Privacy Policy

PRIVACY AND COOKIE POLICY

 

This Policy is addressed to visitors of the excellent.com.pl website. The Policy describes the rules for collecting and using the data of Website Users, which is collected directly from them or via cookies and similar technologies.

Data controller and contact details.

The controller of the data collected in connection with the use of the Website is Excellent SA, based in Podłęże, 32-003 Podłęże 662, tel. 0126530566 e-mail: [email protected]. For matters related to the processing of your data by the Controller, you can get in touch using the above contact details.

Scope of data collected.

1. The Website allows you to contact the Controller and provide your identification and contact details, as well as details relating to the content of your message.
2. The Controller collects data related to your activity on the website, such as: time spent on the site, search terms used, number of subpages viewed, date and source of the visit, location data, online identifier, cookie ID, user ID
3. In performing the contract and any pre-contractual actions, the Controller may collect personal data such as: first and last name, email address, home address, delivery address, telephone number, bank account number, tax identification number (NIP) or details of the business activity conducted.

 

Source of data.

1. If you have contacted the Controller, the data was provided to us directly by you.
2. If your data was provided in connection with a matter being handled, e.g. by a person who referred the matter to the Controller, the source of the data is that person. In such a case, the Controller receives identification data, address data and data related to the matter.

Purpose and legal basis for processing personal data.

Your data may be processed for the purpose of:

1. Entering into and performing the contract (Art. 5(1)(a) GDPR), including settling the contract based on data obtained as above or from other sources, e.g. (the National Court Register, the Central Register and Information on Business Activity),
2. The necessity to perform legal obligations incumbent on the Controller (Art. 6(1)(c) GDPR), consisting in particular of:
3. fulfilling tax obligations (issuing and settling invoices and other accounting documents);
4. fulfilling obligations related to the exercise of the rights set out in the GDPR (including to the extent necessary to identify and verify the identity of the person requesting a response);
5. Pursuing the legitimate interests of the Controller (Art. 6(1)(f) GDPR), in the form of:
6. direct marketing of products or services provided during the performance of the contract, including sending a newsletter, provided that in the case of email marketing, additional consent will be obtained for this marketing channel (Art. 6(1)(a) GDPR);
7. responding to questions asked, providing a requested offer, conducting email and traditional correspondence to handle a matter, responding to questions submitted by email via the contact form or to the email address
8. analysing website traffic, ensuring security within the Website and adapting content to users' needs
9. establishing, pursuing or defending against claims that may arise in connection with concluded contracts (performance and settlement of the contract, handling complaints) or related to the performance of obligations arising from GDPR provisions (in order to be able to demonstrate compliance with the regulations)
10. organising training and events for the employees of clients/business partners.
11. managing the Controller's social media profiles, additionally with your consent (Art. 6(1)(a) GDPR)
12. Furthermore, based on the consent given by you (Art. 6(1)(a) GDPR), the Controller uses cookies and may publish opinions and comments, and use surveys and forms addressed to users.

 

Right to withdraw consent.

You may withdraw your consent to the processing of contact data at any time by contacting the Controller. Withdrawing consent may hinder or prevent contact with you.

Obligation or voluntariness of providing data

1. Providing your data for purposes related to handling a matter is voluntary but necessary. Failure to provide it may hinder or prevent the matter from being handled.
2. Providing the data necessary for statistical analysis of Website users is voluntary. You may use the so-called incognito mode to browse the site without providing the Controller with information about your visit to the Website. Using incognito mode, and therefore not providing data, does not affect your ability to use the Website.

Rights arising from the GDPR regarding the processed data

You have the right to:

• request access to your data from the Controller, as well as a copy of it (Art. 15 GDPR);
• request the Controller to rectify or correct data (Art. 16 GDPR) - with regard to a request for rectification of data when you notice that the data is incorrect or incomplete;
• request the Controller to erase data (Art. 17 GDPR);
• request the Controller to restrict processing (Art. 18 GDPR) - e.g. when you notice that the data is incorrect - you may request that the processing of your data be restricted for a period allowing us to verify the accuracy of that data);
• lodge a complaint regarding the Controller's processing of your personal data with the President of the Personal Data Protection Office.
• Whenever personal data is processed on the basis of Art. 6(1)(f) GDPR, i.e. in the case of the Controller's so-called legitimate interest for reasons related to a particular situation - with regard to the processing of personal data, the User may object at any time, as a result of which the Controller will not be able to process the personal data unless it demonstrates the existence of compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims. The Controller's processing of personal data based on legitimate interest (Art. 6(1)(f) GDPR) is always preceded by a careful assessment of whether the legitimate interest actually exists.

 

Recipients of your personal data

The recipients of your personal data may only be entities entitled to receive it under the law. In addition, your data may be shared with couriers, postal operators, hosting providers, mail server providers, and insurers. Your data may also be transferred to entities processing personal data on behalf of the Controller, e.g. security companies and IT service providers. A data processing agreement is concluded with such entities.

Data retention period

Your personal data will be stored until consent is withdrawn or until the matter is settled, the contract is performed, and subsequently until the expiry of the limitation period for claims of the parties related to the performance of the transaction.

Data related to the analysis of website traffic collected via cookies and similar technologies may be stored until the cookie expires. Some cookies never expire, so the data retention period will be equivalent to the time necessary for the Controller to achieve the purposes related to data collection, such as ensuring security and analysing historical data related to traffic on the site.

Transfer of data to a third country or international organisation

Your data will not be transferred to third countries or international organisations.

Use of cookies and similar technologies

The Website allows the collection of information about the user via cookies and similar technologies, the use of which usually involves installing this tool on the user's device (computer, smartphone, etc.). This information is used to remember the user's choices (font selection, contrast, policy acceptance), maintain the user's session (e.g. after logging in), remember a password (with consent), and collect information about the user's device and visit for the purposes of ensuring security, as well as analysing visits and adapting content.

Information obtained via cookies and similar technologies is not combined with other data of Website users, nor is it used by the Controller to identify them.

The user has the option of setting the browser to block certain types of cookies and other technologies, for example by specifying that only those necessary for the correct display of the page will be allowed. By default, most browsers allow the use of all cookies, but the user can change these settings at any time and can also delete cookies that have already been installed. Each browser allows this to be done through one of the options available in its settings or preferences.

The user can also use the site in the so-called incognito mode, which blocks the collection of data about their visit.

Using the website without changing your browser settings, i.e. with the default acceptance of cookies and similar technologies, constitutes consent to their use for the purposes specified above.

You may disable cookies for a specific website, or for all connections, at any time. Below is a list of our trusted Partners.:

• Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Privacy policy: https://www.facebook.com/about/privacy/
• Service provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, United States. Privacy policy: https://www.linkedin.com/legal/privacy-policy Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
• Service provider: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States. Privacy policy: https://policies.google.com/privacy?hl=de
• Service provider: Google Ireland Limited for users of Google services based in the European Economic Area or Switzerland, located at Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://policies.google.com/privacy?hl=en-US#europeanrequirements
• Service provider: (Instagram) Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Privacy policy: https://help.instagram.com/519522125107875
• Service provider: Pinterest, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Privacy policy: https://policy.pinterest.com/pl/privacy-policy
• Service provider: FreshMail Sp. z o.o. Al. 29 Listopada 155, 31-406 Kraków. Privacy policy: https://freshmail.pl/polityka-prywatnosci/
• Service provider: GetResponse SA, al. Grunwaldzka 413, 80-309 Gdańsk. Privacy policy: https://www.getresponse.pl/informacje-prawne/polityka-prywatnosci
• Service provider: Issuu, 131 Lytton Ave, Palo Alto, CA 94301, United States. Privacy policy: https://issuu.com/legal/privacy
• Service provider: Hotjar, Dragonara Road, Paceville St Julian's STJ 3141 Malta. Privacy policy: https://www.hotjar.com/legal/policies/privacy/
• Service provider: Microsoft Sp. z o.o., Al. Jerozolimskie 195A, 02-222 Warszawa (the address may vary depending on the service)
  Privacy policy: https://privacy.microsoft.com/pl-pl/privacystatement
• Service provider: AtomStore. z o.o., Dobrego Pasterza 13/6, 31-416 Kraków, Poland. Privacy policy: https://www.atomstore.pl/rodo/polityka-prywatnosci.pdf
• Service provider: Askspot Sp. z o.o., al. Jana Pawła II 43B, 31-864 Kraków, Poland. Privacy policy: https://www.askspot.io/pl/reference/privacy-policy

Automated decision-making and profiling

The tools implemented on the website may profile user behaviour in order to improve the site and adapt the displayed content to user preferences, whereby the data analysed in this case is primarily of an anonymous nature (location, age, interests).

Personal data is not used by the Controller for automated decision-making that could affect a legal situation