Privacy and Cookies policy | PRINZ Wall drainage

Privacy policy

Who is the Controller of my personal data?

The Controller of your personal data is:

PRINZ Polska spółka z ograniczoną odpowiedzialnością with its registered office in Poznań

Tulipanowa 4, 60-175 Poznań, Poland

NIP (VAT number): 972-04-17-307

REGON (National Official Business Register number): 630657614

registered by the District Court in Poznań – 14^th Commercial Division of the National Court Register under the following KRS number: 0000134452

with the share capital of PLN 177,000 (hereinafter referred to as: Controller).

Personal Data Controller’s contact details:

PRINZ Polska spółka z ograniczoną odpowiedzialnością

Address: ul. Tulipanowa 4, 60-175 Poznań, Poland

Telephone: 61 863 80 88

E-mail: info@prinz-polska.com.pl

The Controller shall be responsible for the use of personal data in a safe manner and in accordance with the applicable laws.

Who can I contact regarding the processing of my personal data?

You can contact us in all matters related to the processing of your personal data by the Controller:

by e-mail: k.buszka@prinz-polska.com.pl

by phone: 61 863 80 88

or in person at the registered office of PRINZ Polska sp. z o.o., ul. Tulipanowa 4, 60-175 Poznań, Poland.

The Controller has not appointed a Data Protection Officer or its representative.

What is the source of my data? Where do they come from?

We collect personal data directly from you or from sources commonly available on the Internet (so-called yellow pages available on the Internet, e.g. Panorama Firm, National Court Register, Central Register and Information on Economic Activity and other publicly accessible databases). We also obtain your personal data by purchasing databases from entities that professionally deal with the establishment and analysis of databases. We collect your data for various purposes as well as process them in different scopes and on different legal grounds as provided for in the GDPR. The duration of personal data processing also varies. In order to provide you with as clear information as possible, we have grouped this information with reference to the purpose of processing your personal data as presented below. The Controller does not use personal data for automated decision making, including profiling.

What is the scope of personal data processed by the Controller and the purpose of processing?

Purchase of chain cutting systems and insulation materials offered by PRINZ Polska sp. z o.o. by Representatives of counterparties

Description. We process your personal data in order to enable the purchase of chain saws and insulation materials by entrepreneurs (Representatives of counterparties) from PRINZ Polska sp. z o.o. It may also happen that an entrepreneur asks for a VAT invoice and for this purpose the Controller shall process the personal data of the counterparty’s Representative.

Scope of data. For this purpose, we process your first name, surname, business name, VAT number, business address, telephone number, e-mail address.

Legal basis. The need to provide data for the conclusion and performance of a contract for the sale of chain saws and insulation materials (Article 6(1)(b) of the GDPR).

Retention of personal data. Personal data are processed during the storage period of VAT invoices, as required by law, i.e. for 5 years, counting from the end of the calendar year in which the deadline for payment of VAT expired.

Mediating in the transfer of Customers’ data to cooperating companies with regard to drainage of buildings

Description. For this purpose, personal data are processed in order to pass data on to subcontractors, i.e. companies cooperating with PRINZ Polska sp. z o.o. The data processed in this way include: first name, surname, postal code of the Customer, city or town, telephone number of the Customer. The contents of the data are transmitted to cooperating companies (subcontractors) via telecommunication networks in the form of text messages and e-mails.

Scope of data. For this purpose, we process the following data provided by you: first name, surname, postal code of the Customer, telephone number.

Legal basis. Personal data are processed in order to fulfil the Controller’s legitimate interest in obliging subcontractors to purchase PRINZ Polska products in exchange for finding and transferring data of Customers interested in drainage of buildings to subcontractors (Article 6(1)(f) of the GDPR).

Retention period of personal data. In order to accept and provide building drainage services, the Controller shall process personal data of Customers interested in drainage of buildings until they are handed over to subcontractors (cooperating companies dealing with building drainage) and then the data shall be anonymised. Processing of data of Customers interested in drainage of buildings for this purpose takes no longer than 6 months from the date of obtaining them.

Complaint of goods or services by Representatives of counterparties

Description. Personal data are processed for the purpose of:

– handling complaints, including the settlement of claims filed by counterparty’s Representative;

– execution of claims of the counterparty’s Representative (e.g. reimbursement of the price, replacement of goods with goods free from defects, etc.);

in connection with the purchase of chain saws and insulation materials by the Representative.

Scope of data. For this purpose, we process the following personal data provided by you: first name, surname, e-mail address, telephone number, information about the goods being the subject of the complaint (e.g. VAT invoice number) and transactions.

Legal basis. Personal data are processed for the purpose of fulfilling the Controller’s legal obligation imposed on it under the provisions of law (exercising the buyer’s rights under warranty for defects of goods) (Article 6(1)(c) of the GDPR).

Retention period of personal data. We process your personal data for the duration of the complaint investigation process. The maximum time limit for storing data for this purpose is 2 years from the date of purchase or provision of the service.

Handling counterparty’s Representative – processing of complaints, requests, inquiries

Description. To consider a complaint or to respond to a request or inquiry, to build a positive relationship between the Controller and the counterparty’s Representative in connection with the purchase of chain saws and insulation materials.

Scope of data. For this purpose, we process personal data provided by you in connection with your inquiries, as well as data concerning the use of the Controller’s services or the purchase of goods, which are the cause of the complaint or request, and data contained in documents attached to the specific complaint or request.

Legal basis. The basis for the processing of personal data is the Controller’s legitimate legal interest in adapting the offer to the needs of buyers. Moreover, the Controller’s legitimate interest is justified by building positive relationships between the Controller and the counterparty’s Representative based on reliability and loyalty (Article 6(1)(f) of the GDPR).

Retention period of personal data. The Controller shall process personal data for the time necessary to respond to the counterparty’s Representative’s inquiry, complaint or request, no longer than for a period of 6 months from the date of its submission. The personal data are then deleted.

Accounting, bookkeeping

Description. For this purpose, the data are processed in order to:

– keep accounting books;

– keep stock records;

– keep VAT records;

– prepare monthly and annual tax returns;

– produce reports to the statistical office;

– draw up financial statements.

Scope. If we issue a VAT invoice, we are obliged by applicable law to store these documents and process the personal data contained therein (including: first name, surname, address, business name, VAT number, business address) for accounting and bookkeeping purposes.

Legal basis. The legal basis for the processing of personal data is the need for the Controller to meet the obligations incumbent upon it under the provisions of law (legal prerequisite: Article 6(1)(c) of the GDPR).

Establishment, asserting and enforcement of claims

Description. For this purpose, personal data are processed in order to:

– determine the Controller’s claim, including its size and circumstances of occurrence;

– take actions to meet the claim voluntarily or compulsorily;

– defend against claims of third parties, addressed to the Controller;

– carry out forced execution of claims.

Scope. For this purpose, we process some of your personal data necessary to establish, assert and enforce claims, e.g. first name, surname, data concerning the use of the Controller’s services or purchased goods, other data necessary to prove the existence of the claim, including the extent of the damage suffered.

Legal basis. The basis for the processing of personal data is the Controller’s legitimate interest in establishing, asserting and enforcing claims and defending against claims in proceedings before courts and other state authorities (Article 6(1)(f) of the GDPR).

Retention period of personal data. The Controller shall process personal data until the expiry of claims, i.e. for a maximum of 3 years from the date when the Controller learned about the damage and the person obliged to repair the damage.

Return of goods (withdrawal from a contract)

Description. Personal data are processed in order to handle the return of goods made by the counterparty’s Representative and the reimbursement of the price paid.

Scope. For this purpose, we process your personal data such as: e-mail address, first name, surname, telephone number, bank account number, VAT invoice details (if issued).

Legal basis. Processing of personal data of the counterparty’s Representative is necessary for the Controller to fulfil its legal obligation under the law (execution of the buyer’s right to withdraw from a contract) (Article 6(1)(c) of the GDPR).

Retention period of personal data. The Controller shall process personal data for the time needed to manage the purchase of products acquired by the counterparty’s Representative, including possible returns, complaints or claims. The Controller shall process personal data no later than by the date of expiry of claims under the concluded sale contract (i.e. for a maximum of 2 years from the date of conclusion of the contract).

Conducting current business activity by the Controller (including running the office and organisational provision of business opportunities)

Description. Personal data are processed for the purpose of purchasing office supplies or using services in the course of normal business activity (e.g. provision of utilities delivery services).

Scope of data. We process the following personal data for this purpose: e-mail address, first name, surname, country, telephone number, bank account number, VAT invoice details (if issued).

Legal basis. The basis for the processing of personal data is the legitimate interest of the Personal Data Controller, resulting from the necessity of the process of personal data processing in order to fulfil a contract and maintain permanent relationships with suppliers of goods or services. Moreover, the basis for processing of personal data may also include taking action to conclude and perform a contract (Article 6(1)(f) of the GDPR, Article (6)(1)(b) of the GDPR).

Retention period of personal data. Personal data are stored for the duration of business cooperation, for a maximum period of 4 years from the date of the last contact between the Controller and the counterparty’s Representative (and longer only until the expiry of claims under the concluded contract between the parties).

IT support

Description. Ensuring the proper functioning of the PRINZ Polska sp. z o.o. website and maintaining the proper functioning of electronic mail, internal servers, etc.

Scope of data. For this purpose, we process data that the Controller processes in connection with IT support (e.g. data sent using website contact forms, data processed using e-mail and an internal server).

Legal basis. The basis for the processing of personal data for the purposes of IT support is first of all the Controller’s legitimate legal interest in providing proper service to counterparty’s Representatives as well as customers interested in building drainage (Article 6(1)(f) of the GDPR). Moreover, the Controller shall process personal data for the purpose of IT support in conjunction with recruitment of Employees (Article 6(1)(b) and Article 6(1)(a) of the GDPR. With regard to sensitive data, the legal prerequisite for the processing of the personal data is: Article 9(2)(b) of the GDPR) and employment (legal prerequisite: Article 6(1)(b) and (c) of the GDPR). As far as sensitive data are concerned, the legal prerequisite for the processing of the personal data is: Article 9(2)(b) of the GDPR), as well as in connection with conducting business cooperation with the counterparties. (Article 6(1)(b) and (c) of the GDPR). The basis of the processing of personal data may also be Article 6(1)(a) of the GDPR, i.e. the consent of the person whose personal data are processed if provided in the contact form.

Retention period of personal data. The Controller may process personal data longer (max. 5 years), if it results from the basic purpose of data processing (e.g. in the case of data processing in connection with the purchase of goods, the Controller shall process personal data until the date of expiry of claims under the concluded contract at the latest).

Providing data by Representatives of counterparties interested in the products offered by PRINZ Polska

Description. Personal data are processed for the purpose of concluding and performing a contract for the sale of chain saws and insulation materials between PRINZ Polska and the counterparty’s Representative

Scope of data. For this purpose, we process the following categories of your personal data: first name, surname, e-mail, telephone number, address, company name, VAT number, National Official Business Register number.

Legal basis. The basis of the processing of personal data is the need for processing in order to take action at the request of the data subject prior to the conclusion of a contract for the sale of chain saws or insulation materials (Article 6(1)(b)).

Retention period of personal data. Personal data are processed until the conclusion of a contract with PRINZ Polska, as well as for the duration of the contract, and until the date of expiry of claims related to the contract. If there is no further interest in concluding the contract, the data of the counterparty’s Representative are deleted after a period of 6 months.

Acquisition of databases with information relating to the personal data of counterparty’s Representatives

Scope of data. For this purpose, we process the following categories of your personal data: first name, surname, e-mail, telephone number, company name, VAT number, National Official Business Register number.

Legal basis. The basis for processing of personal data is the data subject’s consent to the processing of the personal data for one or more specified purposes (Article 6(1)(a) of the GDPR).

Retention period of personal data. Personal data are processed until the conclusion of a contract with PRINZ Polska, as well as for the duration of the contract, and until the date of expiry of claims related to the contract. If there is no further interest in concluding the contract, the Customer’s data are deleted after a period of 3 months.

Obtaining data of counterparty’s Representatives in order to present them with an offer of goods and services provided by the Controller

Scope of data. For this purpose, we process the following categories of your personal data: first name, surname, e-mail, telephone number, name of business activity, VAT number, National Official Business Register number.

Legal basis. Personal data are processed based on the Controller’s legitimate interest consisting in obtaining data of counterparty’s Representatives in order to sell chain saws and insulating materials (Article 6(1)(f) of the GDPR).

Retention period of personal data. For this purpose, personal data are processed for a maximum period of 6 months from the date of collection of the data. In the event of lack of interest, the data are deleted.

Sending marketing materials concerning invitations to trade fairs, promotional campaigns, equipment demonstrations

Description. Personal data are processed for the purpose of advertising chain saws and building drainage services. Personal data are also processed in order to establish and maintain business relationships with Representatives of counterparties and Customers of building drainage services.

Scope of data. For this purpose, the Controller shall process the following categories of personal data: first name, surname, address, business name, VAT number, National Official Business Register number, e-mail, telephone number.

Legal basis. The legal basis for the processing of personal data for marketing purposes is the consent to the processing of data for this purpose granted by the counterparty’s Representative or the Customer interested in drainage of buildings (legal prerequisite: Article 6(1)(a) of the GDPR).

Retention period of personal data. The Controller shall process personal data until the withdrawal of consent to receiving marketing communications.

To whom will my personal data be passed on?

The Personal Data Controller, with the highest level of diligence, takes care of the confidentiality of your personal data. Due to the necessity to fulfil contractual obligations and ensure the proper performance of services for our Customers, personal data are transferred to the persons indicated below.

Counterparties (subcontractors) involved in drainage of buildings

We pass on your personal data to the counterparties (subcontractors) involved in building drainage, but only if you are interested in building drainage services. Personal data of Representatives of counterparties interested in buying chain saws and insulation materials shall not be passed on to other entities, apart from service providers and public authorities, and occasionally to sales representatives in other countries, if a citizen of the country in question files a request.

Service providers

We pass on your personal data to the service providers that we use in the course of our business. Suppliers provide the Controller with technical and organisational solutions, enabling the provision of services for the Customer interested in building drainage and representatives of counterparties, as well as organisational management. We provide the data to e.g. entities providing legal services, services related to health and safety at work, as well as accounting, human resources, transport of goods, financial and marketing services to us. We also provide the data to entities providing IT services to the Controller, e.g. software providers, including providers of servers on which personal data are stored and to the entity providing care service for websites on the basis of a contract for entrusting the processing of personal data concluded with the Administrator and only in accordance with the instructions Administrator.

Web service providers

Like most entrepreneurs, we use the help of other entities in our activities, which often involves the necessity to provide personal data. In connection with the above, if necessary, we transfer your personal data to the company providing care services over the Website to the Administrator on the basis of entrustment.

Public authorities

We disclose your personal data if we are requested to do so by authorised state authorities, in particular the organisational units of the prosecutor’s office, the Police, the President of the Office of Personal Data Protection, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.

Are my data transferred outside the European Union?

We may potentially transfer your personal data outside the European Union. If this happens, the transfer shall first be based on the adequacy decision issued by the European Commission. In the absence of such a decision, appropriate safeguards shall be taken, e.g. request for consent of the data subject to the possibility of transferring data if this involves a risk.

Is it my responsibility to provide data?

Providing certain data is a condition necessary for the use of particular services offered by the Controller (mandatory data). Our system automatically marks mandatory data. If you enter into a contract with our intermediary, the intermediary shall notify you of the data that are necessary for the conclusion of the contract. If you do not provide this information, we shall not be able to provide certain services to you. Apart from the data marked as mandatory, providing other personal data is voluntary.

Legal basis. The necessity to perform a contract for provision of services (Article 6(1)(b) of the GDPR).

What rights do I have?

The Controller, in connection with the processing of your personal data, shall ensure the implementation of your rights related to the processing of the personal data, as described below. You can exercise your rights by submitting a request to the following e-mail address: k.buszka@prinz-polska.com.pl

Right of withdrawal of consent

You have the right to withdraw your consent to the processing of personal data. Withdrawal of consent shall take effect from the moment of withdrawal. Withdrawal of consent shall not affect our lawful processing prior to the withdrawal of consent. Withdrawal of consent does not have any negative consequences for you. However, it may prevent you from using some of our services.

Legal basis: Article 7(3) of the GDPR

Right to object to the use of data

You have the right to object at any time to the use of your personal data if we process your data on the basis of our legitimate interest, e.g. in connection with the processing of complaints, requests and providing answers to inquiries. If your objection is justified and we have no other legal basis for processing your personal data, we shall delete the data you have objected to.

Legal basis: Article 21 of the GDPR

Right of erasure of data (so-called “right to be forgotten”)

You have the right to demand erasure of all or some of your personal data. We will treat the request to erase all personal data as a request to delete the Account.

You have the right to request the erasure of personal data if:

you have withdrawn your specific consent to the extent that your personal data have been processed on the basis of your consent;
your personal data are no longer necessary for the purposes for which they were collected or for which they were processed;
you have objected to the use of your data for the purpose of statistics on your use of the Website and satisfaction surveys, and the objection has been found to be justified;
your personal data are processed illegally.

Despite the request to erase personal data, we may retain certain personal data to the extent necessary for the purposes of establishing, asserting or defending claims. This applies in particular to personal data such as first name, surname, PESEL number (Civil Registration Number) and address, which we retain for the purpose of handling complaints and claims related to the use of our services.

Legal basis: Article 17 of the GDPR

Right to restrict the processing of data

You have the right to demand restriction of the processing of your personal data. If you make such a request, we shall prevent you from using certain functionalities or services, the use of which would be associated with the processing of the data covered by the request, until the request is considered.

You have the right to restrict the use of your personal data in the following cases:

if you question the correctness of your personal data, we shall restrict their use for the time necessary to verify the correctness of your data, but not longer than for 7 days;
if the processing of your data is illegal, and instead of deleting the data you request restriction of their use;
if your personal data are no longer necessary for the purposes for which we collected or used them, but you need them to establish, assert or defend your claims;
if you have objected to the use of your data, the restriction shall be for the time necessary to consider whether, due to your particular situation, the protection of your interests, rights and freedoms outweighs the interests that we pursue when processing your personal data.

Legal basis: Article 18 of the GDPR

Right of access to data

You have the right to obtain confirmation from us as to whether we process your personal data, and if so, you have the right to:

obtain access to your personal data;
obtain information on the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of the data, the planned period of retention of your data or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with the supervisory authority, the source of the data, automated decision making, including profiling, and the safeguards applicable to the transfer of the data outside the European Union;
obtain a copy of your personal data.

Legal basis: Article 15 of the GDPR

Right to correct data

You have the right to request that your personal data be corrected (if they are incorrect) or that the personal data provided by you be supplemented (if they are incomplete).

Legal basis: Article 16 of the GDPR

Right to transfer data

You have the right to receive your personal data that you have provided to us and then send them to another personal data controller of your choice, e.g. to another operator of similar websites. You have the right to demand that your personal be sent by us directly to another controller, if technically possible.

Legal basis: Article 20 of the GDPR

How long does it take to comply with your request?

If, in exercising the aforementioned rights, you submit a request to us, we either comply with the request or refuse to comply with it immediately, but no later than one month after receiving it. However, if, due to the complexity of the request or the number of requests, we are unable to comply with your request within one month, we shall do so within the next two months by informing you in advance of the intended extension of the deadline.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the supervisory authority against the processing of personal data by the Personal Data Controller. Such a complaint may be submitted to the President of the Office for Personal Data Protection (Biuro Prezesa Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland).

Cookies Policy

Using the websites that can be accessed in the following domains: www.prinz-polska.com.pl and www.osuszanie-prinz.com.pl, may connect with the installation of cookies on the terminal equipment of the person using the website and to the use of cookies by Prinz Polska spółka z ograniczoną odpowiedzialnością with its registered office in Poznań in accordance with this Policy.

What are cookies?
Cookies are small text files that are sent by the websites you visit and are downloaded on your computer. The information contained in these files allows the information contained in them to be read only by the party that created them. This means that the website cannot access other files on the user’s computer. Cookies are divided into “administrator cookies” and “external cookies”. Administrator cookies are cookies placed by the Administrator, connected with rendering of electronic services by the Administrator via the website. External cookies are cookies placed by entities cooperating with the Administrator

For what purpose does the website osuszanie-prinz.com.pl use cookies?
1. The Administrator uses external cookies for the following purposes:
  1. Presenting multimedia content on the Website pages that are downloaded from an external website www.youtube.com [cookie administrator: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland]. Saving the cookie allows administrators to monitor their statistics and target advertisements. The legal basis is consent, which consists in starting a movie (Article 173 (1) (2) of the Telecommunications Law, Article 172 of the Telecommunications Law; Article 6 (1) (a) of the GDPR). Cookies are stored for 6 months.
  2. Monitoring, i.e. collecting general and anonymous static data via Google Analytics analytical tools [cookie administrator: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland]. The legal basis is the voluntary consent to all cookies or the specific consent to monitoring or marketing in the Privacy Settings (Article 173 (1) (2) of the Telecommunications Law, Article 6 (1) (a) of the GDPR). Cookies are stored for 2 years.
  3. Marketing, to remind you of our services through advertisements placed on other websites and applications using the Google Ads tool provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is the voluntary consent to all cookies or the specific consent to marketing in the Privacy Settings (Art. 173 (1) (2) of the Telecommunications Law; Art. 172 of the Telecommunications Law; Art. Cookies are stored for 54 weeks.
  4. Checking whether the data entered on the Website has been entered by a human or by an automated program. To do this we use reCAPTCHA service provided by Google [cookie administrator: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland]. The legal basis is Article 6. (1) (f) of the GDPR and Article 173 (3) of the Telecommunications Law. Learn more about terms of use and data protection by reCAPTCHA.
2. The Administrator uses Administrator’s Cookies for the following purposes:
  1. Remembering cookie settings. Before making a decision regarding cookies, information about cookies is displayed on each page. After making a decision on cookies, a separate cookie is stored so that you do not have to make a decision when visiting subsequent pages of the website. The decision regarding cookies can be changed after clicking on the gear icon displayed on the website in the lower left corner. The cookie is stored for one year.
  2. When browsing the website, a popup is displayed with a proposal to subscribe to the PRINZ newsletter. After closing it, a separate cookie is saved so that the popup does not appear again. The cookie is stored for 30 days.
What cookies do we use?
The cookies used by the Administrator are safe for the user’s device. In particular, it is not possible for viruses or other unwanted or malicious software to get to the users’ devices via the cookies. Cookies usually contain the name of the domain they come from, the time of storing them on the device and the value ascribed.
Two types of cookies can be used on the website osuszanie-prinz.com.pl:
1. session cookies – they remain on the user’s device until he or she leaves the website or switches off the web browser;
2. persistent cookies – they are stored on the user’s device for the time set in the file parameters or until their deletion by the user.

Can I opt out of accepting cookies?
The User may individually and at any time change the settings regarding cookies, specifying the conditions of storing them and getting access via the cookies to the user’s device. The User may change the settings referred to in the previous sentence by changing the settings of the browser or by configuring the service. In particular, the settings can be changed so as to block the automatic service of cookies in the settings of the browser, or to inform about each placement of the cookies on the user’s device. Detailed information on the possibility and methods of cookies management is available in the settings of specific software (web browser).

The User may delete cookies at any time using the functions available in the browser used.

Limitation of the use of cookies may affect some functionalities available on the website.

How do I disable cookies?
Detailed information on the possibility and methods of cookies management is available in the settings and documentation of specific software (web browser).

Is cookie data shared outside the European Union?
The objectives pursued using tools provided by Google and Facebook, are established in countries outside the European Economic Area, where the level of protection of personal data may not be comparable to the level in the European Union. Whenever this happens, the Administrator makes sure that the entity to whom the data is transferred provides appropriate guarantees and assurances related to the security of the data of natural persons. The Administrator’s suppliers have the so-called Privacy Shield, ensuring adequate protection of personal data, or they undertake to comply with the so-called Standard Contractual Clauses.