I. General provisions

1. the Privacy Policy specifies how Users’ personal data necessary for the provision of services electronically through the website [www.pf-company.pl] (hereinafter: Service) are collected, processed and stored.
(2) The Service collects only personal data necessary for the provision and development of the services offered therein.
(3) Personal data collected through the Service shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: RODO) and the Personal Data Protection Act of 10 May 2018.

II. Data controller

The administrator of the personal data collected through the Service is [ PF Company Sp. z o.o. 44C Kwiatowa Street, 55-093 Piecowice, email address: [[email protected]] (hereinafter: Administrator).

III. Purpose of personal data collection

(1) Personal data shall be used for the purposes of: communication with the User, sending a newsletter (after the User’s consent to receive it) account registration and verification of the User’s identity, marketing, remarketing, affiliation, personalization of the Service for Users, analytical and statistical activities, establishing and asserting claims or defending against them, promotion of the Administrator’s offer, enabling logging on to the Service, performance of the agreement concerning services and e-services, running a system of comments, providing social services, debt collection.

(2) Providing data is voluntary, but necessary to conclude an agreement or use other functionalities of the Website.

IV. Type of processed personal data

The Administrator may process the following personal data of the User: name and surname, date of birth, address of residence, e-mail address, telephone number, Tax Identification Number.

V. Period of processing of personal data

Users’ personal data will be processed for a period of time:
– when the basis of data processing is the performance of a contract – until the statute of limitations for claims after its performance,
– when the basis of data processing is consent – until its revocation, and after revocation of consent until the statute of limitations for claims.

In both cases, the statute of limitations is 6 years, and for claims for periodic benefits and claims relating to the conduct of business – 3 years (unless a special provision provides otherwise).

VI. Sharing of personal data

(1) Users’ personal data may be transferred to: entities affiliated with the Administrator, its subcontractors, entities cooperating with the Administrator, e.g. companies handling e-payments, companies providing courier/postal services, law firms.
(2) Users’ personal data will not be transferred outside the European Economic Area (EEA).

VII. Users’ Rights

(1) The User of the Service has the right to: access to the content of their personal data, rectification, deletion, restriction of processing, portability, to object to processing, to withdraw consent at any time (which does not affect the legality of processing carried out on the basis of consent before its withdrawal).
(2) Notification of the User’s assertion of the right under the said rights shall be sent to [email address].
(3) The Administrator shall comply or refuse to comply with the request immediately – within a maximum of one month of receipt.
(4) The User has the right to file a complaint with the President of the Office for Personal Data Protection if he/she considers that the processing violates his/her rights and freedoms (RODO).

VIII. Cookies

(1) The Service collects information through cookies – session cookies, permanent cookies and third-party cookies.
(2) The collection of cookies supports the correct provision of services on the Website and is used for statistical purposes.
(3) The user may determine the extent of access of cookies to his/her device in the browser settings.

IX. Automated decision-making and profiling

(1) Users’ data may not be processed in an automated manner so that any decisions regarding them could be made as a result.
(2) Users’ data may be profiled in order to adapt the content and personalization of the offer after their consent.

X. Final provisions

(1) The Administrator is entitled to make changes to the Privacy Policy, but the rights of Users will not be limited.
(2) Information about the changes will appear in the form of an announcement available on the Website.
(3) In matters not covered by the privacy policy.