PRIVACY POLICY

This document describes the privacy policy and the use of cookies. It defines the rules, method of processing and use of data and information from customers and users of the website.

Please read this policy carefully. By accessing this website or using it and sending us any personal data, the user accepts the terms of this privacy policy.

We process your personal data based on applicable law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (“GDPR”) and the Act of May 10, 2018 on the protection of personal data (“Act”).

Personal data Administator

The Administrator of your personal data is CDM Ltd. with headquarters at 112A Wojska Polskiego Street, Suwalki, 16-400, entered in the Register of Entrepreneurs of the National Court Register by the District Court in Bialystok, XII Economic Department of the National Court Register under KRS number 0000018423, with a share capital of PLN 4,000,500.00, Tax ID 8442004660, REGON 790753207 (Administrator).

Contact with the Administrator

Correspondence address: 112A Wojska Polskiego Street, Suwalki, 16-400

Phone: +48 87 565 36 45

Principles of personal data protection

1. We make every effort to ensure that all personal data is processed in accordance with the purpose for which it was collected and used in accordance with the scope of granted permits (consents) and processing areas permitted by law.
2. We make sure that the processing of personal data is carried out in accordance with the principles of substantive correctness and adequately to the purposes for which they were collected.
3. We process data for the period necessary to achieve the purposes for which they were collected, and additionally for the period in which we are obliged to do so on the basis of generally applicable laws.
4. We ensure confidentiality, integrity and accountability of the personal data we process.
5. The personal data processed by us will be transferred to third parties only when it is necessary as part of the performance of the contract or taking other actions at your request, based on our statutory obligation, our legitimate interest or if you have previously consented to it. The recipient of your personal data may be our authorised employees and associates, as well as external service providers, IT system providers, IT service providers, accounting, legal, advisory, analytical, marketing services, postal operators and couriers, electronic payment system operators and banks in the field of making payments and bodies authorised to receive personal data on the basis of applicable law.
6. The processed personal data is not transferred to countries outside the European Union and the European Economic Area or to international organizations.

Ways of obtaining data

Personal data is obtained through:

1. online forms – information is collected thanks to the forms available on our website, used for contact purposes, asking questions and expressing comments;
2. contact without the intermediation of the network – the website has various telephone and fax numbers as well as e-mail addresses at which you can contact us;
3. when using the resources of the website www.cdm-drewno.pl – information about users is collected via files such as “cookies” or “web beacons”.

• Cookies – are small text files, sent by our website and saved on the user’s end device (computer, laptop, smartphone). We use them to adapt the content and services to the individual needs and interests of the Administrator’s website users, to understand the way in which users use our website and to constantly improve our website, making it even more friendly and better adapted to the needs of users. The user may at any time disable the option of accepting cookies in his browser, however, the effect of such a change may be the loss of the ability to use the Administrator’s website.
• Web beacons – electronic graphic elements (also known as web bugs, clear gifs or trackers) that allow you to determine the number of users who have visited our site by clicking on an advertisement for our products and services from a third party. Web beacons collect limited information, such as the cookie number, the time and date the page was accessed, and the description of the page on which the web beacon is located. Our pages do not contain web beacons placed by other advertisers, but we use third parties to collect this data for us. As web beacons are used in conjunction with cookies, they can be deactivated by disabling cookies or changing the cookie settings in your browser.

For what purpose the data collected by us is used

1. Personal data is used:
   1. for the purposes of providing services and delivering products ordered by customers and related activities (e.g. filing complaints) – i.e. pursuant to art. 6 sec. 1 lit. b) GDPR;
   2. legal obligations incumbent on the Administrator – i.e. pursuant to art. 6 sec. 1 lit. c) GDPR.
2. If the appropriate consent is obtained, the data is also used for the purposes of direct marketing of the Administrator’s products and services pursuant to art. 6 sec. 1lit. a) GDPR.

Information security and storage

The Administrator ensures the security of personal data thanks to appropriate technical and organisational measures aimed at preventing unlawful data processing and their accidental loss, destruction and damage.

User rights

1. Providing personal data to the extent necessary for the delivery of products and services offered by the Administrator is mandatory, and in the remaining scope it is voluntary.
2. The Administrator respects the rights of every person whose data he processes: access to data, rectification of data, deletion of data, restriction of processing, data transfer, the right not to be subject to a decision which is based solely on automated processing, including profiling, and has legal effects on that person or otherwise significantly affects it.
3. If the processing is based on the consent of the data subject, this person has the right to withdraw consent at any time, with the proviso that this will not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
4. The person whose data we process may exercise his rights by sending a letter to the Administrator in which he presents his requests.
5. The person whose data we process has the right to lodge a complaint with the supervisory authority if he or she considers that his or her rights have been violated.

Changes to the privacy policy

The Administrator reserves the right to change this privacy policy. Changes in the privacy protection policy may be influenced by changes in the legislative sphere in the field of personal data protection, as well as other factors. Customers and users will be immediately informed about any changes on the Administrator’s website.