Remember that you can always withdraw your consent. Personal data will be processed to the extent necessary to perform the contract or to take action for the benefit of or at the request of the data subject. The provision of personal data is voluntary and at the same time conditions, among other things, the taking of pre-contractual action. The personal data will be processed for the necessary period not exceeding 6 years and everyone has the right to rectification, erasure, restriction of processing, objection to processing and data portability. Any data subject may lodge a complaint with a supervisory authority. In the case of an enquiry to Alfa Forwarding Ltd., sp. z o.o., the controller of personal data is Alfa Forwarding Ltd., sp. z o.o., Tadeusza Wendy 7/9, 81-341 Gdynia, NIP: 586-02-03-656, while in the case of an enquiry to Alfa Agencja Celna sp. z o.o., the controller of personal data is Alfa Agencja Celna sp. z o.o. Tadeusza Wendy 7/9, 81-341 Gdynia, NIP: 958-14-66-815

§1 Identity of the data controller

  1. The administrator of the personal data provided during the use of the Website, which is run under the name alfaagencjacelna.pl (ALFA FORWARDING LTD. Ltd. ul. Podolska 21, 81-321 Gdynia, NIP: 5860203656, REGON: 190314596, KRS: 0000077114)
  2. Data shall be processed in accordance with the currently applicable legislation; i.e. Regulation 2016/679 of the European Parliament and of the Council of the EU of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: RODO), the Data Protection Act of 10 May 2018, as well as the Act of 18 July 2002 on the provision of electronic services.
  3. The following Privacy Policy covers the rules for the processing of the data of the Users of the Site, as well as of persons entering into contracts with the Data Controller, including those related to the fulfilment of an Order in the Online Shop, as well as data collected through contact with the Data Controller (e-mail address or telephone) or traditional correspondence, as well as of persons who like and/or observe the Data Controller's fanpage on social media, if it operates.

§2 Definitions used

  1. The following definitions apply in this policy:
    1. Service- internet service available at  alfaagencjacelna.pl through which the User can: view its contents, contact the data controller (contact form).
    2. Personal data controller - the entity that decides on the purpose and means of data processing, in this policy it is understood to mean: ALFA FORWARDING LTD. Sp.zo.o.  ul.Podolska 21, 81-321 Gdynia.
    3. User - the natural person to whom the data relates who uses the services available on the Website/Store.
    4. Personal data - any information that, without unreasonable time and cost, can lead to the identification of an individual, including their identification, address and contact details.

§3 Purposes of personal data processing

  1. The Personal Data Controller shall only process personal data where this is permitted by current legislation, including for the purpose of:
    1. to take action at the request of the data subject, including to respond to enquiries made by means of electronic communication or to handle traditional correspondence, and this processing is based on Article 6(1)(b) of the DPA,
    2. to send requested marketing information by electronic means (newsletter) to the email address provided by the User for this purpose, and this processing takes place on the basis of Article 6(1)(a) RODO, i.e. the consent of the data subject,
  2. marketing of the Controller's own products and services by traditional means, on the basis of Article 6(1)(f) RODO, i.e. for the legitimate interests of the Controller or the data subject,
    1. for the purpose of sending an email requesting an assessment of the Shop and/or the Goods/Product is carried out on the basis of Article 6(1)(f) RODO, and this processing is carried out for the legitimate purpose of the data controller (Seller), which is to improve the offer and/or the Goods/Product and/or the Shop by collecting reliable opinions about them by the Shop owner,
    2. to send a request for feedback on the Data Controller's services and goods/products through external satisfaction survey services such as [e.g. Opineo, Ceneo, etc.,.] with the data subject's consent, i.e. on the basis of Article 6(1)(a) of the RODO, [note: the sending of a request for feedback directly by a vendor/company owner to a customer takes place on a different basis than the customer's use of satisfaction survey services].
    3. the assertion of rights and claims by the Controller or the data subject on the basis of Article 6(1)(f) of the RODO and is done for a legitimate purpose.
  3. The provision of personal data is necessary for the performance of a distance contract, including the dispatch of goods or the provision of a digital product and the issuing of an accounting document, the assertion of claims and the answering of questions. Otherwise, the provision of personal data is voluntary.
  4. Failure to provide the required data prevents the performance of the distance contract, the issuing of a bill or invoice or the making of contact at the request of the data subject.

§4 Means of data extraction

  1. User personal data is collected directly from data subjects, i.e. through:
    1. filling in your contact details when submitting an enquiry via the form on the website,
    2. filling in the newsletter subscription form,
    3. filling in the order form in the shop-online,
    4. registration of an account on the Website,
    5. the provision of data for the preparation and conclusion of the contract,
    6. direct contact with the data controller using the contact details available on the website or in traditional form at the place of business.

§5 Scope of data processing

  1. The extent of personal data processed has been limited to the minimum necessary for the provision of services in terms of:
    1. submit an enquiry via the contact form or by using the contact details available on the website: e-mail address telephone number, e-mail address, first name, any other data provided voluntarily by the data subject,
    2. to subscribe to the newsletter: name, e-mail address,
    3. placing an order in the online shop: your name, e-mail address, telephone number, delivery address and, if applicable, the address of the collection point,
    4. registration of an account on the Website or online shop: name and surname, e-mail address, password, login,
    5. to issue the bill or invoice: name and surname or name of the entity, registered office address, Tax Identification Number,
    6. preparation and conclusion of the contract: name, address, identity card number, etc.

§6 Period of data processing

  1. The processing period depends on the purpose for which the data were collected and is for the purpose:
    1. concluding and performing a sales agreement, including distance sales - for the period necessary to document the agreement performed, including issuing a bill or invoice - 5 years, counting from the end of the calendar year in which the tax deadline expired, pursuant to Article 112 of the Act of 11 March 2004 on tax on goods and services, in connection with Article 70 of the Act of 29 August 1997. - Tax Ordinance,
    2. for the purpose of sending commercial information by electronic means (newsletter) and/or for the setting up of an Account in the Shop/submission of a request for opinion by external satisfaction survey services - until the consent is revoked, without affecting the compatibility of the processing carried out prior to revocation,
    3. for the period necessary to answer a question asked via a contact form or by telephone, but for no longer than 6 months, unless the person decides to conclude a contract with the Data Controller,
    4. for the purpose of asserting claims, pursuant to the Act under Article 118 of the Act of 23 April 1964. - Civil Code. Unless a special provision provides otherwise, the period of limitation is six years, and for claims for periodic benefits and claims related to the conduct of business activity - three years.

§7 Recipients of data

  1. The User's personal data may be entrusted to other entities in order to perform services on behalf of the data controller, in particular to entities in the field of:
    1. the servicing and maintenance of the IT systems in which the data are processed, including for newsletter automation, invoicing, order processing, etc,
    2. accounting services,
    3. running the office service,
    4. courier service broker,
    5. dropshipping and/or logistics order handling.
  2. Your personal data may also be shared with entities that support the data controller, including entities that provide courier and postal services, online payment processing.
  3. Your personal data is not transferred to third countries or international organisations.
  4. Personal data may be processed outside the European Economic Area in a so-called third country, in particular in the United States of America in connection with the Administrator's use of IT solutions whose servers are located outside the European Economic Area. The basis for data processing in third countries will be the European Commission Decision 2021/914 on standard contractual clauses for the transfer of personal data to third countries. The data controller and the service provider will provide the highest guarantees for the protection of the entrusted data. Data processing will not violate the privacy of individuals.

§8 Controller's social media fanpage

  1. The data controller is also at the same time co-controllers of the data of its social media observers - especially those who use electronic means of communication on the fanpage - Facebook
  2. For the rest, the controller of the Users' data of these social networks is Meta Platforms Ireland Limited (formerly: Facebook Inc, with its registered office at 1 Hacker Way, Menlo Park, CA 94025, USA), and the processing of this data is carried out in accordance with the terms and conditions described in the rules and privacy policies of the users of these sites, including: https://www.facebook.com/privacy
  3. Personal data of the User who likes and/or follows the Administrator's fanpage on social media will be processed outside the European Economic Area in a so-called third country, in particular in the United States of America due to the use of IT solutions whose servers are located outside the European Economic Area.
  4. Processing in third countries will be based on the European Commission Decision 2021/914 on standard contractual clauses for the transfer of personal data to third countries. The data controller and the service provider will provide the highest guarantees for the protection of the entrusted data. Data processing will not violate the privacy of individuals.

§9 Data subjects' rights

  1. Data subjects are entitled to:
    • access to the content of personal data, including receiving a first copy of the content of personal data free of charge,
    • to rectify data,
    • the right to erasure, unless there are other legal provisions in force which oblige the data controller to archive the data for a specific period of time,
    • the right to data portability, insofar as the processing is based on a contract or on the consent of the data subject and the processing is carried out by automated means,
    • to withdraw consent to the processing of personal data - where the processing was based on the consent of the data subject. The revocation of consent does not affect the compatibility of the processing carried out before its withdrawal,
    • to object to the processing - on grounds relating to your particular situation against the processing of personal data concerning you based on Article 6(1)(e) or (f) of the RODO, as well as the right to restrict processing,
    • the right not to be subject to automated profiling, where the controller would make decisions based solely on automated profiling with legal consequences for or similarly affecting the data subject,
    • the right to control the processing of the data and to be informed of who the controller is and to be informed of the purpose, scope and means of the processing, the content of the data, the source of the data, and the manner of disclosure, including the recipients or categories of recipients of the data,
  2. In order to exercise your right to information, access to the content of your data, correction of your data, as well as other rights, you can contact the Data Controller.
  3. The data subject also has the right to lodge a complaint with the Data Protection Authority (DPA) if the processing of data violates the provisions of the General Data Protection Regulation (GDPR). The complaint may be lodged electronically or by post to: Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.

§10 Final provisions

In the event of a change to the applicable privacy policy, in particular if required by the technical solutions used or by changes in the law regarding the privacy of data subjects, appropriate modifications will be made to this Privacy Policy, which will be effective within 14 days of their publication on the Website/Store.