Website: https://velezgroup.eu
For the Owner of this website, protecting Users’ personal data is of paramount importance. We make every effort to ensure Users feel safe when entrusting their personal data while using the website.
A “User” is a natural person, legal person, or organizational unit without legal personality to which the law grants legal capacity, using the electronic services available through the website.
This Privacy Policy explains the principles and scope of processing the User’s personal data, the rights afforded to the User, the obligations of the data controller, and informs about the use of cookies.
The Administrator applies modern technical measures and organizational solutions ensuring a high level of protection of processed personal data and security against access by unauthorized persons.
I. Personal Data Administrator
The personal data administrator is the entrepreneur Mr. Dawid Biedroń, conducting business under the company name F.H.U. VELEZ Dawid Biedroń, with its registered office at ul. Rynek 12, 34-700 Rabka Zdrój, Poland, Tax ID (NIP): 7352688269 (hereinafter referred to as the “Owner”).
II. Purpose of Personal Data Processing
- The Administrator processes the User’s personal data for the purpose of transmitting information about the offer and providing free newsletters containing information about the offer. Providing personal data is voluntary.
- The User may also consent to receiving information about news and promotions, in which case the Administrator will also process personal data for the purpose of sending the User commercial information concerning, among others, new products or services, promotions, or sales.
- Personal data are also processed in fulfilment of legal obligations incumbent on the data administrator and the performance of tasks in the public interest, including tasks related to security and defence or the maintenance of tax documentation.
- Personal data may also be processed for direct marketing of products, for securing and pursuing claims or defending against claims by the User or a third party, as well as for marketing of services and products of third parties or the Administrator’s own marketing not constituting direct marketing.
III. Type of Data
1. The Administrator processes the following personal data, the provision of which is necessary for the purposes described above:
Data provided by the User on an optional basis:
- date of birth;
- Tax Identification Number (NIP).
IV. Legal Basis for Processing Personal Data
- Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, p. 1–88, hereinafter referred to as “GDPR”.
- The Administrator processes personal data only after obtaining the User’s prior consent.
- Consent to the processing of personal data is entirely voluntary.
V. Rights Afforded to the User
- The User may at any time request from the Administrator information about the scope of processing of their personal data.
- The User may at any time request the correction or rectification of their personal data.
- The User may at any time withdraw their consent to the processing of their personal data without providing a reason. Such a request may concern a specific processing purpose indicated by the User, e.g. withdrawing consent to receive commercial information, or all purposes of data processing. Withdrawing consent for all purposes will result in the deletion of the User’s account from the website, together with all previously processed personal data. Withdrawal of consent does not affect actions already taken.
- The User may at any time request, without providing a reason, that the Administrator delete their data. Such a request does not affect actions already taken. Deletion of data means the simultaneous deletion of the User’s account, together with all data saved and processed by the Administrator.
- The User may at any time object to the processing of their personal data, either in respect of all personal data processed by the Administrator or only within a limited scope, e.g. regarding data processed for a specifically indicated purpose. An objection does not affect actions already taken. Filing an objection will result in the deletion of the User’s account, together with all data saved and processed by the Administrator.
- The User may request the restriction of personal data processing, either for a specified period or without a time limit but within a specified scope, which the Administrator is obliged to fulfil. Such a request does not affect actions already taken.
- The User may request that the Administrator transmit the User’s processed personal data to another entity. The User should submit a request to the Administrator indicating the entity (name, address) to which the personal data should be transmitted and which specific data the User wishes to be transmitted. After the User confirms this wish, the Administrator will transmit the User’s personal data electronically to the indicated entity. Confirmation by the User is necessary for the security of the User’s personal data and to obtain certainty that the request comes from an authorized person.
- The Administrator informs the User of the actions taken within one month of receiving any of the requests referred to above.
VI. Period of Personal Data Storage
- As a rule, personal data are stored only for as long as necessary to fulfil the contractual or statutory obligations for which they were collected. Such data will be deleted immediately once their storage is no longer necessary for evidentiary purposes under civil law or in connection with a statutory obligation to retain data.
- Information concerning a contract is stored for evidentiary purposes for a period of three years, beginning from the end of the year in which the business relationship with the User ended. Data will be deleted after the statutory limitation period for pursuing contractual claims expires.
- The Administrator may also retain archival information concerning completed transactions, as their storage relates to claims afforded to the User, e.g. under warranty.
- If no contract was concluded between the User and the Owner, the User’s personal data are stored until the User’s account on the website is deleted. Account deletion may occur as a result of a request submitted by the User, withdrawal of consent to data processing, or the filing of an objection to data processing.
VII. Entrusting Data Processing to Other Entities
- The Administrator may entrust the processing of personal data to entities cooperating with the Administrator, to the extent necessary for the execution of a transaction, e.g. for the purpose of preparing ordered goods and delivering shipments, or for transmitting commercial information from the Administrator (the latter applies to Users who have consented to receiving commercial information).
- Beyond the purposes indicated in this Privacy Policy, Users’ personal data will not be disclosed to third parties or transmitted to other entities for the purpose of sending marketing materials of such third parties.
- Users’ personal data collected via the website are not transferred outside the European Union.
- This Privacy Policy complies with the provisions resulting from Article 13(1) and (2) of the GDPR.
VIII. Cookies
- The website uses cookies or similar technology (hereinafter collectively referred to as “cookies”) to collect information about the User’s access to the website (e.g. via computer or smartphone) and the User’s preferences. They are used, among other things, for advertising and statistical purposes and to adapt the website to the User’s individual needs.
- Cookies are fragments of information containing a unique reference code that the website transmits to the User’s device for storage, and which sometimes track information concerning the device used. Usually they do not allow identification of the User. Their primary purpose is to better adapt the website to the User.
- Some cookies on the website are available only during a given internet session and expire once the browser is closed. Other cookies serve to remember the User so that, upon returning to the website, the User is recognized. Such cookies are stored for a longer period.
- Cookies used on this website include: Google Analytics, Meta Pixel, and Google Tag Manager.
- All cookies occurring on the website are set by the Administrator.
- All cookies used on this website comply with applicable European Union law.