drukarniaperfekt.pl Website (the “Website”) Privacy Policy

1. Personal Data Controller

We would like to inform you that Drukarnia Perfekt S.A. with registered office in Warsaw, Poland, ul. Połczyńska 99, 01-303 Warsaw, Tax Id. No. (NIP) 522-25-07-682, entered into the Register of Entrepreneurs, under entry No. KRS 136122, kept by the District Court for the capital city of Warsaw, XIII Commercial Division of the National Court Register, with the share capital of PLN 500,000.00 paid up in full (the “Company”), is the controller of your personal data. You can contact us in any personal data protection issues at the e-mail address: drukarnia@drukarniaperfekt.pl.

1. Purposes of and Legal Bases for Processing of Personal Data

In order to render services in line with its business profile, the Company might process your personal data for various purposes, yet always in compliance with applicable laws. Below, you can find the list of purposes of the processing of your personal data, together with relevant legal bases.

Predominantly, the rights and obligations of processors and data subjects are governed by the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (commonly referred to as the “GDPR”).

When we receive any e-mail inquiry from you, in order to undertake activities aimed at the potential conclusion of a contract we process such personal data as a name and/or surname and e-mail address. The legal basis for the processing in this case involves Art. 6.1.b of the GDPR which allows for the processing of personal data if the data are necessary for the performance of a contract or in order to take steps prior to entering into a contract.

Additionally, we monitor, on an ongoing basis, traffic on our website with the use of Google Analytics. The legal basis for the processing with a view to analysing the manner of your use of our services is laid down in Art. 6.1.f of the GDPR – our legitimate interest.

We might also use any collected data for re-marketing purposes, preparing advertisements via Google Ads or on our company fan page (i.e. a Facebook profile). To this end, we have installed the Facebook pixel. In order to be able to use these functionalities, we have to collect cookies first. The legal basis for the processing is set forth in Art. 6.1.a of the GDPR – consent.

III. Right to Withdraw Consent

1. If your personal data are processed based on consent, you may withdraw the consent at any time, at your discretion.
2. If you wish to withdraw your consent to the processing of your personal data, all you need to do is to send a direct e-mail to the Company to the address: drukarnia@drukarniaperfekt.pl.
3. If your personal data have been processed based on your consent, the withdrawal of the consent does not result in the illegality of the processing performed so far. In other words, until you withdraw your consent we have the right to process your personal data and the withdrawal thereof does not affect the compliance with regulations of the processing carried out so far.

1. Necessity to Provide Personal Data
2. Any personal data are provided on a voluntary basis, which depends on your decision. However, in certain cases the provision of some specific personal data is required in order to satisfy your request in terms of establishing contact with Drukarnia Perfekt S.A.
3. In order to make any inquiries via an e-mail address or a form available on the Website, it is necessary to specify your address, name, first name and/or surname and e-mail address; otherwise, we will be unable to respond to your question.

1. Automated Decision-Making and Profiling

We would like to inform you that we do not perform any automated decision-making, including based on profiling. The content of an inquiry sent via a contact form is not assessed by an IT system. In no way is a proposed price for our services the result of the assessment performed by any IT system.

1. Recipients of Personal Data
2. It is possible that pursuant to, for instance, a relevant provision of law or a decision of a competent body, we will be obliged to transfer your personal data also to other entities, whether public or private. However, it is extremely difficult to predict what party might request of us to share the personal data with them. Nonetheless, for our part we assure you that we analyse each request to share personal data very carefully and diligently so as not to unintentionally transfer any information to an unauthorised party.

Transfer of Personal Data to Third Countries 

1. As most entrepreneurs, we use various popular services and technologies offered by such entities as Microsoft, Google or Facebook. These companies are incorporated outside the European Union; therefore, in the light of the GDPR they are treated as third countries.
2. The GDPR introduces certain restrictions concerning transferring personal data to third countries given that – since European laws, as a rule, do not apply there – the protection of personal data of European Union citizens might unfortunately be insufficient. Therefore, each controller is obliged to establish a legal basis for the transfer.
3. For our part, we assure you that while using any such services and technologies we transfer your personal data exclusively to entities from the United States and exclusively to those which have joined the Privacy Shield framework under Implementing Decision of the European Commission of 12 July 2016 – more information in this regard is available on the European Commission website under the address https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_pl. Entities that have joined the Privacy Shield framework guarantee that they will observe high personal data protection standards applicable in the European Union; therefore, the use of their services and technologies is lawful in terms of processing of personal data.
4. At any time, we will provide you with further clarifications with regard to the transferring of your personal data; especially, if this is the source of your concern.
5. At any time, you have the right to receive a copy of the personal data transferred to a third country.

VIII. Personal Data Processing Term

1. In conformity with applicable laws, we do not process your personal data ad infinitum; instead, we process them for a period required to achieve a designated purpose. After the end of such term, your personal data will be irrevocably erased or destroyed.
2. If we do not need to carry out any operations involving your personal data other than storing (e.g. when we store the data for the purposes of potential defence against claims), we additionally protect them – until they are permanently erased or destroyed – by encrypting drives on which they are saved. Without an additional key, the data are inaccessible; in consequence, any such information becomes completely unavailable for unauthorised parties.
3. As regards particular personal data processing terms, please be informed that we process any personal data:

– for a contract term – in reference to the personal data processed for the conclusion and performance of a cooperation contract;

– for 3 years or 10 years plus 1 year – in reference to the personal data processed for the establishment, exercise or defence of legal claims (the term depends on whether both parties are entrepreneurs);

– for 5 years – in reference to the personal data related to the fulfilment of obligations under tax law;

– until consent is withdrawn or until a purpose of processing is attained, in any case for not more than 5 years – in reference to the personal data processed based on consent;

– until an effective objection is raised or until a purpose of processing is attained, in any case for not more than 5 years – in reference to the personal data processed based on the controller’s legitimate interest or for marketing purposes.

4. In order to facilitate the process of erasing or destroying the personal data, the terms expressed in years are calculated from the end of a year when we started to process the personal data. Calculating a term for each contract on a case by case basis would involve significant organisational and technical efforts and substantial costs; therefore, thanks to the appointment of a single date for the erasing or destroying of the personal data, we are able to streamline the process. Naturally, if you exercise the right to be forgotten, your case will be considered individually.
5. The additional year related to the processing of the personal data collected for the performance of a contract is caused by the fact that hypothetically you might raise a claim directly before the lapse of a limitation period, a claim might be delivered with a significant delay or you might erroneously specify a limitation period applicable to your claim.

1. Rights of Data Subjects
2. We wish to inform you that you have the right to:

– access your personal data,

– rectify your personal data,

– erase your personal data,

– restrict the processing,

– object to the processing,

– data portability.

2. We respect your rights under personal data protection regulations and we do our best to facilitate the exercise thereof.
3. Nevertheless, we would like to specify that the aforementioned rights are not of an absolute nature; in consequence, in some situations we may lawfully refuse to exercise your rights. However, if we refuse to satisfy your request, this takes place only following a profound analysis and solely in circumstances when the refusal is necessary.
4. As regards the right to object, we would like to explain that at any time you have the right to object to the processing of your personal data based on the controller’s legitimate interest, on grounds relating to your particular situation. Nonetheless, you need to remember that we may lawfully refuse to take your objection into account if we demonstrate that:

– there are legitimate grounds for the processing which override your interests, rights and freedoms, or

– there are grounds for the establishment, exercise or defence of legal claims.

5. You may exercise your rights by way of sending a direct email to the Company, to the address: drukarnia@drukarniaperfekt.pl.

1. Right to Lodge a Complaint

If in your view your personal data are processed in breach of applicable laws, you may lodge a complaint with the President of the Personal Data Protection Office.

1. Final Provisions
2. In any issues not governed by this Privacy Policy, personal data protection regulations shall apply.
3. You will be notified of any amendments to this Privacy Policy by e-mail.
4. This Privacy Policy enters into force on 25 May 2018.