English translation of the current Polish Privacy Policy. The Polish text at altilion.pl/politykaprywatnosci prevails in case of discrepancy.
1. General information. This Privacy Policy sets out the rules for processing and protecting personal data provided by users of the altilion.pl website.
2. The controller of personal data in the service is:
Auctionsb2b.com Michał Parchański, Marcin Parchański s.c., Beskidzka 18, 43-426 Dębowiec, NIP: 5482665573
3. To keep the data entrusted to us safe, we have internal procedures and guidelines intended to prevent disclosure to unauthorised persons. We monitor compliance with those rules and with the applicable law — the personal data protection act, the act on the provision of electronic services, and related implementing and EU law.
4. Personal data are processed on the basis of the user’s consent and in cases where the law allows the Controller to process personal data, or in order to perform a contract between the parties (Regulation (EU) 2016/679 of 27 April 2016 — GDPR).
5. The service collects information about users and their behaviour: a) information entered voluntarily in forms; b) cookies (see the cookie policy).
6. The service collects information given voluntarily by the user. Scope of data processed: first name and surname, telephone, e-mail address, residential address.
7. Data given in a form are processed on the basis of:
a) necessity to perform a contract or to take steps before concluding one (Article 6(1)(b) GDPR), separately for:
– the sale of products offered in the altilion.pl shop;
– order handling by the shop administrator;
b) consent (Article 6(1)(a) GDPR), for marketing of entities cooperating with the Controller;
c) data may be passed to processors acting on our instructions under contracts with the Controller, only for the purpose and to the extent needed to perform the above. For the altilion.pl shop these are the courier company and the payment operator imoje / ING Bank Śląski.
8. Personal data left in the service will not be sold or disclosed to third parties, in accordance with personal data protection law.
9. The natural person who entered data in a form has the right to access them. That person may also modify the data and stop their processing at any time.
10. Personal data are stored for as long as needed to complete the transaction in the shop and handle complaints, and are processed while the Customer has an account in our shop, for no longer than 10 years.
11. The user may at any time access and change their personal data.
12. The data subject has the right to request that the controller erase their personal data without undue delay, and the controller must erase them without undue delay where one of the following applies:
a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based and there is no other legal ground;
c) the data subject objects to processing and there are no overriding legitimate grounds, or objects to processing for direct marketing;
d) the personal data have been unlawfully processed;
e) the personal data must be erased to comply with a legal obligation under Union or Member State law;
f) the personal data were collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
13. Requests concerning personal data processing may be sent by e-mail to the controller.
14. The Controller may use profiling in the Shop for marketing (discount codes, product information, promotions), using available tools: order-history analysis and Google Analytics.
15. You have the right to lodge a complaint with the supervisory authority for personal data protection — the President of the Personal Data Protection Office (UODO).
If you have doubts about any part of this privacy policy, we are at your disposal — our details are in the Contact section.