In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we present key information on the processing of personal data in connection with the use of the PPHU Fabian website at https://pphfabian.pl (the "Website").
1. Data Controller
The controller of personal data processed within the Website is PPHU Fabian with its registered office in Łódź, address: ul. Trawiastej, nr 7, 91-364 Łódź.
- NIP (Tax ID): 7260125446
- E-mail: kontakt@pphfabian.pl
- Phone: +48 42 659 20 89
- Phone 2: +48 609 380 194
(hereinafter: the Controller or PPHU Fabian).
2. Contact
For all matters relating to the processing of personal data, you can contact us:
- by e-mail: kontakt@pphfabian.pl;
- by traditional mail sent to our address indicated in point 1 of the Privacy Policy.
3. What personal data do we process?
In connection with the use of the Website, we may process the following personal data:
- personal details — name, surname, the company on whose behalf the user acts;
- contact details — phone number, e-mail address;
- information about devices, connection details or activity within the Website (including identifiers and location data);
- data provided in the contact form.
We also inform that we do not process special categories of personal data within the Website.
The following users' data may be processed in connection with the use of the Website:
- persons contacting the Controller via the contact form;
- persons visiting the Website for purposes other than those indicated above.
We do not knowingly collect data from persons under 13 years of age.
4. How data is collected
Data is collected:
- directly from users via the Website or distance communication means;
- through technologies enabling automated online tracking (cookies, web beacons).
5. Purposes, legal bases and retention periods
Responding to contact (form)
- Purpose
- Providing explanations in line with the user's inquiry and follow-up communication.
- Legal basis
- Legitimate interest of the Controller (Art. 6(1)(f) GDPR) — handling correspondence and promoting own business.
- Retention
- For the time necessary to respond and store correspondence, no longer than until an effective objection is raised.
Marketing and analytics (cookies)
- Purpose
- Optimizing website performance, profiling and analyzing traffic.
- Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR) and consent for cookies (Art. 6(1)(a) GDPR) — for optional cookies.
- Retention
- Until an effective objection is raised or consent is withdrawn (for optional cookies).
6. Cookies policy and similar technologies
The Website uses cookie technology. These tools process anonymized personal data (they do not allow us to identify individuals and are not intended to do so). However, due to uncertainties regarding their legal status, they may be considered personal data.
What are cookies?
Cookies are small text files installed on the device of a user browsing the Website. Cookies collect information that facilitates the use of the website — for example, by remembering visits and user actions such as the language version selection.
We use cookies on the basis of consent (Art. 6(1)(a) GDPR), except where cookies are necessary for the proper functioning of the Website.
Some of these files come directly from the Website and are used upon return (first-party cookies), others come from third parties whose services we use (third-party cookies). Third-party services are described below.
For optional cookies, their use depends on the consent given to a specific group of cookies — groups have been created by referring to the purposes for which the files are used. We distinguish the following cookies:
Functional
Help perform specific functions, such as social sharing, gathering feedback and other third‑party features.
Performance
Used to understand and analyze key performance indicators to help provide a better site experience.
Analytics
Help understand how users interact with the site (visits, traffic sources, bounce rate, etc.).
Necessary
Absolutely necessary for the proper operation of the Website. Provide basic functions and security — consent not required.
Consent to the use of cookies is given via the cookies settings panel on the Website. Consent may be granted for all cookies, some of them, or none. The choice can be changed at any time, and cookies can be deleted from the browser or device at any time.
Data processed using the above cookies is retained for 1 year.
7. Voluntary nature of data provision
All data we process is provided voluntarily. However, failure to provide data may mean that certain results directly related to the purposes of processing cannot be achieved (e.g., responding to an inquiry, providing information, delivering a newsletter).
8. Data recipients
Personal data may be disclosed and transferred to external entities that act on our behalf or for us, in particular cloud service providers, providers responsible for the technical operation of IT systems including newsletter distribution, legal, accounting, training, service, postal or analytics and advisory providers. We have data processing agreements with such entities. We therefore require confidentiality and information security and verify that appropriate data protection measures are ensured.
Based on consent to the use of marketing cookies, data may be transferred to entities providing us with relevant tools.
9. Automated decision‑making and profiling
We use profiling for marketing purposes. However, we do not make any automated decisions (i.e., made without human involvement) about users that would affect their legal situation or significantly affect them.
10. User rights
In connection with the processing of personal data, users have the following rights:
- Right of access and to obtain a copy of data;
- Right to rectification (correction) of data;
- Right to erasure (right to be forgotten);
- Right to restriction of processing;
- Right to data portability — where the legal basis is consent or contract, i.e., Art. 6(1)(a) or (b) GDPR;
- Right to withdraw consent to data processing — consent can be withdrawn at any time for data processed on that basis.
Other rights:
- Right to object to processing based on legitimate interests for purposes other than direct marketing. In such a case, you must indicate a specific situation that justifies cessation of the processing covered by the objection. We will stop processing personal data for these purposes unless we demonstrate compelling legitimate grounds which override the interests, rights and freedoms of the user or the data is necessary to establish, exercise or defend legal claims.
- Right to object to processing for direct marketing purposes based on legitimate interests.
- Right to lodge a complaint with a supervisory authority.
11. Transfers of data outside the EEA
The processing of personal data takes place primarily in the countries of the European Economic Area (EEA). However, in connection with the tools we use for analytics and marketing (including cookies), it is possible that data will be transferred outside the EEA. Where possible, we verify that the entities to whom we directly disclose data provide a high level of protection of personal data. These guarantees result in particular from a European Commission adequacy decision or from the commitment to apply standard contractual clauses adopted by the Commission (EU) pursuant to Art. 46(2) GDPR.