PERSONAL DATA PROTECTION POLICY "SEART B2B"

Privacy and cookies policy

PRIVACY POLICY

We hereby inform you that we process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("RODO"). Please see below for details.

I. Personal data controller

  1. The administrator of your personal data is Seart Group sp. z o.o. with its registered office in Kotlice, Kotlice 103, 26-020 Chmielnik, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Kielce, 10th Commercial Division of the National Court Register under no. 0001035186, NIP no.: 6572978750, REGON no.: 525261895, BDO no.: 000599432, with a share capital of PLN 200,000.(„Administrator”).

II. Contact details of the Administrator

  1. You can contact the Administrator by writing to:
    1. mailing address: Kotlice 103, 26-020 Chmielnik, Poland;
    2. e-mail address: rodo@seartgroup.com.

III. Purpose, legal basis, period, categories of data processed and information on the voluntariness of providing the data

  1. The purposes, legal basis, duration, categories of data processed, as well as whether the provision of data is voluntary and what are the possible consequences of not providing the data depend on the processing activities you undertake in the context of the activities carried out by the Controller
Data processing activity Categories of data processed Purpose and legal basis of data processing Planned data processing period Information on voluntary data provision
Visiting this website (the "Service").

*Usage data, which may include in particular the IP address, which is collected via cookies or other similar technologies.

*Data read from cookies or other similar technologies are not used to determine your identity

The Administrator processes your data for analytical and statistical purposes, in which case the legal basis for the processing is the Administrator's legitimate interest (Article 6(1)(f) RODO), consisting of conducting analyses of the activity of the Website's users, as well as their preferences, in order to improve the functionalities used and services provided.

The files remain on the user's device for the time specified in the parameters of the cookies or until they are manually deleted by the user.

The provision of data is not a statutory or contractual requirement or a condition for entering into a contract. The provision of data is voluntary, but without the provision of data, it will not be possible to carry out statistics and analyses of user behaviour on the Website.
Creating an account on the Service and logging into the account.
  • Creation of an account: identification data which may include, in particular: name and e-mail address;
  • Account login: identification data which may include in particular: e-mail address.
The Administrator processes your personal data for purposes related to the conclusion and performance of a contract for the provision of services by electronic means - if you are a party to the contract then the legal basis for processing is the necessity to perform the contract (Article 6(1)(b) RODO), if you are not a party to the contract but e.g. you represent it then the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting of the need to perform a contract for the provision of services by electronic means concluded with another entity. The controller will process your personal data until you delete your account or until you successfully object to the processing of your personal data (if your personal data is processed under Article 6(1)(f) of the DPA). The provision of data is voluntary, however, without the provision of data marked on the Website as required (or as appropriate) it will not be possible to set up an account.
Korzystanie z funkcji konta (np. schowka, książki adresowej, historii zakupów). Identification data which may include, in particular: name, e-mail address, telephone number address details, company (if applicable), TIN (if applicable). The Administrator processes your personal data for purposes related to the conclusion and performance of a contract for the provision of services by electronic means - if you are a party to the contract then the legal basis for processing is the necessity to perform the contract (Article 6(1)(b) RODO), if you are not a party to the contract but e.g. you represent it then the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting of the need to perform a contract for the provision of services by electronic means concluded with another entity. The controller will process your personal data until you delete your account or until you successfully object to the processing of your personal data (if your personal data is processed under Article 6(1)(f) of the DPA). The provision of data is voluntary, but without the provision of data marked on the Website as required (or as appropriate), it may not be possible to use individual functionalities.
Placing and processing orders, including via third-party portals (e.g. allegro.pl) Identifying information, which may include in particular: name, e-mail address, telephone number address details, company (if applicable), Tax ID (if applicable).

The Administrator processes your personal data for the purposes related to the conclusion and performance of a contract for the sale of goods or a contract for a specific work - if you are a party to the contract then the legal basis for the processing is the necessity to perform the contract (Article 6(1)(b) RODO), if you are not a party to the contract, but e.g. you represent it then the legal basis for the processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting of the need to perform a contract for the provision of electronic services concluded with another entity.

Your data may also be processed in order to comply with legal obligations, including tax and accounting obligations - in which case the legal basis for the processing is the necessity to comply with a legal obligation incumbent on the Controller (Article 6(1)(c) RODO).

Your data may also be processed for the purpose of possibly establishing, investigating or defending against claims - the legal basis for the processing is the Administrator's legitimate interest (Article 6(1)(f) RODO) in protecting your rights.

The Administrator will process your personal data for the period necessary to comply with the Administrator's legal obligations, until the expiry of the limitation period for claims concerning the performance of the contract or until you successfully object to the processing of your personal data (if your personal data is processed on the basis of Article 6(1)(f) RODO). The provision of data is voluntary, however, without the provision of data marked on the Website as required (or as appropriate) it may not be possible to fulfil the order placed.
Dealing with and dealing with complaints and enquiries directly related to the conclusion or performance of a sales contract, contract for work or contract for the provision of electronic services. Identification data, which may include in particular: name, e-mail address, telephone number address data, company (if applicable), TIN (if applicable), as well as data contained in the message addressed to the Administrator.

The controller processes your personal data for purposes related to the conclusion and performance of a contract for the sale of goods, a contract for work or a contract for the provision of electronically - if you are a party to the contract then the legal basis for processing is the necessity to perform the contract (Article 6(1)(b) RODO), if you are not a party to the contract but e.g. represent it then the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting of the need to perform the contract for the provision of services electronically concluded with another entity.

Your data may also be processed for the purpose of possibly establishing, investigating or defending against claims - the legal basis for the processing is the Administrator's legitimate interest (Article 6(1)(f) RODO) in protecting your rights.

The controller will process your personal data for the period necessary to resolve the complaint and for no longer than 3 months after the end of the complaint procedure for archiving purposes in case of the need to defend against possible claims or until you successfully object to the processing of your personal data (if your personal data is processed on the basis of Article 6(1)(f) RODO). The provision of data is voluntary, however, without the provision of data necessary to handle the complaint, it will not be possible to respond to the complaint.
Dealing with enquiries, including those submitted via the contact form, not directly related to the sales contract, contract for work or contract for the provision of electronic services Identification data may include, in particular: name, e-mail, telephone number.

The Administrator processes your personal data for the purposes of answering your question, in which case the legal basis for the processing is the Administrator's legitimate interest (Article 6(1)(f) RODO), consisting of conducting analyses of the activity of the Website's users, as well as their preferences, in order to improve the functionalities used and the services provided.

Your data may also be processed in order to process your request on the basis of Articles 15 - 22 RODO - in which case the legal basis for the processing is the necessity to fulfil a legal obligation incumbent on the Controller (Article 6(1)(c) RODO).

The controller will process your personal data for the period necessary to process your complaint, enquiry or request and for no longer than 3 months after the end of the complaint procedure or to respond to the enquiry/request (if necessary to defend against possible claims) or until you successfully object to the processing of your personal data (if your personal data is processed on the basis of Article 6(1)(f) of the RODO). Submission of data is voluntary, but without the data necessary to process the enquiry, it will not be possible to respond to the enquiry.
Posting of opinions, including via third-party portals. Identification data may include, in particular: e-mail address, as well as data contained in the opinion.

The Administrator processes your personal data for purposes related to the conclusion and performance of a contract for the provision of services by electronic means - if you are a party to the contract then the legal basis for processing is the necessity to perform the contract (Article 6(1)(b) RODO), if you are not a party to the contract but e.g. you represent it then the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting of the need to perform a contract for the provision of services by electronic means concluded with another entity.

Your data may also be processed in order to comply with legal obligations, including obligations under the Act on Counteracting Unfair Market Practices - in which case the legal basis for processing is the necessity to fulfil a legal obligation incumbent on the Administrator (Article 6(1)(c) RODO).

The controller will process your personal data until your opinion is deleted or until you successfully object to the processing of your personal data (if your personal data is processed on the basis of Article 6(1)(f) RODO). The submission of data is voluntary, however, without data marked on the Website as required (or as appropriate), the posting of an opinion is not possible.
Carrying out direct marketing of goods and services, including sending a newsletter (bulletin) Identification data may include, in particular: first name, last name, e-mail. The Administrator processes your personal data for the purpose of sending the newsletter as a marketing activity - in which case the legal basis for the processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting of carrying out marketing activities in connection with your consent to receive the newsletter (Article from Article 10 of the Act on the provision of electronic services or Article 172 of the Telecommunications Law). The controller will process your personal data for the period necessary to fulfil the purpose of the processing or until you successfully object to the processing of your personal data or until you withdraw your consent. The provision of data is voluntary, but without the provision of data marked on the Website as required (or as appropriate), it is not possible to carry out direct marketing of goods and services, including the sending of newsletters.
Maintenance of social media profiles and use of so-called "social plugins" on the portal *In connection with the above, Seart Group sp. z o.o. is a joint controller of personal data within the meaning of Article 26 RODO together with the providers of the individual social media sites. Details on the processing of personal data by the individual social network providers can be found here: Facebook, LinkedIn, Instagram, YouTube, Twitter, Pinterest. Identification data, which may include in particular: name, surname, image, as well as other data related to the use of the respective social media, including data contained in the message/comment.

The Administrator processes your personal data for the purpose of operating social media profiles - in that case, the legal basis for the processing is the Administrator's legitimate interest (Article 6(1)(f) RODO), consisting in particular of building and maintaining a community and for the purpose of communication through the available functionalities of a given social network (comments, messages, including event registrations).

The controller may also process your personal data for purposes related to the conclusion and performance of a contract for the sale of goods, a contract for work or a contract for the provision of electronic services - if you are a party to the contract then the legal basis for the processing is the necessity to take action prior to the conclusion of the contract at your request (Art. 6(1)(b) RODO), if you are not a party to the contract but e.g. represent it then the legal basis for the processing is the legitimate interest of the Administrator (art. 6(1)(f) RODO), consisting of the need to take action before concluding a contract with another entity.

The controller will process your personal data for the period necessary to fulfil the purpose of the processing or until you successfully object to the processing of your personal data. Submission of data is voluntary, however, without providing data we may not be able to fully fulfil the purposes of the processing, including being unable to take action to conclude a contract at your request.

IV. Source of personal data

  1. As a general rule, the Administrator obtains your personal data directly from you. Occasionally, however, depending on the specific activity related to the processing of your data, we may obtain your data from other sources (for example, from the entity on whose behalf you are acting or through cookies).

V. Recipients of personal data

  1. The categories of recipients of your personal data may vary depending on what activities you undertake in connection with the Administrator's business.
  2. The recipients of your personal data are entities that cooperate with the Controller in fulfilling the purposes of the processing set out in Section III above, including:
    1. IT service providers, including providers of IT tools and applications used in the Administrator's operations, such as e-mail, virtual disk and office applications or hosting service providers;
    2. .
    3. transport service providers;
    4. .
    5. Providers of services related to payment for goods;
    6. .
    7. courier and postal service providers.
    8. .
  3. Państwa dane osobowe mogą zostać także w określonych sytuacjach udostępnione podmiotom i organom upoważnionym do przetwarzania tych danych na podstawie przepisów prawa, w tym odpowiednim organom władzy państwowej.

VI. Transfer of personal data to a third country or international organisation

.
  1. The controller does not transfer and does not intend to transfer your data to third countries (i.e. countries outside the European Economic Area) or international organisations on its own. However, the specific nature of the operation and the transnational nature of the data flow means that it is potentially possible to transfer your data to third countries in connection with the transfer of data to the individual data recipients referred to in section V above.
  2. Your data may only be transferred to third countries or entities for which an adequacy decision has been adopted by the European Commission. In the absence of a decision by the European Commission declaring an adequate level of protection as specified in Article 45(3) RODO, your personal data may be transferred to a third country only on the basis of: binding corporate rules, standard data protection clauses adopted by the European Commission, standard data protection clauses adopted by the Polish supervisory authority and approved by the Commission, an approved code of conduct or an approved certification mechanism (Article 46 RODO). In the absence of a decision by the European Commission stating an adequate level of personal data protection on the basis of third country legislation or the lack of application of adequate legal safeguards, your personal data may be transferred to a third country on the basis of one of the grounds listed in Article 49(1) RODO, including in particular your express consent. You are entitled to obtain a copy of the personal data transferred to the third country.
  3. .

VII. Rights in relation to the processing of personal data

  1. In relation to the processing of your personal data by the Controller, you have the following rights:
    1. The right to access the personal data you have provided and to receive a copy of it, and the right to request its rectification, erasure or restriction of its processing;
    2. The right to data portability, i.e. to receive from the Controller the personal data you have provided in a structured, commonly used machine-readable format. You may also request the Controller to send this data to another controller of your personal data;
    3. the right to withdraw your consent, to the extent that the processing of your personal data is based on the consent you have given. Withdrawal of consent shall not affect the legality of processing performed on the basis of consent before its withdrawal;
    4. the right to object at any time to the processing of your personal data, to the extent that the processing of your personal data is based on the legally justified interest of the Administrator, including due to your particular situation;
    5. the right to lodge a complaint to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection with its registered office in Warsaw, ul. Stawki 2. The President of the Office for Personal Data Protection can be contacted as follows:
      1. by letter: ul. Stawki 2, 00-193 Warszawa;
      2. via the electronic mailbox available on the website:https://www.uodo.gov.pl/pl/p/kontakt
  2. In order to exercise your rights, you should contact the Administrator. The contact details of the Administrator are set out in section II above

VII. Automated decision-making

  1. The controller shall not make decisions towards you which are based solely on automated processing, including profiling, and which produce legal effects towards you or similarly significantly affect you.

COOKIE POLICY

I. Basic information about cookies

  1. As part of the activity of the Website, pursuant to Article 173 of the Act of 16 July 2004. Telecommunications Law, cookies are used, which are IT data, in particular text files stored on your terminal equipment. Cookies usually contain the name of the website they come from, the time they are stored on your terminal equipment and a unique number.
  2. Cookies are used for the following purposes in particular:
    1. utrzymania sesji użytkownika Serwisu (po zalogowaniu), dzięki której użytkownik nie musi na każdej podstronie Serwisu ponownie wpisywać loginu i hasła;
    2. adapting the content of the Website to your preferences and optimising the use of the Website; in particular, these files allow you to recognise your device and display the Website accordingly, adapting it to your needs and preferences;
    3. to compile statistics and analyses on the use of the Website.
  3. There are the following types of cookies:
    Types of cookies (breakdown by provider)

      own cookies

    • proprietary cookies are cookies belonging to the Site you are visiting, which store information about your activity on the Site;
    • external cookies

    • external cookies are cookies belonging to external service providers that are used to monitor your activity on various websites;
    Types of cookies (breakdown by storage period)

      session cookies

    • session cookies are temporary files, i.e. files that are stored on the user's terminal equipment until the session expires (e.g. when the user leaves the Website, deletes them or closes the browser).
    • permanent cookies

    • permanent cookies are files that are stored on the user's terminal equipment for the duration specified in the parameters of the cookies. However, the user can delete them beforehand
    Types of cookies (breakdown by purpose of use)

      essential cookies

    • essential cookies are those which enable the proper functioning of the Website;
    • functional cookies

    • Functional cookies are cookies that allow the Website to be tailored to the visitor's preferences;
    • statistical cookies

    • statistical cookies are cookies used for statistical and analytical purposes; they help to measure traffic on the Website and to understand how visitors use the Website, so as to improve its structure and content and detect abuse;
    • advertising cookies are cookies that collect information about a visitor to the Website in order to display personalised advertising to that visitor and to carry out other marketing activities, including on websites separate from the Website, such as social networks.

II. Detailed information on cookies

  1. As part of the Website, the Administrator uses IT tools provided by external entities. The use of these tools may involve the use of cookies from these entities.
  2. The Administrator indicates that the following IT tools provided by third parties are used on the Website:
    Name of the tool Tool supplier Detailed information
    Google Analitycs Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA, a w UE przez Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irlandia
    • The Administrator uses the Google Analytics tool, which collects anonymous information on a user's visits to the Website (including the sub-pages they have viewed, the time they have spent on the Website) in order to generate statistics on the functioning of the websites and to enable analysis of website activity.
    • The actions taken through the use of the Google Analytics code are based on the Administrator's legitimate interest in the creation and use of statistics, which then enables the improvement of the Administrator's services and the optimisation of the Site.
    • Google LLC is listed as a participant in the Data Privacy Framework(link: https://www.dataprivacyframework.gov/s/participant-search ), and therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data in accordance with the EU-US Data Privacy Framework.
    • You can read the detailed rules on data processing here:https://support.google.com/analytics#topic=3544906 .
    Google Ads Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA, a w UE przez Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irlandia
    • AThe operator uses Google AdWords to display its offer on Google's search engine and on sites that are part of Google's advertising network. Specifically, a user who types in a specific search term may see our advertising correlated to that term.
    • As part of Google AdWords, the Administrator analyses the effectiveness of advertisements published on Google websites, which allows the Administrator to better match the offer to users' expectations. When a user clicks on a banner ad published by Google, cookies are stored on the user's computer as part of AdWords. Only statistical information is obtained which serves to identify the banner ad.
    • Google LLC is listed as a participant in the Data Privacy Framework (link: https://www.dataprivacyframework.gov/s/participant-search ), and therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data in accordance with the EU-US Data Privacy Framework.
    • You can read the detailed rules on data processing here: https://policies.google.com/technologies/partner-sites.
    Google Tag Manager Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA, a w UE przez Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irlandia
    • The Administrator uses the Google Tag Manager tool to manage tags, i.e. small pieces of code, which allow the Administrator to control user traffic and behaviour, gather information on the effectiveness of advertisements and take action to improve our website.
    • Google LLC is listed as a participant in the Data Privacy Framework (link: https://www.dataprivacyframework.gov/s/participant-search ), and therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data in accordance with the EU-US Data Privacy Framework.
    • The detailed rules on data processing can be found here:
    Hotjar Hotjar Limited, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta
  3. The Administrator also indicates that the following cookies are used on the Website:
    Name Type of cookie (by purpose of use) Function Provider Storage time
    recently_viewed_product Necessary It stores the identifiers of the most recently viewed products for easy navigation. b2b.seartgroup.com 1 day
    recently_compared_product Necessary Stores the identifiers of the most recently compared products. b2b.seartgroup.com 1 day
    mage-messages Necessary It tracks error messages and other notifications displayed to the user, such as the cookie consent message and various error messages. The message is removed from the cookie when it is displayed to the shopper. b2b.seartgroup.com 1 day
    recently_viewed_product_previous Necessary Stores identifiers of recently viewed products to facilitate navigation. b2b.seartgroup.com 1 day
    recently_viewed_product Necessary It stores the identifiers of the most recently viewed products for easy navigation. b2b.seartgroup.com 1 day
    product_data_storage Necessary Stores the product data configuration associated with the most recently viewed / compared products. b2b.seartgroup.com 1 day
    PHPSESSID Necessary A cookie generated by PHP language-based applications. It is a general purpose identifier used to maintain user session variables. Usually a randomly generated number, the way it is used can be site specific, but a good example is maintaining the user's login status between pages. b2b.seartgroup.com 1 day
    mage-cache-sessid Necessary The value of this cookie triggers the clearing of the local cache. When the cookie is deleted by the backend application, the administrator clears the local cache and sets the value of the cookie to true. b2b.seartgroup.com 1 day
    recently_compared_product_previous Necessary Stores identifiers of previously compared products to facilitate navigation. b2b.seartgroup.com 1 day
    _ga_Y0B6E4QWL0 Performance This cookie is used by Google Analytics to store session status. b2b.seartgroup.com 395 days
    _ga Performance This cookie name is associated with Google Universal Analytics - which is a significant update to the commonly used Google analytics service. This cookie is used to distinguish between unique users by assigning a randomly generated number as a customer identifier. It is attached to every page request on the site and is used to calculate visitor, session and campaign data for site analytics reports. b2b.seartgroup.com 395 days
    form_key Functionality  This cookie is used to help cache content in the browser so that pages load faster. b2b.seartgroup.com 1 godzina
    mage-cache-storage-section-invalidation Functionality  This cookie is used to help cache content in the browser so that pages load faster. b2b.seartgroup.com 1 hour
    mage-cache-storage Functionality  This cookie is used to help cache content in the browser so that pages load faster. b2b.seartgroup.com 1 day
    _hjSessionUser_2786047 Unqualified Holds a random user id b2b.seartgroup.com 365 days
    _hjSession_2786047 Unqualified Holds a random session id. b2b.seartgroup.com 30 min
  4. Data read from cookies or other similar technologies is not used to determine your identity.
  5. The web browsing software (web browser) usually allows cookies to be stored on the User's terminal device by default. The extent of the information collected automatically depends on the User's browser settings. The User should check his/her browser settings to find out what information is made available by the browser automatically or to change these settings.
  6. Detailed information on how to change your browser settings regarding cookies and how to delete them can be obtained from the official website of the specific browser. In particular, the above information can be found at the following addresses:
    1. browser Firefox;
    2. browser Chrome;
    3. browser Microsoft Edge;
    4. browser Opera;
    5. browser Safari(na Macu);
    6. browser Safari(iPhonie, iPadzie iPodzie touch);
    7. browser Microsoft Edge.
  7. However, restrictions on the use of cookies may affect some of the functionality available on the Website.

Changes to the Privacy and Cookies Policy

  1. The Administrator reserves the right to update and modify this Privacy and Cookies Policy from time to time, in particular to reflect any changes in the way personal data is processed or changes in the law.