Privacy Policy and Cookies Policy

 

§ 1 General Provisions

1. The controller of personal data is Labo Print S.A., with its registered office in Poznań, Poland, at ul. Szczawnicka 1, 60-471 Poznań, entered into the register of entrepreneurs by the District Court Poznań - Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register, under KRS number: 0000472089, hereinafter referred to as the “Controller”. The Controller may be contacted in writing at the correspondence address indicated above or by e-mail at: [email protected].
2. The Controller attaches great importance to the protection of the privacy and confidentiality of processed personal data and, with due diligence, selects and applies appropriate technical and organisational measures ensuring the protection of processed personal data. Full access to databases is granted only to persons duly authorised by the Controller.
3. This Privacy Policy constitutes an integral part of the Terms and Conditions. By using our services, you entrust us with your information. This document is intended to help you understand what information and data is collected, for what purpose, and how it is used. This data is very important to us, therefore we kindly ask you to read this document carefully, as it sets out the principles and methods of processing and protecting personal data. This document also defines the rules for the use of “Cookies”.
4. We inform you that we comply with the principles of personal data protection and all legal regulations provided for in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).
5. At the request of the person whose personal data is being processed, we provide comprehensive information on how we use their personal data. We always make every effort to clearly inform you about the data we collect, how we use it, for what purposes it is intended, to whom it is disclosed, what protection we provide when transferring it to other entities, and which institutions should be contacted in case of doubts.

§ 2 Privacy Principles

1. We respect your privacy. We want to guarantee you convenience when using our services.
2. We value the trust you place in us by entrusting us with your personal data for the purpose of providing services. We always use personal data fairly and in a way that does not betray your trust, only to the extent necessary to provide our services.
3. As a User, you have the right to obtain complete and clear information about how we use your personal data and for what purposes it is necessary. We always clearly inform you about the data we collect, how and to whom we disclose it, and we provide information about the entities that should be contacted in case of doubts.
4. If you have any doubts regarding our use of your personal data, we will immediately take steps to explain and dispel such doubts. We provide comprehensive answers to all related questions.
5. We will take all reasonable measures to protect your data against improper and uncontrolled use.
6. The legal basis for processing your personal data is:
   1. Article 6(1)(a) GDPR - the data subject has given consent to the processing of their personal data for one or more specific purposes;
   2. Article 6(1)(b) GDPR - processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
   3. Article 6(1)(c) GDPR - processing is necessary for compliance with a legal obligation to which the Controller is subject;
   4. Article 6(1)(d) GDPR - processing is necessary in order to protect the vital interests of the data subject or of another natural person;
   5. Article 6(1)(e) GDPR - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
   6. Article 6(1)(f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.
7. Your personal data related to the conclusion and performance of a contract will be processed for the duration of its performance and also for a period not longer than provided for by law, including the provisions of the Civil Code and the Accounting Act, i.e. no longer than 10 years, counted from the end of the calendar year in which the last contract was performed.
8. Your personal data processed for the purpose of concluding and performing future contracts will be processed until an objection is raised.
9. You have the right to: access your personal data and receive a copy of the personal data being processed, rectify your inaccurate data, request deletion of data (the right to be forgotten) where the circumstances set out in Article 17 GDPR occur, request restriction of processing in the cases indicated in Article 18 GDPR, object to processing in the cases indicated in Article 21 GDPR, and data portability for data provided and processed by automated means.
10. If you believe that your personal data is processed unlawfully, you may lodge a complaint with the supervisory authority - the Personal Data Protection Office. If you need additional information related to personal data protection or wish to exercise your rights, please contact us by post at the correspondence address or by e-mail.
11. We comply with all applicable data protection laws and regulations and will cooperate with data protection authorities and law enforcement authorities authorised to act. In the absence of data protection regulations, we will act in accordance with generally accepted data protection principles, principles of social coexistence and established customs.
12. If you have any questions, please contact us via the page from which you were redirected to this Privacy Policy. Your contact request will be promptly forwarded to the appropriate person.
13. To help us respond to or address the information provided, please include your first and last name.

§ 3 Scope and Purpose of Personal Data Collection

1. We process the personal data necessary to provide services, conduct communication, present an offer, conclude and perform a contract, as well as for accounting purposes and purposes related to establishing, pursuing or securing claims.
2. We collect, process and store the following user data:
   1. first and last name,
   2. residential address,
   3. delivery address (if different from the residential address),
   4. tax identification number (NIP),
   5. e-mail address,
   6. telephone number (mobile or landline),
   7. job position,
   8. company name and business address,
   9. information about the web browser used,
   10. other personal data voluntarily provided to us.
3. Providing the above data is entirely voluntary, but it may also be necessary for the full performance of services, presentation of an offer, or conclusion and performance of a contract.
4. Personal data may be disclosed to entities authorised to receive it under applicable law, including competent judicial authorities, as well as to entities processing data on behalf of the Controller.
5. Your data may be accessed by entities providing services necessary for the operation of the service and the Controller’s business, i.e.:
   1. hosting companies providing hosting or related services for the Controller,
   2. companies through which the Newsletter or mailing service is provided,
   3. IT service and support companies performing maintenance or responsible for maintaining the IT infrastructure,
   4. companies intermediating online payments for goods or services offered within the Service,
   5. companies intermediating mobile payments for goods or services offered within the Service,
   6. companies responsible for the Controller’s accounting,
   7. companies responsible for delivering physical products to the User (postal and courier services),
   8. partners providing technical, legal, debt collection services and trusted subcontractors performing specific services.
6. In justified cases, data may be disclosed or entrusted to entities within the Labo Print S.A. group, if there is a valid legal basis for doing so - consent, a contract or legitimate interest - in particular to subsidiaries or affiliated entities, on the basis of a joint controllership agreement or a personal data processing agreement.
7. Personal data will not be transferred to a third country unless it is necessary in connection with the use of specific tools or services. In such a case, transfers of data to recipients in third countries (outside the EEA), e.g. in the United States, may take place on the basis of an adequacy decision of the European Commission, standard contractual clauses, or the explicit consent of the data subject.
8. Personal data may be subject to profiling activities - including use for making automated decisions that may produce legal effects - only with the consent of the data subject.

§ 4 Cookies

1. We use cookies or similar technologies (hereinafter jointly referred to as “cookies”), which should be understood as IT data, in particular text files, intended for the use of the website and stored on the end devices of Users browsing the website. Information collected using cookies allows us to adapt services and content to users’ individual needs and preferences, and is also used to compile general statistics on how users use the website. Data collected using cookies is collected solely for the purpose of performing specific functions for Users and is secured in a way that prevents unauthorised persons from accessing it.
2. On our website, we use the following types of cookies:
   1. internal cookies - files placed and read from the User’s device by the ICT system of the Service,
   2. external cookies - files placed and read from the User’s device by the ICT systems of external services; scripts of external services that may place cookies on the User’s devices have been deliberately placed in the Service through scripts and services made available and installed in the Service,
   3. session cookies - files placed and read from the User’s device by the Service during one session of a given device; after the session ends, the files are deleted from the User’s device,
   4. persistent cookies - files placed and read from the User’s device by the Service until they are manually deleted; the files are not automatically deleted after the device session ends, unless the User’s device configuration is set to delete cookies after the device session ends.
3. As part of our website, the following types of cookies are used due to their necessity for the provision of services:
   1. essential cookies, enabling the use of services available within the website, in particular authentication cookies used for services requiring authentication;
   2. cookies used to ensure security, in particular those used to detect authentication abuse;
   3. performance cookies, enabling the collection of information on how websites are used;
   4. functional cookies, enabling the website to remember the user’s chosen settings and personalise the user interface;
   5. advertising cookies, enabling the delivery of advertising content tailored to users’ interests.
4. Web browsing software (internet browser) usually allows cookies to be stored on the end device by default. The User may independently and at any time change cookie settings, specifying the conditions for their storage and access by cookies to their device. Changes to these settings may be made via the browser settings. These settings may be changed in particular in such a way as to block the automatic handling of cookies or to inform the User each time cookies are placed on their device. Detailed information about the possibility and methods of handling cookies is available in the software settings (internet browser).
5. Using the website without changing cookie settings means consent to their storage. The User may withdraw consent at any time by changing cookie settings. Information on how to configure cookie settings in sample internet browsers can be found here:
   1. Chrome
   2. Opera
   3. FireFox
   4. Edge
   5. Safari
   6. Internet Explorer 11

§ 5 Use of Analytical Tools and Key Marketing Techniques

1. We use statistical traffic analysis on the website via Google Analytics. Google Analytics uses so-called cookies, i.e. text files stored on the visitor’s computer, which allow analysis of website use. Information generated by a cookie about the use of the website may be transmitted to Google servers and stored there. If IP anonymisation is enabled on the website, the IP address will first be shortened by Google within European Union member states or other states party to the Agreement on the European Economic Area. To prevent cookies from being stored, the browser settings should be changed. Please note, however, that in such a case full use of all website functions may not be possible. You can also prevent Google from processing data by downloading and installing the browser add-on available at the following address: https://tools.google.com/dlpage/gaoptout?hl=en.
2. We may use the Facebook Pixel or similar marketing tools. These technologies allow us to display targeted advertising, optimise marketing activities and measure their effectiveness. This constitutes the Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR, unless separate user consent is required in a given case.
3. We may use remarketing techniques allowing advertising messages to be adapted to the user’s behaviour on the website. The technological condition for such activities is that cookie handling is enabled.
4. We may use solutions automating the operation of the Service in relation to users, e.g. sending an e-mail message after visiting a specific subpage, provided that the user has consented to receiving commercial correspondence.

§ 6 Rights and Obligations

1. We have the right, and in cases specified by law also the obligation, to provide selected or all information concerning personal data to public authorities or third parties that request such information on the basis of applicable Polish law.
2. The User has the right to:
   1. access personal data
      The User has the right to obtain access to their personal data upon a request submitted to the Controller;
   2. rectification of personal data
      The User has the right to request that the Controller immediately rectify personal data that is inaccurate or complete incomplete personal data, upon a request submitted to the Controller;
   3. erasure of personal data
      The User has the right to request that the Controller immediately erase personal data upon a request submitted to the Controller. In the case of user accounts, erasure of data may consist in anonymising data enabling identification of the User. The Controller reserves the right to suspend the execution of a request for erasure in order to protect the Controller’s legitimate interest;
   4. restriction of the processing of personal data
      The User has the right to request restriction of the processing of personal data in the cases indicated in Article 18 GDPR, upon a request submitted to the Controller;
   5. data portability
      The User has the right to obtain from the Controller personal data concerning the User in a structured, commonly used, machine-readable format, upon a request submitted to the Controller;
   6. to object to the processing of personal data
      The User has the right to object to the processing of their personal data in the cases specified in Article 21 GDPR, upon a request submitted to the Controller;
   7. to lodge a complaint
      The User has the right to lodge a complaint with the supervisory authority responsible for personal data protection.