This Privacy Policy sets out the principles for the collection and use by us of personal data of our customers making purchases from our online shop available at the domain https://www. kingspansklep. pl (hereinafter referred to as the Shop) and using the services and functionalities available within the Shop.
WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
The administrator of your personal data, i. e. the entity responsible for data processing, is Kingspan sp. z o. o. with its registered office in Lipsko, ul. Przemysłowa 20, 27-300 Lipsko, entered in the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, 14th Commercial Division of the National Court Register under KRS No. 0000018175, Tax Identification Number: 8992212932, phone no. +48 532 720 099 (hereinafter referred to as “”Kingspan””).
In all matters relating to your personal data and its protection you can write to Data protection officer Tomasz Ochocki at odopl@kingspan.com
PRIVACY PRINCIPLES
We process your personal data in accordance with the law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as “”RODO””).
WHAT PERSONAL INFORMATION DO WE COLLECT?
This Policy applies to all of our customers (current, potential and former customers), we are required by law to retain certain personal information for a limited period of time after our relationship ends and, to a limited extent, to individuals who use our Service without being our customers (visitors to the Store).
What data we collect and process depends on how you use our Store. The data we collect in connection with the use of the Store include, in particular:
data allowing for the identification of a Store user (e. g. name, surname, contact data);
transactional and financial information (e. g. , payment data), information about orders, purchases, returns, discounts;
data on the user’s preferences (e. g. data on how often the user visits our Store, which Goods the user is interested in – based on the number of clicks on a given Good).
If, in order to perform a sales contract or any other service available in the Store, we ask you to provide personal data, some of the fields may be marked as mandatory due to the fact that the data are necessary for us to perform the contract or service. In this case, if you choose not to provide us with this data, it may not be possible to use certain features or services within the Store.
FOR WHAT PURPOSE DO WE COLLECT DATA ?
Depending on how you use our Store, we may process your personal information for one of the following purposes:
registration in the Store, i. e. creating a customer Account – we will need the data necessary to identify the user and to grant access to the Account. The basis for data processing for the purposes of registration and creating an Account is the performance of a contract, i. e. the implementation of the provisions of the Rules and Regulations of the Store (Article 6(1)(b) of the RODO);
concluding and performing a sales contract or agreement, in connection with which we process data for the purpose of fulfilling the Order, including providing information about its details, managing payments for the purchased Goods, managing possible returns after the purchase, issuing an invoice or receipt, performing other services available in the Store related to discount cards, gift cards or special offers and promotions. The basis for the processing is the performance of the contract (Article 6(1)(b) of the RODO);
asserting or securing possible claims, which constitutes our legitimate interest as a controller of personal data (Article 6(1)(f) RODO);
handling inquiries made by e-mail. We carry out data processing for this purpose on the basis of the contract entered into (Article 6(1)(b) of the RODO) or, if the enquiry concerns rights referred to in this Privacy Policy or complaints about our Goods, the basis for data processing may also be the requirement to fulfil legal obligations imposed on us (Article 6(1)(c) of the RODO);
carrying out promotional activities, e. g. competitions or other promotional actions, through participation in which the user authorises us to process the data provided to the extent and under the conditions described in separate regulations, i. e. in order to perform the agreement (Article 6(1)(b) of the RODO) or on the basis of the participant’s consent (Article 6(1)(a) of the RODO);
analyze the usefulness of our Store and improve it, i. e. for analytical and statistical purposes – we process data in order to examine how users make use of the pages of our Store. The basis of the processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), which in this case is to improve the quality of the services or goods offered by the Administrator.
present personalized marketing content tailored to the user’s interests, we may learn about the user’s preferences, e. g. by analyzing how often the user visits the Store, which Goods the user was interested in (e. g. by analyzing the number of clicks on a given Good or adding it to a wish list). The basis for the processing is the legitimate interest of the controller (Article 6(1)(f) of the RODO), which is to better understand our customers’ expectations and to tailor our services to their needs.
FOR HOW LONG WE PROCESS THE DATA
We will process the personal data of our customers and visitors to the Store only for the time necessary to fulfill the purpose for which they were collected, i. e:
for the period in which you are registered in the Store, i. e. you have a Customer Account;
for the period of time necessary for the performance of the sale contract of Goods and after-sales service, i. e. the period of time necessary for the performance of any returns or complaints, as well as for the period resulting from the provisions of law (e. g. the Accounting Act), and after its expiration for the period provided by law for asserting or securing possible claims;
if we are processing your data on the basis of your separately granted consent, we will process it for the period indicated in your declaration of consent, but never longer than until you revoke it;
in the case of marketing activities for which we have a legitimate interest, we will process the data until you object to further processing.
YOUR RIGHTS
You have the right to access your data and obtain a copy of it, the right to rectify your data if they prove to be incomplete or incorrect, the right to erase your data or restrict their processing, the right to transfer your data to another controller and, where the processing is based on consent, the right to withdraw your consent at any time without affecting the lawfulness of the processing which was made on its basis before its withdrawal.
Furthermore, you have the right to object to further processing of your data.
You can exercise all of the rights indicated above by contacting us at odopl@kingspan.com. All you have to do is describe to us the law you want to use. In order to exercise your rights, in particular for identification purposes, we may ask you to provide us with additional information.
You can also lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw) if you consider that the processing of your personal data violates the provisions of the RODO.
RECIPIENTS OF YOUR DATA
We will share your information only with our trusted partners, i. e. , entities that support us in the services we provide, such as: financial institutions, technology service providers, transportation service providers, postal service providers, delivery service providers, customer service providers, promotion and advertising service providers.
Where one of our suppliers is based in a country outside the EEA, we will in all cases ensure that it provides adequate data security safeguards as evidenced by an appropriate certification such as Privacy Shield (in respect of US entities), which can be verified by clicking on the following link: https://www. privacy shield. gov/list or Commission approved Standard Contractual Clauses signed with us.
OTHER INFORMATION
Providing your personal data is entirely voluntary, however, it may be necessary in order to conclude a sales agreement or to make some Store functionalities available. Therefore, the consequence of their failure may be, in some cases, inability to conclude a sales contract, create a customer Account or answer your question.
Links directing to other websites may appear periodically within the Shop. Such sites operate independently of our Store and are not under our control. They may have their own privacy policies, which we encourage you to review before using such sites. The shop is not responsible for the principles of handling data from the operators of these sites.
We make every effort to secure your data and protect it from unauthorized third party actions. We use the necessary server security to protect your data, in particular an SSL protocol certificate. All connections related to making electronic payments, if such an option is selected, will be made via a secure encrypted connection. However, the measures we have taken may not be sufficient if you do not maintain security yourself; in particular, it is important that you keep your Account username and password confidential and do not disclose them to third parties. In order to prevent unauthorized use of your Account, please remember to log out after you finish using the Store.
The provisions of this Privacy Policy are subject to change, inter alia, in the event of changes in the functioning of the Store, introduction of changes, new services or functionalities. Any changes to the Privacy Policy will be promptly posted on the website.
Data protection officer: Tomasz Ochocki, odopl@kingspan.com