PRIVACY POLICY EVORKSHOP.COM SP. Z O.O.
I. General Provisions
- The Privacy Policy specifies how Users’ personal data are collected, processed and stored through the website https://evorkshop.com/, the contact address: kontakt@evorkshop.com and the functionality of sending information to us, and through cookies, (hereinafter referred to as the “Website” in its entirety),
- The Website only collects personal information necessary for the purposes indicated in this Privacy Policy.
- Personal data collected through the Website processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: “RODO”) and the Law on Personal Data Protection of May 10, 2018.
II. Personal Data Administrator
The administrator of the personal data is EVorkshop.com sp. z o.o., 1 Dziekońskiego St.
00-728 Warsaw, Poland, entered in the register of entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Economic Department of the National Court Register under KRS number: 0001143725, NIP: 5214098097 , REGON: 54041174, e-mail: kontakt@evorkshop.com, hereinafter referred to as “Administrator”.
III. Types of data processed
The following personal data are processed by the Data Controller:
- User and contact information: name, home address, phone number, email address, name, tax ID.
- Data collected through contact address.
- Other information, data, requests for quotations sent by users to the Administrator.
- Newsletter data: e-mail address subscribed to the Newsletter.
- Images and experience of employees, associates: published in the “Team” tab and in news, such as participation in conferences, attendance at trade shows, product presentations.
IV. Purposes of data processing
Personal data is processed for the following purposes:
- Contact address: to respond to inquiries, send information and contact users.
- Team tab: to present the Company’s employees and their experience.
- Newsletter: to send marketing information and news.
- Direct marketing of the Administrator’s own products and services or those of its affiliates.
- Analytical and statistical activities.
- Debt collection.
- Establish and assert or defend against claims.
V. Legal basis for data processing
Personal data are processed on the following legal bases for processing:
- Contact address: Article 6(1)(b) of the RODO (necessity of processing for performance of a contract or for taking action prior to entering into a contract at the request of the data subject).
- Team tab: Article 6(1)(a) of the RODO (employee consent).
- Newsletter: Article 6(1)(a) RODO (user consent).
- Legitimate interest of the controller for other personal data.
VI. Recipients of personal data
Personal data may be shared with the following recipients:
- Entities and bodies authorized to process such data by law.
- Personal data may be transferred to entities that process personal data on behalf of the Administrator.
- Companies affiliated with the Data Controller and subcontractors.
- Entities providing services to the Administrator, including IT services, marketing services and other services necessary for the purposes of data processing.
- Other entities cooperating with the Administrator or related parties.
VII. Transfer of personal data
- Users’ personal data is transferred outside the European Economic Area (EEA) to partners, subcontractors, entities cooperating with the Data Controller.
- Transferred data is transferred based on the Standard Corporate Clauses of 20221 and secured in a way that ensures an adequate standard of personal data protection and a contract for entrustment and transfer of personal data is concluded with the entities to which personal data is transferred outside the EEA, together with safeguards appropriate to the data protection risks resulting from the Transfer Impact Assessment (TIA).
VIII. Rights of data subjects
Data subjects have the right to:
- Access to your personal data and the right to request rectification, deletion, the right to be forgotten or restriction of its processing;
- To transfer your personal data, i.e. to receive your personal data from the controller, in a structured, commonly used machine-readable format. You may send this data to another controller.
- Objection to processing.
- To the extent that the processing of your personal data is based on the premise of the controller’s legitimate interest, you have the right to object to the processing of your personal data on grounds related to your particular situation.
- Revoke your consent to data processing at any time. To the extent that the processing of your personal data is based on consent, you have the right to withdraw it. You can revoke your consent at any time by sending an email to: kontakt@evorkshop.com. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
- You have the right to lodge a complaint to a supervisory authority. In Poland, such supervisory authority is the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw: https://uodo.gov.pl/pl/p/kontakt.
In order to exercise the above rights, please contact the Administrator at: kontakt@evorkshop.com.
IX. Data retention period
- Data provided via contact address: for the period necessary to respond to the inquiry and for archiving purposes.
- Newsletter data: until the user revokes consent.
- Images and data of employees: for the duration of employment and in accordance with signed consents.
- For a period justified by the interests of the data controller (business purposes justifying contact).
- Data collected for marketing purposes, sending an offer: until you withdraw your consent to process your personal data for this purpose.
- The storage period may be extended if the processing of personal data is necessary for the investigation or defense against claims. To the extent that the basis for data processing is consent, personal data will be processed until the consent is withdrawn. The statute of limitations is 6 years, and for claims for periodic benefits and claims relating to the conduct of business – 3 years (unless a special provision provides otherwise).
X. Automated decision-making and profiling
- Users’ data will not be processed in an automated manner such that any decisions could be made against them as a result.
- Users’ data may be profiled in order to customize content and personalize the offerings upon their consent.
XI. Cookies
- The site uses cookies to ensure proper operation, analyze site traffic, for statistical purposes and for marketing purposes.
- The website collects information through cookies – session cookies, permanent cookies and third-party cookies.
- You can specify the extent to which cookies can access your device in your browser settings.
XII. Final Provisions
- The Administrator has the right to make changes to the Privacy Policy, while the rights of users will not be restricted.
- Information about the changes will appear in the form of an announcement available on the Website.
- The current version of the privacy policy will be published on the Website.
- In matters not regulated in this Privacy Policy, the provisions of the RODO and the provisions of Polish law shall apply.
XIII. Contact
If you have any questions about the processing of your personal data, please contact us at the following email address: kontakt@evorkshop.com