Privacy policy Relopack Sp. z o.o.

I

[Content of the administrator's privacy policy]

1. Administrator's privacy policy is information concerning the processing of personal data and other information relating to users of the website www.relopack.com (hereinafter the "Site").

2. RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

3. Personal data controller/Administrator - the person or entity that (alone or jointly with other controllers) determines for what purpose and how it will process personal data;

4. Personal data - information which identifies/or makes it possible to identify an individual, in particular: name, address, telephone number, e-mail address, date of birth, VAT ID, PESEL, etc;

5. Processing of personal data - activities involving personal data, in particular: collecting, recording, organising, structuring, storing, retrieving, viewing, using, sharing, deleting, destroying, etc;

II

[Data Controller]

1. The administrator of the personal data of the users of the Site is Relopack sp. z o.o. (hereinafter: Relopack) Dworcowa 20, 62-002 Chludowo, entered in the National Register of Entrepreneurs under KRS no.: 0000971839, NIP 7773268530.

2. For matters relating to the processing of your personal data, including your rights in relation thereto, you can contact as follows:

   1. at the mailing address: Relopack

   2. at email address: __________

   3. By telephone: _______________

III

[Purposes, legal basis and duration of data processing].

1. In connection with its business activities, Relopack processes the data of subjects,
   with whom it has a business relationship, as well as the data of their employees
   and co-workers, data of persons transferred in the context of the execution of orders and contracts, data of persons contacted by means of distance communication (telephone, e-mail).

2. The purpose of Relopack's processing of personal data is:
   2.1. conclusion and performance of contracts (legal basis for processing - Article 6(1)(b) RODO);

   2. establishment and investigation of possible claims by Relopack or defence against claims raised against Relopack (legal basis for processing - Article 6(1)(f) RODO);

   3. fulfilment of tax and accounting obligations (legal basis for processing - Article 6(1)(c) RODO);

   4. implementation of promotional and marketing activities (legal basis for processing - Article 6(1)(a) RODO);

   5. safeguarding the information for archival/evidence purposes in the event of a legal need to prove certain circumstances arising from the stored information, which is Relopack's legitimate interest (legal basis: Article 6(1)(f) RODO, as well as legal provisions obliging the storage of documents and other media containing personal data);

3. The provision of data is voluntary, however Relopack stipulates that in certain situations the provision of data may be necessary to conclude and perform a contract, respond to an enquiry, conduct correspondence, fulfil legal obligations. The withdrawal of consent does not affect the legality of data processing until the consent is withdrawn. 

IV

[Data retention period]

1. Relopack processes personal data for as long as is necessary to achieve the purpose of the processing. Relopack applies the principle of retention limitation, which protects personal data from being processed for an unlimited period of time.

2. When the purpose of the processing has been achieved, Relopack deletes or anonymises the data. Exceptions arę situations where storage of data is indispensableępursuant to theętually obligedązująthat the provisionów.

3. Relopack deletes or anonymises data in particular when:

   1. the statute of limitations for possible claims will have run;

   2. the legal deadlines (e.g. the Accounting Act) will have expired;

   3. the data subject withdraws consent to the processing of personal data (this applies to cases where consent was the basis for processing);

   4. the data subject successfully objects to further processing (where the basis of the processing was the legitimate interest of Relopack as Controller).

V

[Recipients of user data]

1. Relopack only discloses users' personal data to processors under concluded personal data processing entrustment agreements for the purpose of providing services to the controller, e.g. hosting and maintenance of the Site, IT services, marketing and PR services, legal and consultancy services.

2. Personal data processed by Relopack in connection with the business relationship may be transferred to the following categories of entities:

   1. to subcontractors, contractors within the scope of the cooperation only for the purpose and to the extent necessary for the fulfilment of the rights and obligations arising from the cooperation;

   2. to public authorities in cases provided for by law.

VI

[Transmission of personal data to third countries]

1. Where appropriate grounds exist, Relopack may transfer personal data to entities in the European Economic Area (EEA).

2. Relopack may transfer personal data to a third country (outside the EEA) if it guarantees at least as much data protection as in Poland. In practice, such a guarantee is that the country in question has been recognised by the European Commission as providing adequate protection.
   In the event of a transfer of data outside the EEA, Relopack will take appropriate steps to ensure data protection, in particular by using contractual clauses that have been approved by the European Commission.

VII

[Rights of personal data subjects].

1. Every data subject has the right:

   1. access - to obtain confirmation from the controller as to whether his or her personal data are being processed. If data about a person is processed, he or she is entitled to access and obtain the following information: the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the data have been or will be disclosed, the duration of data retention or the criteria for determining it, the data subject's right to request rectification, erasure or restriction of the processing of personal data and to object to such processing (Article 15 RODO);

   2. to obtain a copy of the data - to obtain a copy of the data undergoing processing, the first copy being free of charge and for subsequent copies the controller may charge a reasonable fee based on administrative costs (Article 15(3) RODO);

   3. to rectification - to request the rectification of personal data concerning him/her which is inaccurate or the completion of incomplete data (Article 16 RODO);

   4. to erasure - to request the erasure of her personal data where the controller no longer has a legal basis for the processing or the data are no longer necessary for the purposes of the processing (Article 17 RODO);

   5. to restrict processing - request the restriction of processing of personal data (Article 18 RODO) when:

1. the data subject questions the accuracy of the personal data, for a period allowing the controller to verify the accuracy of the data,

2. the processing is unlawful and the data subject objects to the erasure by requesting a restriction of use,

3. the controller no longer needs the data, but they are needed by the data subject to establish, assert or defend a claim,

4. the data subject has objected to the processing - until it is established whether the legitimate grounds on the part of the controller override the grounds of the data subject's objection;

1. 1. to data portability - to receive in a structured, commonly used, machine-readable format the personal data concerning him or her which he or she has provided to the controller, and to request that these data be sent to another controller where the data are processed on the basis of the data subject's consent or a contract with him or her and where the data are processed by automated means (Article 20 RODO);

   2. to object - to object to the processing of his/her personal data for the legitimate purposes of the controller on grounds relating to his/her particular situation, including profiling. The controller shall then assess the existence of valid legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of claims. If, according to the assessment, the interests of the data subject outweigh the interests of the controller, the controller will be obliged to cease processing for these purposes (Article 21 RODO);

   3. to withdraw consent at any time and without giving any reason, but the processing of personal data carried out prior to the withdrawal of consent will continue to be lawful. Withdrawal of consent will result in the controller ceasing to process the personal data for the purpose for which the consent was given.

2. In order to exercise the aforementioned rights, the data subject should contact, using the contact details provided, the controller and inform him/her of which right and to what extent he/she wishes to exercise it.

VIII

[President of the Office for the Protection of Personal Data].

The data subject has the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Office for the Protection of Personal Data with its seat in Warsaw, ul. Stawki 2, who can be contacted as follows:

1. by post: ul. Stawki 2, 00-193 Warsaw;

2. via the electronic mailbox available on the website: https://www.uodo.gov.pl/pl/p/kontakt;

3. by telephone: (22) 531 03 00.

IX

[Privacy policy changes]

1. The privacy policy may be supplemented or updated according to the current needs of the administrator in order to provide up-to-date and reliable information to users regarding their personal data and information. Users will be notified of any changes to the privacy policy on the Site.

X

[Cookie Policy]

1. Cookies are small text files that are stored on your computer or smartphone when you view our website. There are different types of cookies. We divide them into two groups:

1. necessary for the use of our website.

2. other.

2. The cookies that are necessary for the use of our website are used, among other things, to ensure the stability of the website (they measure traffic, protecting us against traffic congestion), to remember your selected privacy preferences, to fill in the online forms provided by us, to save the contents of your shopping cart and to monitor your login status. We use these cookies by default, i.e. we store them on your computer or smartphone when you access our website (pursuant to Article 173 (3) of the Telecommunications Act).

3. We only use other cookies if you have expressed us to do so (Analytical cookies - our website uses cookies provided by the name of the analytical cookie provider. Analytical cookies allow us to track the number and sources of visits so that we can measure and improve the performance of our website, Marketing cookies - we use these cookies to personalise the content that is displayed to you. Marketing cookies may be used in our advertising campaigns that are run on third party websites. If you consent to the use of marketing cookies, you may receive information about the websites of our trusted partners where you have responded to our advertising).

4. During your visit to our website, a banner will be displayed to inform you that it uses cookies. If you select the "Allow all" option, this will mean that you accept all cookies that are placed on our website and confirm that you have read the information about cookies and the purposes for which they are used, as well as when data collected with the help of cookies is shared with our partners.

5. Please note that your consent is not required for essential cookies, as cookies of this kind ensure the full and uninterrupted functioning of our website. These cookies are exempt from the requirement to obtain your consent in accordance with Section 173 (3) of the Telecommunications Act.

6. If you do not want our cookies to be stored on your device, you can select the "Reject all" option. By selecting this option you will reject all but the technically necessary cookies that we use on our website. Please note that blocking all cookies may result in difficulties in operation or completely prevent you from using some of the website's functionalities.

7. As some of the cookies we use constitute personal data we want to inform you that the provisions of our Privacy Policy apply to them.

We reserve the right to change this cookie policy at any time. Any changes to the cookie policy will be published on www.