Remember that you can always withdraw your consent. Personal data will be processed to the extent necessary to perform the contract or take action for the benefit of or at the request of the person to whom they relate. Provision of personal data is voluntary and at the same time conditions, among other things, to take action before entering into a contract. Personal data will be processed for the necessary period of no more than 6 years, and everyone has the right to rectify, delete, limit processing, object to processing and transfer. Any data subject may file a complaint with a supervisory authority. In the case of an inquiry to Alfa Forwarding Ltd., sp. z o.o., the controller of personal data is Alfa Forwarding Ltd., sp. z o.o., Tadeusza Wendy 7/9, 81-341 Gdynia, NIP: 586-02-03-656, while in the case of an inquiry to Alfa Agencja Celna sp. z o. o., the controller of personal data is Alfa Agencja Celna sp. z o. o. Tadeusza Wendy 7/9, 81-341 Gdynia, NIP: 958-14-66-815

§1 Identity of the data controller

  1. The administrator of the personal data provided during the use of the Service run under the name of alfaagencjacelna.pl (ALFA FORWARDING LTD. Ltd. Podolska 21 Street, 81-321 Gdynia, NIP: 5860203656, REGON: 190314596, KRS: 0000077114)
  2. Data shall be processed in accordance with currently applicable laws; i.e. Regulation 2016/679 of the European Parliament and of the Council of the EU of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (hereinafter: RODO), the Data Protection Act of May 10, 2018, and the Act of July 18, 2002 on the provision of electronic services.
  3. The following Privacy Policy covers the rules for the processing of data of Site Users, as well as of persons entering into contracts with the Data Controller, including those related to the execution of an Order in the Online Store, as well as data collected through contact with the Data Controller (e-mail address or telephone) or traditional correspondence, as well as of persons who like and/or observe the Administrator's fanpage on social media, if it operates.

§2 Definitions used

  1. The following definitions are used in this policy:
    1. Service- internet service available at  alfaagencjacelna.pl Through which the User can: view its contents, contact the data controller (contact form).
    2. Personal data controller - the entity that decides the purpose and means of data processing, in this policy it is understood: ALFA FORWARDING LTD. Ltd.  ul.Podolska 21, 81-321 Gdynia.
    3. User - A natural person to whom the data pertains and who uses the services available on the Website/Store.
    4. Personal information - any information that, without unreasonable time and cost, can lead to the identification of an individual, including his or her identification, address and contact information.

§3 Purposes of personal data processing

  1. The Personal Data Administrator processes personal data only when permitted by currently applicable laws, including for the following purposes:
    1. to take action at the request of the data subject, including responding to inquiries made through electronic means of communication or for the purpose of handling traditional correspondence, and this processing is carried out on the basis of Article 6(1)(b) of the RODO,
    2. to send ordered marketing information by electronic means (newsletter) to the e-mail address provided by the User for this purpose, and this processing takes place on the basis of Article 6(1)(a) RODO, i.e. the consent of the data subject,
  2. marketing of the Controller's own products and services by traditional means, on the basis of Article 6(1)(f) RODO, i.e. for the purpose of pursuing the legitimate interests of the Controller or the data subject,
    1. for the purpose of sending an email requesting an evaluation of the Store and/or Goods/Product is carried out on the basis of Article 6(1)(f) of the RODO, and this processing is carried out for the legitimate purpose of the data controller (Seller), which is to improve the offer and/or Goods/Product and/or Store by collecting reliable opinions about them by the Store owner,
    2. Sending a request for feedback on the Data Controller's services and goods/products through external satisfaction survey services such as [e.g. Opineo, Ceneo, etc.,.] with the consent of the data subject, i.e. on the basis of Article 6(1)(a) of the RODO, [note: sending a request for feedback directly from a vendor/company owner to a customer is done on a different basis than the customer's use of satisfaction survey services].
    3. the assertion of rights and claims by the Data Controller or the data subject, based on Article 6(1)(f) of the RODO and is done for a legitimate purpose.
  3. The provision of personal data is necessary for the performance of a distance contract, including the shipment of goods or the provision of a digital product and the issuance of an accounting document, the investigation of claims, as well as to answer questions. Provision of personal data in other respects is voluntary.
  4. Failure to provide the required data makes it impossible to execute a distance contract, issue a bill or invoice, or make contact at the request of the data subject.

§4 Ways of obtaining data

  1. User's personal data is collected directly from data subjects, i.e. through:
    1. filling out the form with contact information when submitting an inquiry via the form on the site,
    2. Filling out the newsletter sign-up form,
    3. filling out the order form in the store-online,
    4. registration of an account on the Website,
    5. Providing data for the preparation and conclusion of the contract,
    6. direct contact with the data controller using the contact details available on the website or in traditional form at the place of business.

§5 Scope of data processed

  1. The scope of personal data processed has been limited to the minimum necessary to provide services in the field:
    1. submission of an inquiry through the contact form or by means of contact details available on the site: e-mail address telephone number, e-mail address, first name, any other data voluntarily provided by the data subject,
    2. make a newsletter subscription: name, email address,
    3. placing an order in the online store: name, email address, phone number, delivery address, and possibly the address of the pickup point,
    4. registration of an account on the Website or online store: name, email address, password, login,
    5. issuance of a bill or invoice: name and surname or name of the entity, registered office address, Tax Identification Number,
    6. preparation and conclusion of the contract: name, address, identity card number, etc.

§6 Period of data processing

  1. The period of data processing depends on the purpose for which the data was collected and is for the purpose:
    1. conclusion and performance of a sales contract, including distance sales - for the period necessary to document the contract performed, including the issuance of a bill or invoice - 5 years, counting from the end of the calendar year in which the deadline for payment of tax expired, pursuant to Article 112 of the Law of March 11, 2004 on tax on goods and services, in connection with Article 70 of the Law of August 29, 1997. - Tax Ordinance,
    2. for the purpose of sending commercial information by electronic means (newsletter) and/or setting up an Account in the Store/submitting a request for opinion by external satisfaction survey services - until the consent is revoked, without affecting the compatibility of the processing carried out before its revocation,
    3. for the period necessary to answer a question asked via a contact form or by telephone, but for no longer than 6 months, unless the person decides to conclude a contract with the Personal Data Controller,
    4. for the purpose of asserting claims, pursuant to the law under Article 118 of the Act of April 23, 1964. - Civil Code. Unless a special provision provides otherwise, the statute of limitations is six years, and for claims for periodic benefits and claims related to the conduct of business - three years.

§7 Recipients of data

  1. The User's personal data may be entrusted to other entities for the purpose of performing services on behalf of the data controller, in particular to entities in the field of:
    1. Service and maintenance of the IT systems in which the data is processed, including for newsletter automation, invoicing, order processing, etc..,
    2. conducting accounting services,
    3. running an office service,
    4. courier service broker,
    5. Dropshipping and/or logistics handling of orders.
  2. Your personal data may also be shared with entities that support the data controller, including entities that provide courier and postal services, online payment processing.
  3. User's personal data are not transferred to third countries or international organizations.
  4. Personal data may be processed outside the European Economic Area in a so-called third country, in particular in the United States of America in connection with the Administrator's use of IT solutions whose servers are located outside the European Economic Area. The basis for data processing in third countries will be the European Commission's Decision 2021/914 on standard contractual clauses for the transfer of personal data to third countries. The data controller and service provider will provide the highest guarantees for the protection of the entrusted data. Data processing will not violate the privacy of individuals.

§8 Data controller's fanpage on social media

  1. The data controller is also at the same time the co-controllers of the data of its observers in social media - especially those who use electronic communication means on the fanpage - Facebook
  2. In other respects, the controller of the data of Users of these social networks is Meta Platforms Ireland Limited (formerly: Facebook Inc., headquartered at 1 Hacker Way, Menlo Park, CA 94025, USA), and the processing of this data is carried out in accordance with the terms and conditions described in the rules and privacy policies of the users of these sites, including: https://www.facebook.com/privacy
  3. Personal data of the User who likes and/or observes the Administrator's fanpage on social media will be processed outside the European Economic Area in a so-called third country, in particular in the United States of America in connection with the use of IT solutions whose servers are located outside the European Economic Area.
  4. Processing of data in third countries will be based on the European Commission's Decision 2021/914 on standard contractual clauses for the transfer of personal data to third countries. The data controller and service provider will provide the highest guarantees for the protection of the entrusted data. Data processing will not violate the privacy of individuals.

§9 Rights of data subjects

  1. Data subjects have the right:
    • access to the content of personal data, including receiving a first copy of the content of personal data free of charge,
    • To correct data,
    • The right to erasure, unless there are other laws that oblige the data controller to archive the data for a certain period of time,
    • The right to data portability, insofar as the processing is based on a contract or the consent of the data subject, and the processing is carried out by automated means,
    • to revoke consent to the processing of personal data - if the basis for such processing was the consent of the data subject. The revocation of consent does not affect the compliance of the processing that was carried out before its withdrawal,
    • to object to the processing of data - on grounds related to your particular situation against the processing of personal data concerning you based on Article 6(1)(e) or (f) of the RODO, as well as the right to restrict processing,
    • The right not to be subject to automated profiling, if the controller would make decisions based solely on automated profiling with legal consequences for or similarly affected the data subject,
    • The right to control the processing of data and to be informed about who the data controller is, as well as to obtain information about the purpose, scope and manner of data processing, the content of the data, the source of the data, and the manner of sharing, including the recipients or categories of recipients of the data,
  2. In order to exercise the right to information, access to the content of data, correction of data, as well as other rights, you can contact the Data Controller.
  3. The data subject also has the right to lodge a complaint with the Office for Personal Data Protection (OPA) if the processing of data violates the provisions of the General Data Protection Regulation (RODO). The complaint may be filed electronically or by mail to: Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.

§10 Final provisions

In the event of a change in the applicable privacy policy, in particular if required by the technical solutions used or changes in the law regarding the privacy of data subjects, appropriate modifications will be made to this Privacy Policy, which will be effective within 14 days of their publication on the Website/Store.