|
1. |
This Privacy Policy sets out the principles for processing personal data obtained through the online store b2b.agrorami.pl (hereinafter referred to as the "Online Store"). |
|
2. |
The owner of the Online Store and at the same time the data administrator is AGRO-RAMI Raniś i wspólnicy sp. z o.o. with its registered office in Kościelna Wieś (62-811), ul. Poznańska 19, entered into the Register of Entrepreneurs of the National Court Register kept by the Poznań - Nowe Miasto i Wilda District Court in Poznań, IX Economic Department of the National Court Register under KRS number 0001024623, with share capital of 500,000 PLN, NIP: 6080074994, REGON: 300839532, hereinafter referred to as AGRO-RAMI Raniś i wspólnicy sp. z o.o.. |
|
3. |
Personal data collected by AGRO-RAMI Raniś i wspólnicy sp. z o.o. through the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR. |
|
4. |
AGRO-RAMI Raniś i wspólnicy sp. z o.o. takes special care to respect the privacy of Customers visiting the Online Store. |
§ 1 Type of processed data, purposes and legal basis |
|
1. |
AGRO-RAMI Raniś i wspólnicy sp. z o.o. collects information regarding natural persons conducting business or professional activities on their own behalf and natural persons representing legal persons or organizational units not being legal persons, collectively referred to as Customers. |
|
2. |
Customer personal data is collected in the following cases: |
|
a) |
registration of an account in the Online Store, for the purpose of creating an individual account and managing this account and placing orders. Legal basis: necessity for the performance of a contract (Article 6(1)(b) of the GDPR); |
|
b) |
subscription to the informational bulletin (Newsletter), for the purpose of performing a contract for the provision of services by electronic means. Legal basis - consent of the data subject to the performance of the Newsletter service contract (Article 6(1)(a) of the GDPR); |
|
c) |
use of the product inquiry service, for the purpose of performing a contract for the provision of the product inquiry service (Article 6(1)(b) of the GDPR). |
|
3. |
In the case of registration of an account in the Online Store, the Customer provides: |
|
a) |
the Entrepreneur's company; |
|
b) |
NIP number; |
|
c) |
e-mail address; |
|
d) |
company address data: |
|
a. |
postal code and city; |
|
b. |
country; |
|
c. |
street with house/apartment number. |
|
e) |
first name and surname. |
|
4. |
Upon the first login to the Customer's Account in the Online Store, the Customer independently sets an individual access password to their account. The Customer can change the password at a later time, according to the rules described in §6. |
|
5. |
In the case of using the Newsletter service, the Customer only provides their email address. |
|
6. |
In the case of using the product inquiry service, the Customer provides: |
|
a) |
first name and surname; |
|
b) |
email address; |
|
c) |
phone number (optional). |
|
7. |
Additional information may be collected while using the Store's Website, including: IP address assigned to the Customer's computer or external IP address of the Internet provider, domain name, browser type, access time, operating system type. |
|
8. |
Customer navigation data may also be collected, including information about links and referrals they decide to click on or other actions taken in the Online Store. Legal basis - legitimate interest (Article 6(1)(f) of the GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services. |
|
9. |
In order to establish, assert, and defend claims, certain personal data provided by the Customer in using the functionalities in the Online Store may be processed, such as: first name, last name, data regarding the use of services, if claims arise from the way the Customer uses the services, other data necessary to prove the existence of a claim, including the size of the damage suffered. Legal basis - legitimate interest (Article 6(1)(f) of the GDPR), consisting in establishing, asserting, and defending claims and in defense against claims in proceedings before courts and other state authorities. |
|
10. |
Providing personal data to AGRO-RAMI Raniś i wspólnicy sp. z o.o. is voluntary, in connection with concluded sales contracts or the provision of services through the Store's Website, with the reservation, however, that not providing certain data in forms during the Registration process prevents Registration and setting up a Customer Account, and in the case of placing an order without registering a Customer Account prevents the submission and execution of the Customer's order. |
§ 2 To whom are the data made available or entrusted and how long are they stored? |
|
1. |
Customer personal data is transferred to service providers used by AGRO-RAMI Raniś i wspólnicy sp. z o.o. in operating the Online Store. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, either comply with AGRO-RAMI Raniś i wspólnicy sp. z o.o. COMPANY's instructions regarding the purposes and methods of processing this data (processing entities), or independently determine the purposes and methods of processing it (administrators). |
|
a) |
Processing entities. AGRO-RAMI Raniś i wspólnicy sp. z o.o. uses providers who process personal data solely on the instructions of AGRO-RAMI Raniś i wspólnicy sp. z o.o. These include, among others, providers offering hosting services, accounting services, delivering marketing systems, systems for analyzing traffic in the Online Store, systems for analyzing the effectiveness of marketing campaigns; |
|
b) |
Administrators. AGRO-RAMI Raniś i wspólnicy sp. z o.o. uses providers who do not act solely on instructions and independently determine the purposes and methods of using Customer personal data. They provide electronic payment and banking services. |
|
2. |
Location. Service providers are based in Poland and in other countries of the European Economic Area (EEA). |
|
3. |
Customer personal data is stored: |
|
a) |
If the processing of personal data is based on consent, then the Customer's personal data is processed by AGRO-RAMI Raniś i wspólnicy sp. z o.o. until the consent is revoked, and after the withdrawal of consent for a period corresponding to the statute of limitations for claims that AGRO-RAMI Raniś i wspólnicy sp. z o.o. can raise and that can be raised against it. If a specific provision does not provide otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activity - three years. |
|
b) |
If the basis for processing data is the performance of a contract, then the Customer's personal data is processed by AGRO-RAMI Raniś i wspólnicy sp. z o.o. for as long as it is necessary to perform the contract, and after that time for a period corresponding to the statute of limitations for claims. If a specific provision does not provide otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activity - three years. |
|
4. |
In the case of making a purchase in the Online Store, personal data may be transferred to a courier company for the purpose of delivering the ordered goods. |
|
5. |
Navigation data may be used to provide Customers with better service, analyze statistical data, adjust the Online Store to the preferences of Customers, and administer the Online Store. |
|
6. |
In the event that the Customer subscribes to the informational newsletter (Newsletter) to their email address, AGRO-RAMI Raniś i wspólnicy sp. z o.o. will send electronic messages containing commercial information about promotions and new products available in the Online Store. |
|
7. |
In the event of a request, AGRO-RAMI Raniś i wspólnicy sp. z o.o. provides personal data to authorized state authorities, in particular organizational units of the Prosecutor's Office, Police, President of the Office for Personal Data Protection, President of the Office of Competition and Consumer Protection, or President of the Office of Electronic Communications. |
§ 3 Cookie mechanism, IP address |
|
1. |
The Online Store uses small files, called cookies. They are saved by AGRO-RAMI Raniś i wspólnicy sp. z o.o. on the end device of the person visiting the Online Store, if the web browser allows it. A cookie file usually contains the domain name it comes from, its "expiration time," and an individual, randomly selected number identifying this file. Information collected using files of this type helps to adjust the products offered by AGRO-RAMI Raniś i wspólnicy sp. z o.o. to individual preferences and actual needs of persons visiting the Online Store. They also allow for the development of general statistics on visits to presented products in the Online Store. |
|
2. |
AGRO-RAMI Raniś i wspólnicy sp. z o.o. uses two types of cookies: |
|
a) |
Session cookies: after the session of a given browser ends or the computer is turned off, the stored information is deleted from the device's memory. The session cookie mechanism does not allow for the collection of any personal data or any confidential information from Customers' computers. |
|
b) |
Persistent cookies: they are stored in the end device's memory of the Customer and remain there until they are deleted or expire. The persistent cookie mechanism does not allow for the collection of any personal data or any confidential information from Customers' computers. |
|
3. |
AGRO-RAMI Raniś i wspólnicy sp. z o.o. uses its own cookies for: |
|
a) |
authenticating the Customer in the Online Store and providing the Customer's session in the Online Store (after logging in), thanks to which the Customer does not have to re-enter the login and password on each subpage of the Online Store; |
|
b) |
analysis and research as well as viewing audit, and especially for creating anonymous statistics that help understand how Customers use the Website of the Store, which allows for improving its structure and content. |
|
4. |
AGRO-RAMI Raniś i wspólnicy sp. z o.o. uses external cookies for: |
|
a) |
presenting the Reliable Regulations Certificate via the rzetelnyregulamin.pl website (external cookie administrator: Rzetelna Grupa sp. z o.o. based in Warsaw); |
|
b) |
collecting general and anonymous statistical data through Google Analytics analytical tools (external cookie administrator: Google LLC based in the USA); |
|
c) |
presenting advertisements tailored to the Customer's preferences using the Google Ads online advertising tool (external cookie administrator: Google Ireland Limited based in Ireland). |
|
5. |
The cookie mechanism is safe for the computers of Customers of the Online Store. In particular, this way it is not possible for viruses or other unwanted software or malicious software to enter Customers' computers. Nevertheless, Customers have the option to limit or disable access to cookie files on their computers through their browsers. If they choose this option, using the Online Store will be possible, except for functions that inherently require cookie files. |
|
6. |
Below, we present how you can change the settings of popular web browsers regarding the use of cookie files: |
|
a) |
browser Internet Explorer; |
|
b) |
browser Microsoft EDGE; |
|
c) |
browser Mozilla Firefox; |
|
d) |
browser Chrome and Chrome Mobile; |
|
e) |
browser Safari and Safari Mobile; |
|
f) |
browser Opera. |
|
7. |
AGRO-RAMI Raniś i wspólnicy sp. z o.o. may collect Customers' IP addresses. The IP address is a number assigned to the computer of the person visiting the Online Store by the internet service provider. The IP number enables access to the Internet. In most cases, it is assigned to the computer dynamically, i.e., it changes with each connection to the Internet. The IP address is used by AGRO-RAMI Raniś i wspólnicy sp. z o.o. to diagnose technical problems with the server, create statistical analyses (e.g., determining from which regions we have the most visits), as information useful in administering and improving the Online Store, as well as for security purposes and potential identification of burdensome servers, unwanted automatic programs browsing the content of the Online Store. |
|
8. |
The Online Store contains links and references to other websites. AGRO-RAMI Raniś i wspólnicy sp. z o.o. is not responsible for the privacy policies applicable to them. |
§ 4 Rights of data subjects |
|
1. |
Right to withdraw consent - legal basis: Article 7(3) of the GDPR. |
|
a) |
The Customer has the right to withdraw any consent given to AGRO-RAMI Raniś i wspólnicy sp. z o.o. |
|
b) |
Withdrawal of consent takes effect from the moment of withdrawal. |
|
c) |
Withdrawal of consent does not affect processing carried out by AGRO-RAMI Raniś i wspólnicy sp. z o.o. in accordance with the law before its withdrawal. |
|
d) |
Withdrawal of consent does not entail any negative consequences for the Customer, but it may prevent further use of services or functionalities that, according to the law, AGRO-RAMI Raniś i wspólnicy sp. z o.o. may provide only with consent. |
|
2. |
Right to object to data processing - legal basis: Article 21 of the GDPR. |
|
a) |
The Customer has the right at any time to object - for reasons related to his or her particular situation - to the processing of his or her personal data, including profiling, if AGRO-RAMI Raniś i wspólnicy sp. z o.o. processes his or her data based on a legitimate interest, e.g., marketing of AGRO-RAMI Raniś i wspólnicy sp. z o.o. products and services, conducting statistics on the use of individual functionalities of the Online Store, and facilitating the use of the Online Store, as well as satisfaction surveys. |
|
b) |
Resignation in the form of an email message from receiving marketing communications regarding products or services will mean the Customer's objection to the processing of his or her personal data, including profiling, for these purposes. |
|
c) |
If the Customer's objection is justified and AGRO-RAMI Raniś i wspólnicy sp. z o.o. has no other legal basis for processing personal data, the Customer's personal data will be deleted concerning the processing against which the Customer objected. |
|
3. |
Right to erasure of data ("right to be forgotten") - legal basis: Article 17 of the GDPR. |
|
a) |
The Customer has the right to request the erasure of all or some personal data. |
|
b) |
The Customer has the right to request the erasure of personal data if: |
|
a. |
personal data are no longer necessary for the purposes for which they were collected or processed; |
|
b. |
he or she has withdrawn consent, to the extent that personal data were processed based on his or her consent; |
|
c. |
he or she has objected to the use of his or her data for marketing purposes; |
|
d. |
personal data are processed unlawfully; |
|
e. |
personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which AGRO-RAMI Raniś i wspólnicy sp. z o.o. is subject; |
|
f. |
personal data have been collected in connection with the offering of information society services. |
|
c) |
Despite the request for deletion of personal data, in connection with the lodging of an objection or withdrawal of consent, AGRO-RAMI Raniś i wspólnicy sp. z o.o. may retain certain personal data to the extent that processing is necessary for the establishment, exercise, or defense of legal claims, as well as for compliance with a legal obligation requiring processing under Union law or the law of a Member State to which AGRO-RAMI Raniś i wspólnicy sp. z o.o. is subject. This applies in particular to personal data including: name, surname, email address, which are retained for the purpose of handling complaints and claims related to the use of services provided by AGRO-RAMI Raniś i wspólnicy sp. z o.o., or additionally residential/correspondence address, order number, which are retained for the purpose of handling complaints and claims related to concluded sales agreements or provision of services. |
|
4. |
Right to restriction of processing - legal basis: Article 18 of the GDPR. |
|
a) |
The client has the right to request restriction of the processing of his personal data. The submission of the request, until its consideration, prevents the use of certain functionalities or services associated with the processing of data covered by the request. AGRO-RAMI Raniś i wspólnicy sp. z o.o. will also not send any communications, including marketing ones. |
|
b) |
The client has the right to request restriction of the use of personal data in the following cases: |
|
a. |
when he questions the accuracy of his personal data - then AGRO-RAMI Raniś i wspólnicy sp. z o.o. limits their use for the time necessary to verify the accuracy of the data, but not longer than 7 days; |
|
b. |
when the processing of data is unlawful, and instead of deleting the data, the Client requests limitation of their use; |
|
c. |
when personal data are no longer necessary for the purposes for which they were collected or used but are needed by the Client for the establishment, exercise, or defense of legal claims; |
|
d. |
when he has objected to the use of his data - then the restriction takes place for the time necessary to consider whether - due to the specific situation - the protection of the Client's interests, rights, and freedoms outweighs the interests pursued by the Administrator when processing the Client's personal data. |
|
5. |
Right of access to data - legal basis: Article 15 of the GDPR. |
|
a) |
The client has the right to obtain from the Administrator confirmation as to whether personal data concerning him are being processed, and if so, the client has the right: |
|
a. |
to access his personal data; |
|
b. |
obtain information about the purposes of processing, the categories of personal data processed, recipients or categories of recipients of these data, the planned period of storage of the client's data or the criteria for determining this period (when determining the planned period of data processing is not possible), about the rights of the client under the GDPR and the right to lodge a complaint with the supervisory authority, about the source of this data, about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of this data outside the European Union; |
|
c. |
obtain a copy of their personal data. |
|
6. |
Right to rectification of data - legal basis: Article 16 of the GDPR. |
|
a) |
The client has the right to request from the Administrator immediate rectification of his personal data that are incorrect. Taking into account the purposes of processing, the client whose data are concerned has the right to request the completion of incomplete personal data, including by submitting additional statements, directing the request to the email address in accordance with § 7 of the Privacy Policy. |
|
7. |
Right to data portability - legal basis: Article 20 of the GDPR. |
|
a) |
The client has the right to receive his personal data provided to the Administrator, and then send it to another data controller chosen by him. The client also has the right to request that the personal data be transmitted by the Administrator directly to such a data controller, if this is technically possible. In such a case, the Administrator will send the client's personal data in the form of a csv file, which is a commonly used format suitable for machine reading and allowing the transmission of the received data to another data controller. |
|
8. |
In the event of a client exercising the right arising from the above rights, AGRO-RAMI Raniś i wspólnicy sp. z o.o. fulfills the request or refuses to fulfill it immediately, but no later than within one month of its receipt. However, if - due to the complicated nature of the request or the number of requests - AGRO-RAMI Raniś i wspólnicy sp. z o.o. will not be able to fulfill the request within a month, it will do so within the next two months, informing the client in advance within a month of receiving the request - about the intended extension of the deadline and its reasons. |
|
9. |
The client may submit complaints, inquiries, and requests to the Administrator regarding the processing of his personal data and the exercise of his rights. |
|
10. |
The client has the right to request from AGRO-RAMI Raniś i wspólnicy sp. z o.o. a copy of the standard contractual clauses by directing the inquiry as indicated in § 7 of the Privacy Policy. |
|
11. |
The client has the right to lodge a complaint with the President of the Office for Personal Data Protection regarding the violation of his rights to the protection of personal data or other rights granted under the GDPR. |
§ 5 Services tailored to preferences and interests (profiling) |
|
1. |
Profiling means any form of automated Personal Data Processing that involves the use of Personal Data to evaluate certain personal aspects of a natural person, in particular to analyze or predict aspects of that natural person's work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements. |
|
2. |
Customer personal data may be processed in an automated manner (profiling), but this will not have any legal effects or significantly affect their situation. |
|
3. |
Profiling of customer data by AGRO-RAMI Raniś i wspólnicy sp. z o.o. involves processing customer data in an automated and manual manner by using them to assess certain information about the customer, in particular for the analysis or prediction of his personal preferences and interests. |
|
4. |
In order to reach the customer with marketing communications outside the Internet Store, AGRO-RAMI Raniś i wspólnicy sp. z o.o. uses services of external providers. These services involve displaying marketing messages on websites other than the Internet Store website. For this purpose, external providers install appropriate code or pixel to collect information about the customer's activity on the Internet Store website. Details regarding the cookies used are available in § 3. Legal basis - legitimate interest (Article 6(1)(f) of the GDPR), consisting of tailoring marketing communications to preferences and interests. |
|
5. |
In order to reach the customer with marketing communications through the Internet Store, AGRO-RAMI Raniś i wspólnicy sp. z o.o. uses services of external providers. These services involve displaying marketing messages on Internet Store pages. For this purpose, external providers install appropriate code or pixel to collect information about the customer's activity on the Internet Store website. Details regarding the cookies used are available in § 3. Legal basis - legitimate interest (Article 6(1)(f) of the GDPR), consisting of tailoring marketing communications to preferences and interests. |
§ 6 Security management - password |
|
1. |
AGRO-RAMI Raniś i wspólnicy sp. z o.o. provides customers with a secure and encrypted connection when transmitting personal data and when logging in to the Customer Account in the Service. AGRO-RAMI Raniś i wspólnicy sp. z o.o.
. uses an SSL certificate issued by one of the leading global companies in the field of security and encryption of data transmitted over the Internet. |
|
2. |
In the event that a customer with an account in the Internet Store loses their access password in any way, the Internet Store allows the generation of a new password. AGRO-RAMI Raniś i wspólnicy sp. z o.o. does not send password reminders. The password is stored in encrypted form in a way that prevents its reading. To generate a new password, it is necessary to provide the email address in the form available at the "Forgot your password?" link, provided in the login form to the customer's account in the Internet Store. The customer will receive an email to the email address provided during registration or saved in the last change of the account profile containing a link to a dedicated form available on the Store's Website, where the customer will be able to set a new password. |
|
3. |
AGRO-RAMI Raniś i wspólnicy sp. z o.o. never sends any correspondence, including electronic correspondence, requesting login information, especially the access password to the customer's account. |
§ 7 Changes to the Privacy Policy |
|
1. |
The Privacy Policy may change, about which AGRO-RAMI Raniś i wspólnicy sp. z o.o. will inform customers in advance 7 days. |
|
2. |
Questions related to the Privacy Policy should be directed to the following address: kontakt@agrorami.pl |
|
3. |
Date of last modification: 11.02.2021 |