This document is an appendix to our Terms of use agreement. By using our services, you are consenting to share your personal information. This Privacy Policy describes how your personal information is collected, used, and shared when you visit our website. The protection of your personal data is very important to us, therefore we would like you to attentively learn our Privacy Policy to know, how we process and protect your personal information. This document also provides our Cookies Policy.
We hereby declare that we follow the rules of privacy policy and other legal regulations in accordance with the Act on the Protection of Personal Data and Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on protection of individuals with regard to the processing of Personal Data and on the free movement of such data and the repeal of Directive 95/46/EC [so-called GDPR].
The person whose data is processed can contact us in all matters regarding the processing of personal data, and the use of rights related to data processing. Providing a clear response on collecting, processing and protecting your data is always our highest priority. In case of any doubts we also provide comprehensive information on the privacy protection institutions, that you can contact with.
§2 Privacy policy rules
We take privacy of our Customers very seriously and treat your personal data confidentially. One of the characteristics of our company is respect for privacy, therefore we provide services which ensure your comfort, satisfaction and safety.
We know that our Customers care how information about them is used and shared, and we appreciate their trust that we will do so carefully and sensibly. We always collect personal information in order to continually improve our products and services. Your personal data is used to operate, provide and develop the services that we offer.
We always provide clear explanations of processes affecting Customer data and privacy and their purpose. We always inform about data that we collect, how we share it with other suppliers and which institutions Customer should contact, in case of any doubts or questions.
In case of any doubts concerning personal data processing, we will take immediate actions to ensure safety of our Customers. We will give comprehensive and clear explanations to all the questions regarding privacy policies.
Our company will take all justified actions, to protect Customer personal data from inappropriate access or use by unauthorized persons and to secure it comprehensively.
We declare that we will follow the rules of privacy policy or other legal regulations and cooperate with the supervisory authorities and law enforcement authorities. In case of lack of data privacy laws and regulations, we will act according to the rules of privacy policy and principles of community life.
Specific personal data protection methods are defined in Data Protection Regulation (GDPR: security policy, personal data protection rules, instructions for IT data processing system). Due to safety reasons the regulation is available for inspection supervisory authorities.
The Administrator of your personal data is KOB-AD S.C Mateusz Kobieluch Łukasz Adamczuk, 56/8 Koszary Street 22-400 Zamość, NIP: 922-29-81-865, 570949458 e-mail: hhabitalux@gmail.com
Article 6, section 1, (a)-(b) GDPR provides a lawful basis for the processing of personal data. Providing your personal information is voluntary but necessary in order to perform the contract. Your data may be shared with suppliers who provide us with services related to processing of your personal data. According to the article 6(1)(b) GDPR it is neccessary that your data will be shared, to perform the services. Your personal data may be also shared with our business partners. We store your data within the European Economic Area (EEA), but it may also be transferred outside the European Economic Area under certain conditions, special safeguards are foreseen to ensure that the protection travels with the data. If your data is transferred we use regular clauses in the contract and the Privacy Shield as a safeguard measure with regard to countries outside the EEA, where EU data protection rules doesn’t apply.
Your personal data will be kept for a period necessary to complete the contract and may be stored for longer periods according to any legal obligations to keep the data for a fixed period of time, but no loger than 10 years.
The data will be processed solely for purposes related to the contract, until your consent is withdrawn.
According to GDPR, you have the following rights: you can withdraw your consent at any time and receive the copy of your processed personal information, moreover you have the right to access the personal information we hold about you and ask that it is corrected, updated, or deleted (right to be forgotten) in accordance with article 17 GDPR; to obtain from the controller restriction of processing according to article 18 GDPR; to object at any time to processing of personal data concerning him or her according to article 21 GDPR; not to be subject to a decision based solely on automated processing.
If you think your personal data protection rights haven’t been respected, lodge a complaint with the Data Protection Authority (Personal Data Protection Office, 2 Stawki Street, Warsaw). If you need any additional information, you can contact us in all matters regarding the processing of personal data, and the use of rights related to data processing.
If you have any questions regarding the way we handle your personal data, please contact us via the page from which the user was redirected to this Privacy Policy. The request for contact will be immediately forwarded to the appropriate person.
You always have the right to inform us if:
a) you do not want to receive information from us or any messages;
b) you would like to receive a copy of your personal data that we collect;
c) you want correct, update or delete your personal data in our records;
d) you would like to report violations, improper use or processing of your personal data.
To help us respond to the information provided, please provide your name and further details.
§3 The range and purpose of collecting personal data
We process the necessary personal data in order to provide services and for accounting purposes only, such as:
a) making an order,
b) entering into a contract, making a complaint and withdrawing from the contract,
c) issuing a VAT invoice or other receipt.
We collect, process and store the following data:
a) name and surname,
b) home address,
c) delivery address (if different from home address),
d) tax identification number (TIN),
e) e-mail address (e-mail),
f) telephone number (mobile, landline),
g) information about used web browser,
h) other personal data provided voluntarily.
Providing the above data is completely voluntary but also necessary for the full implementation of the services.
Purpose of collecting and processing or using data:
a) direct marketing, archival purposes of advertising campaigns;
b) implementation of the obligations imposed by law by collecting information about undesirable activities;
We may send personal data to servers located outside the country of residence of the user or to related entities, third parties based in other countries including countries from the EEA (European Economic Area, EEA. European Economic Area, EEA – free trade area and The Common Market, including European Union and European Free Trade Association (EFTA) countries for the purpose of processing personal data by such entities on our behalf in accordance with the provisions of this Privacy Policy and applicable law, customs and data protection regulations.
Bearing in mind the fact that in many countries to which this personal data is transferred, the same level of legal protection of personal data does not apply as in the user’s country. The user’s personal data stored in another country may be accessed in accordance with the law in force there, for example: courts, authorities responsible for law enforcement and national security, in accordance with the laws in force in that country. Subject to lawful requests for disclosure of data, we undertake to require entities that process personal data outside the user’s country to take steps to protect data in an adequate manner to the regulation of their national law.
§4 Cookies Policy
We collect automatically the information contained in cookies to collect User data. A cookie file is a small piece of text that is sent to the User’s browser and which the browser sends back at the next visits to the website. They are mainly used to maintain sessions, e.g. by generating and sending back a temporary identifier after logging in. We use “session” Cookies stored on the User’s end device until he logs out, turn off the website or turn off the web browser and “permanent” Cookies stored on the User’s end device for the time specified in the parameters of Cookies or until they are deleted by the User.
Cookies adapt and optimize the website and its offer for Users’ needs through such activities as creating page statistics and ensuring security. Cookies are also necessary to maintain the session after leaving the website.
The administrator processes the data contained in cookies each time the website is visited by visitors for the following purposes:
a) optimizing the use of the website;
b) identification of the Service Recipients as currently logged in;
c) adaptation, graphics, selection options and any other content of the website to the individual preferences of the Customer;
d) remembering automatically and manually completed data from Order Forms or login details provided by the visitor;
e) collecting and analyzing anonymous statistics showing how to use the website in the administration panel and google analytics;
f) creating remarketing lists based on information about preferences, behavior, method of use, interests on the Website and collecting demographic data, and then sharing these lists in AdWords and Facebook Ads.
g) creating data segments based on demographic information, interests, preferences in the selection of viewed products / services.
h) use of demographic and interest data in Analytics reports.
The user at any time using his web browser can completely block and delete the collection of cookies.
Blocking by the User the possibility of collecting cookies on his device may make it difficult or impossible to use some of the website functionalities to which the User is fully entitled, but in such situation must be aware of the functional limitations.
A user who does not want to use “cookies” for the purpose described above may at any time delete them manually. To read the detailed instructions on how to proceed, visit the website of the manufacturer of the web browser currently used by the User.
§5 Rights and obligations
We have the right and in the cases specified by law and the statutory obligation to provide some or all of the information concerning personal data to public authorities or third parties, which submit a request for information under the applicable provisions of Polish law.
The User has the right to access the content of their personal data that they provide, the User may correct and supplement this data at any time, and also have the right to demand that they be removed from their databases or ceased to be processed, without giving any reason. In order to exercise their rights, the User may at any time send an appropriate message to the e-mail address or in another way that will deliver / forward such a request.
The request by the user to remove personal data or discontinue their treatment may result in the complete impossibility of providing the services or their serious limitation.
We undertake to act in accordance with applicable law and the principles of social coexistence.
Information on out-of-court settlement of consumer disputes. The entity authorized within the meaning of the Act on out-of-court settlement of consumer disputes is the Financial Ombudsman, whose website address is as follows: www.rf.gov.pl.
§6 Basic safety rules
Each user should take care of their own data security and the security of their devices that access the Internet. Such a device should absolutely have an antivirus program regularly supplemented with the current database definitions, types and kinds of viruses, a secure version of the web browser uses and enabled firewall. The user should check whether the operating system and the programs installed on it have the latest and compatible updates, because the attacks use errors found in the installed software.
Access data to services offered on the Internet are – logins, passwords, PINs, electronic certificates, etc. – should be secured in a place inaccessible to others and impossible to break in from the Internet. They should not be disclosed or stored on the device in a form that allows unauthorized access and reading by unauthorized persons.
Caution when opening strange attachments or clicking links in mail messages, which you did not expect, for example from unknown senders or spam folder.
It is recommended to run anti-phishing filters in the web browser, i.e. tools that check whether the displayed website is authentic and is not intended for phishing, by impersonating a person or institution.
The files should be downloaded only from trusted sites, services and websites. We do not recommend installing software from unverified sources, especially from unknown publishers with unverified opinion. This also applies to mobile devices, e.g. smartphones, tablets.
When using a home Wi-Fi wireless network, set a password that is safe and difficult to break, it should not be any pattern or string that is easy to guess (e.g. street name, host name, date of birth, etc.) . It is also recommended to use the highest possible standards of encryption of Wi-Fi wireless networks, which can be run on your equipment, eg WPA2.
§7 Use of Social Media plugins
Plug-ins of social networks facebook.com, Twitter and others, can be found on our pages. The related services are provided respectively by the companies Facebook Inc. and Twitter Inc.
Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA Facebook. To see Facebook plugins go to: https://developers.facebook.com/docs/plugins
Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. To view Twitter plugins go to: https://dev.twitter.com/web/tweet-button
If, while viewing our website or staying on it, the user is logged in to his account, e.g. on Facebook or Twitter, the provider is able to combine your interests, information preferences and other data obtained, for example, by clicking the Like button or leaving comment, or enter the profile name in the searched ones. This information will also be transmitted directly to the provider via the browser.
More detailed information on the collection and use of data by Facebook or Twitter and on the protection of privacy can be found on the following pages:
a) Data protection / privacy advice published by Facebook: http://www.facebook.com/policy.php
b) Data protection / privacy advice issued by Twitter: https://twitter.com/privacy
To avoid registering a visit to the selected user account via Facebook or Twitter on our website, you must log out of your account before browsing our websites.
