Privacy policy

Definitions

Administrator – Amazepack, Kochanowskiego 5, 66-530 Drezdenko.
Personal data – all information about a natural person identified or identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, internet identifier and information collected through cookies and other similar technology.
Policy – this Privacy Policy.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
Website – the website operated by the Administrator at https://amazepack.pl.
User – any natural person visiting the Website.

Data processing

In connection with the User’s use of the Website, the Administrator collects data to the extent necessary for the functioning of the Website, as well as information about the User’s activity on the Website.

Purposes of data processing

Personal data of all persons using the Website (including IP address or other identifiers and information collected through cookies or other similar technologies) are processed by the Administrator. Data is processed for the purpose of providing services electronically in the scope of making available to Users the content collected on the Website, providing contact forms (the legal basis for processing is the necessity of processing for the performance of the contract – Article 6(1)(b) of GDPR). Data is processed for analytical and statistical purposes (the legal basis for processing is the legitimate interest of the Administrator consisting of conducting analyses of Users’ activities, as well as their preferences in order to improve the applied functionalities and provided services – Article 6(1)(f) GDPR). The data is processed for the purpose of possibly establishing and asserting claims or defending against them (the legal basis for the processing is the legitimate interest of the Administrator consisting in the protection of their rights – Article 6(1)(f) of GDPR). The data is processed when correspondence sent to the Administrator by email or post is not related to the services provided to the sender or any other contract concluded with the sender (the legal basis for the processing is the Administrator’s legitimate interest of Article 6(1)(f) of GDPR, consisting of correspondence addressed to the Administrator in connection with the business activity conducted). The data is processed for the Administrator’s marketing purposes. The Administrator processes Users’ personal data in order to carry out marketing activities, which may consist in:

displaying marketing content to the User which is not tailored to the User’s preferences. The Administrator processes the Users’ personal data for marketing purposes in connection with directing contextual advertising to the Users (i.e. advertising that is not tailored to the User’s preferences) – the processing of personal data is then carried out in connection with the Administrator’s legitimate interest (Article 6(1)(f) of GDPR).
displaying marketing content corresponding to the User’s interests, the Administrator processes the Users’ personal data, including personal data collected through cookies and other similar technologies, for marketing purposes in connection with directing behavioural advertising (i.e. advertising that is tailored to the User’s preferences) to the Users. The processing of personal data then also includes profiling of Users. The use of personal data collected through this technology for marketing purposes is based on the legitimate interest of the Administrator and only on the condition that the User has consented to the use of cookies. Consent to the use of cookies can be given through the appropriate configuration of the browser and can also be withdrawn at any time, in particular by clearing the history of cookies and disabling cookies in the browser settings. This consent can be withdrawn at any time. Read more about the cookie policy.
content, which in some cases contains commercial information, to carry out other activities related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).

Contact forms

The Administrator provides the possibility of being contacted through electronic contact forms. The use of the form requires the User to provide personal data necessary to contact the User and respond to the enquiry. The User may also provide other data in order to facilitate the contact or handling of the enquiry. The provision of data marked as mandatory is required in order to receive and handle the enquiry, and failure to provide such data will result in the lack of service. The provision of other data is voluntary. Personal data is processed:

for the purpose of identifying the sender and handling their enquiry sent via the form provided (the legal basis for the processing is the necessity of the processing for the performance of the service contract – Article 6(1)(b) of GDPR);

for analytical and statistical purposes (the legal basis for the processing is the Administrator’s legitimate interest in keeping statistics on enquiries made by Users via the Website in order to improve its functionality – Article 6(1)(f) of GDPR).

Social media

The Administrator processes the personal data of Users visiting the Administrator’s profiles maintained on social media (Facebook, YouTube, Instagram, LinkedIn, Twitter, Google +, Pinterest). This data is processed exclusively in connection with the running of the profile, including for the purpose of informing Users about the Administrator’s activities and promoting various types of events, services and products, as well as for the purpose of communicating with users through the functionalities available on social media (the legal basis for the Administrator’s processing of personal data for this purpose is its legitimate interest in Article 6(1)(f) of the GDPR, consisting of promoting its own brand and building and maintaining a brand-related community).

User rights

Data subjects have the following rights:

The right to be informed about the processing of personal data – on this basis, the Administrator shall provide the person making such request with information about the processing of personal data, including, in particular, the purposes and legal grounds for the processing, the scope of the data held, the entities to which the personal data are disclosed and the planned date of their erasure;
The right to obtain a copy of the data – on this basis the Administrator provides a copy of the processed data concerning the person making the request;
The right to rectification – on this basis, the Administrator removes any inconsistencies or errors regarding the processed personal data, and completes or updates them if they are incomplete or have changed;
The right to erasure – on this basis, one may request the erasure of data whose processing is no longer necessary for any of the purposes for which they were collected;
The right to restriction of processing – on this basis, the Administrator shall cease performing operations on personal data, with the exception of operations consented to by the data subject and their storage, in accordance with the adopted retention rules, or until the reasons for restriction of processing cease to exist (e.g. a decision of a supervisory authority authorising further processing is issued);
The right to transfer the data – on this basis, insofar as the data is processed in connection with a contract concluded or consent given, the Administrator shall issue the data provided by the data subject in a computer-readable format. It is also possible to request that the data be sent to another entity – provided, however, that there is the technical capacity to do so on the part of both the Administrator and the other entity;
The right to object to the processing for marketing purposes – the data subject may object at any time to the processing of personal data for marketing purposes, without having to justify such an objection;
The right to object to other purposes of processing – the data subject may object at any time to the processing of personal data on the basis of a legitimate interest of the Administrator (e.g. for analytical or statistical purposes or for reasons relating to the protection of property). An objection in this respect should contain a justification and is subject to the Administrator’s assessment;
The right to withdraw consent – if data is processed on the basis of consent, the data subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of that consent;
The right to complain – if the processing of personal data is considered to be in breach of the provisions of the GDPR or other data protection legislation, the data subject may lodge a complaint with the President of the Personal Data Protection Office

A request for the exercise of the rights of data subjects may be submitted:

in writing to the address: Amazepack, Kochanowskiego 5, 66-530 Drezdenko
using the contact form

The request should, as far as possible, indicate precisely what the request concerns, i.e. in particular:

which right the applicant wishes to exercise (e.g. right to obtain a copy of the data, right to erasure, etc.);
what processing the request relates to (e.g. use of a specific service, activity on a specific website, receipt of a newsletter containing commercial information to a specific email address, etc.);
which purposes of the processing the request relates to (e.g. marketing purposes, analytical purposes, etc.).

If the Administrator is unable to determine the content of the request or identify the applicant based on the notification made, the Administrator will request additional information from the applicant. Requests will be responded to within one month of receiving the request. If it is necessary to extend this deadline, the Administrator will inform the applicant of the reasons for the extension. The reply will be provided to the email address from which the application was sent and, in the case of applications sent by letter, by ordinary mail to the address indicated by the applicant, unless the content of the letter indicates a wish to receive feedback to the email address (in which case the e-mail address must be provided).

Recipients of personal data

Administrator only.

Security of personal data

The Administrator conducts a risk analysis on an ongoing basis to ensure that personal data is processed by the Administrator in a secure manner – ensuring, in particular, that only authorised persons have access to the data and only to the extent that this is necessary for their tasks. The Administrator shall ensure that all operations on personal data are recorded and carried out only by authorised employees and associates. The Administrator shall take all necessary measures to ensure that also its subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process personal data on behalf of the Administrator.

Contact details

Contact the Administrator using the contact form on the Website or via the mailing address of Amazepack, Kochanowskiego 5, 66-530 Drezdenko.

Change of privacy policy

The policy is reviewed on an ongoing basis and updated as necessary.