Privacy and cookies policy

I. Processing of personal data

Fulfilling the obligation resulting from the provisions of art. 12-14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC, we inform you that:

Personal Data Administrator
The administrator of your personal data is the company "Exim Handels GmbH", with its registered office in 17335 Strasbourg, Germany, Am Waethering 5-6, NIP: DE274232281, e-mail address info@discount-ak.com, phone number +49 1739129893.

Data Protection Officer
The Data Protection Officer appointed by the Administrator operates at the Administrator's seat at the following address: Exim Handels GmbH, ul. Am Waethering 5-6, 17335 Strasbourg, email info@discount-ak.com, tel. +49 1739129893.

Purposes of processing personal data
The processing of your personal data may take place for the following purposes:

a) Purpose of processing: All activities related to the preparation, conclusion, proper performance and termination of contracts.
Processing period: Until the end of the contract, and after that time, for other purposes related to the contract, e.g. the period of securing any claims.
Legal basis: Regulation, Art. 6 sec. 1 lit. b).

b) Purpose of processing: All activities related to the preparation, conclusion, proper performance and termination of contracts to which you are not a party.
Processing period: Until the end of the contract, and after that time, for other purposes related to the contract, e.g. the period of securing any claims.
Legal basis: Regulation, Art. 6 sec. 1 lit. f).

c) Purpose of processing: Implementation of activities carried out on the basis of granted consents, including: informing about the Administrator and its activities, marketing carried out via electronic channels and telephone, preparation and sending of ordered commercial offers, replies to messages sent via the Administrator's website.
Processing period: Until the consent granted is withdrawn.
Legal basis: Regulation, Art. 6 sec. 1 lit. and).

With reference to the situation from points 3 lit. a-b, providing personal data is voluntary, but necessary to achieve the indicated purposes.

Sources of obtaining personal data
We process your personal data obtained directly from you (e.g. data provided on forms), as well as obtained from other publicly available sources, e.g. the National Court Register (KRS), Central Register of Information on Economic Activity (CEIDG) and REGON database.

Recipients of personal data
The recipients of your personal data may be:
a) public authorities or entities authorized to request access or receive personal data on the basis of legal provisions,
b) entities entrusted by the Administrator with the processing of personal data on the basis of concluded contracts, e.g. accounting offices, law offices, printing houses, courier service providers, IT service providers and other services processing data on behalf of the Administrator,
c) entities to which you have consented to the disclosure and processing of your personal data.

The administrator will not transfer your personal data to a third country or international organizations.

Data storage period
Your personal data will be kept for the period of cooperation with you or the entity you represent. After this time, for the period of limitation of claims related to this cooperation or the period necessary to perform the obligations imposed by generally applicable laws.

Your personal data processed on the basis of consent will be kept for the period of its validity, i.e. until its withdrawal. After this time, for the period necessary to perform the obligations imposed by generally applicable laws.

Permissions
You have the right to:
a) request access to personal data relating to you,
b) request rectification of personal data concerning your person,
c) requests to remove or limit the processing of personal data relating to you,
d) object to the processing of your personal data,
e) requests to transfer your personal data,
f) lodging a complaint to the Supervisory Authority (President of the Office for Personal Data Protection, previously the Inspector General for Personal Data Protection)

The detailed scope of your rights as a person to whom personal data relates is contained in Chapter III of the GDPR entitled "Rights of the data subject".

Automated decision making
Your personal data will be processed in an automated or partially automated manner. However, they will not be used to make decisions that are based solely on automated processing, including profiling.

Policy changes
The Administrator reserves the right to change this policy and update it.

II. Cookies policy

"Cookies" are small text files containing IT data stored in users' devices, which are intended for the use of websites. "Cookies" allow, among others display websites tailored to individual preferences and usually contain the website address, storage time on the user's device and their own unique identifier.

We use session (temporary) and permanent cookies. Session cookies are stored on the user's device until logging out of the website or turning off the web browser. In turn, permanent "cookies" are stored for a defined period of time, which is determined by the parameter contained in the "Cookies" file.

We use the information contained in "Cookies" to, inter alia, provide various tools and functionalities of the website and to collect general statistical data. This allows us to identify the way users use the website and allows us to improve its structure and content. We emphasize that personal data collected using "Cookies" are encrypted in a way that prevents unauthorized access to them. They also prevent the personal identification of the user.

In the web browser, you can change the settings for "Cookies" and delete them manually. Appropriate information on the use of "Cookies" and possible configurations are available in the settings, depending on the type of browser.