Privacy Policy

PERSONAL DATA CONTROLLER

The controller of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the Regulation), is Tomasz Mazurkiewicz, conducting business under the name OEMatic Tomasz Mazurkiewicz, ul. Stanisława Staszica 86a, 96-500 Sochaczew, NIP 8371385458, REGON 140005026 (hereinafter: OEMatic). Contact with the Controller: e-mail info@oematic.pl, tel. +48 603 443 100.

PURPOSE AND SCOPE OF DATA COLLECTION

During the user's or Customer's presence on the Website, in particular when using Electronic Services or purchasing a Product or service made available by OEMatic on the Website, or when using Electronic Services, they may be asked to provide (disclose) their personal data. The scope of data provided is divided into mandatory and optional data, each time specified in the relevant form for entering such data, according to the needs of the particular Product, Service or Electronic Service that the user or Customer intends to use. Providing data is always voluntary, but sometimes necessary for the proper completion of an order or Electronic Service.

Data are processed solely for the purpose for which they were provided to OEMatic. Processing data for marketing purposes takes place only after separate consent has been obtained from the user or Service Customer. Processing data for the purpose of sending commercial information takes place only after separate consent has been obtained from the user or Service Customer.

The purpose of the Privacy and Security Policy is to define the activities carried out by OEMatic in relation to the protection of personal data processed, including data collected via the Service, such as registration, placing orders, storing data on servers and any other similar data-processing activities when using the Service. All activities of OEMatic are subject to Polish law and the General Data Protection Regulation (the Regulation). The Privacy and Security Policy is governed by Polish law and the General Data Protection Regulation (the Regulation).

RETENTION PERIOD OF PERSONAL DATA

The Service Customer's data will be processed for the duration of the electronic Service agreement and for up to 30 days after termination of the electronic Service agreement, and in the case of a concluded Agreement, for the period of performance of that Agreement and for up to 10 years after it has been completed or withdrawn from.

VOLUNTARY PROVISION OF DATA

Each user or Service Customer, in order to use the Electronic Services or place an order, has the right to enter data voluntarily. In the case of using certain services, including during the order placement process, entering data, although voluntary, may prove necessary for the performance of the Electronic Service or for completing the order.

The data necessary (mandatory) to be entered when using the Electronic Service or completing an order are always specified in the form intended for entering those data.

RIGHT OF ACCESS TO DATA

Each user or Service Customer has the right to access and correct their data, in particular by accessing the Customer Panel or by contacting OEMatic.

In the event of contact with OEMatic, for security reasons, your identity will be verified.

RIGHT TO ERASURE OF DATA

Respecting the rights of OEMatic users and Customers, we would like to inform you that each person has the right to delete their data. This right is commonly referred to as the "right to be forgotten". OEMatic is obliged to delete all data of the person making the request, provided that there is no other legal basis for further processing of those data; such a basis may arise, for example, from an obligation to retain financial records. However, if it is not possible to fulfil the request, we will inform you of this together with the legal basis.

RIGHT TO DATA PORTABILITY

• At the express request of the person whose data are processed by OEMatic, you will receive from us a file with data structured in a commonly used format. Under this right, you may also indicate an entity to which, as the data controller, we should send your data.
• Fulfilment of this right may take up to 30 days. At the same time, for security reasons, we will verify your identity to ensure that your data reaches the correct person.

SECURITY AND PROTECTION OF PERSONAL DATA

OEMatic declares that it processes the personal data of users and Service Customers in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and that it applies technical and organisational measures ensuring protection of the processed data appropriate to the risks and categories of data protected, and in particular secures the personal data of users and Service Customers against disclosure to unauthorised persons, loss or damage.

COOKIES

Cookies mean IT data, in particular short text files, stored by the web browser or directly on the end devices of users intended for use with websites. These files allow the user's device to be recognised and the website to be displayed appropriately, tailored to the user's individual preferences. Cookies usually contain the name of the website from which they originate, the storage time on the end device and a unique number.

Cookies are used for the following purposes:

creating statistics that help to understand how users use the Service, which directly affects the improvement of its structure and content;

maintaining the Service user's session, so that they do not have to re-enter their login and password on every subpage of the Service or perform additional actions, e.g. add a product to the basket again;

defining the user's profile in order to display tailored content to them in advertising networks, in particular the Google network.

Within the Service, two main types of cookies are used: "session" cookies and "persistent" cookies. Session cookies are temporary files stored on the user's end device until logout, leaving the Service or switching off the software (web browser). Persistent cookies are stored on the user's end device for the period specified in the cookie settings or until they are manually deleted by the user.

Web browsing software (web browser) usually allows cookies to be stored on the user's end device by default. Service users may change these settings. The web browser allows cookies to be deleted. It is also possible to automatically block cookies. Detailed information on this can be found in the browser help or documentation.

Restrictions on the use of cookies may affect some of the functionalities available in the Service.

BLOCKING OR DELETING COOKIES

In accordance with the applicable provisions of the Act of 16 July 2004 Telecommunications Law (Journal of Laws 2004 No. 171, item 1800, as amended), in particular Article 173(2), the user has the right to decide on the access of cookies to their end device by setting the appropriate settings (permissions) for these files in the settings window of their web browser.

Leaving the software installed on the end device with its settings unchanged means consenting to the placement of text files of the "cookies" type on the user's device.

SERVER LOGS

Information about certain actions taken by users is logged at server level. These data are used solely for the purpose of administering the Service.

Viewed resources are identified by URL addresses. In addition, the following may be recorded:

time the request arrived;

time the response was sent;

the user's station name – identification carried out by the HTTP protocol;

information about errors that occurred during the execution of the HTTP transaction;

URL of the page previously visited by the user (referer link) – if access to the Service occurred via a link;

information about the user's browser;

information about the user's IP address;

The above data are not associated with specific persons browsing the site.

The above data are used solely for the purpose of administering the Service.

DISCLAIMER

The Privacy and Security Policy does not cover information concerning services, goods or websites of third parties, or offers made available on the Website under agreements with other entities. Third parties determine the separate, individual terms governing the operation of their services, goods or websites in their own terms and conditions, at their own discretion and responsibility.

TRANSFERRING DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)

OEMatic transfers personal data to third countries outside the European Economic Area solely for the purpose for which it was provided, to Google LLC with its registered office in Mountain View in the United States on the basis of the so-called EU-U.S. Privacy Shield (hereinafter: the Agreement), i.e. in accordance with the European Commission Decision of 12 July 2016 No. IP/16/216, the transfer of personal data to entities based in the United States that have joined the Agreement provides an adequate level of protection of personal data, in accordance with Article 45 of the Regulation.

CONTACT

OEMatic gives Website users the option to contact us regarding data protection, as well as support in editing settings, in particular adjusting cookies to their preferences, via the following or in the case of other enquiries:

electronically by email to: info@oematic.pl

in writing (by correspondence) to: Sochaczew, ul. Stanisława Staszica 86a, 96-500, Poland. oematic.pl