1. Data Controller and Definitions
- The controller of the personal data of Customers/Users of the Online Store, also referred to as the Seller, is: MAT Group spółka cywilna Jacek Pożarlik i Dominik Pożarlik, phone: +48 536 202 531, Tax ID (NIP): 5732894910, REGON: 369065344.
- The Data Controller can be contacted:
- at the correspondence address: Rynek Wieluński 10, 42-217 Częstochowa, Poland;
- at the e-mail address: hurtownia@matgroup.pl.
- User - a natural person visiting the page(s) of the Online Store or using the services or functionalities described in this Privacy and Cookies Policy.
- Customer - a natural person with full legal capacity, a natural person who is a Consumer, a legal person, or an organizational unit without legal personality to which the law grants legal capacity, who concludes a Distance Sales Agreement with the Seller.
- Online Store - the website operated by the Seller, available at the electronic address(es): https://srv106967.seohost.com.pl, through which the Customer/User can obtain information about the Goods and their availability, purchase Goods, or order a service.
- Newsletter - information, including commercial information within the meaning of the Act of 18 July 2002 on the Provision of Electronic Services (Journal of Laws of 2020, item 344), sent by the Seller; receiving it is voluntary and requires the Customer's/User's consent.
- Account - a set of data stored in the Online Store and in the Seller's IT system relating to a given Customer/User and the orders placed and agreements concluded by them, using which the Customer/User can place orders and conclude agreements.
- GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
2. Purposes, legal bases, and data retention period
- In order to perform the Distance Sales Agreement, the Seller processes:
- information regarding the User's device in order to ensure the correct operation of the services: the computer's IP address, information contained in cookies or other similar technologies, session data, web browser data, device data, data on activity on the Website, including on individual subpages;
- geolocation information, if the User has consented to the service provider's access to geolocation. Geolocation information is used to provide more tailored product and service offers;
- Users' personal data: first name, surname, registered office address, correspondence address, e-mail address, phone number, Tax ID (NIP), bank account number, or other personal data whose provision is necessary to complete the purchase and which the Controller requires in the purchasing process.
- This information does not contain data identifying Users, but combined with other information it may constitute personal data, and accordingly the Controller applies to it the full protection provided under the GDPR.
- This data is processed pursuant to Art. 6(1)(b) GDPR, for the purpose of performing the service, i.e., the agreement for the provision of electronic services in accordance with the Terms and Conditions, and pursuant to Art. 6(1)(a) GDPR, in connection with consent to the use of certain cookies or other similar technologies, expressed through the appropriate settings of the web browser in accordance with the Telecommunications Law, or in connection with consent to geolocation. The data is processed until the Customer/User ceases to use the Online Store.
- The Controller undertakes to take all measures required under Art. 32 GDPR, i.e., taking into account the state of the art, the cost of implementation, and the nature, scope, and purposes of processing as well as the risk of infringing the rights or freedoms of natural persons of varying likelihood and severity, the Controller implements appropriate technical and organizational measures to ensure a level of security appropriate to that risk.
3. Marketing activities of the Controller
- On the Online Store's website, the Data Controller may publish marketing information about its products or services. The display of this content is carried out by the Data Controller in accordance with Art. 6(1)(f) GDPR, i.e., in accordance with the Data Controller's legitimate interest consisting of publishing content related to the services provided and promotional content for actions in which the Data Controller is involved. At the same time, this does not infringe the rights and freedoms of Customers/Users; Customers/Users expect to receive content of similar nature, or even expect it, or it is the direct purpose of their visit to the page(s) of the Online Store.
4. Recipients of users' data
- The Data Controller discloses users' personal data only to processors under concluded data processing entrustment agreements for the purpose of providing services to the Data Controller, e.g., hosting and website support, IT services, marketing and PR support.
5. Transfer of personal data to third countries
- Personal data will not be processed in third countries.
6. Rights of data subjects
- Every data subject has the right to:
- access (Art. 15 GDPR) - obtain from the Data Controller confirmation as to whether their personal data is being processed. If data about the person is being processed, they are entitled to obtain access to it and to the following information: the purposes of processing, categories of personal data, recipients or categories of recipients to whom the data has been or will be disclosed, the retention period or the criteria for determining it, the right to request rectification, erasure, or restriction of processing of personal data concerning them, and to object to such processing;
- to receive a copy of the data (Art. 15(3) GDPR) - obtain a copy of the data undergoing processing, with the first copy free of charge, and the Data Controller may charge a reasonable fee based on administrative costs for further copies;
- to rectification (Art. 16 GDPR) - request rectification of their personal data that is incorrect, or completion of incomplete data;
- to erasure of data (Art. 17 GDPR) - request the erasure of their personal data if the Data Controller no longer has a legal basis for processing it or the data is no longer necessary for the purposes of processing;
- to restriction of processing (Art. 18 GDPR) - request restriction of the processing of personal data when:
- the data subject contests the accuracy of the personal data - for a period enabling the Data Controller to verify the accuracy of the data,
- the processing is unlawful and the data subject opposes the erasure of the personal data, requesting the restriction of their use instead,
- the Data Controller no longer needs the data, but it is needed by the data subject to establish, exercise, or defend legal claims,
- the data subject has objected to processing - pending verification whether the Controller's legitimate grounds override those of the data subject;
- to data portability (Art. 20 GDPR) - receive, in a structured, commonly used, machine-readable format, the personal data concerning them that they have provided to the Data Controller, and request that this data be sent to another Controller, if the data is processed on the basis of the data subject's consent or an agreement concluded with them, and if the data is processed by automated means;
- to object (Art. 21 GDPR) - object to the processing of their personal data for the Controller's legitimate purposes, on grounds relating to their particular situation, including profiling. In such case, the Data Controller will assess whether there are compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject, or grounds for the establishment, exercise, or defence of legal claims. If, according to that assessment, the interests of the data subject prevail over those of the controller, the Data Controller will be obliged to cease processing the data for those purposes;
- to withdraw consent at any time and without giving any reason, although the processing of personal data carried out before the withdrawal of consent remains lawful. Withdrawal of consent will result in the Data Controller ceasing to process personal data for the purpose for which the consent was given.
- To exercise the above rights, the data subject should contact the Data Controller using the contact details provided and inform the Controller which right, and to what extent, they wish to exercise.
7. President of the Personal Data Protection Office
- The data subject has the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office, based in Warsaw, ul. Stawki 2, who can be contacted as follows:
- by post: ul. Stawki 2, 00-193 Warszawa, Poland;
- via the electronic mailbox available on the website: https://www.uodo.gov.pl/pl/p/kontakt;
- Helpline: 606-950-000.
8. Data Protection Officer
- In every case, the data subject may also contact the Controller's data protection officer directly by e-mail or in writing to the Data Controller's address, given in Section 1, point 2 of this Privacy and Cookies Policy.
9. Changes to the Privacy Policy
- The privacy and cookies policy may be supplemented or updated in line with the Controller's current needs, in order to provide Customers/Users with up-to-date and reliable information.
10. Cookies
- The Online Store obtains information about Customers, Users, and their behaviour in the following ways:
- through information voluntarily entered in forms, for the purposes resulting from the function of a given form;
- by storing cookie files (so-called "cookies") on end devices;
- by collecting www server logs by the hosting operator of the Online Store (necessary for the correct operation of the service).
- Cookies are IT data, in particular text files, which are stored on the Customer's/User's end device and are intended for use with the Online Store's website. Cookies usually contain the name of the website they come from, the storage time on the end device, and a unique number.
- The Online Store uses cookies only after the Customer/User of the Store has given prior consent in this regard. Consent to the use of all cookies by the Online Store is given by clicking the "I understand" button when the notice about the use of cookies by the Online Store is displayed, or by closing that notice.
- If the Customer/User of the Online Store does not consent to the use of cookies by the Online Store, they may change the settings of the web browser they are currently using (this may, however, cause the Online Store's website to function incorrectly).
- The legal basis for processing personal data originating from cookies is the Data Controller's legitimate interests, consisting of ensuring high quality of services and ensuring the security of services.
- Within the Online Store, two main types of cookies are used: "session" cookies and "persistent" cookies. "Session" cookies are temporary files that are stored on the User's end device until logging out, leaving the Online Store, or closing the software (web browser). "Persistent" cookies are stored on the Customer's/User's end device for the time specified in the cookie parameters or until they are deleted by the Customer/User.
- Cookies are used for the following purposes:
- creating statistics that help understand how Customers/Users of the Online Store use the website pages, which allows improving their structure and content;
- maintaining the Customer's/User's session (after logging in), thanks to which the Customer/User does not have to re-enter their login and password on every subpage of the Online Store;
- determining the Customer's/User's profile in order to display product recommendations and tailored materials to them in advertising networks, in particular the Google network.
- Web browsing software (web browser) usually allows storing cookies on the Customer's/User's end device by default. Customers/Users can change the settings in this regard. The web browser allows cookies to be deleted. It is also possible to automatically block cookies.
- Restrictions on the use of cookies may affect some of the functionalities available on the Online Store's website pages.
- Cookies placed on the Customer's/User's end device may also be used by advertisers and partners cooperating with the Online Store.
- Cookies may be used by the Google network to display ads tailored to the way the Customer/User uses the Online Store. For this purpose, they may retain information about the user's navigation path or the time spent on a given page: https://policies.google.com/technologies/partner-sites.
- We recommend reading the privacy policies of companies providing statistical tools to learn about the rules for using cookies used in statistics, e.g. Google Analytics.
- With regard to information about the Customer's/User's preferences collected by the Google advertising network, the Customer/User can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/.
- The Online Store's website may include plugins that may transfer Customers'/Users' data to external service providers, e.g.: Google Maps, PayPal, Google reCAPTCHA, Google.
- In order to properly perform the Distance Sales Agreement, the Data Controller may share Customers'/Users' data with courier companies. The delivery methods currently available in the Online Store are available at: Delivery.
- In order to properly perform the Distance Sales Agreement, the Controller may share Customers'/Users' data with online payment systems. The prepayment methods currently available in the Online Store are available at: Payment methods.
- More information on terms and privacy can also be found on the Google Privacy & Terms page.
11. Newsletter
- The Customer may consent to receiving commercial information by electronic means by selecting the appropriate option in the registration form or at a later time in the relevant section. If such consent is given, the Customer/User will receive, at the e-mail address they provided, information (Newsletter) from the Online Store, as well as other commercial information sent by the Seller.
- The Customer may unsubscribe from the Newsletter at any time on their own, by unchecking the relevant box on their Account page, clicking the relevant link contained in the content of each Newsletter, or via Customer Service.
12. Account
- The Customer/User may not post in the Online Store or provide to the Seller content, including reviews and other data, of an unlawful nature.
- The Customer/User gains access to the Account after registering.
- As part of registration, the Customer/User provides the account type or gender, first name, surname, company name, Tax ID (NIP), data for issuing a sales document, shipping data, e-mail address, and chooses a password. The Customer/User warrants that the data provided by them in the registration form is true. Registration requires careful review of the Terms and Conditions and confirming in the registration form that the Customer/User has read the Terms and Conditions and fully accepts all its provisions.
- At the moment the Customer/User is granted access to the Account, an agreement for the provision of electronic services relating to the Account is concluded for an indefinite period between the Seller and the Customer. The Consumer may withdraw from this agreement on the terms set out in the Terms and Conditions.
- The Customer/User may terminate the agreement for the provision of electronic services at any time with immediate effect, by informing the Seller by e-mail or in writing to the Data Controller's address, given in Section 1, point 2 of this Privacy and Cookies Policy.
- The Seller has the right to terminate the agreement for the provision of services relating to the Account in the event of discontinuation of the Online Store's service, breach by the Customer/User of the law or the provisions of the Terms and Conditions, and also in the event of the Customer's/User's inactivity for a period of 6 months. Termination of the agreement is subject to a seven-day notice period. The Seller may reserve that re-registration of an Account will require the Seller's permission.
