Privacy policy and cookies

Privacy policy

§1 General provisions

1. This document is an appendix to the Regulations. By using our services, you entrust us with your information. This Privacy Policy serves only as an aid in understanding what information and data is collected and for what purpose and what we use it for. This data is very important to us, so please read this document carefully as it defines the rules and methods of processing and protecting personal data. This document also defines the rules for the use of “cookies”.
   We hereby declare that we comply with the principles of personal data protection and all legal regulations provided for by the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing personal data and on the free movement of such data, and repealing Directive 95/46/EC.
   The person whose personal data is processed has the right to contact us in order to obtain comprehensive information on how we use his personal data. We always try to clearly inform you about the data we collect, how we use them, what purposes they are to be used for and to whom we transfer them, what protection we provide for this data when transferring it to other entities and we provide information about institutions to be contacted in case of doubt .
   Minors are not allowed to use our services.
   The Seller applies technical measures such as: measures of physical protection of personal data, hardware measures of IT and telecommunications infrastructure, protection measures as part of software tools and databases, and organizational measures ensuring proper protection of personal data being processed, and in particular they protect personal data against disclosure to unauthorized third parties , obtaining by an unauthorized person and using them for an unknown purpose, as well as accidental or intentional change, loss, damage or destruction of such data.
   On the terms set out in the Regulations and in this document, we have exclusive access to data. Access to personal data may also be entrusted to other entities through which payments are made, which collect, process and store personal data in accordance with their Regulations and entities that are tasked with the execution of the order. Access to personal data is granted to the above-mentioned entities to the extent necessary and only to those that will ensure the provision of services.
   Personal data is processed only for the purposes for which you have consented by clicking on the appropriate fields of the form on the Website or in another clear way. The legal basis for the processing of your personal data is your consent to data processing or the requirement to perform the service (e.g. ordering a Product) that you ordered from us (pursuant to Article 6(1)(a) and (b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 of April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – GDPR.

§2 Privacy rules

1. We take privacy seriously. We are characterized by respect for privacy and the fullest possible and guaranteed convenience in the use of our services.
2. We value the trust Users place in us by entrusting us with their personal information to complete an order. We always use personal data fairly and in such a way as not to disappoint that trust, only to the extent necessary to fulfill the order including its processing.
3. You have the right to be clearly and fully informed about how we use your personal data and for what purposes. We always clearly inform you about the data we collect, how and to whom we provide it, and provide information about the entities to contact in case of doubts, questions, comments.
4. If you have any doubts about our use of your personal data, we will promptly take measures to clarify and resolve such doubts, we will fully and completely answer all related questions.
5. We will take all reasonable measures to protect Users’ data from improper and uncontrolled use and secure it comprehensively.
6. The administrator of your personal data is Primio, e-mail: biuro@primio.pl
7. The legal basis for the processing of your personal data is Article 6(1)(b) RODO. Provision of data is not mandatory, but necessary to take appropriate actions preceding the conclusion of the contract and its execution. We will transfer your personal data to other recipients entrusted with the processing of personal data in our name and on our behalf.Your data will be transferred on the basis of Article 6(1)(f) of the RODO, where the legitimate interest is the due performance of contracts/orders. In addition, we will share your personal data with other business partners. We store the collected personal data in the European Economic Area (“EEA”), but it may also be transferred to a country outside the EEA and processed there. Any transfer of personal data is carried out in accordance with applicable law. If data is transferred outside the EEA, we use standard contractual clauses and the Privacy Shield as safeguards for countries where the European Commission has not found an adequate level of data protection.
8. Your personal data related to the conclusion and performance of the contract for the execution of contracts will be processed for the period of their execution, and for a period no longer than provided by law, including the provisions of the Civil Code and the Accounting Act, i.e. no longer than 10 years, counting from the end of the calendar year in which the last contract was executed.
9. Your personal data processed for the purpose of entering into and performing future contracts will be processed until you object.
10. you are entitled to: to access your personal data and receive a copy of the personal data being processed, to rectify your inaccurate data; to request erasure of your data (the right to be forgotten) in the circumstances provided for in Article 17 of the RODO; to request restriction of data processing in the cases indicated in Article 18 of the RODO, to object to data processing in the cases indicated in Article 21 of the RODO, to transfer the data provided, processed by automated means.
11. If you believe that your personal data is being processed unlawfully, you may file a complaint with the supervisory authority (Office for Personal Data Protection, 2 Stawki Street, Warsaw). If you need additional information related to the protection of personal data or wish to exercise your rights, please contact us by mail at the mailing address.
12. We make every effort to protect against unauthorized access, unauthorized modification, disclosure and destruction of information in our possession. In particular:

• we control the methods of collecting, storing and processing information, including physical security measures, to protect against unauthorized access to the system.
• we grant access to personal information only to those employees, contractors and agents who need to have access to it. In addition, they are contractually obligated to maintain strict confidentiality, to allow us to inspect and check how they fulfill their assigned duties, and may face consequences if they fail to fulfill these obligations.
• We will comply with all applicable data protection laws and regulations and cooperate with data protection authorities and authorized law enforcement agencies. In the absence of data protection regulations, we will act in accordance with generally accepted data protection principles, rules of social intercourse as well as established customs.
• The exact manner of protection of personal data is contained in the personal data protection policy (ODO: security policy, personal data protection regulations, IT system management instruction) For security reasons, due to the procedures described therein, it is only available for inspection by state control authorities.(5) If you have any questions about how to handle your personal data, you are welcome to contact us via the page from which you were redirected to this Privacy Policy.The request for contact will be promptly forwarded to the appropriate appointed person.6 You always have the right to notify us if:
• no longer wishes to receive information or messages from us in any form;- wishes to receive a copy of your personal data in our possession;- correct, update or delete your personal information in our records;- wishes to report violations, misuse or processing of his/her personal data.
  In order to make it easier for us to respond or respond to the information provided, please provide your name and further details.§3 Scope and purpose of personal data collection

§3 Scope and purpose of collecting personal data

We process the necessary personal data in order to provide services and for accounting purposes, and only for such purposes, i.e.:

• in order to place an order,
• in order to conclude a contract, make a complaint and withdraw from the contract,
• issuing a VAT invoice or other receipt.
• monitoring traffic on our websites;
• browser or mobile platform information, IP address and location
• hardware and operating system information, network name and language settings
• collecting anonymous statistics to determine how users use our website;
• determining the number of anonymous users of our pages
• controlling how often selected content is shown to users and what content is most common;
• controlling how often users choose a given service or from which service contact is made most often;
• examining subscriptions to newsletters and contact options;
• using a system of personalized recommendations for e-commerce;
• using the tool for communication both by e-mail and, consequently, by telephone;
• integration with the community portal;
• possible online payments.
• We collect, process and store the following user data:
• name and surname, password,
• address,
• delivery address (if different from home address),
• tax identification number (NIP),
• e-mail address (e-mail),
• telephone number (mobile, landline),
• date of birth,
• PESEL,
• information about the web browser used,
• credit and debit card details (other financial information needed to process payments).
• search preferences and the tendency of visited pages and subpages,
• information from voluntary surveys,
• home preferences,
• push notifications in the situation of available homes
• other voluntarily provided personal data.
• Providing the above data is completely voluntary, but also necessary for the full implementation of the services.
• Purpose of collecting and processing or using data by us:
• direct marketing, archival purposes of advertising campaigns;
• performance of obligations imposed by law by collecting information about undesirable activities;
• We may transfer personal data to servers located outside the country of residence of the user or to affiliated entities, third parties based in other countries, including countries in the EEA (European Economic Area, EEA – Free Trade Area and Common Market , including European Union and European Free Trade Association EFTA countries) for the purpose of processing personal data by such entities on our behalf in accordance with the provisions of this Privacy
• Policy and applicable laws, customs and regulations regarding data protection.
• We store your personal data no longer than they are needed for the proper quality of service and, depending on the mode and purpose of obtaining them, we store them for its duration and after its completion for the purposes of:
• performance of obligations arising from the law, tax and accounting regulations;
• preventing fraud or crime;
• statistical and archiving.
• Marketing activities – for the duration of the contract, granting a separate consent to the processing of such data – until the completion of activities related to transaction handling, you object to such processing or withdrawal of consent.
• Sales-related and promotional activities – e.g. contests, promotional campaigns – for the duration and settlement of such campaigns.
• Operational activity – until the obligations imposed by the GDPR Regulation and the relevant national regulations expire, in order to demonstrate reliability in the processing of personal data
  pursuing any claims related to the concluded contract;
• Bearing in mind the fact that many countries to which this personal data is transferred do not have the same level of legal protection of personal data as in the user’s country. Your personal information stored in another country may be accessed in accordance with the laws of that country, for example: courts, law enforcement and national security authorities, in accordance with the laws of that country. Subject to lawful requests for data disclosure, we undertake to require entities processing personal data outside the user’s country to take measures to protect data in a manner adequate to the regulations of their national law.

§4 Cookies policy

1. We automatically collect information contained in cookies in order to collect User data. A cookie file is a small piece of text that is sent to the User’s browser and which the browser sends back the next time he visits the website. They are mainly used to maintain the session, e.g. by generating and sending back a temporary identifier after logging in. We use “session” cookies stored on the User’s end device until logging out, turning off the website or turning off the web browser, and “permanent” cookies stored on the User’s end device for the time specified in the cookie file parameters or until they are deleted by the User.
2. Cookies adjust and optimize the website and its offer for the needs of Users through activities such as creating statistics of page views and ensuring security. Cookies are also necessary to maintain the session after leaving the website.
3. The administrator processes the data contained in cookie files each time the website is visited by visitors for the following purposes:
   optimizing the use of the website;
   identification of Service Recipients as currently logged in;
   adaptation, graphics, selection options and any other content of the website to the individual preferences of the Service Recipient;
   remembering automatically and manually supplemented, posted data from Order Forms or login data provided by the visitor;
   collecting and analyzing anonymous statistics showing how the website is used in the administration panel and google analytics
   creating remarketing lists based on information about preferences, behavior, how to use the interests of the Website and collecting demographic data, and then sharing these lists in AdWords and AdSense, Facebook Ads.
4. Google Adsense cookies are used to show you relevant advertisements. Adsense Cookies do not contain personal information. If you would like to know more about the Google AdSense cookie program and how to control it, please go to
   http://www.google.co.uk/policies/privacy/ads/
   creating data segments based on demographic information, interests, preferences in the selection of viewed products/services.
   the use of demographic and interest data in Analytics reports.
   due to the need to prevent Internet robots from performing certain functions on our trading platforms, we use the Google reCAPTCHA mechanism to occasionally check whether user behavior does not bear the characteristics of robot behavior. In such a situation, we may disclose your IP address to Google LLC.The user can completely block and delete the collection of cookies at any time using his web browser.
   Blocking by the User the possibility of collecting cookies on his device may make it difficult or impossible to use some website functionalities, to which the User is fully entitled, but in such a situation he must be aware of functional limitations.

5. RECAPTCHA V2

• GOOGLE ADWORDS

• GOOGLE ANALYTICS

• YOUTUBE

• GOOGLE MAPS

• FACEBOOK

1. A user who does not want to use “cookies” for the purpose described above may delete them manually at any time. To read the detailed instructions on how to proceed, visit the website of the manufacturer of the web browser that the User is currently using.
   More information on cookies is available in the help menu of each web browser. Examples of web browsers that support the aforementioned “cookies”:Cookie settings
   Internet Explorer
   Cookie settings
   Chrome
   Cookie settings
   FirefoxCookie settings
   Opera
   Cookie settings
   Safari
   Cookies in
   Android
   Cookies in
   blackberry

   Cookies in
   iOS (Safari)
   Cookies in
   Windows phone

   Windows Phone

§5 Rights and obligations

1. We have the right, and in cases specified by law, also the statutory obligation to provide selected or all information regarding personal data to public authorities or third parties who submit such a request for information on the basis of applicable provisions of Polish law.
   The User has the right to access the content of his personal data that he provides, the User may correct and supplement this data at any time, and has the right to request that it be removed from its databases or cease to be processed, without giving any reason. In order to exercise their rights, the User may at any time send a relevant message to the e-mail address or in another way that will provide/transmit such a request.
   The processing of personal data of natural persons who are our clients is based on:
   justified interest as a data controller (e.g. in the scope of creating a database, analytical and profiling activities, including activities regarding the analysis of product use, direct marketing of own products, securing documentation for the purpose of defending against possible claims or for the purpose of pursuing claims)
   consent (including, in particular, consent to e-mail marketing or telemarketing)
   performance of the concluded contract
   legal obligations (e.g. tax law or accounting regulations).
   The processing of personal data of natural persons who are potential customers is based on:
   justified interest of the data controller (e.g. in the scope of creating a database, direct marketing of own products)
   consent (including, in particular, consent to e-mail marketing or telemarketing)
   The User’s request to delete personal data or to stop processing them may result in a complete inability to provide services or their serious limitation.
   We attach particular importance to the issue of profiling and point out that:
   for the purposes of profiling, we usually process data that was previously subject to ssl encryption;
   we use typical data for this: e-mail address and IP address or cookies
   we profile in order to analyze or forecast personal preferences and interests of people using our Websites or products or services and matching the content on our Websites or products to these preferences
   we profile for marketing purposes, i.e. matching the marketing offer to the above preferences.
   We undertake to act in accordance with applicable laws and rules of social coexistence.
   Information on out-of-court settlement of consumer disputes. The authorized entity within the meaning of the Act on out-of-court settlement of consumer disputes is the Financial Ombudsman, whose website address is as follows: www.rf.gov.pl.

§6 Basic safety rules

1. Każdy użytkownik powinien dbać o swoje własne bezpieczeństwo danych oraz o bezpieczeństwo swoich urządzeń, które służą dostępowi do sieci Internet. Takie urządzenie powinno bezwzględnie posiadać program antywirusowy z aktualną regularnie uzupełnianą bazą definicji, typów i rodzajów wirusów, bezpieczną wersję przeglądarki internetowej z której korzysta oraz włączoną zaporę sieciową. Użytkownik powinien sprawdzać, czy system operacyjny i programy zainstalowane na nim posiadają najnowsze i kompatybilne aktualizacje, ponieważ w atakach wykorzystywane są błędy wykryte w zainstalowanym oprogramowaniu.
2. Dane dostępowe do usług oferowanych w sieci Internet to – np. loginy, hasła, PIN, certyfikaty elektroniczne itp., – powinny być zabezpieczone w miejscu niedostępnym dla innych i niemożliwym do włamania z poziomu sieci internetowej. Nie należy ich ujawniać lub przechowywać na urządzeniu w formie, która umożliwia nieautoryzowany dostęp i odczyt przez osoby do tego nieuprawnione.

• Ostrożność podczas otwierania dziwnych załączników lub klikania odnośników w wiadomościach mailowych, których się nie spodziewaliśmy np. od nieznanych nadawców, bądź z folderu spam.

4. Zaleca się uruchomienie w przeglądarce internetowej filtrów antyphishingowych czyli narzędzi, które sprawdzają, czy wyświetlona strona internetowa jest autentyczna i nie służy wyłudzaniu informacji, np. poprzez podszywanie się pod osobę lub instytucję.
5. Pliki powinny być pobierane tylko i wyłącznie z zaufanych miejsc, serwisów i stron. Nie zalecamy instalowania oprogramowania z niezweryfikowanych źródeł zwłaszcza od nieznanych wydawców o niesprawdzonej opinii. Dotyczy to również urządzeń przenośnych, np. smartfonów, tabletów.
6. Podczas używania domowej sieci bezprzewodowej Wi-Fi należy ustalić takie hasło aby było bezpieczne i trudne do złamania, nie powinno być nim żaden wzór i ciąg znaków który jest łatwy do odgadnięcia (np. nazwa ulicy, imię gospodarza, data urodzin itp.). Rekomenduje się także korzystanie najwyższych możliwych standardów szyfrowania sieci bezprzewodowych Wi-Fi, które są możliwe do uruchomienia na posiadanym sprzęcie np. WPA2.

§7 Using Social Media plugins

1. So-called plug-ins of the social networks facebook.com and Twitter and others may be present on our pages. The related services are provided by Facebook Inc. respectively. and Twitter Inc.
   Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA Facebook. To see Facebook plug-ins go to:
   https://developers.facebook.co…
   Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. To view Twitter plugins go to:
   https://dev.twitter.com/web/tw…
   The plug-in only provides its provider with information about which of our websites you have accessed and at what time. If, while viewing or staying on our website, the user is logged in to his account located, for example, on Facebook or Twitter, the provider is able to combine your interests, information preferences, and other data, obtained, for example, by clicking the Like button or leaving comment, or entering the name of the profile in the search. Such information will also be transferred by the browser directly to the provider.
   More detailed information on the collection and use of data by Facebook or Twitter and on the protection of privacy can be found on the following pages:
   Data protection/privacy advice issued by Facebook:
   http://www.facebook.com/policy…
   Data protection/privacy advice issued by Twitter:
   https://twitter.com/privacy
   To avoid your visit to your selected user account being recorded by Facebook or Twitter on our website, you must log out of your account before you start browsing our websites.