Zamknij

Privacy statement

This privacy policy refers to the website available at the following address:
https://krispol.eu/en/ (hereinafter: Website).Protection of privacy and confidentiality of personal data processed by us is of utmost importance for us and we guarantee that the Data Controllers select and apply proper technological and organisational measures ensuring protection of processed personal data with due diligence.The personal data are processed pursuant to Regulation of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Processing Regulation, hereinafter: GDPR).

 

  1. Data Controllers

The data controllers (joint controllers) of your personal data are:

  • KRISPOL Sp. z o.o. with its registered office in Września, ul. Michała Strzykały 4, 62-300 Września, entered in the Register of Entrepreneurs of the National Court Register under No. KRS 0000159144, VAT Reg. No. (NIP) 7891541390, Poland;
  • KRISHOME Sp. z o.o. with its registered office in Psary Małe, ul. Budowlana 1, 62-300 Września, entered in the Register of Entrepreneurs of the National Court Register under entry No. KRS: 0000768528, VAT Reg. No. (NIP) 7891787470, Poland.

Given the ongoing business cooperation in the area of marketing, advertisement, sales and servicing of customers, the Data Controllers entered into an agreement on joint control of personal data pursuant to Art. 26 of the GDPR. Pursuant to this agreement, the Data Controllers jointly control personal data and jointly determine the modes and the purposes of processing your personal data, as well as bear joint liability for the meeting of obligations resulting from the GDPR, in particular information obligations and obligations related to the execution of rights with which you are vested.

  1. Contact Point and Data Protection Officer

In case of any questions or doubts as to the processing of your personal data, we encourage you to contact the Data Protection Officer appointed by the Data Controllers, who can be contacted

  1. in an electronic form: daneosobowe@krispol.pl or daneosobowe@krishome.eu
  2. via telephone at No.: 509189102;
  3. via traditional post at the Data Controllers’ addresses specified in Clause 1 with a note “Data Protection Officer.”

Contacting the Data Controller is possible:

  1. in the form of traditional correspondence sent to the addresses specified in Section 1;
  2. via contact forms available on the Website.
  1. Voluntary Provision of Data

Provision of personal data, as well as consent for the processing of data is voluntary, yet within the indicated scope (in forms marked as mandatory), necessary for servicing your inquiry or providing a service.

  1. Rights of Data Subjects Related to Data Processing

You can exercise the rights with which you are vested with respect to any Joint Data Controller (contact details in Section 2). You are vested with a right to access your data and the right to demand: rectification, removal of data and limitation of data processing, as well as the right to transfer data. If we process your data in relation to the Data Controllers’ legitimate interests (Art. 6(1)(f) of the GDPR), in particular for marketing purposes, you are vested with a right to object to such processing.

If your data are processed on the basis of a consent that was given, you can withdraw the consent at any moment, informing any Data Controller about it or by sending an e-mail to the following address: daneosobowe@krispol.pl or daneosobowe@krishome.eu. Withdrawing your consent shall not affect legitimacy of processing prior to the withdrawal.

If, in your opinion, the processing of data violates the applicable legal provisions, you are vested with a right to file a complaint to the supervisory authority – the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

  1. Type and Purpose of Data Processing
  • Newsletter

If the Website allows for signing up for a Newsletter and if you have signed up for it, your first name and e-mail address shall be processed for the purpose of dispatching, to the specified e-mail address, the commercial and marketing messages, including messages about the products offered, promotions and organised events.

  • Contact forms

To provide you with a possibility of contacting us, contact forms are made available. Provision of data contained in the contact form is voluntary, yet for the purpose of correct dispatch of the message (inquiry), it is necessary to provide the data marked in the form as mandatory.

The form allows for compiling the following data: first name and surname, telephone No., e-mail address and limited address data about the city with the aim of determining a commercial partner available in a given location. If the form also allows for attaching a file, attaching such file is not required. Attaching a file is voluntary and tantamount to granting a consent for the processing by the Data Controllers of potential personal data contained in the content of the dispatched file.

The Data Controllers sell their products via a network of distribution, i.e. via their authorised commercial partners. In case of sending an inquiry pertaining to the interest in the Data Controllers’ products, the desire to receive an offer or purchase, the Data Controllers share the personal data contained in the form along with the content of the inquiry with the commercial partner competent for the indicated or shared location. If the form allows for choosing a commercial partner, the personal data along with the content of the inquiry shall be shared with a partner selected by you. The Data Controllers reserve a right to share your personal data with another partner than the one selected in the form, if this is necessary on account of order processing dates or ensuring proper quality of services. As far as technically possible, the form may also allow for choosing a video-call.
Information about trade partners is available here: https://krispol.eu/en/salony/

  1. What is the basis for compiling and processing personal data? Purposes and periods of data processing
  • Newsletter: the data are processed on the basis of your consent for the dispatch of the newsletter until its revocation or determination that the data are no longer up-to-date.
  • Marketing, direct marketing, service quality surveys, analyses and statistics: the basis for the processing is the legitimate interest of the Data Controllers (Art. 6(1)(f) of the GDPR) consisting in performance of marketing activities for the products (within a scope in which the provisions do not require a consent), as well as the quality of provided services, analysis of users’ preferences and mode of interaction with the Party. For these purposes, the Data Controllers may process data from cookies with the aim of adjusting the content of the Website to your preferences and preparing analyses and statistics pertaining to the interaction of users with the Website – the data are processed until an objection has been filed with respect to such processing or change of consents pertaining to the cookies.
  • Provision of traditional services and provision of on-line services: the basis for the processing of data is the necessity of agreement performance (Art. 6(1)(b) of the GDPR), in particular the agreement pertaining to the electronic provision of services, consisting in the functionalities or content made available to you on the Website – the data are processed for the time of service provision.
  • Processing of contact forms – the basis for data processing is the Data Controller’s legitimate interest (Art. 6(1)(f) of the GDPR), consisting in providing you with a quick and easy contact with the Data Controllers and a network of showrooms with respect to any issues important for you, related to the commercial activities carried out by the Data Controllers. The data are processed for the time of processing your inquiries, complaints or notifications or until an effective objection has been filed with respect to such processing.
  • Security and correct operation of the Website: special computer programmes register the activity of the users on the Website within a scope required for ensuring correct operation of the Website and guaranteeing security of users and IT systems – the basis for the processing data in this respect is the Data Controllers’ legitimate interest (Art. 6(1)(f) of the GDPR).
  • Defence of claims: your data may be archived and stored by us for the purpose of establishing, seeking or defence of claims (e.g. related to the services provided by us) based on the Data Controllers’ legitimate interest (Art. 6(1)(f) of the GDPR) for a period of claim expiry resulting from the applicable provisions, not longer than 6 years from the end of the year when the provision of services took place.

Principles of processing of data collected by cookies and terms of storage of such data are outlined in the Cookie Policy.

  1. Parties to whom your data are provided

Your data may be provided to:

  1. Entities processing data on behalf of the Data Controllers, i.e. specialist suppliers of data storage services, entities providing IT and hosting services for our benefit, entities supporting us during the handling of correspondence, legal and marketing services, and entities servicing and maintaining our ICT network;
  2. Other data controllers processing your data on their own behalf: entities offering postal or courier services, our authorised showrooms and local trade representatives selling products, whose list is available on the Website (the Data Controllers sell products via their own distribution network).

The data provided to external entities are used only for the provision of our services to you. The Data Controller guarantees that every provision or sharing your personal data with other entities complies with the applicable provisions on personal data protection.

  1. Privacy and security policy of partners of the Website and social networking media

For your convenience, the Website may contain functionalities integrated with external social networking websites (Facebook, Instagram, YouTube), which may be activated manually. In such case, the third parties that are servicing such websites will be able to identify the user, determine the way in which the user uses the website, combine and store such information with the profile in the social networking media. Using the indicated functionalities may be related to saving the cookies of such entities on your end device. Activation of the aforementioned functionalities is not mandatory – you can use the Website’s functionalities without integration with external websites.

The Data Controllers also have profiles on social networking sites (Facebook, YouTube). The Data Controllers may process the data of users visiting such profiles at social networking sites and process such data as first names, surnames and nicks listed on the profiles of users to communicate in the social media. The data about the users’ activity may also be used to promote the services and products and for analytical and statistical purposes, indicating preferences within the scope of offered functionalities and content. The basis for the processing of personal data is Art. 6(1)(f) of the GDPR, i.e. legitimate interest of the Data Controllers related to the performance of marketing, advertising activities and communication in the social media.

  1. Transfer of Data Outside the European Economic Area (EEA)

Your personal data may be transferred outside of the European Economic Area only to Google in case of giving consent for the use of Cookies. Google is a certified recipient as part of the US Privacy Shield, which is tantamount to guaranteeing proper securities of personal data protection in line with Art. 46(2) of the GDPR.

  1. Data about Location and Cookies

The terms of using cookies are specified in the Cookie Policy. The Website may use the data about your location in order to optimise its operation and to provide you with functionalities in the form of the possibility of display of local points of sale – commercial partners of the locations closest to you. The possibility of sharing your location may be blocked in the settings of your browser.

  1. Profiling and Automated Decision Making

Profiling of personal data by the Data Controller consists in the processing your data (also in an automated mode) by using them to assess certain information for statistical purposes, monitoring traffic on the Website and for marketing analyses, e.g. display of appropriate advertisements. The Data Controllers do not carry out processes of automated decision making, while profiling shall have no legal effects with respect to you and shall not significantly affect your situation in any other manner.

  1. Updates in Privacy Policy

The Data Controllers reserve the right to change the privacy policy, provided this is required by the applicable law or the technological terms of operation of the Website have been changed.

╳