On May 25, 2018, the Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on free movement of such data and repeal of Directive 95/46/EC will become effective, hereinafter referred to as: GDPR.

Protection of information concerning Users of the altergraf.pl website is very important to us, which is why we make every effort to ensure the highest level of security of protection of personal data entrusted to us in connection with the use of our website. This privacy policy clarifies and explains the principles and scope of processing of your personal data by us, taking into account the provisions of GDPR.

By protecting your personal data, we use technical means and organizational solutions that will allow us to ensure a high level of protection of personal data being processed, as well as secure them against access by unauthorized persons.

General Information Clause

According to art. 13 para. 1-2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on free movement of such data and repealing Directive 95/46/EC (general regulation on protection data) (OJ UE L 119, p. 1) – hereinafter referred to as GDPR - we would like to inform you that:

1. Administrator of personal data

1. The administrator of personal data collected in connection with the use of the altergraf.pl online store is: ALTER GRAF SP Z O O SPÓŁKA KOMANDYTOWA based in Szlachecka 92, 32-080 Brzezie, Taxpayer Identification Number:9452099183 National Business Registry Number: 120630308 (hereinafter: "Administrator").
2. The Administrator can be contacted via email: krakow@altergraf.pl
3. The Administrator processes your personal data in accordance with the Regulation of 27 April 2016 on protection of individuals with regard to the processing of personal data and on free flow of such data and the repeal of Directive 95/46/EC (hereinafter: "GDPR").

2. Objectives and basics of processing

Your personal data will be processed:

1. for the purposes of proper performance of contracts concluded within the on-line store via the altergraf.pl website/hereinafter: Website/(legal basis of art. 6 (1) (b) of GDPR). This means that these data are needed in particular to: register on the Website, enter into a contract, make settlements, deliver the ordered goods, use all of your consumer rights, such as, for example, withdrawal from a contract, warranty or quality guarantee.
2. for archival purposes (evidence) being the implementation of our legitimate interest in providing information in the event of legal necessity to prove facts (legal basis of art. 6 (1) (f) of GDPR);
3. in order to possibly establish, investigate or defend against claims being our legitimate exercise in this interest (legal basis of art. 6 (1) (f) of GDPR);
4. in order to receive information about new products and promotions, in the form of a newsletter. Subscribing to the ALTER GRAF SP Z O O SPÓŁKA KOMANDYTOWA newsletter based on consent to the processing of your personal data - email address. The Newsletter contains proprietary commercial information on, for example, promotions or sales (legal basis of art. 6 (1) (a) and GDPR)
   1. If you agree to receive the newsletter, you will have the right to withdraw your consent at any time without affecting the legality of the processing, which was made on the basis of consent before its withdrawal. You can withdraw your consent by sending an e-mail to: krakow@altergraf.pl.
   2. Providing personal data referred to in par. 2.5 above is voluntary, but necessary to send the newsletter. If we withdraw your consent, we will stop processing your personal data.
5. to promote your own brand and build and maintain a brand-related community. The administrator processes your personal data when you visit Administrator profiles carried out in social media (Facebook and Instagram). This data is processed only in connection with profile maintenance, including to inform you about the activity of the Administrator and to promote various types of events, services and products, as well as to communicate with you through the functionality available in social media (legal basis of art. 6 para. 1 (f) of GDPR).

3. Type of data that we process The Administrator processes the following personal data, the provision of which is necessary to:

1. log in to the Website:
   1. first name and last name
   2. email address
2. making purchases on the Website:
   1. first name and last name
   2. delivery address
   3. phone number
   4. email address
3. in the event of withdrawal from the contract or acceptance of the complaint, when the refund is made directly to your bank account, please provide the account number in order to make a refund.

4. The right to object

Due to the fact that one of the grounds for processing is legitimate interest of the Administrator, i.e., determination, investigation or defense of claims (art. 6 sec.1 (f) of GDPR) you have the right to object to the processing of your personal data.

5. Period of data storage

1. The processing time of your data depends on the type of service provided and the purpose of processing. As a rule, the data is processed by the time the service is provided or the order is being processed, until consent is withdrawn or the effective opposition to data processing is filed in cases where the legal basis for data processing is the Administrator's legitimate interest. In addition, your data will be processed until it is necessary - in accordance with applicable law - to protect our rights and claims related to the implementation of the contract.
2. The period of storage of personal data may be extended each time for a period of limitation of claims if the processing of personal data will be necessary to seek possible claims or defend against such claims by the Administrator.

6. Recipients of data

1. Your personal information can be disclosed to our partners, that is companies we cooperate with by combining products or services, including: courier company General Logistics Systems Poland Sp. z o.o., with its registered office at ul. Tęczowa 10, Głuchowo | 62-052 Komorniki | Taxpayer Identification Number PL-785-15-61-831
2. In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as banks and payment operators, and entities providing legal services.

7. Transmission of data to third countries or international organizations

We do not transfer your data outside of Poland, the European Union or the European Economic Area.

8. Rights related to the processing of personal data

According to GDPR, you are entitled to:

1. the right to access your data and receive a copy thereof;
2. the right to rectify (correct) your data;
3. the right to delete data, limit data processing;
4. the right to object to data processing;
5. the right to transfer data;
6. the right to file a complaint to the President of the Office for Personal Data Protection or another competent supervisory authority if the data is deemed unlawful.

9. We process your personal data with your consent, expressed at the time of registration on the Website and at the time of confirmation of the transaction made on the Website.

Expressing consent to the processing of your personal data is completely voluntary, however, lack of consent prevents you from registering on the Website and making purchases via altergraf.pl.

We strive to ensure the fullest protection of your personal data, in accordance with the applicable law. If you nevertheless decide that we are processing this data illegally, you have the right to file a complaint with the supervisory authority (the President of the Office for the Protection of Personal Data).

The privacy policy is constantly altered and updated.