Privacy and cookie policy

1. General provisions

 

1.1. This Privacy and Cookies Policy (the “Policy”) provides information about the processing of personal data of natural persons (the “Users”) who use the website located at www.profim.pl (the “Website”).

1.2. The aim of this Privacy Policy is to enable the Users to become familiar with the actions taken by the controller with respect to personal data obtained through or by means of the Website, as well as the Users' rights and the rules of using cookies.

2. Data controller

 

The controller of personal data, i.e. the entity responsible for their processing in accordance with the law is the company under the business name: Flokk sp. z o.o. with its registered office in Turek, address: ul. Górnicza 8, 62-700 Turek, entered into the National Court Register under KRS number 0000132487, holding NIP [tax identification number]: 6680000366, phone: +48 63 278 51 81, e-mail: profim@flokk.com, which owns the Website (hereinafter referred to as the “Controller” or “Flokk”).

3. data protection officer

 

We have appointed a data protection officer. It is a person you can contact in all matters relating to the processing of personal data.

 

You can contact the officer in the following manner:

 

  • in writing to the address: ul. Górnicza 8, 62-700 Turek, with a note “Data Protection Officer”,
  • via e-mail to the following address: profim@flokk.com ,
  • by phone at: +48 63 278 51 81.

4. Scope of personal data processing

 

4.1. The Controller processes personal data of the Users for the following purposes:

 

  • in order to respond to a message sent via the contact form:
    e-mail address, name, and content of such a message,
  • in order to respond to message sent via e-mail or by phone:
    contact details and the content of such a message,
  • in order to send commercial information as part of the Newsletter service ordered by the User:
    e-mail address, name, IP address and information about the time of subscription.

 

4.2. In order to use the services provided electronically, the Controller also processes Internet identifiers: Users' IP addresses and cookie identifiers, as well as User’s device and geolocation data. IP addresses are logged in the so-called server log files. At the end of each visit, the IP address contained in these data is immediately anonymised as soon as the recording for the purpose of maintaining the functionality of the particular website is no longer necessary.

5. Purposes and grounds for personal data processing

 

5.1. The Controller processes Users' personal data for the purposes related to the functioning of the Website, depending on the services which you use as its User:

 

  • User service
    We process data in order to respond to a message sent via the contact form, received by e-mail or by phone - in this regard, the legal basis for processing of personal data is our legitimate interest. Providing personal data is voluntary, although necessary to respond to the received message.
  • Newsletter service subscription
    We process data in order to send commercial information as part of the Newsletter service ordered by the User, including information about promotions and changes to the offer, as well as other marketing information regarding our goods and services - the basis for processing of your personal data is the consent granted by you, as well as our legitimate interest - within the scope of direct marketing of our goods and services. Providing your personal data is voluntary, although necessary to send you, at your request, information regarding promotions and changes to our offer as well as other marketing information regarding our goods and services.
  • notification regarding personal data protection
    We process data in order to handle your notification regarding personal data protection - in this regard, the legal basis for processing of your personal data is the performance of our legal obligation to handle your notification regarding personal data protection. Providing personal data is voluntary, although necessary to handle the notification.

6. Transfer of personal data

 

  • technical service providers,
  • suppliers and service providers of IT tools,
  • hosting companies,
  • advisers, law firms,
  • in the case of sending marketing information - also to entities providing us with tools to send marketing information and to advertising agencies and other entities cooperating in conducting advertising campaigns.

 

In other respects, we do not transfer any of your personal data to third parties, except if we are obliged to transfer the data at the authorized request of the authorities on the basis and in the manner prescribed by generally applicable law.

7. Cookies and other technologies

 

7.1. Our website, like almost all other websites, uses cookies. Accepting cookies is not a prerequisite for using the Website. Please be advised, however, that some functionalities may be limited if cookies are not accepted. When you first visit the website, you will see information about the use of cookies. Thanks to a special tool you have the possibility to manage cookies from the level of the website. Furthermore, you can always change the cookie settings in your browser or delete cookies altogether. Browsers manage cookie settings in different ways. You will find explanations on how to change your cookie settings in the help menu of your browser.

 

7.2. Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone), which can be read by our ICT system (first-party cookies) or by third party ICT system (third-party cookies). We use first-party cookies to ensure that the website works properly.

 

7.3. There are two types of cookies:

 

  • session cookies which are deleted when the User closes the browser,
  • persistent cookies which are stored for an extended period of time or permanently. These cookies allow us to tailor our Website to preferences of the User.

 

7.4. As part of our services, we use three categories of cookies:

 

  • essential (functional) cookies: these cookies are necessary to ensure optimal navigation and operation of the Website (e.g. faster loading of the Website), to save User data and settings so that they do not need to be re-entered, and to adapt the Website to individual User preferences. Without the essential cookies, the use of the Website is impossible or possible only to a limited extent.
  • statistics cookies:these cookies are necessary to analyse the use of the Website by the Users (e.g. to determine which areas of the Website are used in which way, as well as how quickly the Website content is loaded and whether any errors occur). These cookies contain only anonymous or pseudonymous information and are only used to optimise the Website, collect data on User preferences and measure the effectiveness of advertising. Statistics cookies can be blocked, which does not result in any disruption of the navigation and use of the Website.
  • marketing cookies:these cookies are necessary to adapt personalized advertising to the User preferences (retargeting), to repeat advertising messages to the Users who have visited the Website (remarketing) and to study the preferences of groups or individual Users. Marketing cookies can be blocked, which does not result in disruption of the navigation and use of the Website. However, personalization of advertisements will not be available.

7.5. The Website stores http requests directed to the Controller's server. The viewed resources are identified by url addresses. A detailed list of data stored in web server log files includes:

 

  • public IP address of the computer from which the request was received (e.g. User's computer),
  • client station name - identification via http protocol, if possible,
  • username provided in the authorisation process,
  • time of receiving the request,
  • first line of the http request,
  • http response code,
  • number of bytes sent by the server,
  • url of a website previously visited by the User (the so-called referer link) - if the Website was visited via a link,
  • information about the User’s browser,
  • information about errors which occurred during the execution of http transactions.

 

7.6. The data mentioned above in point 7.5. are not used to identify specific persons, with the exception of the Users to the extent to which they use the functionalities of the Website.

 

7.7. Log files are stored by Flokk for the time necessary to administer the Website. Flokk also uses log files for statistical purposes, whereas the generated statistics do not contain any identifying characteristics of the person visiting the Website and may be stored for a period of 26 months.

 

7.8. Furthermore, the Website uses cookies in the following way:

 

  • Google Analytics: We use the Google Analytics tool. We perform activities in this area based on our legitimate interest, consisting of the creation of statistics and their analysis in order to optimize the operation of the Website. Google Analytics automatically collects information about your use of the Website. The information collected in this way is usually transferred to a Google server in the United States and stored there. Google Analytics uses “cookie” technology to evaluate the use of the Website, to enable the Website to analyse the sources of traffic and how visitors use the Website. Google collects on its servers the data generated by the placement of cookies on the devices and uses this information to create reports and provide other services related to the traffic and use of the Internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. However, according to Flokk's instructions, the User's IP address is anonymised (masked). The IP address anonymization feature available in Analytics inserts zeros in place of the last octet of the User's IP address using IPv4 and in place of the last 80 bits of IPv6 addresses shortly after those addresses are sent to Google Analytics. These data are never combined with data provided via the use of contact forms available on the Website. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and anonymised there. The User can prevent the Website from logging data via Google Analytics if the plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en is downloaded and installed. If you are interested in the details related to the processing of data within Google Analytics, read the explanation prepared by Google at: https://support.google.com/analytics/answer/6004245.
  • Facebook pixel:We use marketing tools available as part of Facebook.  As part of these tools, we target you with ads on Facebook. We do this based on our legitimate interest in marketing of our own products or services. The Facebook pixel automatically collects information about your use of our Website in terms of the pages you view. The information collected in this way is usually transferred to a Facebook server in the United States and stored there. Facebook may use cookies, web beacons and similar technologies to collect or receive information from the website and use it to provide measurement services and ad targeting. It is important that the information collected as part of this service is anonymous, i.e. it does not allow us to identify you. We only know what actions you have taken on our Website. However, we wish to point out that Facebook may combine this information with other information about you collected through your use of Facebook and use it for its own purposes, including marketing. Such actions by Facebook are not dependent on us and you can look for information about them directly in Facebook's privacy policy at: https://www.facebook.com/privacy/explanation. You can also manage your privacy settings from your Facebook account. As part of the cookie settings available on our Website, you can decide whether you consent to our use of the Facebook pixel. You can disable the collection and use of information about these cookies to support ad targeting. The mechanism enabling Users to make a choice is located at the following link: http://www.aboutads.info/choices http://www.youronlinechoices.eu/
  • Facebook, Instagram, YouTube, Pinterest social plugins: Our Website uses social plugins provided by social networking sites such as: Facebook, Instagram, YouTube, Pinterest. After setting up a company profile on a social networking site, Flokk receives statistical data about the profile. The use of these features may involve the use of cookies from social networking site administrators. When viewing our website, your browser will establish a direct connection to the servers of the social networking site administrators. The content of the plugin is transmitted by the respective administrator directly to your browser and integrated into the website. Thanks to this integration, the administrator of the social networking site receives information that your browser has displayed our page. Such information (together with your IP address) is sent by your browser directly to the server of the respective social networking site administrator and stored there. If you have logged into one of the social networking sites, the administrator of that site will be able to associate your visit to our website with your profile on that social networking site. If you do not want social networking sites to associate the data collected during your visit to our Website directly to your profile on a given social networking site, you must log out of that social network before visiting our Website. You can also completely prevent plugins from loading on the Website by using the appropriate extensions for your browser, such as script blocking.

8. Duration of storage of personal data

 

8.1. We will store your personal data for as long as necessary for the purposes set out in this Policy, in particular to fulfil our contractual and statutory obligations. We may keep them for other purposes insofar as the law permits us to do so, including for the purpose of defending our rights or asserting claims, however maximum up to the expiry of the statute of limitations period.

 

8.2. With respect to data obtained in connection with the use of the contact form in the Contact tab or through other forms of contact available on the Website or this Policy, we will store personal data for the period necessary to respond or carry our correspondence, but no longer than for a period of 12 months.

 

8.3. With regard to data obtained through the Newsletter, we store these data until you cancel this service.

 

8.4.  We also store personal data for the period necessary to perform and demonstrate our compliance with legal obligations in order to allow public authorities to verify their fulfilment.

 

9. Safety of personal data processing

 

9.1. Flokk's aim is to ensure the protection of personal data of Users who use the Website.

 

9.2. Flokk ensures that personal data of Users are secure by applying appropriate technical and organisational measures aimed at preventing accidental or unlawful destruction, loss, modification, unauthorised disclosure or unauthorised access to personal data transmitted, stored or otherwise processed.

 

9.3. The Website uses encrypted data transmission (SSL).

 

10. Processing personal data of children

 

The Website is addressed to persons who are at least 16 years old. Accordingly, Flokk does not knowingly process personal data of children under the age of 16.

11. Rights connected with processing of your personal data

 

11.1. You have the right to access your personal data at any time. In addition, you can request rectification, erasure, as well as restriction of processing of your personal data.

 

11.2. In the case of data you have provided to us based on your consent and which we will process using IT systems, you have the right to receive them from us in a structured, machine-readable format or request us to send them directly to another controller.

 

11.3. If you have given your consent to the processing of personal data, you may revoke it at any time. Revocation of consent will not affect the lawfulness of the processing which was carried out on the basis of your consent prior to its revocation.

 

11.4. You also have the right to lodge a complaint with the President of the Office for Personal Data Protection if you believe that the processing of your personal data violates the law.

12. Objection to processing of your personal data

 

12.1. If we process your personal data on the basis of our legitimate interest, you have the right to object to the processing of your personal data - on grounds relating to your specific situation.

 

12.2. Furthermore, where we process your data for direct marketing purposes, you also have the right to object at any time to such processing, including profiling if it is related to such direct marketing.

13. Automated decision making and profiling

 

Users' personal data may be processed by automated means - we may use profiling to assess certain information about Users, including to analyse or forecast preferences relating to use of the Website, but this will not have any legal effect or similarly will not materially affect Users.

14. Transfer of personal data to third countries or international organizations

 

We will not transfer your personal data to countries outside the European Economic Area (third countries) or to international organisations.

15. Final provisions

 

15.1. The rules set out in the Policy have been drawn up in accordance with and are compliant with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC and the Act of 10 May 2018 on personal data protection (hereinafter referred to as the GDPR).

 

15.2. The Controller reserves the right to change the Privacy Policy.

 

15.3. In case of any questions or doubts related to the processing of personal data, feel free to contact us. We also ask you to e-mail us if you wish to exercise your right to information or data erasure or other data protection rights under Articles 15-22 of the GDPR, including revoking your consent to the use of your data for marketing purposes, unsubscribing from the Newsletter, etc.