- The privacy and security of Softgraf customer data is one of our priorities. We want our customers to feel that they can rely on us, knowing that Softgraf, exercising the utmost care, will ensure that all data and information entrusted to us are processed only in accordance with their intended purpose and protected against abuse. In no case will the data entrusted to us be made available or sold to third parties. Below are the most important principles related to privacy protection:
- By creating a user account via the store website, placing an order, subscribing to the newsletter, filing a complaint, withdrawing from the contract or simply contacting us using the form, you provide us with your personal data, and we guarantee that your data will remain confidential, secure and will not be made available to any third parties without your express consent.
- We entrust the processing of personal data only to verified and trusted entities providing services related to the processing of personal data.
- We use Google Analytics analytical tools that collect information about your visits to the site, such as the subpages you have viewed, the time you spent on the site or the transitions between individual subpages. For this purpose, Google LLC cookies are used for the Google Analytics service. As part of the mechanism for managing cookie settings, you have the option to decide whether we will also be able to use marketing functions within Google Analytics or not.
- We use marketing tools such as Facebook Pixel to target ads to you. This involves using Facebook cookies. You can decide whether or not you consent to our use of Facebook Pixel in your case by setting your cookies.
- We use Google AdWords remarketing tools. This involves using Google LLC cookies for the Google AdWords service. As part of the cookie settings management mechanism, you have the option to decide whether we can use Google AdWords in your case or not.
- We belong to the Google AdSense advertising network. This involves the use of Google LLC cookies for the Google AdSense service. As part of the mechanism for managing cookie settings, you have the option to decide whether we can use personalized Google AdSense ads in your case or not.
- We embed videos from YouTube on the site. When you play such videos, Google LLC cookies for YouTube are used.
- We provide the ability to use social functions, such as sharing content on social media and subscribing to a social profile. Using these functions involves the use of cookies from social media administrators such as Facebook, Instagram, YouTube, Twitter, Google+, LinkedIN.
- We use our own cookies to ensure the proper functioning of the site. If the above information is not sufficient for you, you will find further details below.
- The administrator of your personal data within the meaning of the provisions on the protection of personal data is SOFTGRAF Marek Nowak, ul. Plebiscytowa 51G, 43-190 Mikołów, NIP: 9540022139, e-mail: kontakt@softgraf.plThe purposes, legal basis and period of personal data processing are indicated separately in relation to each purpose of data processing.
- We process your data during order fulfillment, invoice or receipt issuance, and store it for as long as we are required to do so by law.
- Each time, the purpose and scope of data processed by the Administrator result from the Client’s consent or applicable legal regulations and are specified as a result of actions taken by the Client in the Online Store or within other channels of communication with the Client. For example: The Client’s personal data may be processed in order to grant, present or provide him with dedicated offers and promotions, tailored to his preferences to the greatest possible extent (which may have a significant impact on him) only if the Client has given his consent (not available to persons who have not given such consent);
- Possible purposes of processing Customers’ personal data by the Administrator include in particular:
- concluding and implementing a service agreement (Account) or taking action at the request of a future Client before concluding it (we process your data to manage your Account so that you can enjoy the benefits it offers, e.g. placing orders without having to fill out forms every time, accessing your purchase history, managing your consents on the website, etc. and enabling you to use other services available on our website);
- concluding and implementing a service agreement (Account) or taking action at the request of a future Client before concluding it (we process your data to manage your Account so that you can enjoy the benefits it offers, e.g. placing orders without having to fill out forms every time, accessing your purchase history, managing your consents on the website, etc. and enabling you to use other services available on our website);
- conclusion and performance of the Sales Agreement, or taking action at the request of the future Customer before its conclusion (we need your personal data to complete your order and perform the concluded agreement – in particular, to confirm its placement and to reserve or send you the selected product, as well as to contact you in this matter if necessary);
- receiving and considering complaints;
- presenting advertisements, offers or promotions (discounts) regarding the products or services of the Administrator and its partners (the current list of which is provided in the online store) intended for all recipients, in particular for the purpose of implementing the newsletter provision agreement;
- evaluation and analysis of the activity and information about the Client, in order to present general advertisements, offers or promotions (discounts) regarding the products or services of the Administrator and its partners, in a manner tailored to the interests of a given Client (however, without significantly affecting their decisions), in particular for the purpose of implementing the newsletter provision agreement, as well as market and statistical analyses;
- pursuing claims and defending against claims, including those of third parties – in the case of using most of the functionalities of the online store;
- fulfillment of legal obligations arising from regulations, e.g. tax and accounting, especially in the case of paid contracts;
- conducting correspondence with Clients, including responding to Client messages.
- The Administrator may process in particular the following personal data of Customers:
- using the online store:
– personal data provided in the form when registering an Account, placing Orders in the online store (in particular: first name and last name; e-mail address; contact telephone number; address [street, house number, apartment number, postal code, town, country], address of residence/business/registered office [if different from the delivery address], bank account number, and in the case of Customers who are not Consumers, additionally the company name and tax identification number [NIP]) and other data collected during the use of the online store;
– personal data provided for the purpose of using the newsletter, provided when using the contact form, or transferred when submitting a complaint; - other data, in particular obtained based on the Client’s activity on the Internet, including data obtained via the online store and/or other channels of communication with the Client, using cookie and similar technologies,
- using the online store:
- Providing personal data by the Customer in the online store is voluntary, but it is necessary to use certain functionalities of our store, for example, for the Customer to place an Order and settle it (conclusion and performance of the sales contract), register an Account (conclusion and performance of the service provision contract), subscribe to the newsletter or use our forms.
- Each time, the scope of data required to conclude the relevant agreement is indicated in advance in the online store (we mark the data that must be provided to conclude the agreement/use a specific functionality), within other channels of communication with the Customer or in the Regulations. Failure to provide personal data may result in the inability to effectively perform the above activities.
- The basis for the processing of the Client’s personal data is primarily the need to perform the contract to which he is a party or the need to take action at his request before its conclusion (Article 6, paragraph 1, letter b) of the GDPR). This applies primarily to personal data provided in the form when registering an Account, placing Orders and concluding a sales contract in the online store, as well as when signing up for a newsletter, if such is addressed to Clients. Also in the case of personal data provided to us in connection with the Client’s complaint, the legal basis for their processing is the necessity to perform / service the sales contract for the complained Goods.
- For other purposes (other than those indicated above), the Client’s personal data may be processed on the basis of:
- voluntarily given consent (Article 6(1)(a) of the GDPR);
- applicable legal provisions – when processing is necessary to fulfil a legal obligation incumbent on the controller, e.g. when, pursuant to tax or accounting regulations, the controller settles concluded sales contracts (Article 6(1)(c) of the GDPR);
- necessity for purposes other than those listed above resulting from legitimate interests pursued by the Controller or a third party, in particular for the determination, pursuit or defence of claims, correspondence with Customers, also via contact forms (including responding to Customer messages), market and statistical analyses (Article 6, paragraph 1, letter f) of the GDPR).
- Personal data may be stored for the period of use of the online store (however, they may be deleted after three years from the Customer’s last activity within the online store), in the case of marketing activities – until the Customer files an objection, and if they are related to cookie technology and similar, depending on technical issues, until these files are deleted using browser/device settings (however, deleting files is not always the same as deleting personal data obtained via these files, hence the possibility of objection).
- If the processing of personal data is dependent on the Client’s consent, personal data may be processed until the consent is withdrawn.
- In each case:
- personal data will also be stored when legal regulations (e.g. accounting or tax regulations) oblige the administrator to process them;
- Customer data will be processed until the order or service is fulfilled and until the limitation period or expiration of claims related to the order or service.
- Depending on the scope of personal data and the purposes of their processing, they may therefore be stored for different periods. In each case, the longer period for which personal data is stored is decisive, unless the Client expressly requests the deletion of their data.
- GDPR grants you the following rights related to the processing of your personal data:
- the right to access personal data,
- the right to rectify personal data,
- the right to delete personal data,
- the right to restrict the processing of personal data,
- the right to object to the processing of personal data,
- the right to transfer data,
- the right to lodge a complaint with the supervisory authority,
- the right to withdraw consent to the processing of personal data, if you have given such consent.
- The principles related to the implementation of the indicated rights are described in detail in Articles 16-21 of the GDPR. We encourage you to familiarize yourself with these provisions. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and will not apply to you in relation to all activities of processing your personal data. For your convenience, we have made an effort to indicate the rights you are entitled to within the framework of these operations in the description of individual operations of processing personal data.
- In matters not regulated by the regulations, the provisions of the Civil Code and relevant acts of Polish law, as well as European Union law, in particular the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) shall apply.
