Privacy policy
PPH Parys Sp. z o.o.
- PERSONAL DATA ADMINISTRATOR
The administrator of personal data, within the meaning of the regulations governing the protection of personal data, i.e.: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) is PPH PARYS Sp. z o. o. with its registered office in Lublin, at ul. A. Walentynowicz 1, 20-328 Lublin (hereinafter referred to as PPH PARYS Sp. z o.o. ), NIP 712-015-27-27, REGON 430040216, tel: sekretariat@parys.pl.
Personal data protection at PPH PARYS Sp. z o.o.
Personal data protection services are handled by the Pietrzyk Law Firm, 9 Turystyczna Street, 20-207 Lublin, e-mail address: iwona.jankowska@pietrzyk-bhp.com
- GENERAL INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA IN THE INFORMATION SYSTEM
Individuals visiting the websites of PPH PARYS Sp. z o.o. or using services provided by the company electronically (e.g., newsletters) have control over the personal data they provide to us. The services limit the collection and use of information about their users to the necessary minimum required to provide services to them at the desired level, in accordance with Article 18 of the Act of July 18, 2002, on the provision of electronic services (Journal of Laws of 2019, item 123, 730, as amended).
DISPLAYING OUR WEBSITE
When viewing our website on your end device, the browser, without your participation, sends to the server of our website and temporarily saves in the so-called log file:
– Internet-compatible device’s IP address on which the page is displayed
– Date and time of entry
– Name and URL address of the displayed file
– Page/application from which the entry occurred (URL address of the page)
– Your browser and, if applicable, the operating system of your Internet-connected computer, as well as the name of the Internet service provider
Why does this happen?
– To ensure an uninterrupted connection
– For comfortable use of our website
– For security and stability system analysis
Period of personal data storage:
Data is stored for the duration of the visit to the website. They are automatically deleted when the website is closed.
COOKIE POLICY
DEFINITION
Cookies (so-called “cookies”) are small text files whose textual content may contain various information about the User, including personal data in the form of the computer’s IP address and a unique device identifier stored in the file. Cookies are stored in the User’s device’s memory—they are not stored on servers. The content of these files is only read, accessing them during the User’s visit to the Service.
Cookies act as virtual keys to the door—they unlock the computer’s memory and allow the website to recognize Users returning to the site by opening the door to various content or services. Similar to a key, the cookie file itself does not contain information, but when analyzed by a specific browser, it can help the website improve the service provided.
PPH PARYS uses cookie technology and similar technologies collectively referred to as Cookies.
WE ONLY USE THE FOLLOWING COOKIES:
– Cookies used by Google Analytics for analytical purposes—more information about these cookies and how long they are stored on the user’s computer can be found at http://semahead.pl/blog/rola-cookies-w-google-analytics.html
– On pages where YouTube videos are embedded, cookies from this service are stored; detailed information can be found on the website https://policies.google.com/privacy?hl=pl#about
– On pages connected with Facebook, detailed information can be found on the website https://www.facebook.com/privacy/policies/cookies/?entry_point=cookie_policy_redirect&entry=0
In our marketing activities, we use services such as:
– YouTube
– TikTok
– Our own websites and those managed by PPH PARYS Sp. z o.o.
MANAGING COOKIES
Users can specify cookie settings on their device (including opting out of collecting cookies and deleting already collected cookies) by adjusting browser settings according to the instructions provided below.
If you encounter problems with setting up cookie acceptance blocking, Users can request assistance from the Marketing Department of PPH PARYS by sending an electronic inquiry to the email address:
CONSENT OR OBJECTION TO PLACING COOKIES
Browser settings
Users can also authorize, deny, or disable Cookies by changing browser settings. If Users disable Cookies already installed in the browser, these Cookies will no longer be active but will not disappear from the browser until the end of their lifespan.
Each browser is configured differently. Users should follow the instructions provided by the browser publisher. From the date of change of this Policy, these instructions are available for commonly used browsers through the following links:
– If you use Microsoft Edge: https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy
– If you use Internet Explorer: http://windows.microsoft.com/en-GB/windows-vista/Block-or-allow-cookies
– If you use Safari: https://support.apple.com/kb/ph21447?locale=en_US
– If you use Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
– If you use Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
If you use different devices, ensure that the settings of the respective browser are consistent with your preferences.
Note that blocking all Cookies may make some functionalities of the services unavailable to the User or may negatively impact the performance, efficiency, or customization of services or the website.
If the User does not refuse or disable Cookies using the above-mentioned options, they expressly consent to the collection, use, and sharing of personal data by PPH PARYS and the third-party websites listed above, subject to their privacy policies.
TYPES OF COOKIES:
Session or Persistent Cookies Session Cookies are created temporarily in the browser’s subfolder when visiting a website and are automatically deleted after leaving the website.
In contrast to session Cookies, persistent Cookies are reactivated when returning to the same website and remain in the browser’s subfolder until their expiration (each of them has a specified retention time—stored for a specific period after which it automatically expires).
Secure Cookies: Secure Cookies are a type of Cookies transmitted through encrypted HTTP connections. When setting Cookies, the Secure attribute instructs the browser that Cookies should only be returned to the application through encrypted connections.
Third-Party Cookies Third-party Cookies are Cookies placed on the hard drive by a website from a domain other than the one visited by the User (e.g., when the site contains content such as ads from another company’s domain). Third-party Cookies are set so that the website can remember something about the User later on. These Cookies are set by third parties, and we do not control how they are set.
SameSite Cookies SameSite Cookies allow servers to claim that Cookies should not be sent with cross-site requests, providing some protection against cross-site request forgery attacks. SameSite Cookies may not be supported by all browsers.
GENERAL RULES OF COOPERATION WITH SOCIAL MEDIA PROVIDERS
In light of the judgment of the Court of Justice of the European Union of June 5, 2018 (Case C-210/16) and July 29, 2019 (Case C-40/17), co-administrators of personal data for individuals using plugins and technologies of social media providers used in the Service and users of profiles of PPH PARYS Sp. z o.o. on these social media platforms are the providers of these portals.
Facebook and Instagram (Meta). In the case of cooperation between PPH PARYS Sp. z o.o. and the Facebook.com and Instagram.com portals, the co-administrator of User data is Meta Platforms Ireland Ltd (formerly: Facebook Ireland Ltd; “Facebook”).
The purpose and scope of data collection, as well as further processing and use by Facebook, and rights and privacy settings, can be found in Facebook’s privacy policy: https://www.facebook.com/policy.php
Because there is joint data administration of personal data in the cooperation between PPH PARYS Sp. z o.o. and Facebook, Users have the right to obtain an extract of the findings made by Facebook and PPH ARYS Sp. z o.o. regarding the conducted joint administration. The summary of the most important information is available at: https://www.facebook.com/legal/controller_addendum
TikTok Personal data of TikTok portal users are processed in cooperation with TikTok Technology Limited, an Irish company, and TikTok Information Technologies UK Limited, a British company (“TikTok”), entities jointly responsible for processing user personal data.
The purpose and scope of data collection, as well as further processing and use by TikTok, and rights and privacy settings, can be found in TikTok’s privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en
Because there is joint data administration of personal data in the cooperation between PPH PARYS Sp. z o.o. and TikTok, Users have the right to obtain an extract of the findings made by TikTok and PPH PARYS Sp. z o.o. regarding the conducted joint administration. The summary of the most important information is available at: https://ads.tiktok.com/i18n/official/article?aid=300871706948451871
YouTube (Google) YouTube is a service provided by Google. In the case of cooperation between PPH PARYS Sp. z o.o. and the YouTube.com portal, the entity jointly responsible for processing user personal data is Google Ireland Limited (“Google”).
The purpose and scope of data collection, as well as further processing and use by Google, and rights and privacy settings, can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=pl
LinkedIn In the case of cooperation between PPH PARYS Sp. z o.o. and the LinkedIn.com portal, LinkedIn Ireland Unlimited Company (“LinkedIn”) is the entity jointly responsible for processing user personal data.
The purpose and scope of data collection, as well as further processing and use by LinkedIn, and rights and privacy settings, can be found in LinkedIn’s privacy policy: https://pl.linkedin.com/legal/privacy-policy
Because there is joint data administration of personal data in the cooperation between PPH PARYS Sp. z o.o. and LinkedIn, you have the right to obtain an extract of the findings made by LinkedIn and PPH PARYS Sp. z o.o. regarding the conducted joint administration. The summary of the most important information is available at: https://legal.linkedin.com/pages-joint-controller-addendum
- AUTOMATIC PROCESSING OF PERSONAL DATA
- PPH PARYS Sp. z o.o. does not process personal data in an automated manner, including not profiling personal data.
WEBSITES MANAGED BY PPH PARYS Sp. z o.o.
In the case of processing personal data in connection with users’ use of the following websites:
- parys.pl
- sklep.parys.pl
- sonax-service.pl
- plak.pl
- prestone.pl
- druchema.pl
- http://parysjunior.pl/
CONTACT FORM/EMAIL ADDRESS/PHONE CONTACT
Purpose of Processing Personal Data and Legal Basis for Processing:
The personal data provided when using the contact forms with our company are necessary for the purpose of facilitating communication, and their scope is the minimum required to respond to inquiries or accept orders. We do not collect your data in excess.
Through:
- Contact form: We collect the following personal data – name, email address, phone number (optional).
- Email contact: We collect the following data – company name, name, email address, phone number (optional). Other voluntarily provided information that is not necessary is obtained with your consent at the time of input.
- Phone contact: We collect the following data – name, company name, email address, phone number (optional).
- Contest form: We collect the following data – name, email address, phone number.
The purpose of processing your personal data is our legitimate interest. The provided data is necessary to respond to your inquiries, express interest in collaboration, or arrange a meeting with our sales representative.
Legal basis for processing your personal data obtained through:
- Contact form, email contact, phone contact: The legal basis is Article 6(1)(f) of the GDPR.
- In the case of phone contact with a commercial offer, we are obligated to obtain your consent according to the Telecommunications Law of July 16, 2004 (Journal of Laws 2019, item 643, 730, 1030, as amended).
- Contest form: Consent is required for processing personal data for contest purposes, and consent is provided on the contest form.
Recipient of Personal Data:
The recipients of the data collected from you are only authorized employees of PPH PARYS Sp. z o.o. Disclosure of personal data to third parties is possible in the following situations:
- When required by legal regulations, we assert our rights.
- When using services of subcontracting companies. We do not disclose your personal data to third parties without your explicit consent.
Period for which Personal Data will be Stored / Criteria for Determining this Period:
Personal data is regularly verified to determine whether there is a basis for their storage in our system. The storage period depends on the circumstances under which they were obtained. If we do not have a legal basis for storing data, and it is not justified by our legitimate interest, then the data is promptly deleted when the purpose for which it was collected has been achieved.
NEWSLETTER
Purpose and Legal Basis for Processing Your Personal Data:
The purpose of collecting personal data when subscribing to the newsletter is to send it. If you subscribe to our newsletter by sending a one-time registration, we ask for your email address, which is necessary to fulfill your request.
The NEWSLETTER service is provided only at the customer’s request and can only be carried out with their consent. When you send a newsletter registration to us, your email address is saved in the mailing database for the purpose of sending the newsletter. The service is provided as long as you do not withdraw your consent. Withdrawal of consent is done by clicking the link at the bottom of the newsletter email with the title “Unsubscribe from the newsletter.”
The legal basis for processing data within the newsletter dispatch is your acceptance according to Article 6(1)(a) of the GDPR. Withdrawing consent results in the deletion of user data from our system.
Recipient of Personal Data:
The transfer of personal data to third parties is excluded.
Period for which Personal Data will be Stored / Criteria for Determining this Period:
If you withdraw your consent to receive the newsletter from PPH PARYS Sp. z o.o., your data will be removed from the relevant mailing lists. Please note that even after your objection is received, in exceptional cases, the dispatch of advertising materials may still occur.
CONTESTS
PPH PARYS Sp. z o.o. organizes various contests through social media platforms.
Purpose and Legal Basis for Processing Your Personal Data:
If a dedicated data protection document for a specific contest does not state otherwise or you have not given us explicit consent, personal data provided by you during participation in the contest is used solely for the purpose of conducting the contest (e.g., selecting winners, notifying winners, sending prizes). The legal basis for processing data in contests is Article 6(1)(b) of the GDPR. If you provided consent in the context of a contest, you have the right to withdraw this consent at any time.
The data collected, such as name, surname, or nickname, is sent, along with comments, to our marketing department as contest entries.
Recipient of Personal Data:
The transfer of personal data to third parties is excluded. Only the contest committee and our employee at PPH PARYS Sp. z o.o. handling entries have access to the data.
Period for which Personal Data will be Stored / Criteria for Determining this Period:
Contest entries from individuals who did not win any prizes but only participated in the contest are deleted when the contest is resolved. Personal data of winners is processed in accordance with our legal obligation under tax regulations and until the expiration of warranty claims for material prizes.
Processing of Personal Data for Advertising Purposes
Purpose of data processing / legal basis:
PPH PARYS Sp. o.o. organizes or participates in trade fairs, events, presentations, and product launches for promotional and marketing purposes. During such events, we often take photographs and share them on our social media accounts like Facebook or YouTube.
What data do we process during such photographs?
We process personal data in the form of images of individuals participating in the event.
Do we have the right to do this?
Yes, but we must adhere to certain rules and regulations.
The General Data Protection Regulation (GDPR) defines personal data as information related to an identified or identifiable person. A photographed person can be identifiable by people who know them personally. Therefore, just like names or email addresses, an image is considered personal data that allows the identification of a specific individual.
If the photos are published on the administrator’s website and other platforms or on a social media profile, obtaining consent for the use of the image is a required practice.
- TRANSFER OF DATA TO THIRD COUNTRIES
Information in connection with the CJEU judgment on Schrems II:
In specific situations, certain technical solutions provided may come from entities outside the European Economic Area (EEA), including the United States. This means that users’ personal data may be transferred to the countries where these providers are based, including the USA. Partners such as Google and Facebook declare ensuring an adequate level of protection for processed personal data through the adoption and application of EU standard contractual clauses, replacing the invalidated Privacy Shield by the judgment of the Court of Justice of the European Union (CJEU) on July 16, 2020, in the Schrems II case (Facebook Information, Google Information).
Detailed information about data transfer is available on the website Facebook Privacy Policy.
YOUTUBE
All necessary information about data transfer can be obtained on the Google Privacy Policy page.
All necessary information about data transfer can be obtained on the LinkedIn Privacy Policy page.
TIKTOK
All necessary information about data transfer can be obtained on the TikTok Privacy Policy page.
All necessary information about data transfer can be obtained on the Instagram Help Center page.
STATISTICAL ANALYSIS TOOLS
GOOGLE ANALYTICS
For the purpose of adapting the content of our websites to user preferences and their continuous optimization, based on Article 6(1)(f) of the GDPR, we use Google Analytics, an analytical service provided by Google Inc. The pseudonymous user profiles and cookies are created in this context. These cookies generate information about the use of this website, including:
- Browser type/version
- Operating system used
- URL of the previously visited page
- Hostname of the accessing computer (IP address)
- Time of the server request
This information is used for the analysis of the use of our websites, creating reports on website activity, and providing other services related to the use of websites and the Internet for market research purposes.
You can prevent the installation of cookies by adjusting your browser settings; however, please note that in this case, you may not be able to use all features of this website to their full extent. In addition, you can prevent the collection and processing of data generated by cookies related to your use of the website (including your IP address) by Google by downloading and installing the browser plugin available at www.support.google.com.
Recipient of data / categories of data recipients:
Information generated by cookies is sent to the Google server in the USA and stored there. In no case is your IP address associated with other Google data. This information is also transferred to third parties, as required by law or if third parties process this data on behalf of Google.
Period during which personal data will be stored / criteria for determining this period:
After anonymization of the IP address, its association with your person is no longer possible. Statistically processed data is deleted in Google Analytics after a maximum of 50 months. Reports based on Google Analytics do not contain any references to individuals.
SOCIAL MEDIA CHANNELS
PPH PARYS uses social media channels for marketing purposes.
For what purpose does PPH PARYS Sp. z o.o. use social media platforms?
- To advertise products distributed by the company.
- For self-promotion.
- To establish contact with customers interested in the company’s products.
- To promote products and present their capabilities.
Where are your personal data in all of this?
By entering our social media accounts, you have the opportunity to:
- Comment on our events, publications, videos.
- Establish contact with us, e.g., to inquire about a specific product, ask about properties and applications, or inquire about the nearest distribution point.
- Send us photos with your image for publication.
Legal basis for processing:
All of this happens under your Nickname or directly under your name. As PPH PARYS Sp. z o.o., we become the recipient of your personal data in the form of:
- Name and surname when asking questions or submitting entries to contests. If you provide more information in the message, such as your email address, we also become its owner. In this case, the provided data will be processed based on Article 6(1)(b) and in accordance with the General Data Protection Regulation.
- We do not process your personal data from posts and comments under videos, photos, and publications. We do not collect your personal data on our server.
Contact established through the Messenger application includes data such as:
- Your name and surname or Nick, depending on how you are logged into Facebook.
- Message content and other data that you provide voluntarily to fulfill your request.
- Such data is stored by the system until your request is resolved, after which it is permanently deleted from the system.
Rights related to the General Data Protection Regulation (GDPR):
If the relevant legal conditions are met, in addition to the right to revoke the consents given to us, you also have the following rights:
- Right to obtain information according to Article 15 GDPR:
- Purposes of processing personal data.
- Categories of processed personal data.
- Recipients or categories of recipients to whom your personal data has been or will still be disclosed.
- The planned period for which your personal data will be stored, and if specific information on this subject is not possible, criteria for determining the storage period.
- The right to correct or delete your personal data, the right to limit processing by the administrator, or the right to object to such processing.
- The right to file a complaint with the supervisory authority.
- All information about the origin of data if personal data is not collected from the person to whom it relates.
- The use of automated decision-making, including profiling according to Article 22(1) and (4) GDPR and, at least in these cases, meaningful information about the applied logic and the scope and intended consequences of such processing with respect to the person to whom the data relates.
- If personal data is transferred to a third country or international organization, you have the right to obtain information about the appropriate safeguards in accordance with Article 46 GDPR related to the transfer of data.
- Right to correction according to Article 16 GDPR:
- You have the right to demand the immediate correction of your incorrect personal data.
**RIGHT TO ERASURE OF DATA ACCORDING TO ARTICLE 17 GDPR**
You have the right to request the immediate deletion of your personal data from us if one of the following reasons applies:
- Personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for processing.
- You object to the processing pursuant to Article 21(1) or Article 21(2) GDPR, and there are no overriding legitimate grounds for processing, or you object to the processing in the context of direct marketing.
- Personal data has been processed unlawfully.
- Deletion of personal data is required to fulfill a legal obligation.
- Personal data has been collected in relation to the offer of information society services according to Article 8(1) GDPR.
If we have disclosed personal data, and we are obliged to delete it, taking into account available technology and implementation costs, we will take appropriate measures to inform third parties processing your data that you also request the deletion of all links to this personal data or copies or replications of this personal data.
**RIGHT TO RESTRICTION OF PROCESSING OF YOUR DATA ACCORDING TO ARTICLE 18 GDPR**
You have the right to request the restriction of processing from us if one of the following conditions is met:
- You contest the accuracy of your personal data.
- The processing is unlawful, and instead of erasure, you request the restriction of the use of personal data.
- We no longer need your personal data for the purposes for which it was processed, but you require the data for the establishment, exercise, or defense of legal claims.
- You have objected to processing pursuant to Article 21(1) GDPR, pending the verification of whether our legitimate grounds override those of yours.
**CONTACT IN CASE OF QUESTIONS OR TO EXERCISE YOUR DATA PROTECTION RIGHTS**
For questions regarding the processing of your personal data, please contact us at:
Email: sekretariat@parys.pl
or by mail to the address of the personal data administrator provided below with the note “Data Protection.”
**PERSONAL DATA SECURITY**
The administrator continuously conducts a risk analysis to ensure that personal data is processed securely, ensuring that only authorized persons have access to the data and only to the extent necessary for their tasks. The administrator ensures that operations on personal data are recorded and carried out only by authorized employees and collaborators.
The administrator takes all necessary actions to ensure that its subcontractors and other cooperating entities provide a guarantee of applying appropriate security measures whenever they process personal data on behalf of the administrator.
**RIGHT TO LODGE A COMPLAINT**
You also have the right to lodge a complaint with the relevant supervisory authority responsible for data protection:
Office of the President of the Personal Data Protection Office (PUODO)
- Stawki 2, 00-193 Warsaw
Phone: 22 860 70 86