrator;
3. Right to obtain a copy of data – on this basis, the Administrator provides a copy of the processed data concerning the person making the request;

4. Right to erasure of data – pursuant to Art. 17 GDPR, the User may request the erasure of personal data stored by the Administrator, the processing of which is no longer necessary for any of the purposes for which they were collected;
5. Right to restriction of processing – pursuant to Art. 18 GDPR, the User may request the restriction of personal data processing if the User disputes the accuracy of their data, the processing is unlawful, but you do not wish for them to be erased, and we no longer need this data, but you still need it for the establishment, exercise, or defense of legal claims in accordance with Art. 21 GDPR, or if you have objected to processing in accordance with Art. 21 GDPR;
6. Right to data portability – pursuant to Art. 20 GDPR, the User may receive their personal data, which the User has provided, in a structured, commonly used, and machine-readable format or may request the transmission of personal data to another administrator;
7. Right to withdraw consent – pursuant to Art. 7 para. 3 GDPR, the User may withdraw the consent given to the Administrator for the processing of personal data;
8. Right to lodge a complaint – if it is considered that the processing of personal data violates the provisions of the GDPR or other provisions regarding personal data protection, the data subject may lodge a complaint with the President of the Personal Data Protection Office.

10. RECIPIENTS OF DATA

1. In connection with the provision of services, personal data will be disclosed to external entities, including in particular providers responsible for IT system maintenance, entities such as banks and payment operators, entities providing accounting, legal, audit, consulting services, couriers (in connection with order fulfillment), marketing agencies (in the scope of marketing services).
2. If the User’s consent is obtained, their data may also be made available to other entities for their own purposes, including marketing purposes.

• The Administrator reserves the right to disclose selected information concerning the User to appropriate authorities or third parties who request such information, based on an appropriate legal basis and in accordance with applicable law.

11. CHANGES TO THE PRIVACY POLICY

The Administrator undertakes to regularly review and update this Privacy Policy.