Call us

Privacy Policy

This privacy policy specifies the rules of collecting, processing and using of personal data obtained by Zadrożni sp. z o.o. (hereinafter referred to as “the Controller”).

I. General information

Personal data collected by the Controller is processed in line with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general data protection regulation) hereinafter referred to as: “GDPR”.

The Controller shall make best efforts to protect the privacy and information entrusted to them, concerning their Customers.
Your personal data is processed manually and automatically.

The recipients of Goods or Services offered by Przedsiębiorstwo Drzewne Zadrożni Spółka Jawna, available also on the Web page, are not children below 16 years of age. The personal data controller does not plan to collect on purpose any data concerning children below 16 years of age.

II. Personal data

1. Personal data controller

In line with art. 13 of the GDPR, we hereby inform you that your personal data controller is:

Zadrożni sp. z o.o. with a registered office in Wielgolas, ul. Słoneczna 3, Wielgolas, 05-334 Latowicz,  entered in the register of entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw, 13th Commercial Division, under the number KRS: 0000768621, NIP: 8222374604, REGON: 382401355 (hereinafter referred to as “the Controller”).

To discuss the issues related to your personal data, you can contact the Data Controller by:

  • electronic mail: rodo@zadrozni.pl
  • traditional mail at: ul. Słoneczna 3, Wielgolas, 05-334 Latowicz

2. The purpose and legal basis of personal data processing

The personal data controller processes your personal data for the following purposes and within the following scope:

  • taking action prior to conclusion of the contract in association with an order placed or an inquiry made with regard to availability of Goods or Services, that is, your first name and surname, e-mail address, phone number, data provided for the purpose of completion of the order such as the shipping address, order status notification,
  • in order to enable you to get familiar with our Goods or Services in the online store, the data is collected automatically while you visit our Web pages, pertaining to these visits, by our server or web analytics software, your IP address, browser name, operating system, information on commencement, end and concerning every use of our Web pages and services
  • for the purpose of execution of an agreement for sale of Services or Goods (e.g., delivery of the Goods ordered), we process the personal data provided by you upon the purchase of the Goods, such as first name and surname, e-mail address, address data, payment data (NIP, REGON)
  • for the purpose of determination, pursuing and enforcement of claims and defense against claims in proceedings before courts and other enforcement authorities, we may process your personal data provided upon the purchase of the Goods or establishment of the Account, as well as other data necessary to prove the existence of the claim or based on a legal requirement, court order or any other legal procedure,
  • for the purpose of determination of complaints, claims and requests and in response to inquiries of Customers, we process the personal data provided by you in complaints, claims and requests, or in order to answer your questions asked in any other form, as well as data pertaining to orders of Goods and other Services rendered by us being the cause of a complaint, claim or request and data contained in documents attached to complaints, claims and requests;
  • on the basis of art. 6 section 1 letter f of the GDPR, that is, based on the necessity of processing for purposes based on legitimate interests of the Controller, consisting of offering of their Goods and Services to Customers and performance of agreements concluded with Customers.

3. Categories of personal data processed

The personal data controller processes the following categories of related personal data:

• contact data;
• data describing the Web service activity;
• order data;
• tax and business identification data and the current status in this regard;
• data concerning complaints, claims and requests;
• data to the extent, in which it is made available by public sources, that is, the Register of Entrepreneurs of the National Court Register (KRS), the Central Registration and Information on Business (CEIDG), registers of active VAT tax payers, maintained by the Ministry of Finance and the Central Statistical Office;

4. Voluntary provision of personal data

Provision of your personal data is voluntary and constitutes a prerequisite for performance of Services or sale of Goods by the Personal Data Controller.

5. The duration of data processing

Personal data will be processed for the period necessary for completion of orders,  performance of services and fulfillment of all obligations based on the legal provisions in force, including for evidence purposes, determination of complaints and claims related to the Goods or Services of the Controller, as well as in the period of fulfilling the statutory obligation to store the data for financial reporting and taxation purposes, however, no longer than for 6 years from the date of submission of an order or an inquiry.

6. Personal data recipients

We deliver your personal data to the following categories of recipients:

  • state authorities, e.g., the prosecutor’s office, the Police, the President of the Office for Personal Data Protection, the Head of the Office for Protection of Competition and Consumers, if we get a request from them,
  • external service providers, including, in particular, providers responsible for handling of the IT systems, the Web service operator, banks or payment operators, entities providing accounting, legal, audit, consulting services, providers of services related to handling of the order (e.g., carriers, couriers, mail operators).

7. Rights of the data subject

On the basis of the GDPR, you have the right to:

  • withdraw your consent for personal data processing;
  • claim access to your personal data,
  • demand rectification of your personal data;
  • demand removal of your personal data;
  • demand limiting of processing of your personal data;
  • object against personal data processing;
  • demand a transfer of your personal data.

The above rights can be exercised by contacting us via-email at rodo@zadrozni.pl or in writing to the address of the Controller: ul. Słoneczna 3, Wielgolas, 05-334 Latowicz.

The personal data controller shall, without an undue delay – in any case, within one month after they receive the demand – provide you with information on activity undertaken in association with your demand. If necessary, the one-month period can be extended by another two months due to the complex nature of the demand or the number of demands.

In any case, the Personal Data Controller will inform you of such extension within one month after receiving the demand, providing the cause of the delay.

The right to access your personal data (art. 15 of the GDPR)

You have the right to obtain information from your Personal Data Controller whether your personal data is being processed.

If the Controller processes your personal data, you have the right to:

  • access your personal data;
  • obtain information on the purposes of processing, the categories of personal data being processed, the recipients of categories of recipients of such data, the planned period of storage of your data or the criteria of determination of this period, of your rights based on the GDPR and the right to submit a complaint to a supervision authority, on the source of such data, on automated decision-making, including profiling and protection measures applied in association with transfer of such data outside the European Union;
  • obtain a copy of your personal data.

2) The right to rectify your personal data (art. 16 of the GDPR)

If your personal data is incorrect, you have the right to demand that the Controller rectifies your personal data immediately.

You also have the right to demand that the Controller complements your personal data.

3) The right to erase your personal data, the so-called “right to be forgotten” (art. 17 of the GDPR)

You have the right to demand that the personal data Controller erases your personal data if:

  • your personal data is no longer necessary for the purpose, for which it was collected or otherwise processed;
  • you have withdrawn your consent to the extent, in which the personal data was processed on the basis of your consent;
  • your personal data has been processed unlawfully;
  • wyou have submitted an objection against the processing of your personal data for the purpose of direct marketing, including profiling, to the extent, in which personal data processing is related to direct marketing;
  • you have objected against the processing of your personal data in association with processing necessary to perform a task in the public interest or processing necessary for the purposes based on legitimate interests pursued by the Personal Data Controller or a third party.

Despite submission of a demand to erase your personal data, the Personal Data Controller may keep processing your data to determine, pursue or seek defense against claims, of which you will be informed.

4) The right to submit a demand to limit the processing of your personal data (art. 18 of the GDPR)

• you question the correctness of your personal data – the Personal Data Controller will limit the processing of your personal  data for the time sufficient to verify the correctness of this data;
• when the processing of your personal data is unlawful, and instead of erasing of your personal data, you demand limiting of processing of your personal data;
• your personal data is no longer needed for the purposes of processing, but it is necessary for determination, pursuing or defense of your claims;
• when you have objected against the processing of your personal data – until determining whether the legitimate interests of the Personal Data Controller prevail over the basis provided in your objection.

5) The right to object against the processing of your personal data (art. 21 of the GDPR)

You have the right to object against the processing of your personal data, including profiling, at any time, due to:

• processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes based on legitimate interests of the Personal Data Controller or a third party;
• processing for the purpose of direct marketing.

6) The right to transfer your personal data (art. 20 of the GDPR)

You have the right to receive from the Personal Data Controller your personal data in a structured, widely used, machine-readable format and send it to another personal data controller.

You may also demand that the Personal Data Controller sends your personal data directly to another controller (if it is technically possible).

7) The right to withdraw your consent

You may withdraw your consent for the processing of your personal data at any time.

Withdrawal of the consent for processing of your personal data shall not influence the right to process the data on the basis of your consent prior to its withdrawal.

8) A complaint to the supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to submit a complaint to the supervisory authority, in particular, in the member state, in which you have the place of your ordinary residence, place of work or the place, in which the alleged violation took place.

In Poland, the supervisory authority as defined in the GDPR is the Head of the Office for Protection of Personal Data (PUODO) at the address: Warsaw (00-193) ul. Stawki 2.

III. Securing of personal data

The controller will exercise due care in the selection and application of the proper technical measure, including programming and organizational measures, to ensure the protection of the data processed, in particular the data against access by unauthorized persons, disclosure, loss and destruction, unauthorized modification, as well as processing that violates the existing legal provisions.

IV. Use of cookies

Cookie files constitute IT data, in particular, text files, which are stored in the service User’s end device and designated for the use of Web pages of the Service. They consist of the following components: names of the Web pages, from which they originate, the time of their storage on the end device and the unique number. The Web browser may store cookies on the computer disk. The cookie files contain information, which is necessary for the proper functioning of the Web Service. The cookie content does not allow for user identification. Cookies are not used for processing or storage of personal data of the Web Service users. The cookie mechanism is not used to obtain any user information. The aim of storage of cookies on user computers is to:

  • adapt the Web Service to the user needs;
  • save the user’s preferences and individual settings;
  • develop the statistics of use of the Web Service.
  • be used by advertising networks cooperating with us (Google Analytics)

V. Contact

Any additional questions concerning the Privacy Policy should be sent to the e-mail address rodo@zadrozni.pl or to the address of the Controller: ul. Słoneczna 3, Wielgolas, 05-334 Latowicz.

VI. Final provisions

1. The privacy policy comes into effect on 25 May 2018

2. The rules specified in the Privacy Policy are subject to the laws of Poland.

3. The Controller is authorized to amend the Privacy Policy unilaterally in the case of:w przypadku zaistnienia:

a) circumstances of Force Majeure,

b) amendment of the existing law provisions applicable to rendering of services via electronic means or remote execution of transactions,

c) any modification of the Web Service pertaining to the Goods or Services or a change of the product range published on the Web Service, provided that the amendments of the Privacy Policy are aimed at adapting the Privacy Policy to the product range and the associated conditions.

4. More information on cookies can be found at http://pl.wikipedia.org/wiki/Ciasteczko or in the “Help” section of the Web browser menu.