Terms of Use

PRIVACY POLICY

ggg.pl / gggcnc.com

Privacy Policy version 1.0 effective as of 01.07.2024.

§ 1 GENERAL INFORMATION

The Privacy Policy of the Website does not constitute a source of obligation for the User. It is for informational purposes and is not a contract or a regulation.

All expressions and words capitalized (Website, User, etc.) shall be understood in accordance with the definitions below:

AGREEMENT – all agreements concluded between the Data Controller and its customers, in particular contracts for sale or contracts for the provision of services within the meaning of the Polish Act of April 23, 1964. – Civil Code.
DATA CONTROLLER – GGG Sp. z o.o. with with a registered office in Radom, ul. Wielkopolska 1A, 26-600 Radom, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Lublin – Wschód in Lublin with its seat in Świdnik VI Economic Department of the National Court Register under KRS number: 0000074791, Tax Id. No. (NIP): 9482044896, Industry Id. No. (REGON): 670226350, share capital 668 800,00 PLN
INTERNET SERVICE – or Website, the Internet service maintained by the Data Controller in the Polish language at ggg.pl and its extensions.
USER – a natural person browsing the resources of the Website, without using its functionality.

In the event of any discrepancy between this Privacy Policy and the consents for the processing of personal data given by an individual, the legal basis for determining the scope of the Data Controller ‘s activities shall be the voluntarily given consents or the provisions of law that apply to the factual situation.
§ 2 PERSONAL DATA CONTROLLER

The Data Controller of your personal data is GGG Sp. z o.o. with with a registered office in Radom, ul. Wielkopolska 1A, 26-600 Radom, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Lublin – Wschód in Lublin with its seat in Świdnik VI Economic Department of the National Court Register under KRS number: 0000074791, Tax Id. No. (NIP): 9482044896, Industry Id. No. (REGON): 670226350, share capital 668 800,00 PLN (hereinafter: Data Controller or Personal Data Controller).

For all data protection issues, we encourage you to contact us at the above address or via email address: info@ggg.pl.

You can also send a request to the indicated address for access to information about what personal data we have about you and for what purposes we process it.

The Data Controller informs that it stores correspondence for statistical purposes and for the purpose of improving the support system in the scope of GDPR, as well as for the resolution of complaints and possible decisions made on the basis of notifications. Addresses and data collected in this way will not be used for communication for any purpose other than the fulfillment of the request, in particular, will not be used for marketing purposes and will not be transferred to third parties.

When contacting the Data Controller to perform a specific action (e.g., filing a complaint), the Data Controller may again ask the person to provide data, including personal data, e.g., in the form of name, surname, home address, e-mail address, in order to confirm the person’s identity and enable the person to be contacted back on the matter and perform the requested action. Provision of such data is not mandatory, but may be necessary to perform an action or obtain information of interest to the person.

If you have given additional consent to our use of cookies, our trusted partners may also be the controllers of the data obtained from your online activities.
§ 3 DATA ACQUISITION AND PURPOSE OF DATA PROCESSING

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, (hereinafter: GDPR) and other data protection laws currently in force at the time of processing certain data.

According to the wording of the legislation indicated, personal data is considered information about an identified or identifiable natural person. An identifiable natural person is one who can be identified directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an Internet identifier or one or more specific factors that determine the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

We ensure that the data we obtain from you is confidential, secure and processed only when necessary. We process data in accordance with the law, in a fair and transparent manner for the data subject. We process only such data and only with such content that is necessary for the legitimate purpose, i.e. the reason for processing. Personal data is collected with due diligence and adequately protected against access by unauthorized persons. We use appropriate and adequate security measures and state of the art technology to protect personal data from accidental loss and unauthorized access, use, alteration, or disclosure. We store personal data in a manner that allows identification of the data subject for no longer than is necessary for the purposes for which the data are processed.

The Data Controller obtains information about personal data in the following ways:
through voluntarily entered information in the email, in the contact form;
by sending a complaint, application, inquiry or letter of any other nature;
by voluntarily entering information in an e-mail sent in connection with the desire to establish cooperation;
through cookies, pixels or similar Internet technologies.

Please be advised that the purpose and scope of the data processed by the Data Controller derives from the User’s consent or the law, and in selected cases is further specified as a result of actions taken by these persons on the Website or through other communication channels.

Provision of personal data by the User of the Website is voluntary, but necessary in order to use certain functionalities of the Website (e.g. use of contact forms).

Each time the scope of the required data is indicated in advance on the Website (we mark the data whose submission is necessary to conclude a contract/use a specific functionality), within the framework of other channels of communication with the User, or in the Regulations. The consequence of failure to provide personal data may be the inability to effectively use the functionality of the Website.

Your personal data is obtained by the Data Controller for the following purpose:

Purpose of processing Legal basis Legally legitimate purpose, if any
Keeping statistics. Article 6(1)(f) GDPR. To have information about the statistics of our operations, which allows us to improve our business operations.
Conducting marketing of its own products and services without the use of electronic communications. Article 6(1)(f) GDPR. Conducting marketing activities to promote the business.
Conducting marketing of its own products and services using electronic communications. Article 6(1)(f) of the GDPR with these actions due to other applicable regulations,
in particular the Telecommunications Law and the Law on Provision of Electronic Services, are conducted only on the basis of consents held (Article 6(1)(a) of the GDPR). Conducting marketing activities to promote the business. Presenting advertisements, adjusting discounts and promotions.

Handling requests directed using the contact form, emails, complaints, other requests. Article 6(1)(a) of the GDPR;
Article 6(1)(c) GDPR Responding to requests and inquiries made using the contact form or in any other form, including storing sensitive requests and answers provided to maintain accountability. Handling requests, responding to consumer complaints. Investigation of claims, including from third parties, defense by them.
Conclusion and execution of the Agreement. Article 6(1)(b) GDPR.
Conclusion and execution of the Agreement or taking action at the request of the User prior to its conclusion.
Archiving of sales documents. Article 6(1)(c) GDPR. Fulfillment of legal obligations under regulations, such as tax and accounting, especially in the case of paid contracts.

Email contact and contact form. When you contact us via e-mail and contact form, you provide us with your e-mail address as the address of the sender of the message. In addition, you may also include other personal information in the body of the message. Providing data is voluntary, but necessary to contact us.

Your data is processed in this case for the purpose of contacting you, and the basis for processing is Article 6(1)(a) of the GDPR, i.e. your consent resulting from your desire to contact us. The legal basis for post-contact processing is the legitimate purpose of archiving correspondence for internal purposes (Article 6(1)(c) GDPR).

The content of the correspondence may be subject to archiving and we are not able to clearly determine when it will be deleted however, it will be a period of no more than 5 years. You have the right to request the history of the correspondence you have had with us (if it was subject to archiving), as well as to request its deletion, unless its archiving is justified due to our overriding interests.
§ 4 CATEGORIES OF PERSONAL DATA

The Data Controller may process the following categories of personal data:
personal data provided when using the contact form, and sent via e-mail; or provided when filing complaints, complaints or requests, in particular: name and surname; e-mail address; contact telephone number; address [street, house number, apartment number, postal code, city, country], bank account number;
other data, in particular, obtained based on the User’s activity on the Internet, including those obtained through the Website or other channels of communication with the User, using cookies and similar technologies.
§ 5 RECIPIENTS OF PERSONAL DATA

Your personal data may be processed by our partners and subcontractors, i.e. entities we use to process data and provide services to you. To the best of our knowledge, all entities to whom we entrust the processing of personal data guarantee the application of appropriate measures for the protection and security of personal data required by law.

Your personal data may be transferred by the Data Controller:
to state authorities or other entities authorized under the law, in order to perform the obligations incumbent on us;
The Administrator’s partners may be involved in the processing of personal data to a limited extent, in particular those who technically help to run the Website efficiently (e.g., support us in sending e-mails and, in the case of advertising activities, also in marketing campaigns), providers of hosting or ICT services, companies that maintain software, support the Data Controller in marketing campaigns, as well as providers of legal and consulting services and accounting;
In addition, we may share fully anonymized data (data that cannot identify you) with entities with whom we work.

As part of its marketing (advertising) activities, the Data Controller uses the services of third parties that use cookies, pixels or marketing functions similar to cookies on the Website. The catalog of these entities is indicated in detail in § 8 of this Policy.

§ 6 ARCHIVING OF PERSONAL DATA

The Data Controller will retain your personal information only for as long as necessary for the purposes set forth in this Privacy Policy and/or to comply with legal and regulatory requirements. After this period, the Data Controller will securely delete your personal data.

We retain the data for the periods indicated below:

Data related to the sales procedure. 10 years
Data for marketing purposes. In the case of data processing based on consent – until it is withdrawn.
In the case of data processing on the basis of a legitimate purpose – until you object.
Data provided using the contact form, e-mail. For a period of 3 years to maintain accountability.
Personal data related to cookies and similar functions. Until the deletion of these files using the settings of the website / browser / device (while deletion of files is not always the same as deletion of Personal Data obtained through these files – in which case Personal Data will be deleted until you object).
Data provided in the course of complaint and other procedures related to the User’s claims. 6 years.
The remaining category of data (with the exception of data from cookies, about which more in our Cookies Policy).
5 years.
In any case, personal data will also be stored if legal regulations (e.g. accounting or tax regulations) oblige the Data Controller to process them; we will keep your personal data longer in case you have any claims against the Administrator, in order for the Data Controller to assert claims, or in order to assert or defend against third-party claims, for the period of limitation prescribed by law, in particular the Civil Code.

Thus, depending on the scope of personal data and the purposes for which they are processed, they may be kept for different periods. In each case, the longer term of storage of personal data is decisive.
§ 7 ENTITLEMENTS, ACCESSING AND UPDATING PERSONAL DATA, COMPLAINTS

Pursuant to Article 15 of the GDPR, you have the right to obtain information from the Data Controller as to whether your personal data is being processed.

If the Data Controller processes your personal data, then you have the right to:
access to personal data;
obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the intended period of storage of your data or the criteria for determining that period, your rights under the GDPR and your right to lodge a complaint with a supervisory authority, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
obtain a copy of your personal data.

In addition, you may request that your personal data be corrected (Article 16 of the GDPR), have your personal data deleted (Article 17 of the GDPR), object to the processing of your personal data (Article 21 of the GDPR), and, where technically feasible, request that the personal data provided be transferred to another organization (Article 20 of the GDPR).

In connection with the right to be forgotten, the Data Controller will update or delete your data, unless it has a legal obligation to retain it for business purposes or to comply with the law. In some cases, you have the right to request the restriction of the processing of your personal data (Article 18 of the DPA). You may also contact the Data Controller if you have concerns about the collection, storage or use of your personal data.

The Data Controller shall endeavor to promptly consider all requests regarding the aforementioned operations on your personal data, but no later than within 30 days of receiving the request. Due to the complex nature of the request, the Data Controller has the right to consider your requests in excess of 30 days, of which it will inform you in advance.

The Data Controller strives for a definitive resolution of complaints, but if you are still dissatisfied with the response you receive, you may file a complaint with the supervisory authority dealing with personal data protection of your local data protection authority. In Poland, the supervisory authority under the GDPR is the President of the Office for Personal Data Protection.
§ 8 PROCESSING OF PERSONAL DATA BY AUTOMATED MEANS,
COOKIE POLICY

Our Internet Service, like almost all other Websites, uses cookies, or cookie files. The cookie policy applies to Users of the Website.
The Cookie Policy is a document that is an integral part of this Privacy Policy. The content of the Cookie Policy can be found here.
The Internet Service also uses functionality similar to cookies. Accordingly, the individual provisions of the Cookie Policy should also be referred to these technologies accordingly.
Selected cookies process your personal data. Processing of personal data from cookies or similar technologies on our Website is done for the purposes of ensuring the functioning of the Website, customization of the Website to your preferences, or analytical purposes. The processing is carried out on the basis of our legitimate interest. The legal basis for the processing of personal data for advertising purposes will be your additional consent, expressed by making a selection and checking the checkbox during the cookie consent process.
When a User uses the Website, cookies are used to identify her browser or device – cookies collect various types of information, which, as a rule, do not constitute personal data. However, some information, depending on its content and use, may be linked to a specific person – attributing certain behaviors to a specific User, such as by linking them to the data provided when filling out a contact form or a specific e-mail address – and thus be considered personal data.
The provisions of the Website’s Privacy Policy relating to personal data, and in particular relating to the rights of the data subject, shall apply to information collected by cookies that can be linked to a specific person.
§ 9 PRIVACY POLICY CHANGES
This Privacy Policy 1.0. is effective as of ….  2024 r.
The Data Controller declares that he has the right to make changes to this document for important reasons, including but not limited to:
changes in applicable laws, in particular in the area of GDPR, telecommunications law, electronically provided services and regulating consumer rights, affecting the rights and obligations of the Controller or the rights and obligations of the data subject;
developments in functionality or electronic services caused by advances in Internet technology, including the implementation of new IT, technological or technical solutions on the Website, affecting the scope of this Privacy Policy.

The Data Controller undertakes to inform Users of any changes in good time, allowing them to familiarize themselves with the content of the amended document, e.g. by posting the consolidated text of the Privacy Policy on the homepage of the Internet Service.