at TERMOINSTAL Sp. z o.o.

Thank you for visiting our website and for your interest in our services. Protecting your personal data is an important element of TERMOINSTAL Sp. z o.o.’s business strategy. This Personal Data Processing Policy explains how we collect and process your personal data, the legal basis for processing and the rights available to you. The Policy forms part of our Quality Management System. Personal data protection is an essential part of our corporate policy.

Personal data collected during our contacts is confidential and is processed solely in accordance with the laws of Poland and the European Union and with the personal data protection principles adopted by TERMOINSTAL Sp. z o.o.

Chapter 1. General Provisions

We process your personal data, such as title, surname, position, address, e-mail address and telephone number, solely in accordance with the GDPR and other applicable personal data protection legislation. The principles below provide information on the scope and purpose of collecting, processing and using personal data. Where links on our website redirect users to other websites, please refer to the privacy information provided on those websites.

Chapter 2. Personal Data Controller

The personal data controller is TERMOINSTAL Spółka z ograniczoną odpowiedzialnością, with its registered office at ul. Kardynała Stefana Wyszyńskiego 61, 37-100 Łańcut, Poland, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court in Rzeszów, 12th Commercial Division of the National Court Register, under KRS number 0000165723, REGON 690005106 and NIP 8150003493.

Controller contact details:

TERMOINSTAL Sp. z o.o.,
ul. Kardynała Stefana Wyszyńskiego 61,
37-100 Łańcut, Poland;
telephone: +48 17 225 36 01;
e-mail: biuro@termoinstal-lancut.pl.

For matters relating to personal data processing, contact us at rodo@termoinstal-lancut.pl.

Chapter 3. Legal Basis for Personal Data Processing

Data is processed under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to personal data processing and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation). In particular, processing is based on Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) GDPR, consent where applicable, and national law.

Chapter 4. Principles and Purposes of Personal Data Processing

Personal data protection rules apply to all information relating to an identified or identifiable natural person, including names, addresses, telephone numbers, e-mail addresses, contracts and billing data that make it possible to determine a person’s identity.

We process personal data only where we have a legal basis or where you have given consent, for example during registration.

Personal data is processed in particular for the following purposes:
– Performance of a contract
– Preparation of quotations
– Order handling
– Providing access to specific offers and information
– Providing information in fulfilment of a legal obligation, such as a court or administrative decision
– Direct marketing
– Exercise of acquired rights, such as enforcement of interest
– Improvement of product and service quality
– Surveys; where a market-research company is engaged, it processes data solely on our behalf and in accordance with our instructions
– Recruitment
– Establishment, pursuit or defence of claims
– Prevention of criminal activity, abuse, offences or other unlawful conduct
– Ensuring the security of data held, including personal data
– Distribution of newsletters and similar communications

Chapter 5. Disclosure and Transfer of Personal Data

Personal data may be made available to other recipients for performance of a contract, fulfilment of a legal obligation incumbent on the Controller, on the basis of your consent, or for purposes arising from the legitimate interests of the Controller or a third party. Data may also be transferred to processors acting on the Controller’s instructions and to their authorised employees. Such processors act under an agreement with the Controller, solely within the scope of the Controller’s instructions, and subject to confidentiality and appropriate security requirements laid down by law. We may also transfer personal data to third parties belonging to a group of entities linked to the Controller by capital or personal relationships.

Data may be transferred outside the European Economic Area. In that case, we verify that the recipient ensures an adequate level of personal data protection, for example under a European Commission or other competent EU authority adequacy decision, standard contractual clauses, or your consent. In every case, we ensure an appropriate level of protection and apply the relevant legal requirements.

Chapter 6. Personal Data Retention Period

Personal data is processed for the period necessary to achieve the purposes described in Chapter 4, in particular:

– For performance of a contract concluded with us: until its completion and thereafter for the period required by law or necessary to pursue or defend claims
– For fulfilment of legal obligations connected with our business and contracts: until the obligation has been fulfilled
– Where processing is based on consent: until we receive a written or e-mail request for erasure, subject to Chapter 14
– Until the Controller’s legitimate interests forming the basis of processing have been fulfilled, or until you object, unless compelling legitimate grounds justify continued processing

Chapter 7. Personal Data Security

Our employees and entities cooperating with us in personal data processing are required to maintain confidentiality and strictly comply with data protection law.

We take all necessary organisational, technical and legal measures to ensure an appropriate level of protection for personal data, in particular against unauthorised or unlawful destruction, manipulation, loss, alteration, disclosure or access. Our security measures are continuously improved in line with technological progress in information exchange.

Chapter 8. Log Files

Whenever you use our website, certain information is automatically transmitted by your browser and stored in log files, such as the browser and operating system used, the domain from which you arrived, number of visits, average visit duration and pages accessed. This information is not assigned to a specific person.

Log files are stored for a short period to identify malfunctions and security-related causes, such as attempted attacks, and are then deleted. Log files required as evidence are retained until the incident has been finally resolved and may be disclosed to investigating authorities in individual cases in accordance with law.

Log files are also used, with or without full IP addresses, for analytical purposes.

Chapter 9. Service Providers

We outsource tasks such as sales and marketing services, contract management, payment processing, programming and data hosting to external service providers. We carefully select and regularly monitor these providers, particularly their handling and protection of stored data. All service providers are required to maintain confidentiality and comply with legal requirements.

Chapter 10. Use of Cookies

Cookies are small text files saved on a computer when a website is visited. When the online service is accessed again, the user’s browser sends the cookie contents back to the relevant provider, enabling recognition of the end device. Reading cookies allows us to optimise our online offering and make it easier to use, for example by saving a password. If you do not want the website to recognise your computer, configure your browser to delete cookies from the hard drive, block all cookies or warn you before a cookie is saved.

Chapter 11. Website Analytics

We require statistical information on the use of our online offering to make it more user-friendly, measure reach and conduct market research. For this purpose, we use the website analytics tools described in this chapter.

User profiles created by these tools using analytics cookies or log-file analysis are not combined with personal data. The tools either do not use users’ IP addresses or shorten and anonymise them immediately after analysis. Tool providers process data solely as contractors under our instructions and not for their own purposes.

For tools supporting opt-out cookies, the opt-out function is linked to the device or browser and applies only to the device or browser currently in use. When using several devices or browsers, the opt-out option must be set for each device and each browser. User profiles may also be prevented by disabling cookies.

12.1 Lead Forensics

For statistical evaluation of our website, we use technologies and services provided by Lead Forensics, Communication House, 26 York Street, London W1U 6PZ, United Kingdom.

Its data processing policy complies with EU personal data protection requirements. Detailed rules and contact information for data-erasure requests are available at https://www.leadforensics.com/privacy-policy/.

12.2 Google Analytics

Google Analytics is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies placed on the user’s computer to analyse how users use the website. Information collected by the cookie about use of our website, including the user’s IP address, is generally transmitted to and stored on a Google server in the United States.

The code “gat._anonymizeIp();” has been added to Google Analytics to ensure anonymous collection of IP addresses. Google therefore records the user’s IP address only in shortened form at our request, ensuring anonymisation and preventing identification of the user. Where IP anonymisation is activated, Google shortens the IP address within Member States of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the United States and shortened there.

Google uses the information to evaluate use of our website, prepare website-activity reports and provide further services relating to use of our websites and the internet. The IP address transmitted by the user’s browser in connection with Google Analytics is not combined with other Google data. Data is disclosed by Google to third parties only where required by law or for commissioned data processing. Google will not combine user data with other data collected by Google.

By using this website, you consent to Google processing your personal data in the manner and for the purposes described above.

You may reject cookies by selecting appropriate browser settings; however, in that case some website functions may not be fully available. You may also prevent Google from collecting and processing data generated by cookies and related to your use of the website, including your IP address, by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=en.

Further information on Google Analytics and data protection is available at http://tools.google.com/dlpage/gaoptout?hl=en. Google Analytics data collection and storage may also be withdrawn for the future by setting an opt-out cookie using the add-on available at https://tools.google.com/dlpage/gaoptout. If all cookies are deleted from the computer, the opt-out cookie is also deleted and must be installed again. This setting applies to the browser and computer used. The procedure must be repeated for every browser and device.

Google also reads cookies from other Google services, such as Gmail, Search and Analytics. All such data is transmitted to Google in encrypted form. Further information on Google’s privacy policy is available at http://www.google.com/policies/privacy/.

Chapter 13. YouTube Videos

Our website uses the YouTube video platform provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”). YouTube is a platform for playing audio and video files.

When you visit a page containing an embedded YouTube player, the player connects to YouTube to transmit and play the video or audio file. Data required to reproduce the content is therefore transferred to YouTube as the responsible entity. We are not responsible for YouTube’s processing of that data.

Further information on the scope and purpose of data collection, further processing and use by YouTube, your rights and available privacy options is provided in YouTube’s privacy information.

Chapter 14. User Rights

At every stage of our cooperation, you have the right to access and rectify your data, request erasure or restriction of processing, object to processing, request cessation of processing and data portability, withdraw consent at any time, and lodge a complaint with the President of the Personal Data Protection Office.

You have the right to information about our processing of your personal data and to access the data held by the Controller. You may request correction, completion or erasure of personal data. The right to erasure does not apply to data required in accounting systems or subject to a statutory retention obligation. You may also request restriction of processing where legal grounds exist.

You may object to our processing of your personal data at any time. We will then cease processing unless we have a legal interest in continued processing that overrides your rights as a user.

The right to erasure may be exercised where one of the following conditions is met:

1. The data is no longer necessary for the purpose for which it was collected or processed.
2. Consent has been withdrawn and there is no other legal basis for continued processing.
3. An objection has been lodged and there are no overriding legitimate grounds for processing.
4. The data disclosed by you was processed contrary to the GDPR or other law.

Where you have consented to personal data processing, you may withdraw your consent at any time with effect from the date of withdrawal. This does not affect the lawfulness of processing carried out before withdrawal.

You also have the right to receive personal data provided to us in a structured, commonly used and machine-readable format.
To exercise these rights, contact us in writing or by e-mail at rodo@termoinstal-lancut.pl.