SPÓLNOTA – WOODWORK COOPERATIVE ensures the security of your personal data.
- Personal Data Protection Policy
With the following personal data protection policy we provide information on the type of personal data collected, for what purposes and how we use it, who we are and what your rights are. The aim of this letter is to provide information referred to in Art. 13 section 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR that will apply from 25 May 2018.
Information given below is highly important, therefore please read the content very carefully.
Who is the Administrator of your personal data?
The Administrator, i.e. the entity that decides how you personal data will be used, is Drzewna Spółdzielnia Pracy SPÓLNOTA , operating on the basis of an entry into the Commercial Registry run by the District Court Krakow-Srodmiescie – XII Business-Register Department, under KRS number 0000179121, NIP (Tax ID) NIP 5520100911, REGON 000412808, (hereinafter referred to as “Us”)
You can contact us via:
- a letter sent to the following address: Białka 34-220 Maków Podhalański.
- an email sent to the following address: spólnota@spolnota.pl
Data Protection Officer
We have not appointed a Personal Data Protection Inspector, you can contact the Personal Data Coordinator with any question or request in all matters regarding personal data:
- a letter sent to the following address: Personal Data Coordinator Białka 34-220 Maków Podhalański.
- an email sent to the following address: mstachowicz25@gmail.com
What is the purpose and on what basis we use your personal data?
We use your personal data obtained during the conclusion of the contract and during its term for the following purposes:
- achieving goals based on your consent – (legal basis: Art. 6 section 1 a) GDPR e.g.:
- using newsletter services,
- providing information on products and services and about promotions being carried out,
- achieving goals based on your consent – (legal basis: Art. 6 section 1 a) GDPR e.g.:
- events or actions that we organize, e.g. via traditional mail, emails, newsletter, telephone contact, text messages,
- concluding and executing a contract between us and you – (legal basis: Art. 6 section. 1 b) GDPR e.g.:
- as part of the purchase – sale, including transactions in the online store,
- handling complaints,
- granting warranties,
- pricing products,
- ensuring correct quality of services,
- handling requests sent to us (e.g. via a contact form),
- concluding and executing a contract between us and you – (legal basis: Art. 6 section. 1 b) GDPR e.g.:
- handling your requests and questions that are directed to us in connection with the implementation,
- fulfilling the obligation required to comply with the legal obligation incumbent on the administrator – (legal basis: Art. 6 section 1 c) GDPR e.g.:
- transferring data at the request of the court or police,
- implementing our so-called legitimate interests – (legal basis: Art. 6 section. 1 f) GDPR e.g.:
- providing payment services,
- handling requests and questions that are directed to us in connection with the execution of the contract,
- debt collection: carrying out court, arbitration and mediation proceedings,
- storage of data for archival purposes (fulfilling our obligations provided for in applicable laws),
- detecting and preventing misuses,
- verifying payment credibility.
Is the provision of personal data necessary?
The provision of personal data by you is completely voluntary. We require you to provide us with data necessary to enter into and execute the contract in connection with each transaction. Unfortunately, if you fail to provide us with the necessary personal data, we will not be able to conclude the contract with you and, as a consequence, start the cooperation. If, for example, tax regulations require us to provide other necessary data, we must do so in order to establish or maintain cooperation. Providing personal data for direct marketing purposes is voluntarily – in particular, it does not condition the conclusion and execution of the contract.
To whom we can transfer your data?
The Company can share your personal data to:
- our employees and associates who must have access to data in order to fulfil our obligations;
- entities processing data on our behalf, participating in the execution of our activities:
- our agents, advertising agencies and other entities assisting in the sale of our services or organization of marketing campaigns,
- operators of our ICT systems or providing us with ICT tools,
- subcontractors who support us in the execution of the contract between us and you, e.g. in handling correspondence or in the customer service process,
- entities processing data on our behalf, participating in the execution of our activities:
- entities providing us with advisory, consulting, auditing, legal, tax and accounting services.
- other data administrators that process data on their own behalf:
- our agents, advertising agencies and entities cooperating in the organization of marketing campaigns or customer service – in order to settle their due remuneration,
- entities providing postal or courier services,
- entities purchasing receivables – in case you fail to pay invoices issued by us within the specified deadline,
- payment service providers (banks, payment institutions) – to make refunds to you, for or in order to ensure the correct operation of the direct debit service,
- entities cooperating with us when handling accounting, tax and legal issues – to the extent to which they become data administrators.
- state authorities, e.g. courts, prosecutor’s office, tax authorities.
Will your data go outside the European Economic Area (EEA)?
We do not currently plan to transfer your data outside the EEA.
How long can we store your data?
If we use your data on the basis of your consent, we use this personal data until you revoke your consent and resign from the goals achieved through it.
In transactions related to the execution of the contract during the period of the execution of transactions and the time in which it is possible to claim compensations in connection with the execution of the contract concluded as a result of the transaction, a maximum of 3.5 years from the date of these transactions or until the time of validation.
In connection with the implementation of the law, your personal data will be stored for periods specified in the law, e.g. tax regulations.
We will store your personal data for as long as we may suffer the legal consequences of the failure to fulfil the obligation, e.g. receiving a financial penalty from the state authorities.
What is the automatic decision making?
Personal data will not be processed in an automated manner (including in the form of profiling) in such a way that as a result of such automated processing any decisions could be made, other legal effects would be caused or it would have a significant impact on our clients, contractors and their employees / associates.
What are your rights?
- You have the following rights in connection with our processing of your data:
- the right to access your personal data, including the right to information about your personal data and to obtain a copy of your personal data,
- the right to rectify your personal data if it is incorrect and the right to supplement incomplete data,
- the right to remove your personal data,
- the right to limit the processing of your personal data,
- the right to transfer your personal data,
- You have the following rights in connection with our processing of your data:
- the right to lodge a complaint with the personal data protection authority, i.e President of the Office for Data Protection (address: ul. Stawki 2, 00-193 Warszawa) in case of illegal processing of your personal data,
- the right to revoke at any time any consent without giving reasons and without affecting the processing which has been made on the basis of consent before its revocation,
- the right to object to:
- our processing of your personal data for marketing purposes, including the so called profiling (i.e. the objection to providing you with information about our promotions, offers, products, including services, actions and events, including special offers), and after submitting such an objection we will not be allowed to process your data for marketing purposes;
- our processing of your personal data for the purposes arising from the so- called legitimate interests that we realize – for reasons related to your particular situation.
- You can exercise your rights listed in point 1 at any time by making an appropriate request.
- You can make requests described in point 1 to our Data Protection Officer in accordance with the contact details provided.
- We are obliged to inform you about the actions taken in connection with requests referred to in point 1, without undue delay, and in any case within one month of receiving your request. If necessary, the deadline referred to above can be extended by another two months due to the complexity of the request or the number of requests. However, within one month of receiving your request, we must inform you about the extension of the deadline and the reasons for it.
- If we do not take action in connection with your requests referred to in point 1, we will inform you immediately, no later than one month after receiving the request, about the reasons for not taking action and the possibility of lodging a complaint with the President of the Office for Data Protection and using legal protection measures in the court proceedings.
- If we have reasonable doubts about your identity in connection with the request, we may ask you for additional information necessary to confirm it.
- We will provide you with the information referred to in point 4 – 6 above, in writing and way we choose:
- via registered letter to the postal address that you provided, or
- via electronic means to the email address that you provided, except if:
- you send us your request electronically and do not request information in any other form – then we will send information to the email address that you provided;
- you request providing information orally and we confirm your identity by other means – then we will give you information orally.
- Any communication and actions taken by us in connection with your requests referred to in point 1 above are free of charge. However, if your requests are clearly unjustified or excessive, e.g. due to the continuing nature, we will be able to:
- charge a fee, including administrative costs of providing information, communication or taking the action requested, or
- refuse to take action in connection with the request.
- Each recipient to whom we have disclosed your personal data will be informed about a request to rectify, supplement, remove or limit the processing of your personal data, which we have made as a result of the request presented to us. We will not have to provide such information only when it is impossible (e.g. the Company has been liquidated) or if it requires disproportionately large effort (data was disclosed many years ago and despite the attempts taken it was not possible to contact the recipient).
- At your request, we will inform you about the recipients to whom we have provided information about the rectification, removal or limitation of your personal data processing as well as about the recipients we have not been able to notify.
Use of cookies
Personal data controller, purposes and legal basis for the processing of personal data: Drzewna Spółdzielnia Pracy “Spólnota” as the administrator is responsible for data processing in connection with the use of so-called cookies and other similar technologies for the processing of usage data on all (sub-) domains https://spolnota.pl/pl/ Cookies are small text files that are saved on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not damage your end device and do not contain viruses, Trojans or other malicious software. The cookie file stores information that is generated in cooperation with a specific end device. However, this does not mean that we immediately learn about your identity. The use of cookies and other similar technologies to process usage data serves different purposes depending on the cookie category or other similar technology:
Necessary: These are cookies and other similar technologies without which you cannot use our services (e.g. correct display of the website / required functions, etc.).
Statistical: These techniques allow us to compile anonymous statistics on the use of our services in order to design them according to requirements. This allows us, for example, to determine how we can better tailor our website to users.
Advertising: Allows us to show you relevant advertising content based on the analysis of user behavior. Your usage behavior can also be tracked through various websites, browsers or end devices by means of a user ID (unique identifier).
As part of the use of cookies and other similar technologies, depending on the purpose, the following types of personal data are processed:
Necessary (5): Security events; Distinguish between people and bots
Statistical (3): Pseudonymised user profile with information about the use of our website. These include in particular:
– browser type / version,
– the operating system used,
– referrer URL (previously visited page),
– host name of the accessing computer (IP address),
– time of the server request,
– individual user ID triggered page events (surfing behavior). The IP address is anonymized on a regular basis, thus user identification
Advertising (1):
Pseudonymised user profile with information about the use of our website. These include in particular:
– IP address,
– individual user ID;
– potential interest in products,
– triggered page events (surfing behavior).
The legal basis for the use of preferential, statistical and advertising cookies and other similar technologies is your consent in accordance with Art. 6 sec. 1 lit. a) GDPR. The legal basis for the use of technically necessary cookies and other similar technologies is Art. 6 sec. 1 lit. b) GDPR, i.e. we process your data in order to provide our services during the conclusion or performance of the contract. Statistical cookies help the website owner to understand how different users behave on the website by collecting and reporting anonymous information.
COOKIE NAM E | PROVIDER | Cookie purpose description | EXPIRY | TYPE |
rc::a | google.com | This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use o f their website. | Persistent | HTML Local Storage |
rc::b | google.com | This cookie is used to distinguish between humans and bots. | Session | HTML Local Storage |
rc::c | google.com | This cookie is used to distinguish between humans and bots. | Session | HTML Local Storage |
wc_cart_hash_# | Spólnota | Unclassified | Persistent | HTML Local Storage |
wc_fragments_# | Spólnota | Unclassified | Session | HTML Local Storage |
_ga | Spólnota | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 2 years | HTTP Cookie |
_gat | Spólnota | Used b y Google Analytics to throttle request rate | 1 day | HTTP Cookie |
_gid | Spólnota | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. | 1 day | HTTP Cookie |
NID | google.com | Registers a unique ID that id entifies a returning user’s device. The ID is used for targeted ads. | 6 months | HTTP Cookie |
Can I opt out of accepting cookies?
Activities related to storing and sending cookies are handled by web browsers and are invisible to the user. Most of the browsers used accept cookies by default. However, you can set your browser to be able to reject requests to store cookies altogether or selected cookies. This can be done using the settings in your browser. Before you decide to change the default settings, however, remember that many cookies help to improve the convenience of using the website. Disabling cookies may affect the way our website is displayed in your browser.
Information on how to change the conditions for storing or receiving cookies, as well as delete cookies, is available here:
for Chrome https://support.google.com/chrome/answer/95647?hl=pl#_blank
for Mozilla Firefox https://support.mozilla.org/pl/kb/ciasteczka#_blank
for Internet Explorer https://support.microsoft.com/pl-pl/help/278835/how-to-delete-cookie-files-in-internet-explorer#_blank
for the Opera browser https://help.opera.com/pl/latest/web-preferences/#cookies
Convert to Facebook
Purpose / legal basis for data processing:
We use the Facebook Conversion Pixel and Facebook Remarketing services on our website. From the Facebook pixel, we can recognize that someone has clicked on our Facebook ad and has been redirected to our website. However, we cannot see which other pages the user has accessed. The information collected using Pixel Facebook is used to create statistics on the use of our Facebook ads. However, we do not collect and receive any information that could be used to personally identify users. Facebook remarketing technology means that users who have visited our website can again receive targeted advertising on Facebook pages. However, we do not collect and receive no information about which Facebook users actually display targeted advertising. We also cannot identify individual users here. The legal basis for data processing is Art.6 par. 1 f) GDPR. The legitimate interest of Drzewna Pracy Spółdzielnia Pracy ”results from the interest in optimizing one’s own website and improving the effectiveness of advertising activities. You can object to data processing at any time. To do so, simply click on the link below here https://www.facebook.com/ads/preferences for and confirm your objection on the website.
For more information on the purposes and scope of the collection and processing of personal data by Facebook, as well as the setting options for protecting privacy on Facebook, see the Facebook Privacy Policy. The deactivation of Facebook’s online advertising is possible through the Digital Advertising Alliance in the USA, the Digital Advertising Alliance in Canada or the European Interactive Digital Advertising Alliance in Europe, or through appropriate settings on your end device. This can be done via this link https://www.youronlinechoices.com/pl/twojewybory
Recipients / categories of recipients:
From the Facebook pixel, both we and Facebook can recognize that someone has clicked on our Facebook ad and has been redirected to our website. The information generated by the cookie and / or graphics about your use of this website is transferred to a Facebook server in the USA and stored there. Facebook uses the information obtained in this way to evaluate the user behavior with regard to Facebook advertising. Facebook may also transfer this information to third parties if required to do so by law or if third parties process this data on behalf of Facebook. Facebook will not associate your IP address with any other data held by Facebook.
Youtube video files
Our home page www.spolnota.pl may temporarily contain video files to be played in Youtube Frame. After playing the video, the user will be automatically redirected to the website www.youtube.com in Google Inc. We have no influence on the scope of the data and the manner of data processing by Google Inc. In this regard, Google Inc. is legally responsible. For more information on how Google processes data, see the following https://policies.google.com/privacy?hl=pl&gl=pl
Google Maps
On this website, you can use the features and content of Google Maps. This allows you to display interactive maps directly on the website and conveniently use the map, e.g. to find our company. The use of Google Maps is in the legitimate interest of an attractive presentation of our offer and an easy search for our company at the location indicated on the website. This constitutes a legitimate interest pursuant to Art. 6 sec. 1 lit. f GDPR. When you visit our website, Google Ireland Limited (Google Maps provider) receives the information that you have accessed the corresponding subpage of our website. Using the functions of Google Maps involves the processing of the IP address. Typically, this processing takes place on a Google server in the USA. We have no influence on the specific data processing by Google Maps.
More information on the purpose and scope of data processing by Google Maps can be found in the provider’s privacy policy. There you will also find additional information about your rights and setting options to protect your privacy.
Privacy policy and address of the Google Maps provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, https://www.google.com/policies/privacy/. Additional terms of use for Google Maps / Google Earth can be found at https://maps.google.com/help/terms_maps.html