I General Provisions

1. This Privacy Policy defines the method of collecting, processing, and storing personal data necessary for the provision of electronic services via the website operating in the domain sekosa.pl (hereinafter: Website).
2. The administrator of the Users' personal data is  SEKO SPÓŁKA AKCYJNA with its registered office in Chojnice (registered office and delivery address: ul. Zakładowa 3, 89-620 Chojnice); entered into the Register of Entrepreneurs of the National Court Register under KRS number 0000255152; registry court where the company's documentation is kept: District Court Gdańsk – Północ in Gdańsk, VIII Commercial Division of the National Court Register; share capital: PLN 665,000; NIP: 5860102990; REGON: 190601172, e-mail address: rodo@sekosa.pl and contact telephone number: 52 510 81 40 (hereinafter: Administrator). 
3. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).
4. Data collected by the Administrator will be:
   1. processed lawfully,
   2. collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes,
   3. factually correct and adequate in relation to the purposes for which they are processed,
   4. stored for no longer than is necessary to achieve the purpose of processing.

II. Purpose, Scope, and Legal Basis of Data Processing

1. The Administrator processes personal data necessary for the provision and development of the services offered through the Website and its individual functionalities.
2. Personal data will be processed for the following purposes:
   1. preparation, conclusion, and execution of a contract (Article 6(1)(b) of the GDPR),
   2. communication with the User in order to provide them with the necessary information and build positive and reliable relationships, which constitutes the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR). For this purpose, data will be processed in the scope of: name, surname, e-mail address,
   3. promotion by the Administrator of their own products and/or services and those of their Partners by electronic means of marketing information (newsletter), provided that the User has consented to receive such information via e-mail, SMS, telephone, or notifications (Article 6(1)(a) of the GDPR). For this purpose, data will be processed in the scope of: e-mail address,
   4. analytical and statistical purposes based on the legitimate interest of the Administrator consisting in conducting verification of Users' activity and their preferences to optimize the services and products as well as the used functionalities of the Website (Article 6(1)(f) of the GDPR),
   5. compliance with legal obligations incumbent on the Administrator (Article 6(1)(c) of the GDPR),
   6. possible establishment, exercise, or defense of legal claims based on the legitimate interest of the Administrator consisting in protecting their rights (Article 6(1)(f) of the GDPR).
3. In each of the cases mentioned above (paragraph 2), providing data is voluntary, but necessary to conclude a contract or use other functionalities of the Website.
    

III. Period of Personal Data Processing

1. Personal data will be processed for the period during which the person remains an active User of the Website (holds a User account), and after that time for the period necessary to comply with the law, pursue or defend against potential claims, but no longer than 3 years calculated from the date of termination of the agreement for the provision of electronic services.
2. Data processed on the basis of marketing consent will be processed until such consent is withdrawn, provided that the withdrawal of this consent does not affect the lawfulness of processing based on consent before its withdrawal or until the purpose of processing ceases to exist.
    

IV. Information on Processing

1. Personal data, depending on the purpose of processing, may be disclosed to:
   1. entities affiliated with the Administrator,
   2. entities cooperating with the Administrator,
   3. subcontractors, in particular entities providing and maintaining selected IT systems and solutions,
   4. entities handling online payments,
   5. entities providing courier and postal services,
   6. law firms.
2. Personal data processed by the Administrator will not be transferred outside the European Economic Area or to international organizations.
    

V. Rights of Data Subjects

1. The Website User has the right to:
   1. access the content of their personal data,
   2. rectify the data,
   3. erase the data,
   4. restrict the processing of data,
   5. data portability,
   6. object to processing based on the legally justified interest of the administrator,
   7. withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
2. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing violates their rights and freedoms.
3. In the process of data processing, automated decision-making, including profiling, does not occur.
    

VI. Personal Data Protection

Taking into account the state of technological knowledge and the costs of implementation, the Administrator has implemented appropriate and reasonable technical and organizational security measures to store the collected personal data and maintain its confidentiality, as well as to protect it against unauthorized or unlawful disclosure or access, accidental loss, destruction, alteration, or damage.

 

 

VII. Final Provisions

1. The Administrator reserves the right to introduce changes to this Privacy Policy, while ensuring that the rights of Users resulting from this document will not be restricted.
2. The User will be informed about any changes to the Privacy Policy via a notice available on the Website.