Privacy Policy

NETPARTS Marcin Pawlik Online Store Privacy Policy

This document informs about the legal basis for personal data processing, methods of collecting and using such data, and the rights of data subjects related to this.

What are personal data and what does their processing mean?

Personal data refers to information about an identified or identifiable individual. Processing of personal data is essentially any activity on personal data, whether automated or not, such as collecting, storing, recording, organizing, modifying, viewing, using, sharing, restricting, deleting, or destroying. NETPARTS Marcin Pawlik processes personal data for various purposes, and depending on the purpose, different methods of collection, legal bases for processing, uses, disclosures, and retention periods may apply.

When does this Privacy Policy apply?

This privacy policy applies in all cases where NETPARTS Marcin Pawlik is the data controller and processes personal data. This includes cases where NETPARTS Marcin Pawlik processes personal data obtained directly from the data subject and cases where we have obtained personal data from other sources. NETPARTS Marcin Pawlik fulfills its informational obligations in both cases, as specified in Articles 13 and 14 of the GDPR. Below are the full details of NETPARTS Marcin Pawlik as the personal data controller:

NETPARTS Marcin Pawlik, located in Stryków, Polna 5, 62-062 Stryków, registered in the Central Registration and Information on Business conducted by the Minister of Economy, address: NETPARTS Marcin Pawlik, Polna 5, 62-062 Stryków, Tax ID: 9950111279, REGON: 301506784.

How, on what legal basis, and what type of personal data does NETPARTS Marcin Pawlik process?

We aim to be transparent about the methods and legal bases of personal data processing, and the purposes for which NETPARTS Marcin Pawlik processes personal data. We ensure to provide necessary information in this regard to each person whose personal data we process as a data controller. To make our explanation of these issues as clear as possible, we present the following summary of personal data processing operations.

We also want to point out that whenever we process personal data based on the legally justified interest of the data controller, we try to analyze and balance our interest and the potential impact on the person concerned (both positive and negative) and the rights of that person under data protection laws. We do not process personal data based on our justified interest if we conclude that the impact on the person concerned would outweigh our interests (in such cases, we may process personal data if, for example, we have the appropriate consent or if required or permitted by law).

Legal bases for processing

In the case of processing personal data in connection with the use of the net-parts.pl online store, we may deal with various types of legal bases for processing, depending on the category of personal data we process and the purpose of processing. For example:

Personal data of visitors to our websites are processed based on the legally justified interest of the data controller, e.g., by adjusting displayed ads, or based on consent when we have asked for such consent from the data subject;
Personal data of people who use our online stores and fill out an online form are processed because it is necessary for the purpose of executing a contract;
Sometimes legal regulations require us to process certain personal data for tax and accounting purposes.

Moreover, individuals who contact NETPARTS Marcin Pawlik to inquire about offers or share comments about services or products, and those contacting to enter into a contract with NETPARTS Marcin Pawlik, we collect the following personal data: name and surname, address, email address, and telephone/fax number. In particular, these individuals may send us an email through the website. Such messages contain a set username and email address, and additional information that the user wants to include in the message.

We collect the above data based on the consent expressed by the user addressing the above request to NETPARTS Marcin Pawlik or for the purpose of executing a contract (fulfilling a request) submitted by the person. The provided data may also be processed based on the justified purpose of the data controller.

How long do we process personal data?

The duration for which we can process personal data depends on the legal basis that constitutes a legal premise for processing personal data by NETPARTS Marcin Pawlik. We determine that we must never process personal data for a period longer than that arising from the aforementioned legal bases. Accordingly, we inform that:

In the case where NETPARTS Marcin Pawlik processes personal data based on consent, the processing period lasts until the user withdraws this consent;
In the case where NETPARTS Marcin Pawlik processes personal data based on the justified interest of the data controller, the processing period lasts until the aforementioned interest ceases (e.g., the period of limitation of civil law claims) or until the person concerned objects to further such processing – in situations where such objection is legally permissible;
In the case where NETPARTS Marcin Pawlik processes personal data because it is necessary for the execution of a contract, the processing period lasts until the contract is fully executed;
In the case where NETPARTS Marcin Pawlik processes personal data because it is necessary to fulfill the legal obligation of the data controller, the periods of data processing for this purpose are determined by these regulations.

What rights do you have in relation to the processing of your personal data by NETPARTS Marcin Pawlik?

The GDPR grants the following potential rights related to the processing of personal data:

The right to access personal data,
The right to rectify personal data,
The right to delete personal data,
The right to limit the processing of personal data,
The right to object to the processing of personal data,
The right to transfer personal data,
The right to lodge a complaint with a supervisory authority,
The right to withdraw consent to the processing of personal data if the person has given such consent.

The conditions for the exercise of the above rights are described in detail in Articles 15-21 of the GDPR. We encourage you to familiarize yourself with these regulations. We consider it important to point out that the above rights are not absolute and will not apply to all processing of your personal data. We strive to ensure that all your rights are respected to the extent that it results from the applicable law.

If you believe that your rights have been violated in the processing of your personal data, you have the right to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection).

Is your personal data safe?

We care about the security of your personal data. We use physical, technical, and organizational measures designed to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable laws.

To whom do we disclose your personal data?

In some cases, we may share your personal data with various recipients. However, we always make sure that such data sharing complies with the data protection laws. We may share your personal data with the following categories of recipients:

State authorities, e.g., tax offices, law enforcement agencies, and other authorities if required by law or necessary to protect our rights or the rights of third parties,
External service providers who process personal data on our behalf, e.g., IT service providers, accounting services, etc.,
Other recipients, if you have given your consent or if required by law.

We ensure that all our service providers who process personal data on our behalf provide sufficient guarantees to implement appropriate technical and organizational measures in such a way that the processing meets the requirements of the GDPR and protects your rights.

Transfer of personal data to third countries

We do not transfer personal data to countries outside the European Economic Area (EEA) or international organizations.

Changes to the Privacy Policy

This Privacy Policy may be updated from time to time. We will notify you of any significant changes, but we also encourage you to review this policy periodically.

Contact

If you have any questions or concerns about the way we process your personal data, or if you want to exercise any of your rights, you can contact us at the following address: NETPARTS Marcin Pawlik, Polna 5, 62-062 Stryków, or by email at [email address not provided].

This Privacy Policy is effective as of 10.10.2020