Privacy Policy

1. Identity of the Data Controller

The controller of your personal data is CeMat’70 S.A., ul. Wólczyńska 133, 01-919 Warsaw, Poland, NIP: 1180006587, KRS: 0000067845.

2. Contact Details of the Data Controller

You may contact the Controller through the Data Protection Officer. The Data Protection Officer is the contact person for all matters related to the processing of personal data and the exercise of rights related to personal data processing by the Personal Data Controller:

1. in writing to the following address:
CeMat’70 S.A.
ul. Wólczyńska 133
01-919 Warsaw
Poland

2. electronically via e-mail at: t.mirkowski@cemat70.com.

3. by telephone at: +48 503 640 010.

3. Purposes and Legal Basis for Data Processing

The Controller may process your personal data if it is necessary for you to use the website.
The legal basis for processing your personal data is enabling you to use the website, including completing the Contact Form.
Whenever the Controller refers to the “GDPR”, this means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the content of which is available on the website of the Polish Personal Data Protection Office:
https://uodo.gov.pl/pl/404/224

4. Purposes of Processing Data Provided in the Contact Form

The purposes of processing data you provide in the Contact Form include:
communication with you regarding messages sent through the Contact Form – based on the legitimate interest pursued by the Controller pursuant to Article 6(1)(f) GDPR; the Controller’s legitimate interest is contacting you, and also based on your consent expressed by entering your data into the form and sending it to us pursuant to Article 6(1)(a) GDPR;
communication with you regarding your consent to the processing of data for marketing purposes – based on the legitimate interest pursued by the Controller pursuant to Article 6(1)(f) GDPR; the Controller’s legitimate interest is direct marketing of its own products and services through contact with you, and also based on your consent expressed by entering your data into the form and sending it to us pursuant to Article 6(1)(a) GDPR;
archiving documents, maintaining statistics, and pursuing or defending against claims related to the performance of a sales agreement – the legal basis for such processing is the necessity to process data for the purposes of the legitimate interests pursued by the Controller pursuant to Article 6(1)(f) GDPR; the Controller’s legitimate interest is document archiving, maintaining statistics, pursuing claims, or defending against claims.

The purpose, scope, and categories of recipients of data processed by the Controller result from actions taken by you while using the website.

The Contact Form collects the following data:
first name,
surname,
telephone number,
e-mail address.

Optionally, within the content of your inquiry, you may voluntarily provide additional personal data at your own discretion.
The above data is necessary because providing it enables us to respond to your inquiry.
Providing data is voluntary; however, failure to provide the data will make it impossible to contact you and respond to your message.

5. Data Retention Period

Your personal data will be processed for the period necessary to achieve the purposes for which the data is processed, or until you object if the legal basis for processing is the legitimate interest of the Controller, or until you withdraw your consent if the legal basis for processing is consent.
Afterward, the Controller may store your data until the expiration of any claims or until the expiry of the legal obligation to retain the data.

6. Categories of Recipients

Your data may be processed by the Controller’s subcontractors — entities whose services the Controller uses in the performance of its obligations.
Your personal data will always be processed using appropriate measures ensuring the protection and security of personal data.
Due to the use of providers storing data on servers located in the United States (Google LLC), the Controller may transfer your personal data outside the European Economic Area. However, these subcontractors participate in the Privacy Shield program and thereby guarantee an appropriate level of personal data protection required under European regulations.

7. Automated Decision-Making and Profiling

The Controller will not make decisions concerning you in an automated manner, including profiling.

8. Your Rights

You have the right to:

access your personal data and request rectification, deletion, or restriction of processing;
data portability;
withdraw consent to the processing of personal data to the extent that processing is based on consent (withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal);
object to the processing of your personal data to the extent that processing is based on the legitimate interest of the Controller;
lodge a complaint with the supervisory authority responsible for personal data protection (the President of the Personal Data Protection Office) if you believe that data processing violates the GDPR.

To exercise your rights, please contact the Controller.

9. Cookies

What are cookies?

Cookies are small text and numerical files stored by an IT system on your IT device (computer, phone, or another device used to connect to the website) while browsing the website. They allow identification when reconnecting to the website from the device on which they were stored.

Legal Basis for the Use of Cookies

Cookies are used based on your consent. Your consent is expressed through appropriate settings of your software, in particular the web browser installed on the device you use to browse the website.

Why Does the Controller Use Cookies?

The main purpose of the Controller’s use of cookies is website management and improving the quality of content provided through the website. Cookies are necessary for the proper display and functioning of the website.

The Controller may also process data contained in cookies for anonymous statistics and analyses showing how the website is used and the average duration of visits.

Cookies are not used to identify website users.

Types of Cookies Used on the Website

The website uses the following types of cookies:

session cookies, automatically deleted after closing the web browser;
persistent cookies, stored on the device for a specified period regardless of browser closure;
first-party cookies set by the website;
third-party cookies set by external services such as Google Analytics and Google Tag Manager.

Both first-party and third-party cookies are used on the website.

10. Tools Used by the Controller

The Controller uses Google Analytics and Google Tag Manager services provided by Google Inc. (head office: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). These services support the Controller in analyzing and improving the website, creating statistics, analyzing website functionality, and improving the quality of website use based on the legitimate interest of the Controller.

Google Analytics, together with advertising functions, uses cookies to analyze the way the website is used. Data stored in Google Analytics is not associated with specific individuals using the website and is not used to identify you. The data constitutes only supporting material for website administration and statistical analysis.

Google Tag Manager uses cookies to manage tags within the website.

The obtained data is processed collectively and anonymously, meaning it does not allow identification of individuals.

Users of supported browsers may block the transfer of data from electronic devices to Google Analytics by downloading and installing a free browser add-on available at:
https://tools.google.com/dlpage/gaoptout

Detailed information about data collection and processing by these services is available at:
www.google.com/intl/pl/policies/privacy/partners/

11. How to Change Cookie Settings

Most browsers accept cookies by default. You may withdraw or change the scope of previously granted consent for the use of cookies at any time and delete them from your browser.

You may also limit or disable cookies in your browser settings so that the browser blocks cookies or warns you before storing cookies on your device.

However, in such cases, some website functionalities may become unavailable, and in extreme cases, proper website operation may be completely blocked.

12. Server Logs

Using the website involves sending requests to the server on which the website is stored. Each request sent to the server is recorded in server logs.

Logs include, among others:

your IP address,
server date and time,
information about your web browser,
information about the operating system you use.

Logs are stored and retained on the server. Data stored in server logs is not associated with specific individuals using the website and is not used for identification purposes.

Server logs are used solely for website administration purposes, and their contents are disclosed only to persons authorized to administer the server.