https://krispol.eu/en/ (hereinafter: Website).Protection of privacy and confidentiality of personal data processed by us is of utmost importance for us and we guarantee that the Data Controllers select and apply proper technological and organisational measures ensuring protection of processed personal data with due diligence.The personal data are processed pursuant to Regulation of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Processing Regulation, hereinafter: GDPR).
The data controllers (joint controllers) of your personal data are:
Given the ongoing business cooperation in the area of marketing, advertisement, sales and servicing of customers, the Data Controllers entered into an agreement on joint control of personal data pursuant to Art. 26 of the GDPR. Pursuant to this agreement, the Data Controllers jointly control personal data and jointly determine the modes and the purposes of processing your personal data, as well as bear joint liability for the meeting of obligations resulting from the GDPR, in particular information obligations and obligations related to the execution of rights with which you are vested.
In case of any questions or doubts as to the processing of your personal data, we encourage you to contact the Data Protection Officer appointed by the Data Controllers, who can be contacted
Contacting the Data Controller is possible:
Provision of personal data, as well as consent for the processing of data is voluntary, yet within the indicated scope (in forms marked as mandatory), necessary for servicing your inquiry or providing a service.
You can exercise the rights with which you are vested with respect to any Joint Data Controller (contact details in Section 2). You are vested with a right to access your data and the right to demand: rectification, removal of data and limitation of data processing, as well as the right to transfer data. If we process your data in relation to the Data Controllers’ legitimate interests (Art. 6(1)(f) of the GDPR), in particular for marketing purposes, you are vested with a right to object to such processing.
If your data are processed on the basis of a consent that was given, you can withdraw the consent at any moment, informing any Data Controller about it or by sending an e-mail to the following address: email@example.com or firstname.lastname@example.org. Withdrawing your consent shall not affect legitimacy of processing prior to the withdrawal.
If, in your opinion, the processing of data violates the applicable legal provisions, you are vested with a right to file a complaint to the supervisory authority – the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
If the Website allows for signing up for a Newsletter and if you have signed up for it, your first name and e-mail address shall be processed for the purpose of dispatching, to the specified e-mail address, the commercial and marketing messages, including messages about the products offered, promotions and organised events.
To provide you with a possibility of contacting us, contact forms are made available. Provision of data contained in the contact form is voluntary, yet for the purpose of correct dispatch of the message (inquiry), it is necessary to provide the data marked in the form as mandatory.
The form allows for compiling the following data: first name and surname, telephone No., e-mail address and limited address data about the city with the aim of determining a commercial partner available in a given location. If the form also allows for attaching a file, attaching such file is not required. Attaching a file is voluntary and tantamount to granting a consent for the processing by the Data Controllers of potential personal data contained in the content of the dispatched file.
The Data Controllers sell their products via a network of distribution, i.e. via their authorised commercial partners. In case of sending an inquiry pertaining to the interest in the Data Controllers’ products, the desire to receive an offer or purchase, the Data Controllers share the personal data contained in the form along with the content of the inquiry with the commercial partner competent for the indicated or shared location. If the form allows for choosing a commercial partner, the personal data along with the content of the inquiry shall be shared with a partner selected by you. The Data Controllers reserve a right to share your personal data with another partner than the one selected in the form, if this is necessary on account of order processing dates or ensuring proper quality of services. As far as technically possible, the form may also allow for choosing a video-call.
Information about trade partners is available here: https://krispol.eu/en/salony/
Your data may be provided to:
The data provided to external entities are used only for the provision of our services to you. The Data Controller guarantees that every provision or sharing your personal data with other entities complies with the applicable provisions on personal data protection.
For your convenience, the Website may contain functionalities integrated with external social networking websites (Facebook, Instagram, YouTube), which may be activated manually. In such case, the third parties that are servicing such websites will be able to identify the user, determine the way in which the user uses the website, combine and store such information with the profile in the social networking media. Using the indicated functionalities may be related to saving the cookies of such entities on your end device. Activation of the aforementioned functionalities is not mandatory – you can use the Website’s functionalities without integration with external websites.
The Data Controllers also have profiles on social networking sites (Facebook, YouTube). The Data Controllers may process the data of users visiting such profiles at social networking sites and process such data as first names, surnames and nicks listed on the profiles of users to communicate in the social media. The data about the users’ activity may also be used to promote the services and products and for analytical and statistical purposes, indicating preferences within the scope of offered functionalities and content. The basis for the processing of personal data is Art. 6(1)(f) of the GDPR, i.e. legitimate interest of the Data Controllers related to the performance of marketing, advertising activities and communication in the social media.
Profiling of personal data by the Data Controller consists in the processing your data (also in an automated mode) by using them to assess certain information for statistical purposes, monitoring traffic on the Website and for marketing analyses, e.g. display of appropriate advertisements. The Data Controllers do not carry out processes of automated decision making, while profiling shall have no legal effects with respect to you and shall not significantly affect your situation in any other manner.