Privacy Policy

For the Polish language version of this document please click here

§ 1

DEFINITIONS

  1. Administrator – Schupter sp. z o.o. with its registered office in Warsaw, 03-991 Warsaw, Poland, Jeziorowa 54B/1, entered in the Register of Entrepreneurs of the National Court Register kept under the National Court Register (KRS) number0001092770, whose registration files are kept by the District Court for the Capital City of Warsaw in Warsaw, XIV Economic Department of the National Court Register (KRS), NIP 9522253420, REGON 528018132, with share capital of 5 000,00PLN.
  2. Personal data – Personal data refers to information about an identified or identifiable natural person through one or several specific factors defining physical, physiological, genetic, mental, economic, cultural, or social identity, including device IP, location data, internet identifier, and information collected via cookies and other similar technology.
  3. Policy – Policy refers to this Privacy Policy.
  4. GDPR – GDPR refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
  5. Online Store – Online Store refers to the online store operated by the Administrator at the address: www.schuptercasting.com
  6. User – User refers to any natural person visiting the Online Store or using one or more of the services or functionalities described in the Policy.

§ 2
DATA PROCESSING IN CONNECTION WITH THE USE OF THE ONLINE STORE

  1. In connection with the User’s use of the Online Store, the Administrator collects data to the extent necessary to provide the individual services offered, as well as information about the User’s activity in the Online Store. Below are the detailed rules and purposes for processing Personal Data collected during the User’s use of the Online Store.


§ 3

PURPOSES AND LEGAL BASES FOR DATA PROCESSING IN THE ONLINE STORE – USE OF THE ONLINE STORE

  1. Personal Data of all individuals using the Online Store (including IP addresses or other identifiers and information collected via cookies or other similar technologies) are processed by the Administrator::
    1. for the purpose of providing electronic services in terms of making content available to Users in the Online Store – in this case, the legal basis for processing is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR),
    2. for the purpose of potentially establishing and pursuing claims or defending against claims – the legal basis for processing is the Administrator’s legitimate interest (Article 6(1)(f) GDPR), which involves the protection of its rights;
    3. for marketing purposes of the Administrator and other entities, in particular related to sending newsletters.
  2. Persons making purchases through the Online Store are asked to provide the data necessary to make the purchase. To facilitate service, the User may provide additional data, thereby consenting to their processing. Such data can be deleted at any time. Providing data marked as mandatory is required to make a purchase, and failure to provide such data will result in the inability to make a purchase. Providing other data is voluntary.
  3. If the User provides any Personal Data of other persons in the Online Store (including their name, address, phone number, or email address), they may do so only if it does not violate the law or the personal rights of those persons.
  4. PLACING AN ORDER (purchasing a product) by a User of the Online Store involves the processing of their Personal Data. Providing data marked as mandatory is required for the acceptance and handling of the order, and failure to provide such data will result in the order not being fulfilled. Providing other data is optional.
  5. Personal data is processed:
    1. for the purpose of fulfilling the placed order – the legal basis for processing is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR),
    2. for the purpose of fulfilling legal obligations incumbent on the Administrator, particularly arising from tax and accounting regulations – the legal basis for processing is a legal obligation (Article 6(1)(c) GDPR),
    3. for the purpose of potentially establishing and pursuing claims or defending against claims – the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) GDPR), which involves protecting its rights;
    4. for the Administrator’s marketing purposes – the rules for processing Personal Data for marketing purposes are described at Section 8 below.
  6. CONTACT FORMS – The Administrator provides the opportunity to contact them using electronic contact forms. Using the form requires providing Personal Data necessary to establish contact with the User and respond to the inquiry. The User may also provide additional data to facilitate contact or handle the inquiry. Providing data marked as mandatory is required to accept and process the inquiry, and failure to provide such data will result in the inability to process it. Providing other data is voluntary. Personal data is processed for the purpose of identifying the sender and handling their inquiry submitted through the provided form – the legal basis for processing is the necessity of processing for the performance of a contract for the provision of the service (Article 6(1)(b) GDPR); regarding voluntarily provided data, the legal basis for processing is consent (Article 6(1)(a) GDPR).
  7. COMPLAINTS – In order to process complaints, the Administrator processes the personal data of Users submitting complaints, particularly email addresses, names, the content of the complaint, circumstances of the incident that led to the complaint, and information obtained during the complaint review process, including clarification of the incident that caused the complaint. These data are processed in accordance with Article 6(1)(b) GDPR for the purpose of performing services, i.e., the contract for the provision of electronic services according to the Regulations of the Online Store available on the website www.schuptercasting.com, and are processed for the time necessary to process the complaint and no longer than 12 months after the end of the complaint procedure for archival purposes in case of need to defend against potential claims against the Administrator.
  8. MARKETING – The Administrator processes Users’ Personal Data in order to carry out marketing activities, which may consist of directing e-mail notifications of interesting offers or content, which in some cases contain commercial information (newsletter service), and carrying out other activities related to direct marketing of goods (sending commercial information by e-mail). The administrator provides the newsletter service to people who have provided their e-mail address, name, surname, country of origin for this purpose. Provision of data is required to provide the newsletter service, and failure to provide such data will result in the inability to send the newsletter.

Personal data is processed for the purpose of providing the newsletter mailing service – the legal basis for processing is the necessity of processing for the performance of the contract (Article 6(1)(b) GDPR); in the case of directing marketing content to the User within the newsletter – the legal basis for processing, is the legitimate interest of the Administrator (Article 6(1)(f) GDPR) in connection with the consent to receive the newsletter.

§ 4

COOKIES FILES

  1. The Administrator primarily uses cookies to provide electronic services to the User. Therefore, the Administrator uses cookies by storing information or gaining access to information already stored on the User’s telecommunications end device (computer, phone, tablet, etc.)
  2. The Administrator primarily uses essential cookies to provide Users with services and functionalities of the Online Store that the User wishes to use. Essential cookies may only be installed by the Administrator through the Online Store.
  3. The legal basis for processing data in connection with the use of essential cookies is the necessity of processing for the performance of a contract (Article 6(1)(b) of the GDPR).
  4. Processing Personal Data using cookies is possible upon obtaining consent, which can be withdrawn at any time.
  5. Withdrawal of consent for the use of cookies is possible through browser settings.
  6. The method of collecting and using cookies is described in detail in the Cookie Policy.

§ 5

PERIOD OF PROCESSING OF PERSONAL DATA

  1. The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a general rule, data are processed for the duration of the service provided or the execution of the order, until the withdrawal of the consent given or the filing of an effective objection to data processing in cases where the legal basis for data processing is the legitimate interest of the Administrator.
  2. The processing period may be extended if the processing is necessary for the establishment and assertion of possible claims or defence against claims, and thereafter only if and to the extent required by law. After the expiration of the processing period, the data shall be irreversibly deleted or anonymized.

§ 6

USER RIGHTS

  1. The User has the right to access the content of the data and to request rectification, erasure, restriction of processing, the right to data portability and the right to object to the processing of the data, as well as the right to lodge a complaint with the supervisory authority for the protection of Personal Data.
  2. To the extent that User data is processed on the basis of consent, such consent may be withdrawn at any time by contacting the Administrator.
  3. The data subject shall have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Office for Personal Data Protection, based in Warsaw, 2 Stawki Street, who may be contacted as follows:
    1. by letter: 2 Stawki Street, 00-193 Warsaw,
    2. by electronic mailbox available at: https://www.uodo.gov.pl/pl/p/kontakt,
    3. by phone: (22) 531 03 00.

§ 7

DATA RECIPIENTS

  1. In connection with the performance of services, Personal Data will be disclosed to external entities, including, in particular, suppliers responsible for the operation of IT systems, entities such as banks and payment operators, accounting service providers, couriers (in connection with the execution of the order).
  2. The Administrator reserves the right to disclose selected information concerning the User to the competent authorities or third parties who make a request for such information, based on the relevant legal basis and in accordance with the provisions of the applicable law.

§ 8

TRANSFER OF DATA OUTSIDE THE EEA

  1. The level of protection of Personal Data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers Personal Data outside the EEA only when necessary and with an adequate level of protection, primarily by:
    1. cooperation with processors of Personal Data in countries for which a relevant decision of the European Commission has been issued regarding the determination of ensuring an adequate level of protection of Personal Data,
    2. application of standard contractual clauses issued by the European Commission,
    3. application of binding corporate rules approved by the relevant supervisory authority,
    4. The Administrator shall always inform of its intention to transfer Personal Data outside the EEA at the stage of collection.

§ 9

SECURITY OF PERSONAL DATA

  1. Administrator The Administrator conducts a risk analysis on an ongoing basis to ensure that Personal Data is processed by it in a secure manner – ensuring, above all, that only authorized persons have access to the data and only to the extent that it is necessary due to the tasks they perform. The Administrator ensures that all operations on Personal Data are recorded and performed only by authorized employees and associates.
  2. The Administrator shall take all necessary measures to ensure that also its subcontractors and other cooperating entities provide a guarantee of the application of appropriate security measures security measures whenever they process Personal Data on behalf of the Administrator.

§ 10

CONTACT WITH THE ADMINISTRATOR

  1. Contact with the Administrator is possible through the mailing address: Schupter sp. z o.o., Jeziorowa 54B/1, 03-991 Warsaw, Poland, info@schuptercasting.com

§ 11

CHANGES IN PRIVACY POLICY

  1. The Policy is reviewed on an ongoing basis and updated as necessary. Users will be informed of any changes to the Privacy Policy on the website www.schuptercasting.com.
  2. The current version of the Privacy Policy is effective as of August 19th, 2024.