Privacy Policy of P.P.H KROS Sp. z o.o.

1. General information

This privacy policy sets out the rules for processing personal data by P.P.H KROS Sp. z o.o., with its registered office at Iłownica 3, 83-412 Głodowo, Poland, NIP: 5890013558, REGON: 190318128, hereinafter referred to as the “Controller”.

You can contact the Controller by e-mail at: biuro@kros.com.pl

The Controller makes every effort to protect the privacy of website users and to ensure that personal data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Scope of data processed

The Controller may process the following personal data:

• first and last name,
• e-mail address,
• telephone number,
• delivery address (where applicable, e.g. for sending materials or samples),
• IP address.

3. Purposes and legal bases of processing

Personal data is processed for the following purposes:

• contact – based on the Controller’s legitimate interest (Article 6(1)(f) GDPR),
• order fulfilment (e.g. sending samples or promotional materials) – based on Article 6(1)(b) GDPR (performance of a contract),
• marketing activities – based on the Controller’s legitimate interest or consent (Article 6(1)(a) or (f) GDPR).

4. Voluntary provision of data

Providing personal data is voluntary, but in some cases necessary, e.g. in order to contact us or use the contact form.

5. Data recipients

The Controller may share personal data with:

• courier companies (when sending materials or samples),
• a company providing IT services to the Controller (e.g. website maintenance and hosting),
• public authorities – only where required by law.

6. Data retention period

Personal data is stored for the period necessary to achieve the purposes for which it was collected and, after that, for the period required by law or until any potential claims become time-barred.

7. Rights of the data subject

Every data subject has the right to:

• access their data,
• rectify it,
• erase it,
• restrict processing,
• object to processing,
• data portability,
• lodge a complaint with the President of the Personal Data Protection Office (UODO).

8. Contact form

A contact form is available on the website. Data sent through it is used solely to reply to your enquiry and to correspond with you.

9. Social media

The Controller runs profiles on Facebook and Instagram. Data processed through these services is also subject to the privacy policies of their operators. Use of social media is governed by the rules set by those services.

10. Cookies

The website may use cookies for technical and statistical purposes. Users can manage cookie settings in their web browser.

11. Changes to this privacy policy

The Controller reserves the right to amend this privacy policy. Changes will be published on the website.