What is the legal basis for the processing of your personal data?

The principles regarding personal data protection (hereinafter PDP) were specified, among others, in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR), personal data protection act in the national legal system as well as specific acts (lex specialis), also in the national system.

Who is the Controller of your personal data?

Pursuant to Articles 12 and 13 of the DGPR, i.e. the right to information, we would like to inform you that the Controller of personal data is Decoroom Sp. z o.o. with its registered seat at ul. Nowogrodzka 62 B 02-002 Warszawa or Decoroom Kuchnie Sp. z o. o. with its registered seat at ul. Nowogrodzka 62 B 0 2-002 Warszawa.

Who can you contact regarding personal data protection?

Please address enquiries regarding personal data protection to odo@decoroom.eu.

For what purposes can your personal data be processed? 

We would like to inform you that the personal data provided is or may be processed by the abovementioned data Controllers for the following purposes:

  1. sending commercial, including marketing, information regarding own products and services by electronic means or by telephone. The legal basis for the processing of personal data is the consent of the data subject (Article 6 sec. 1 a) of the GDPR or the processing is necessary for the purposes of the legitimate interests pursued by the controller (Article 6 sec. 1 f) of the GDPR). An agreement or a business relationship binding the parties is considered a legitimate purpose,
  2. sending commercial, including marketing, information regarding the products and services of Decoroom Kuchnie Sp. z o.o. by electronic means or by telephone. The legal basis for the processing of personal data is the consent of the data subject (Article 6 sec. 1 a) of the GDPR),
  3. sending commercial, including marketing, information regarding the products and services of business partners cooperating with the Data Controller by electronic means or by telephone. The legal basis for the processing of personal data is the consent of the data subject (Article 6 sec. 1 a) of the GDPR),
  4. for the purposes of contact, i.e. providing answers or feedback to questions asked by you with regard to our products or services. The legal basis for the processing of personal data are legitimate interests pursued by the Controller (Article 6 sec. 1 f) of the GDPR). Providing answers to your questions is then considered a legitimate purpose,
  5. for purposes related to the elaboration of an offer. The legal basis for the processing of personal data is the consent of the data subject (Article 6 sec. 1 a) of the GDPR),
  6. for the purposes of conclusion and performance of provisions of a contract where the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6 sec. 1 b) of the GDPR).

 

Is your personal data disclosed or entrusted?

We would like to inform you that your personal data may be transferred to data recipients, authorities or public entities pursuant to the currently applicable provisions of law and may be entrusted for processing pursuant to Article 28 of the GDPR (the Controller entrusted the processing of personal data to the processor). The Data Controller establishes cooperation only with entities which fulfil the requirements of the GDPR and which implemented appropriate technical and organisational measures in order to safeguard the personal data entrusted.

Transfer of your personal data to third countries (outside the EEA)
We would like to inform you that no personal data is transferred to third countries. The transfer of personal data outside the European Economic Area can only be conducted on terms specified in Articles 46, 47 or 49 of the GDPR.

How long will your personal data be processed, in accordance with the time limitation principle?

We would like to inform you that:

  1. commercial, including marketing, information regarding own products and services sent by electronic means or by telephone – for an indefinite period, until the consent given is withdrawn. Information regarding the right to withdraw consent at any moment, regardless of the lawfulness of the processing conducted on the basis of the consent prior to its withdrawal,
  2. commercial, including marketing, information regarding the products and services of Decoroom Kuchnie Sp. z o.o. sent by electronic means or by telephone– for an indefinite period, until the consent given is withdrawn,
  3. commercial, including marketing, information regarding the products and services of business partners cooperating with the Data Controller sent by electronic means or by telephone – for an indefinite period, until the consent given is withdrawn,
  4. for the purposes of contact, i.e. providing answers or feedback to questions asked by you with regard to our products or services – for the period necessary to provide exhaustive information as well as for the period following from the currently applicable provisions of law,
  5. for purposes related to the elaboration of an offer – for the period necessary to elaborate our offer and to present it to you as well as for the period following from the currently applicable provisions of law,
  6. for the purposes of conclusion and performance of provisions of a contract – for the term of the contract as well as for the period following from the currently applicable provisions of law.

What are the rights of the data subject? We would like to inform you of the right to request from the Controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability.

Who is the supervisory authority? We would like to inform you of the right to bring a complaint to the supervisory authority, i.e. to the Personal Data Protection Authority (Urząd Ochrony Danych Osobowych) with its registered seat at ul. Stawki 2, 00-193 Warszawa.

Under what circumstances is the disclosure of data required and when is it voluntary?

We would like to inform you that the disclosure of personal data:

  1. in case of commercial, including marketing, information regarding own products and services sent by electronic means or by telephone – is voluntary. Refusal to provide personal data may result in the lack of possibility to send commercial, including marketing, information regarding own products and services by electronic means or by telephone,
  2. in case of commercial, including marketing, information regarding the products and services of Decoroom Kuchnie Sp. z o.o. sent by electronic means or by telephone– is voluntary. Refusal to provide personal data may result in the lack of possibility to send commercial, including marketing, information regarding the products and services by Decoroom Kuchnie Sp. z o.o. by electronic means or by telephone,
  3. In case of commercial, including marketing, information regarding the products and services of business partners cooperating with the Data Controller by electronic means or by telephone – is voluntary. Refusal to provide personal data may result in the lack of possibility to send commercial, including marketing, information regarding products and services by business partners cooperating with the Data Controller by electronic means or by telephone,
  4. for the purposes of contact, i.e. providing answers or feedback to questions asked by you with regard to our products or services – is voluntary. Refusal to provide personal data will result in the lack of possibility to answer your questions,
  5. for purposes related to the elaboration of an offer – is voluntary. Refusal to provide personal data will result in the lack of possibility to elaborate and to provide the offer,
  6. For the purposes of conclusion and performance of provisions of a contract – is a contractual requirement. Refusal to provide personal data will result in the lack of possibility to draw up the contract and to perform its provisions.

 

Information regarding the processing of data by automated means, including profiling

We would like to inform you that when you enter the website of the Data Controller, you are not subject to automated processing, including profiling. If the Data Controller uses tools such as cookies, Google Analytics (information regarding the principles of profiling:  https://www.google.com/analytics/terms/pl.html) or social media tools, such as Facebook (https://www.facebook.com/about/privacy/cookies), you will be immediately notified thereof.

What is the source of data?

The personal data is transferred directly from the data subject. If the personal data is not obtained directly from the data subject, we provide information regarding the source of data.

How do we safeguard personal data? We would like to inform you that in order to protect privacy and personal data, the Data Controller implemented appropriate technical and organisational measures to ensure the security of personal data processing.

Dear Sirs/Madams, your consent will enable us to remain in touch with you and to provide you with important information regarding our products and services. The choice is yours. We would like to inform you that you have the right to withdraw the consent granted at any moment.