Privacy policy mercedes-oldtimer.pl
(hereinafter: “Privacy Policy”)
1. Introduction
Since you have come to this document, it means that the security of your data is important to you. Please know that by operating the service at: https://mercedes-oldtimer.pl/, we take care to treat your personal data appropriately. It is our duty to duly inform you about matters relating to the processing of your personal data, especially in view of the content of data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: “RODO”). In this Privacy Policy, we inform you about the legal basis for the processing of your personal data, how it is collected and used, as well as your rights in relation to it.
This Privacy Policy also complies with the requirements set under the Telecommunications Act of 15 September 2017 in relation to the use of cookies. As owner and administrator of the website where we share our knowledge and conduct sales, available at: https://mercedes-oldtimer.pl/ (hereinafter: “service”), we are obliged to inform you about the aforementioned files that the service uses.
2. Personal Data
When does the Privacy Policy apply?
The Privacy Policy applies to all cases in which we process your personal data. This includes cases where we process personal data obtained directly from you, as well as cases where your personal data has been obtained from other sources.
2.1. How on what legal basis and what type of personal data do we process?
We are transparent about how and on what legal basis we process personal data, as well as the purposes for which we process personal data. We take care to indicate the necessary information in this regard each time. In order to make the explanation of these issues as clear as possible, we provide the following overview of the processing of personal data in connection with the service.
At the same time, we point out that whenever we process personal data on the basis of a legitimate interest (Article 6(1)(f) RODO), we try to analyse and balance our interest and the potential impact on your data (positive as well as negative) and your rights under data protection legislation.
A. Processing of personal data of visitors to the website
In connection with the use of the website, we process the following data sent by your browser to the server: IP address, date and time of the start of the session, time zone information, source page information, access status/access code http/s, address of the page from which you accessed, browser type, operating system and its interface, browser language and software version.
The processing of this data is necessary for the proper operation of the website and to ensure stability and security. The processing takes place – insofar as it constitutes the processing of personal data – on the basis of Article 6(1)(f) RODO.
For an explanation of cookies, please see section 3 of this Privacy Policy.
B. Processing of personal data within the contact form
As part of the website, we provide a contact form – thus giving you the opportunity to contact us directly. In connection with making contact, we may come into possession of the following data: name, telephone number, e-mail address, vehicle data. Optionally, you may provide other personal data as part of the contact, the provision of which is voluntary and in accordance with your wishes. Identification data in the form of your name, telephone number, e-mail address and vehicle data will be necessary for this sharing, as these data will enable us to achieve the intended purpose, i.e. to answer your question.
The same applies if you wish to be contacted directly using the contact details provided on the website.
We endeavor to process only personal data which are adequate, relevant and limited to what is necessary for the purpose for which they are processed (“data minimisation”).
Personal data are processed on the basis of consent, i.e. on the basis of Article 6(1)(a) of the RODO. Consent is voluntary and free. The consent given can be revoked at any time.
The full scope of rights and obligations in relation to the processing of personal data (in accordance with Article 13 of the RODO) is included in the information clause in section 2.1.4 of the Privacy Policy.
C. Social Media
On our website you will find links to social media sites where information about us and our activities is posted. We, as the owner of the social media account, are the data controller of the social media site.
We may process your data if you leave a comment, message, post or opinion on our social media account. In this case, we will process your personal data posted within the account and the comment, message, post or opinion. The processing of your data takes place on the basis of your consent given by your action and in accordance with the rules established by the owner of the social network.
We encourage you to read the privacy policies of the individual social networks, where you can find all the information about what happens to your personal data in connection with the use of the social network and what rights you have in relation to this.
The full scope of your rights and obligations in relation to the processing of your personal data (in accordance with Article 13 of the DPA) is included in the information clause in section 2.1.4 of the Privacy Policy.
D. Processing of personal data in the context of the newsletter
With your revocable consent, we provide you with the opportunity to use our newsletter to inform you about our offers, organised events, or other news from the life of the company and our products or service.
In order to subscribe to our newsletter, the user first has to enter his/her e-mail address himself/herself, then the expression of the user’s wish to subscribe to the newsletter by clicking on the “subscribe” button and indicating his/her consent to data processing, will achieve the desired result and start the processing of personal data.
The legal basis for the processing of personal data is Article 6(1)(a) of the RODO.
You can revoke your consent at any time.
The full scope of the user’s rights and obligations in relation to the processing of personal data (in accordance with Article 13 of the RODO) is included in the information clause in section 2.1.4 of the Privacy Policy.
E. Processing of personal data within your account
If you wish to use our service, and more specifically the shop, you must create a user account. In order to create a user account, it is necessary to provide the data required by the registration form. The creation of an account is intended to optimise the processing of your orders.
As a completely voluntary matter, we leave it up to you to provide your date of birth within the registration form. We make it possible for you to share your date of birth with us so that we can wish you a happy birthday and give you a special birthday present in our shop. Based on your date of birth, we will determine your age for sales and marketing analysis purposes. However, we will not share your date of birth with anyone other than the specialists working for us.
Your personal data is processed on several legal grounds expressed under Art. 6 RODO, including consent to set up a user account and the processing of data of a voluntary nature, i.e. under Art. 6(1)(a) RODO; the performance of a contract or taking action prior to the conclusion of a contract (data provided obligatorily, in order to identify you and provide you with sales within the service), i.e. under Art. 6(1)(b) RODO; due to the necessity to fulfil a legal obligation incumbent on the administrator (settlement of a transaction, issuance of a settlement document) i.e. on the basis of Article 6(1)(c) RODO; due to the legally justified interest pursued by the administrator (ensuring security of use of the user’s account, defence against claims, archiving, direct marketing) i.e. on the basis of Article 6(1)(f) RODO.
Importantly within the framework of the created account, individual data can be changed or corrected at any time.
In order to delete the data, you must contact the controller, who may delete the data after taking the steps required by law (in particular the collection/securing of invoices/accounts for tax purposes).
The full scope of rights and obligations in relation to the processing of personal data (in accordance with Article 13 of the DPA) is included in the information clause in point 2.1.4 of the Privacy Policy.
F. Server logs
Server logs are information about certain user behaviour subject to logging at the server layer. This data is used exclusively for the administration of the website and to ensure the most efficient operation of the hosting services provided. The resources viewed are identified by URLs. In addition, the following may be recorded: a. Request arrival time, b. Response time, c. Client station name – identification via NP. protocol, d. Information on errors that occurred during the NP. transaction, e. URL address of the page previously visited by the user (referer link) – if the service was accessed via a link, f. Information about the user’s browser, g. IP address information.
The above data is not associated with specific users of the website and is used only for the purposes of server administration.
The legal basis for the processing of personal data, insofar as it occurs in this case, is Article 6(1)(f) RODO.
The full scope of your rights and obligations in relation to the processing of your personal data (in accordance with Article 13 of the RODO) is included in the information clause in section 2.1.4 of the Privacy Policy.
2.2. How long is your personal data processed?
The length of time we will process your personal data depends on the legal basis for processing it. We inform you that:
(a) where we process personal data on the basis of consent (Article 6(1)(a) RODO), the period of processing lasts until the intended purpose is achieved or consent is withdrawn;
b) where we process personal data for the purpose of performing a contract or taking steps prior to the performance of a contract (Article 6(1)(b) RODO), for the duration of the provision of the services and, after its completion, for the period of limitation of claims and the archiving of accounting records (5 years), in accordance with the applicable legislation;
c) where we process personal data on the basis of a legitimate interest (Article 6(1)(f) RODO), the period of processing lasts until the aforementioned interest ceases to exist (inter alia, the limitation period for civil law claims) or until you object to further such processing – in situations where you are entitled to such objection under the law;
(d) where we process personal data because it is necessary by virtue of applicable legislation (Article 6(1)(c) of the RODO), the periods of processing for this purpose shall be determined by such legislation.
2.3. When and how are personal data shared with third parties?
We only share personal data with others when this is permitted by law. In this case, we provide for provisions and security mechanisms in the relevant contract concluded with the third party in order to protect the data and to maintain data protection, confidentiality and security standards.
Where we transfer personal data of which we are the controller to other entities for the performance of certain activities on our behalf, we enter into a specific agreement with such entity. Agreements of this kind are called personal data processing entrustment agreements (Article 28 RODO), thanks to which we have control over how and to what extent the entity, to which we have entrusted the processing of certain categories of personal data, processes these data.
We can make the data available to, among others:
1) CashBill S.A. with its registered office in Katowice, within the area of online payments – for more information on the processing of personal data, please visit: https://www.cashbill.pl/download/dokumenty/polityka_prywatnosci.pdf
2) service providers supplying technical and organisational solutions enabling organisation management (in particular IT service providers);
3) Providers of legal and advisory services and of support for claims;
4) other service providers or entities entrusted with data processing under a separate entrustment agreement.
2.4. What rights do you have and how do you exercise them? [information clause]
You have certain rights regarding your personal data and we, as data controller, are responsible for the exercise of these rights in accordance with the applicable legislation. If you have any questions or requests regarding the scope and exercise of your rights, you can contact us via the contact form or the details provided on the website.
We will reply to the message received from you as soon as we have verified your identity.
A. Access to personal data
You have the right to access your data that we hold as controller. You can exercise this right by contacting us at the contact details provided.
B. Amendment of personal data rectification, or deletion
You can make changes, including updating, rectifying or deleting your personal data that we process by contacting us at the contact details provided.
You can exercise your right to erasure when your data is no longer necessary for the purposes for which it was collected by us or when you withdraw your consent to the processing of your data.
C. Withdrawal of consent
Where personal data is processed on the basis of consent, you may withdraw this consent at any time. We inform you of this right at any point in the collection of consent and allow you to withdraw your consent as easily as you gave it. In order to withdraw your consent, please contact us at the contact details provided.
D. Right to restrict processing or object to the processing of your personal data
You have the right to restrict the processing or to object to the processing of your personal data at any time, based on your particular situation, unless the processing is required by law.
You can object to the processing of your personal data when:
– the processing of your personal data is carried out on the basis of a legitimate interest or for statistical purposes and the objection is justified by your particular situation;
– your personal data is processed for the purposes of direct marketing, including profiling for this purpose.
On the other hand, with regard to the request for restriction of processing, we inform you that you are entitled to it when:
– you question the accuracy of the personal data – for a period allowing us to check the accuracy of the data;
– the processing is unlawful, and you object to the erasure of the personal data, requesting instead the restriction of its use;
– we no longer need the personal data for the purposes of the processing, but it is needed by you, to establish, assert or defend claims;
– you have raised an objection under Article 21(1) of the RODO to our processing of your data until it is determined whether the legitimate grounds on our side override your grounds for objection.
E. Right to data portability
You have the right to data portability of the data concerning you and you have the right to send this data via us to another controller if:
– the processing is based on consent, pursuant to Article 6(1)(a) RODO or Article 9(2)(a) RODO; or
– the processing is carried out on the basis of a contract, within the meaning of Article 6(1)(b) of the RODO; and
– the processing is carried out by automated means.
When exercising your right to data portability, you may request that we send your personal data directly to another controller, insofar as this is technically possible.
The right to data portability must not adversely affect the rights and freedoms of others. If you wish to exercise these rights, please contact us at the contact details provided.
F. Any other questions, concerns or complaints
Should you have any questions, objections or concerns about the content of this Privacy Policy or the way in which your personal data is processed, as well as complaints regarding these issues, please contact us at the contact details provided with details of your complaint. Any complaints received will be investigated and responded to.
You also have the right to lodge a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.
3. Cookies
As indicated in point 1, cookies are used within this website. I am therefore informing you of the most essential elements of cookies so that your use of the website is clear and understandable to you.
3.1 What are cookies?
Cookies are small files stored on your electronic device by websites you visit. Cookies contain various information that is often necessary for the website to function properly. Cookies are encrypted in such a way that unauthorised people cannot access them. The information collected from the cookies can only be read by us and – for technical reasons – by trusted partners whose services we use. Most importantly, cookies cannot run programs or transmit viruses to electronic devices.
3.2 What do we use cookies for?
Basic cookies – installed if you have given your consent through the settings of the software installed on your electronic device. Within basic cookies, a distinction is made between technical and analytical cookies.
Technical cookies – are necessary for the website to function properly.
Cookies are used to:
– ensure that the website is displayed appropriately – depending on which device you are using,
– adapt the content to your choices which are technically relevant to the operation of the website, e.g. the language you have chosen,
– remember whether you have consented to the display of certain content.
Analytical cookies – are necessary to settle accounts with business partners or to measure the effectiveness of marketing activities without identifying personal data and to improve the functioning of the website. They can be used to:
– study statistics on website traffic and check traffic sources (redirection directions),
– detect various types of abuse, e.g. artificial web traffic (bots).
3.3 How long do we use cookies?
Session cookies – remain on your device until you leave the website or switch off your software (web browser). These are primarily technical cookies.
Permanent cookies – remain on your device for the time specified in the file parameters or until they are manually deleted by you.
Can you refuse to accept cookies?
You can always change your browser settings and refuse requests to install cookies. However, before you decide to change your settings, please note that cookies are for your convenience in using the website. Disabling cookies may cause the website to display incorrectly in your browser.
How do I disable cookies?
You can delete cookies from your browser at any time and block them from being reinstalled.
Depending on the browser you use, the option to delete or withdraw consent to the installation of cookies may vary. If this is the case, please refer to the instructions for use available within the browser present on your electronic device.
4. Final Provisions
Can this Privacy Policy be amended and when?
We reserve the right to amend this Privacy Policy in the event of changes in the technology by which we process personal data, as well as in the event of changes in the methods, purposes or legal basis of personal data processing and due to new legislation, new guidelines from the authorities responsible for supervising personal data protection processes.
The Privacy Policy will be amended by replacing the previous Privacy Policy with the new one and publishing it within the service.
In order to ensure the best possible contact on the subject of personal data protection, we provide the following contact details:
EVERMORE Sp. z o.o.
Kolbego 15, 32-600 Oświęcim, Poland
KRS 971614
NIP 5492467248
REGON 52201304000000
Do you have any questions? Contact EVERMORE Sp. z o.o. directly.
Telephone: +48 503 377 310 E-Mail: sklep@mercedes-oldtimer.pl
