SELLINTEGRO PRIVACY POLICY

1. The Personal Data Administrator (hereinafter referred to as the PDA) on the website www.sellintegro.pl, hereinafter referred to as the Website, is the Company under the business name SELLINTEGRO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ based in Wroclaw (53-439), ul. Grabiszyńska 163, entered in the register of entrepreneurs of the National Court Register kept by the District Court for Wrocław-Fabryczna in Wroclaw, 6th Commercial Division of the National Court Register under the number 0000574026, NIP (Tax ID): 8971813098, REGON (Business ID): 362430332.

2. Respecting your rights as personal data subjects and respecting the applicable laws, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, the Act of 10 May 2018 on the protection of personal data (hereinafter referred to as the Act) and other relevant data protection legislation, the PDA undertakes to maintain the security and confidentiality of the personal data obtained from you. All our employees have been adequately trained in the processing of personal data and, as a Personal Data Administrator, we have implemented appropriate safeguards and technical and organizational measures to ensure the highest level of personal data protection. We have implemented procedures and policies for the protection of personal data in accordance with the GDPR, through which we ensure the lawfulness and fairness of data processing, as well as the enforceability of any rights you have as a data subject. Additionally, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. with the President of the Office for Personal Data Protection (hereinafter referred to as PUODO).

3. The following personal data is collected on the Website:

1. name and surname - may be processed when, as the Website users (clients or potential clients), you provide it to us via e-mail, registration form, order form, contact form available on the Website, by post or when contacting us by phone in order to use our offer,

2. telephone number - may be processed when you call us (as a client or potential client), as well as when you provide it to us via e-mail, registration form, order form, contact form available on the Website or by post, to enable contact with you if such need arises in connection with the provided services, as well as in order to answer questions concerning our offer,

3. e-mail address - it may be processed when you, as the Website users (clients or potential clients), provide it to us to enable contact with you via e-mail, registration form, order form or contact form available on the Website, as well as via post or phone. We use it to send you an order confirmation, contact you in case there is an issue related with order processing and to answer questions connected with our offer. If you have agreed to receive marketing content and you have become a subscriber to our newsletter, we will also send you commercial information several times a month,

4. NIP - we collect Tax Identification Number from businesses and individuals who request an invoice and have a NIP number,

5. device IP address or browser identifier - data resulting from the general rules of Internet connections, such as IP address (and other information contained in system logs), is used for technical and statistical purposes, including in particular the collection of general demographic information (e.g. about the region from which the connection is made),

6. other data may potentially be collected in the framework of conducting specific matters or may be provided by you as the Website user (as a client or potential client) via e-mail, contact form available on the Website, post or by phone.

4. Providing data indicated in the preceding paragraph is necessary in the cases specified therein, including in particular:

1. using the services offered on the Website, including without having to register (creating an Account) on the Website,

2. providing services ordered by you via the Website,

3. answering your questions and enabling contact via e-mail, contact form available at the Website, post or by phone,

4. voluntary registration (creating an Account) on the Website; in this case we store the data provided by you in order to facilitate future use of the services available on the Website until you unregister (delete your Account),

5. for the purposes of the newsletter service (subscription) - if you wish to be informed about interesting events and commercial offers, you may become a subscriber to our newsletter; subscription is voluntary and you may unsubscribe from it at any time.

5. The Website uses Cookies technology in order to adapt its functioning to your individual needs. Therefore, you can consent to the data and information you enter be remembered, so that you can use them next time you visit the Website without having to enter them again. These data and information will not be available to owners of other websites. If you do not agree to the personalization of the Website, you should disable the use of cookies in the options of your web browser.

6. Each user of the Website is able to choose whether and to what extent they want to use our services and share their information and data, within the scope of this Privacy Policy.

7. In accordance with the principle of minimization, we process only those categories of personal data that are necessary to achieve the purposes referred to in sections 3 and 4 above.

8. We process personal data for the period necessary to achieve the purposes set out in sections 3 and 4 above. Personal data may be processed for a longer period where such a right or obligation imposed on us as the PDA results from specific legal provisions, from the PDA legitimate interest referred to in section 10.c) below (i.e. throughout the claims statute of limitations period or the end of the respective proceedings if any were instituted during such period) or if the service that we provide is of a continuous nature (e.g. newsletter subscription).

9. The source of the Personal Data processed by the PDA are the data subjects.

10. The legal basis for the processing of your personal data is:

1. Article 6.1.b) of the GDPR, i.e. the necessity to perform a contract to which you are a party or to take steps at your request prior to entering into a contract (applies only to natural persons), or

2. Article 6.1.c) of the GDPR, i.e. indispensability to fulfill legal obligations of the PDA, or

3. Article 6.1.f) of the GDPR, i.e. the PDA’s legitimate interest in the performance of a contract in the case of its conclusion by a commercial company or other business entity (association, foundation, public institution, etc.), establishment, investigation or defense of claims until the statute of limitations or until the end of relevant proceedings, if any, initiated during this period, or

4. Article 6.1.a) of the GDPR, i.e. your consent to the processing of personal data for specific purposes where other legal grounds for processing personal data do not apply - e.g. in the case of the provision of a newsletter service.

11. Personal data is not transferred by us to a third country or international organization within the meaning of the GDPR. If such personal data is transferred to a third country or international organization, you will be informed in advance and the PDA will apply the safeguards referred to in Chapter V of the GDPR.

12. We do not share any personal data with third parties without the express consent of the data subject. Personal data without the consent of the data subject can be shared only with entities under public law, i.e. authorities and administration (e.g. tax authorities, law enforcement agencies and other entities empowered by generally applicable laws).

13. If there is a "Like" button or other links within the Application to the Administrator's social media accounts, with regard to data relating in particular to the IP or Internet browser identifier, if the Administrator uses the following products:

1. Facebook (e.g. Facebook, Messenger, Instagram) - the above data is processed on a jointly administered basis with Facebook Ireland Ltd. with its registered office at: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland,

2. Google (e.g. YouTube, Maps) - the above data is processed on a jointly administered basis with Google Ireland Ltd. with its registered office at: 4 Barrow St, D04 E5W5, Dublin, Ireland (Google Building Gordon House).

3. LinkedIn - the above data is processed on a jointly administered basis with LinkedIn Ireland Unlimited Company with its registered office at: Gardner House, 2 Wilton Place, Dublin 2 Ireland.

4. Twitter - the above data is processed on a jointly administered basis with Twitter International Company with its registered office at: The Academy, 42 Pearse Street, Dublin 2, Ireland.

If, in the cases referred to in this section, there would be a transfer of personal data to third countries, this will take place in accordance with the principles set out in section 11.

14. Personal data may be entrusted for processing to entities that process such data on our behalf as the PDA. In such a situation, as the Personal Data Administrator, we enter into a personal data processing entrustment agreement with the processor. The processing entity processes the entrusted personal data only for the purposes, to the extent and for the needs indicated in the entrustment agreement referred to in the preceding sentence. Without entrusting your Personal data to the processor, we would not be able to carry out our activities on the Website. As the PDA, we entrust personal data for processing to the entities:

1. providing hosting services for the website on which the Website operates,

2. providing other services that are necessary for the day-to-day operation of the Website.

15. Personal data is not subject to profiling by us as the PDA within the meaning of the provisions of the GDPR.

16. In accordance with the provisions of the GDPR, any person whose personal data we process as the PDA has the right:

1. to be informed about the processing of their personal data, as referred to in Article 12 of the GDPR,

2. to have access to their personal data as referred to in Article 15 of the GDPR,

3. correct, complete, update, or rectify personal data as referred to in Article 16 of the GDPR,

4. to erase data (right to be forgotten) referred to in Article 17 of the GDPR,

5. to restrict processing referred to in Article 18 of the GDPR,

6. to transfer data referred to in Article 20 of the GDPR,

7. to object to the processing of their personal data, as referred to in Article 21 GDPR,

8. in case of the legal basis referred to in section 10.d) above - the right to withdraw consent at any time without affecting the legality of the processing performed on the basis of consent before its withdrawal,

9. not to be subject to profiling referred to in Article 22 in conjunction with Article 4.4 of the GDPR,

10. to file a complaint to the supervisory authority (i.e. to the President of the Office for Personal Data Protection) referred to in Article 77 of the GDPR,

taking into account the rules for the use and exercise of these rights under the GDPR provisions.

17. If you wish to exercise your rights referred to in the preceding section, please send us an e-mail or a letter to the mailing address referred to in section 18 below.

18. All inquiries, requests and complaints regarding the processing of personal data by the PDA, hereinafter referred to as Notices, should be addressed to the following e-mail address: pomoc@sellintegro.pl or in writing to the following address: ul. Grabiszyńska 163, 53-439 Wroclaw, Poland.

19. The Notice has to clearly indicate the following information:

1. personal details of the person or persons to whom the Notice relates,

2. the event that is the reason for the Notice,

3. the author’s demands and the legal basis for such demands,

4. the expected manner of settling the matter.

20. Each identified security breach shall be documented, and if one of the situations set out in the provisions of the GDPR or the Act occurred, such breach of data protection provisions is notified to the data subjects and, if applicable, to the PUODO.

21. All capitalized words shall have the meaning given to them in the Website Terms and Conditions, unless otherwise stated herein.

22. The provisions hereof apply, to the extent possible, to all persons with whom we have legal relations and whose personal data we administer, including in particular our clients, contractors, newsletter subscribers and.

23. In matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply. In case of conflict between the provisions of this Privacy Policy and the aforementioned regulations, these regulations shall prevail.