Personal data protection

Under what legal provisions is your personal data processed?

The principles concerning the protection of personal data (hereinafter ODO) are set out, inter alia, in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) the Data Protection Act in the national order and in special laws (lex specialis) also in the national order.

Who is the Administrator of your personal data?

In accordance with Articles 12 and 13 of the RODO Act, i.e. the right to be informed, we would like to inform you that the Administrator of your personal data is Decoroom Sp. z o.o. with its registered office at Nowogrodzka 62 B 02-002 Warsaw or Decoroom Kuchnie Sp. z o.o. with its registered office at Nowogrodzka 62 B 02-002 Warsaw.

Who can you contact regarding the protection of your personal data?

Please send your data protection enquiries to odo@decoroom.eu.

For what purposes may your personal data be processed?

Please be informed that the personal data provided is or may be processed by the above mentioned Data Controllers, for the following purposes:

sending commercial information including marketing by the means of e-mail or telephone in relation to their own products and services. The legal basis for the processing of personal data is the consent of the data subject (Article 6(1)(a) RODO) or the processing is necessary for the purposes arising from the legitimate interests pursued by the controller (Article 6(1)(f) RODO). A legitimate purpose is considered to be a binding contract or business relationship between the parties,

sending commercial information including marketing information by e-mail or telephone in relation to products and services belonging to Decoroom Kuchnie Sp. z o.o.. The legal basis for the processing of personal data is the consent of the data subject (Article 6(1)(a) RODO),

to send commercial information including marketing information by e-mail or telephone in relation to the products and services of business partners cooperating with the Data Controller. The legal basis for the processing of personal data is the consent of the data subject (Article 6(1)(a) RODO),

for contact purposes, i.e. to provide answers, feedback to your questions on matters related to our products or services. The legal basis for the processing of personal data is the legitimate interest pursued by the Administrator (Article 6(1)(f) RODO). The legitimate purpose is then considered to be answering the questions you have asked,

for the purposes of preparing an offer. The legal basis for the processing of personal data is the consent of the data subject (Article 6(1)(a) RODO),

for purposes related to the conclusion and performance of a contract, where the processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(c) RODO).

Is your personal data shared or otherwise entrusted?

Your personal data may be shared with data recipients, public authorities or entities under current legislation and may be entrusted for processing under Article 28 RODO (Administrator entrusted with the processing of personal data – processor, or processor). The Administrator shall only cooperate with such entities that meet the requirements from the RDODO and have implemented appropriate technical and organisational measures to secure the entrusted personal data.

Transfer of your personal data to a third country (i.e. outside the EEA)

You are informed that your personal data is not transferred to a third country. In the event that personal data is transferred outside the European Economic Area, such transfer may only take place under the terms of Article 46, Article 47 or Article 49 of the RODO.

How long, according to the temporal principle, will your personal data be processed?

in the case of sending commercial information including marketing by e-mail or telephone concerning pur own products and services – for an indefinite period of time, until the withdrawal of the consent given. Information on the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal,

in the case of sending commercial information including marketing information by e-mail or telephone in relation to products and services belonging to Decoroom Kuchnie Sp. z o.o. – for an indefinite period of time, until you withdraw your consent,

In the case of sending commercial information, including marketing information by e-mail or telephone in relation to the products and services of business partners cooperating with the Data Controller – for an indefinite period of time, until the withdrawal of the granted consent,

for the purposes of contact, i.e. providing answers, feedback to your questions on matters related to our products or services – for the time necessary to provide comprehensive information and for the period resulting from the currently applicable laws,

for the purposes of preparing an offer – for the period necessary to prepare and present you with our offer and for the period resulting from the currently valid legal regulations,

for the purposes of concluding and performing a contract – for the duration of the contract and the period resulting from the currently valid legal regulations.

What rights concerning your personal data do you have?

You are informed of the right to request from the Administrator access to, rectification, erasure or restriction of processing of personal data concerning the data subject, or the right to object to processing, as well as the right to data portability.

Who is the supervisory authority?

You are informed of your right to lodge a complaint with the supervisory authority, i.e. the Personal Data Protection Office, located at 2 Stawki Street, 00-193 Warsaw.

Under what circumstances is the provision of data a requirement and when is it voluntary?

The provision of personal data is:

voluntary in the case of sending commercial information including marketing information by e-mail or telephone with regard to own products and services. Failure to provide personal data may result in the impossibility of sending commercial information including marketing information with regard to own products and services by telephone or electronically,

voluntary in the case of sending commercial information including marketing information by e-mail or telephone in relation to own products and services of Decoroom Kuchnie Sp. z o.o..  Failure to provide personal data may result in the impossibility of sending commercial information including marketing information in relation to products and services by telephone or electronically from Decoroom Kuchnie Sp. z o.o.,

voluntary In the case of sending commercial information including marketing information by e-mail or telephone in relation to the products and services of business partners cooperating with the Data Controller.  Failure to provide personal data may result in the impossibility to send commercial information, including marketing information in relation to products and services by telephone or electronically belonging to business partners cooperating with the Data Controller,

voluntary for contact purposes, i.e. to provide answers, feedback to your questions on matters related to our products or services . Failure to provide personal data will result in our inability to answer your questions,

voluntary for the preparation of an offer. Failure to provide personal data will result in our inability to prepare and send you an offer,

it is a contractual requirement to provide yoru data for the purposes related to the conclusion and implementation of a contract. Failure to provide personal data will result in the impossibility of preparing and implementing the provisions contained in the contract.

Information on automated processing including profiling

We inform you that by accessing the website of the Administrator, you are not subject to automated processing, including profiling. In the event that the Administrator uses tools such as cookies, Google Analytics tools (information on profiling principles: https://www.google.com/analytics/terms/pl.html) or social media tools such as Facebook (https://www.facebook.com/about/privacy/cookies), you will be informed immediately.

What is the source of the data?

Personal data is provided directly from the data subject. When personal data is obtained not directly from the data subject, then we inform the source of the data.

How do we keep personal data secured?

Please be informed that in order to protect your privacy and personal data, the Data Controller has implemented appropriate technical and organisational measures to ensure the security of the processing of your personal data.

Best regards,

The Decoroom Sp. z o.o. team.