Information on the processing of personal data

In order to fulfill the information obligation imposed on each Personal Data Administrator by art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as the Act of 10 May 2018 on data protection personal data (Journal of Laws of 2018, item 1000), we inform you about the following.

Personal Data Administrator

The administrator of your personal data is D-R-O Sp. z o. o. Sp. k. S.A. with its registered office in Macierzysz, ul. Sławęcińska 12, 05-850, entered into the national court register under the number 0000762135. Contact with the Personal Data Administrator is possible via the e-mail address: d-r-o@d-r-o.pl

Purposes of processing

Your personal data are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing personal data and on the free movement of such data for:

• conclusion and performance of a contract pursuant to Art. 6 sec. 1 lit. b of the Regulation;

• fulfilment of legal obligations incumbent on the Personal Data Administrator, including those resulting from the provisions of tax law or the Accounting Act pursuant to art. 6 sec. 1 lit. c of the Regulation;

• service quality research as well as analytical and statistical purposes – the legal basis is the legitimate interest of the Personal Data Administrator (Article 6(1)(f) of the Regulation) ;
• receiving commercial information, marketing offers, including information about discounts and promotions, based on (Article 6(1)(a) of the Regulation)
• in order to possibly consider complaints, determine and pursue claims and protect against claims – the legal basis is the legitimate interest of the Personal Data Administrator (Article 6 para. 1 letter b, c and f of the Regulation).

Processing time

Your personal data will be processed for the time necessary to perform the contract, extended by the period of limitation of claims, if such processing is necessary for the implementation or protection against claims, and for the time during which The Personal Data Administrator is obliged to store them in accordance with applicable law.

If you consent to the processing, the data will be processed until you withdraw this consent or delete your account on the online store platform. Withdrawal of consent is possible at any time without affecting the lawfulness of the processing that was made on the basis of consent before its withdrawal.

Rights of the data subject

You have the right to withdraw your consent to the processing of personal data at any time, access to this data and request its rectification, deletion, processing restrictions, transferring data to another Personal Data Administrator and the right to object to data processing without affecting the lawfulness of the processing that was made on the basis of consent before its withdrawal, that the processing of data by the Personal Data Administrator is contrary to the Regulation.

Data of recipients of personal data

The Personal Data Administrator transfers your personal data only to entities providing the Personal Data Administrator with services necessary for the performance of the contract, for example IT system providers, entities dealing with technical preparation, order fulfillment , accounting services, invoicing and settlement of contracts, entities providing legal services and debt recovery, postal operators, couriers, banks when making payments and bodies authorized to obtain personal data in accordance with applicable law. In such cases, the amount of data transferred is limited to the required minimum. In addition, the information you provide may be shared with prevented from competent public authorities, if required by applicable law.

Obligation and consequences of not providing data

If the processing is carried out on the basis of art. 6 sec. 1 lit. b) of the Regulation, the provision of personal data is a condition for the conclusion and performance of the contract and you are not obliged to provide personal data, however, the lack of consent to the processing of personal data by the Personal Data Administrator will result in the inability to conclude the contract.

If the processing is carried out on the basis of art. 6 sec. 1 lit. a) of the Regulation, i.e. on the basis of consent to processing, then the lack of consent will mean the inability to process and will result in the removal of your personal data from our databases.

Profiling

Your personal data will be processed in an automated manner, including in the form of profiling, as a result of which it will be possible to identify shopping preferences. The user profiling mechanism works based on the history of searches, visited pages, purchases made or products added to the basket on the B2B platform.

Making changes to personal data

Due to transaction security, making changes to the basic company data requires contact with the sales consultant assigned to each client. In addition, in the case of such changes, you may be asked to resubmit the changed registration documents.

You can change the details of the shipping address yourself on the website after logging in and going to the “My account >Company details“.

Storage of personal data

The data is stored in accordance with the security requirements set out in the provisions of the Personal Data Protection Office and is protected against access by third parties.

Changes to our privacy policy

 D-R-O Sp. z o. o. Sp. k. reserves the right to change the above privacy policy by publishing a new privacy policy on this website.