PRIVACY POLICY OF

MAXCOM JOContact us for availability COMPANY

 

§ 1. Definitions
1. Administrator – MAXCOM JoContact us for availability Company with its registered office in Tychy (postal code: 43 – 100), 23a  Towarowa Street, registered by the District Court Katowice – East in Katowice, VIII Commercial Department of the National Court Register, under National Court Register number 0000410197, EU VAT no PL 626 25 37 364.
2. Personal data – all information about a natural person identified or identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, internet identifier and information collected through cookies and other similar technology.
3. Data processing – it means an operation or set of operations performed on personal data or sets of personal data in an automated or non-automated manner, such as collecting, recording, organizing, storing, adapting or modifying, downloading, viewing, using, disclosing by uploading, distributing or otherwise providing, matching or combining, limiting, deleting or destroying.
4. Policy – this privacy policy.
5. General Data Protection Regulation (EU GDPR) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing the 95/46 / EC Directive.
6. UODO (Data Protection Office) – the Act of the 10th of May 2018 on the protection of personal data.
7. Online store – an online store run by the Administrator at www.maxcom.pl
8. Website – the website run by the Administrator at www.maxcom.pl
9. Customer – any natural person visiting the Website and Online Store or using one or several services or functionalities described in the Policy.
10. Profiling – it means any form of automated processing of personal data that involves the use of personal data to evaluate certain personal factors of a natural person, in particular to analyze or forecast aspects of the natural person’s work effects, his economic situation, health, personal preferences, interests, credibility, behavior, location or movement.

§ 2. Processing of personal data in connection with regards to use of the Website and Online Store and the security of personal data processing.
1. In connection with the Customer’s use of the Website and Online Store, the Administrator collects data to the extent necessary to provide the services offered, as well as information about the Customer’s activity on the Website and Online Store on the terms and for the purposes described in this Policy.
2. The administrator ensures the transparency of data processing, in particular, always informs about data processing at the time of collecting personal data, including the purpose and legal basis for processing. The administrator collects personal data to the extent necessary for the indicated purpose and processes personal data only for the period in which it is necessary.
3. The administrator ensures the security and confidentiality of personal data processing and the implementation of the rights of data subjects at every stage of personal data processing in accordance with applicable regulations. In the event that – despite the organizational and technical measures used – an incident related to the protection of personal data occurres, the Administrator will inform the data subjects about such an event in a manner consistent with applicable regulations.
4. Only authorized employees and associates of the Administrator have access to personal data.

§ 3. Purposes and legal grounds for processing personal datain the Website and Online Store
1. Personal data of all the Website and the Online Store Users (including the IP address or other identifiers and information collected via cookies or other similar technologies) that have not created an account in the Online Store are processed by the Administrator for the following purpose:a. providing services electronically in the scope made available to Users of content collected on the Website and the Online Store – legal basis: art. 6 clause 1 letter b) GDPR,b. execution of orders made without registration in the Online Store – legal basis: art. 6 clause 1 letter b) GDPR,c. handling complaints – legal basis: art. 6 clause 1 letter b GDPR,d. exercising the right to withdraw from the contract – legal basis: art. 6 clause 1 letter b) GDPR,d. exercising the right to withdraw from the contract – legal basis: art. 6 clause 1 letter b) GDPR,e. analytical and statistical – legal basis: art. 6 clause 1 letter f GDPR. The Administrator’s legitimate interest lies in conducting analyzes of clients’ activities as well as their preferences in order to improve the functionalities and services provided,f. establishing and pursuing claims or defense against claims – legal basis of art. 6 clause 1 letter f GDPR. The Administrator’s legitimate interest is to protect his rights in connection with his operation of the Website and Online Store.g. marketing of the Administrator and other entities – legal basis: art. 6 clause 1 letter a) and f). The Administrator’s legitimate interest lies in directing the advertising content to the Customer (more: read § 3 point 5 of the Regulations).
2. All Users using the Website and the Online Store, and who have set up an account in the Online Store, are asked by the Data Administrator to provide personal data necessary to create and operate the account. Providing personal data, marked as mandatory, is necessary to set up and operate an account. Failure to provide it prevents the creation of an account in the Online Store. In order to improve service, the Customer may provide additional data, providing such data is voluntary, and providing them means that the Customer agrees to their processing. Additional data can be deleted at any time. The data provided is processed for the following purpose:a. providing services electronically to make the content on the Website and the Online Store available for Users – legal basis: art. 6 clause 1 letter b) GDPR,b. execution of orders placed in the Online Store – legal basis: art. 6 clause 1 letter b) GDPR,c. handling complaints – legal basis: art. 6 clause 1 letter b) GDPR,d. providing the right to withdraw from the contract – legal basis: art. 6 clause 1 letter b) GDPR,e. providing services related to the operation and maintenance of an account on the Website – legal basis: art. 6 clause 1 letter b) GDPR, in the scope of voluntary data – legal basis: art. 6 clause 1 letter a) GDPR,f. analytical and statistical – legal basis: art. 6 clause 1 letter f) GDPR. The Administrator’s legitimate interest lies in conducting analyzing of customer activity on the Website and Online Store and how to use the account in the Online Store, as well as their preferences to improve the functionalities used,g. establishing and pursuing claims or defense against claims – legal basis: art. 6 clause 1 letter f) GDPR. The Administrator’s legitimate interest is to protect their rights in connection with his operation of the Website and Online Store,h. for marketing purposes of the Administrator and third parties – legal basis: art. 6 clause 1 letter a) and f) GDPR. The Administrator’s legitimate interest lies in directing the advertising content to the User (more: read § 3 point 5 of the Regulations),i. servicing the account in the Online Store – legal basis: art. 6 clause 1 letter a) GDPR.
3. The submission, acceptance and implementation of an order, as well as the right to withdrawal the order by the customer involves the processing of his personal data. Providing data marked as mandatory is required in order to place an order, accept and execute the order, as well as the right to withdraw the order. Failure to do so prevents the submission, acceptance and execution of the order, as well as the right of withdrawal. Providing other data is voluntary, and providing them means that the Customer agrees to their processing. The data provided is processed for the following purpose:a. the implementation of the order – legal basis: art. 6 clause 1 letter b) GDPR, and in the scope of additional data – legal basis: art. 6 clause 1 letter a) GDPR,b. implementation of statutory obligations incumbent on the Administrator, resulting in particular from tax and accounting regulations – legal basis: art. 6 clause 1 letter c) GDPR,c. analytical and statistical – legal basis: art. 6 clause 1 letter f) GDPR. The Administrator’s legitimate interest lies in conducting analyzing of customer activity on the Website and the Online Store, and also how to use the account in the Online Store, as well as to improve the functionalities used;d. establishing and pursuing claims or defense against claims – legal basis: art. 6 clause 1 letter f) GDPR. The Administrator’s legitimate interest is to protect their rights in connection with the Website and Online Store operation.
4. The administrator allows Customers to contact them using the contact form provided on the Website and the Online Store. Using the form requires providing personal data, necessary to contact the Customer and answer the queries. Failure to provide data, marked as mandatory, results in the inability to contact the Customer and the inability to answer the question. The customer may provide additional data to facilitate contact, providing additional data is voluntary and providing them means that the Customer agrees to their processing. The data provided is processed for the following purpose:a. Customer identification and handling of their inquiry sent via the contact form – legal basis: art. 6 clause 1 letter a) GDPR,b. for analytical and statistical purposes – legal basis: art. 6 clause 1 letter f) GDPR. The Administrator’s legitimate interest lies in conducting analyzing of customer activity on the Website and Online Store and how to use the account in the Online Store, as well as their preferences to improve the functionalities used.
5. The Administrator processes Customers’ personal data in order to conduct marketing activities, which may consist of:a. displaying marketing content to the Customer that is not tailored to his / her preferences / preferences (so-called contextual advertising, in this case the Administrator’s legitimate interest lies in directing contextual advertising content to the Customer) – legal basis: art. 6 clause 1 letter f) GDPR,b. displaying marketing content to the Customers’ interests (so-called behavioral advertising – including Google AdWords cookies – in this case, personal data is collected via cookies and other similar technologies for marketing purposes, the processing of personal data also includes profiling of clients. personal data collected through this technology, for marketing purposes, in particular in the field of promoting goods, including goods of third parties, is based on the legitimate interest of the Administrator and only on the condition that the Customer has consented to the use of cookies, can be expressed through the appropriate browser configuration, and can also be withdrawn at any time, in particular by clearing the cookie history and disabling cookies in your browser settings, withdrawing consent does not affect the lawfulness of the processing, which was carried out on the basis of consent prior to its withdrawal) – legal basis: art. 6 clause 1 letter a) and f) GDPR,c. sending e-mail notifications about interesting offers or content, which in some cases contain commercial information (newsletter) – legal basis: art. 6 clause 1 letter a) GDPR,d. conducting other types of activities, related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities – then the Customer has the right to withdraw consent at any time, while withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal) – legal basis: art. 6 clause 1 letter a) GDPR,In order to implement marketing activities, the Administrator uses profiling in some cases. This means that due to automatic data processing, the Administrator assesses selected factors regarding natural persons in order to analyze their behavior or create a forecast for the future.
6. The Administrator processes personal data of persons visiting the Administrator’s profiles kept in social media Facebook, YouTube and Instagram. These data are processed only in connection with maintaining the profile, including to inform about the Administrator’s activity and to promote various types of events, events or products, as well as to communicate with the Users visiting the Administrator’s profiles via functionalities available in social media – legal basis : art. 6 clause 1 letter f) GDPR. The Administrator’s legitimate interest is to promote their own brand and to build and maintain the brand-related community.
7. The Administrator also uses on the Website and Online Store social plugins of social networking sites Facebook, Instagram and YouTube to promote their own brand. The plug-in provider saves the collected data in the form of a usage profile and uses them for advertising purposes, market research and / or optimization of its website in terms of user preferences in order to present advertisements in line with users’ interests and to inform other users of the social network about activities on the Website and Online Store administrator. Everyone has the right to object to the creation of such user profiles, but in order to exercise this right, you should contact the appropriate plug-in provider.  The social media plug-ins on our website are disabled by default. Activation occurs only by clicking on the symbol of the plugin, and personal data is transferred to the appropriate social service provider only after activating the plugin. Data transfer occurs regardless of whether you have an account with the plug-in provider and whether you are logged in to it. If you are logged in to the account of a given plug-in provider, the data collected on our website will be directly associated with this account – legal basis: art. 6 clause 1 letter f) GDPR. The Administrator’s legitimate interest is to promote their own brand and to build and maintain the brand-related community. The Administrator uses the social media plugins of the following providers: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA https://www.facebook.com/privacy/explanation Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043 , USA ;. https://policies.google.com/technologies/partner-sites?hl=pl. YouTube Address and Privacy Policy: Google LLC, 1600 Amphitheater Parkway. Mountain View, CA 94043, USA https://policies.google.com/privacy?hl=en&gl=de.
8. The Administrator uses the so-called cookies primarily to provide the Customer with services provided electronically and to improve the quality of these services. Cookies are small information called cookies (cookie), sent by the website that the customer visits (even when the customer only browses the content of the website and online store) and which are saved on the end device (computer, laptop, smartphone), which the Customer uses when browsing the websites (i.e. the Website and the Online Store). Therefore, the Administrator and other entities providing analytical and statistical services to him use cookies, storing information or gaining access to information already stored in the customer’s telecommunications terminal equipment (e.g. computer, telephone). Cookies used for this purpose include cookies with data entered by the Customer (session ID) for the duration of the session, authentication cookies used for services that require authentication for the duration of the session, persistent cookies used to personalize the Customer interface for the duration of the session or slightly longer, cookies used to remember the contents of the basket, cookies used to monitor website traffic, i.e. data analytics, including Google Analytics cookies (these are files used by Google to analyze how the User uses the Website, to create statistics and reports on the functioning of the Website). Detailed information about the scope and rules of collecting data in connection with this service can be found at the following link: https://www.google.com/intl/pl/policies/privacy/partners.

The Customer can block the saving of cookies in their web browser. However, in this case, full use of all the functions of the Website and Online Store will not be possible. In addition, the Customer may block the storage of data collected by cookies regarding the use of the website (including the IP address) and sending them to Google, as well as the transmission of this data by Google, by downloading and installing the plugin available at the following link: https: // tools. google.com/dlpage/gaoptout?hl=pl.

 

  1. The Administrator stipulates that in the event of providing personal data of other persons / another person (including name, address, telephone number or e-mail address) on the Website or / and the Online Store, this can only be done if the applicable provisions are not violated. rights and personal interests of these persons.

 

  • 4. Time of processing personal data

 

The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the service or order, until the expiry of the limitation period for claims, withdrawal of consent given or effective objection to data processing in cases where the legal basis for data processing is the Administrator’s legitimate interest, as well as the expiry of the period specified by law rights. The data processing period may be extended if the processing is necessary to establish and assert claims or defend against claims. After the end of the processing period, the data is deleted.

 

  • 5. Rights of data subjects and contact details

 

  1. Data subjects have the right to access their personal data, the right to request their rectification, deletion or limitation of processing, the right to transfer data, the right to object, the right to withdraw consent, whereby withdrawal of consent does not affect lawfulness, processing carried out before the withdrawal of this consent, the right to lodge a complaint to the supervisory body, i.e. the President of the Office for Personal Data Protection.
  2. An application regarding the data subjects’ rights may be submitted in writing by sending it to the following address: MAXCOM SA, 23a Towarowa Street, 43-100 Tychy, with the note “Personal data” or via e-mail to the address: daneosobowe@maxcom.pl. Other information regarding the processing of personal data can be obtained at the above-mentioned postal address and e-mail address.
  3. If the Administrator is unable to determine the content of the application or identify the person submitting the application, based on the application, he will ask the applicant for additional information.
  4. The administrator shall respond to the request within one month of its receipt. Due to the complex nature of the request or their number, the Administrator may extend the response period by another two months. If it is necessary to extend the deadline for answering, the Administrator will inform the applicant about the reasons for such extension.

 

  • 6. Recipients of personal data

 

  1. In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for operating IT systems, entities such as banks and payment operators, entities providing accounting, legal, auditing, consulting services, couriers (in connection with the implementation of orders), marketing agencies (in the scope of marketing services) and entities related to the Administrator, including companies from its capital group and trading partners.
  2. The Administrator has the right to disclose the Customer’s personal data to competent authorities or third parties who submit a request to provide such information on the basis of and in accordance with applicable regulations.

may extend the response period by another two months. If it is necessary to extend the deadline for answering, the Administrator will inform the applicant about the reasons for such extension.

 

  • 7. Transfer of personal data outside the EUROPEAN ECONOMIC AREA (EEA)

 

Subject to § 3 point 5-8, The Administrator does not transfer personal data to recipients based outside the European Union or the European Economic Area. The types of data processing described in the above-mentioned provisions of the Regulations result in the transfer of data to Google LLC servers. Some of these servers are located in the USA. The transfer of data to the United States takes place pursuant to the European Commission implementing decision of 12.07.2016 on the adequacy of protection provided by the EU-US Privacy Shield (the so-called “decision establishing the appropriate level of protection” in accordance with Article 45 of the GDPR).

 

  • 8. Changes to the Privacy Policy

 

  1. The administrator verifies and updates the content of this Policy on an ongoing basis.
  2. The amendments shall enter into force on the day of their publication on the website www.maxcom.pl.
  3. The current Privacy Policy applies to every Customer.