Osprzęt ORD Sp. z o.o.
This Privacy Policy contains information regarding the processing of personal data by Osprzęt ORD Sp. z o.o., in particular in connection with the use of the website, contact form, communication with the Administrator and the use of analytical and marketing tools.
The policy was prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, i.e. the General Data Protection Regulation, hereinafter referred to as “GDPR”.
1. Personal data administrator
The administrator of your personal data is:
Osprzęt ORD Sp. z o.o.
street Siewierska 25
61-323 Poznań
e-mail: osprzet@osprzet.com
You can contact the Administrator in writing at the address indicated above or via e-mail.
2. Scope of processed data
The administrator may process personal data provided directly by you, in particular:
- name and surname,
- company name,
- e-mail address,
- telephone number,
- data necessary to prepare an offer, complete an order, conclude or perform a contract,
- content of correspondence,
- other data provided voluntarily in the contact form, e-mail, telephone conversation or as part of cooperation.
In connection with the use of the website, the Administrator may also process technical and operational data, such as IP address, data about the device, browser, activity on the website, sources of entry to the website and information saved using cookies or similar technologies.
Detailed information about cookies can be found in a separate Cookie Policy.
3. Purposes and legal basis for data processing
The administrator processes personal data for the following purposes:
3.1. Handling inquiries submitted via the contact form, e-mail or telephone
Data provided via the contact form, e-mail, telephone or otherwise are processed in order to handle the inquiry, provide a response and conduct further correspondence.
The legal basis for processing is:
- art. 6 section 1 letter f GDPR – legitimate interest of the Administrator consisting in handling correspondence and responding to inquiries,
- art. 6 section 1 letter b GDPR – if the inquiry concerns activities aimed at concluding a contract or performing a contract.
3.2. Preparation of the offer, conclusion and performance of the contract
Personal data is processed for the purpose of preparing an offer, fulfilling an order, concluding and performing a contract, handling cooperation, deliveries, settlements and ongoing communication related to the provision of services or the sale of products.
The legal basis for processing is Art. 6 section 1 letter b GDPR, i.e. the necessity of processing to perform the contract or take action before concluding it.
3.3. Fulfillment of legal obligations
The data may be processed in order to fulfill the legal obligations imposed on the Administrator, in particular tax, accounting, accounting and administrative obligations.
The legal basis for processing is Art. 6 section 1 letter c GDPR.
3.4. Handling complaints, pursuing claims and defending against claims
The data may be processed for the purpose of handling complaints, securing information about cooperation, determining, investigating or defending against possible claims.
The legal basis for processing is Art. 6 section 1 letter f GDPR, i.e. the legitimate interest of the Administrator.
3.5. Marketing your own products and services
The administrator may process data for the purpose of conducting marketing activities regarding its own products or services, provided that this is done in accordance with applicable law.
The legal basis for processing may be:
- art. 6 section 1 letter f GDPR – the Administrator’s legitimate interest in promoting its own business
- art. 6 section 1 letter a GDPR – consent of the data subject, if consent is required for a given marketing activity.
Consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
3.6. Web analytics
The administrator uses the Google Analytics tool to keep statistics of website visits, analyze how the website is used, traffic sources and improve the functionality and effectiveness of the website.
Analytical data is processed after expressing appropriate consent via the cookie consent banner.
The legal basis for processing is Art. 6 section 1 letter a GDPR, i.e. user consent.
3.7. Advertising Activities and Campaign Effectiveness Measurement
When running advertising campaigns, the Administrator may use Google Ads and Google Tag tools to measure advertising effectiveness, analyze conversions, evaluate traffic sources, and—if the user provides appropriate consent—conduct remarketing activities or personalize ads.
Data in this regard is processed after appropriate consent has been provided via the cookie consent banner.
The legal basis for processing is Article 6(1)(a) of the GDPR, i.e., user consent.
4. Contact Form
Using the contact form is voluntary, but providing data marked as required is necessary to send a message and receive a response.
The recommended checkbox for the contact form is:
“I have read the Privacy Policy, including the information on the processing of personal data.”
The checkbox should be unchecked by default.
Data submitted via the contact form is used solely for the purpose of processing inquiries, conducting correspondence, and—if required by the content of the inquiry—preparing an offer or taking steps to conclude a contract.
5. Data Sources
Most of the data processed by the Controller comes directly from data subjects, in particular from customers, contractors, and individuals contacting us via the form, email, or telephone.
Data about entrepreneurs and individuals representing entrepreneurs may also be obtained from publicly available sources, such as the National Court Register, the Central Registration and Information on Business, and similar business registers and sources.
In the case of data about individuals representing entrepreneurs or acting on their behalf, data may also be obtained from these entrepreneurs.
6. Data Recipients
Personal data may be transferred to the following categories of recipients:
- authorized employees and associates of the Controller,
- entities providing website hosting and maintenance services,
- email providers,
- IT and technical service providers,
- entities operating contact forms and tools used on the website,
- analytical and marketing tool providers, in particular Google,
- accounting offices, law firms, tax advisors, and other entities supporting the Controller in conducting its business,
- entities authorized to obtain data under legal provisions.
Data may be transferred to entities processing data on behalf of the Controller. Such entities process data based on appropriate agreements and only in accordance with the Controller’s instructions.
The Controller does not sell personal data to other entities.
7. Data Transfer Outside the European Economic Area
In connection with the use of IT tools, email, cloud services, analytical, or marketing tools, personal data may be transferred to countries outside the European Economic Area.
In such cases, data transfers are carried out using the mechanisms provided for in the GDPR, in particular based on a European Commission decision establishing an adequacy level of protection, standard contractual clauses, or other appropriate safeguards required by law.
8. Data Retention Period
Personal data will be processed for the period necessary to achieve the purposes for which they were collected.
In particular:
- Data processed for the purpose of handling inquiries from the contact form will be stored for the period necessary to respond and conduct correspondence, and then for the period necessary to secure any claims or until an objection is effectively filed;
- Data related to the preparation of the offer will be stored for the duration of business negotiations, and then for the period necessary to secure any claims;
- Data related to the conclusion and performance of the contract will be stored for the duration of the contract, and then for the period required by law, in particular tax and accounting regulations, and for the limitation period for any claims;
- Data processed on the basis of consent will be processed until its withdrawal, unless another legal basis for further processing exists;
- Data processed for web analytics, advertising, and campaign performance measurement will be processed in accordance with the cookie consent settings and the retention periods specified for individual tools;
- Data processed to comply with legal obligations will be stored for the period required by applicable law.
- the right to access data,
- the right to receive a copy of the data,
- the right to rectify data,
- the right to erase data,
- the right to restrict processing,
- the right to data portability—in the cases specified in the GDPR,
- the right to object to data processing—if the processing is based on the Controller’s legitimate interest,
- the right to object to data processing for direct marketing purposes,
- the right to withdraw consent at any time—if the data is processed based on consent.
9. Voluntary provision of data
Providing personal data is voluntary, but in some cases it may be necessary to process an inquiry, prepare an offer, conclude a contract, perform a contract, or comply with legal obligations.
Failure to provide the data required in the contact form may prevent us from sending a message or responding.
10. Rights of Data Subjects
Data subjects have the following rights:
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
To exercise your rights, you can contact the Controller by email: osprzet@osprzet.com or in writing to the Controller’s registered office address.
11. Right to lodge a complaint
A data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of their data violates the provisions of the GDPR.
The supervisory authority in Poland is:
President of the Personal Data Protection Office
ul. Stawki 2
00-193 Warsaw
12. Automated decision-making and profiling
Personal data will not be used to make automated decisions that would produce legal effects for you or significantly affect you in a similar manner.
In the case of analytical and advertising activities conducted using online tools, limited profiling for analytical or marketing purposes may occur, but only to the extent resulting from cookie consents and the settings of the tools used on the website.
13. Cookies and Similar Technologies
The website uses cookies and similar technologies.
Detailed information on the types of cookies, their purposes, analytical and marketing tools, and how to manage consent can be found in the Cookie Policy.
Users can manage consents using the cookie banner and the consent management panel available on the website.
14. Changes to the Privacy Policy
The Administrator may update this Privacy Policy, in particular in the event of changes in legal regulations, technological changes, changes in the tools used on the website, or changes in the way data is processed.
The current version of the Privacy Policy is available on the Administrator’s website.