Privacy policy

1. Data Controller and Definitions

1. The controller of the personal data of Customers / Users of the Online Store, also referred to as the Seller, is: Soyter Components Sp. z o.o. Sp. k., telephone: 22 7528255, Tax Identification Number (NIP): 5221080313, National Business Registry Number (REGON): 011902464.
2. The Data Controller may be contacted:
   1. at the correspondence address: Ekologiczna 14/16, 05-080 Klaudyn;
   2. by e-mail at: sklep@soyter.pl.
3. User - a natural person who visits the website or websites of the Online Store or uses the services or functionalities described in this Privacy and Cookies Policy.
4. Customer - a natural person with full legal capacity, a natural person acting as a Consumer, a legal person, or an organisational unit without legal personality to which legal capacity is granted by law, who enters into a Distance Sales Agreement with the Seller.
5. Online Store - an online service operated by the Seller and available at the following electronic address or addresses (websites): https://soyter.pl, through which a Customer/User may obtain information about Goods and their availability, purchase Goods, or order the provision of a service.
6. Newsletter - information, including commercial information within the meaning of the Polish Act of 18 July 2002 on the Provision of Electronic Services (Journal of Laws of 2020, item 344), originating from the Seller and sent electronically to the Customer/User; subscription is voluntary and requires the consent of the Customer/User.
7. Account - a collection of data stored in the Online Store and in the Seller's ICT system relating to a particular Customer/User and to orders placed and agreements concluded by that Customer/User, through which the Customer/User may place orders and conclude agreements.
8. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

2. Purposes, Legal Bases and Period of Data Processing

1. For the purpose of performing the Distance Sales Agreement, the Seller processes:
   1. information concerning the User's device in order to ensure the proper operation of the services: the computer's IP address, information contained in cookies or other similar technologies, session data, web browser data, device data, and data concerning activity on the Website, including activity on individual subpages;
   2. geolocation information, provided that the User has consented to the service provider accessing geolocation data. Geolocation information is used to provide more tailored product and service offers;
   3. Users' personal data: first name, surname, registered office address, correspondence address, e-mail address, telephone number, Tax Identification Number (NIP), bank account number, or other personal data whose provision is necessary to complete a purchase and which the Controller requires during the purchasing process.
2. This information does not itself contain data identifying Users; however, when combined with other information, it may constitute personal data and is therefore afforded the full protection available under the GDPR by the Controller.
3. The data are processed pursuant to Article 6(1)(b) GDPR for the purpose of providing the service, namely performing the agreement for the provision of electronic services in accordance with the Terms and Conditions, and pursuant to Article 6(1)(a) GDPR in connection with consent to the use of specific cookies or other similar technologies, expressed through the relevant web browser settings in accordance with telecommunications law, or in connection with consent to geolocation. The data are processed until the Customer/User ceases to use the Online Store.
4. The Controller undertakes to implement all measures required under Article 32 GDPR. Taking into account the state of the art, the costs of implementation, the nature, scope and purposes of processing, and the risk of infringement of the rights or freedoms of natural persons, varying in likelihood and severity, the Controller implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

3. Marketing Activities of the Controller

1. The Data Controller may publish marketing information concerning its products or services on the Online Store website. Such content is displayed by the Data Controller pursuant to Article 6(1)(f) GDPR, that is, on the basis of the Data Controller's legitimate interest in publishing content related to the services provided and promotional campaigns in which the Data Controller participates. At the same time, this activity does not infringe the rights and freedoms of Customers/Users, as Customers/Users expect to receive content of this kind, may expressly wish to receive it, or may visit the Online Store website or websites for this very purpose.

4. Recipients of User Data

1. The Data Controller discloses Users' personal data solely to processors acting under data processing agreements concluded for the purpose of providing services to the Data Controller, such as hosting and website maintenance, IT services, marketing services, and public relations services.

5. Transfer of Personal Data to Third Countries

1. Personal data will not be processed in third countries.

6. Rights of Data Subjects

1. Every data subject has the right:
   1. of access (Article 15 GDPR) - to obtain confirmation from the Data Controller as to whether their personal data are being processed. Where such data are being processed, the data subject is entitled to access them and to obtain the following information: the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the data have been or will be disclosed, the period for which the data will be stored or the criteria used to determine that period, the right to request rectification, erasure or restriction of processing of personal data, and the right to object to such processing;
   2. to receive a copy of the data (Article 15(3) GDPR) - to obtain a copy of the personal data undergoing processing, with the first copy being provided free of charge; for any further copies, the Data Controller may charge a reasonable fee based on administrative costs;
   3. to rectification (Article 16 GDPR) - to request the rectification of inaccurate personal data concerning them or the completion of incomplete data;
   4. to erasure (Article 17 GDPR) - to request the erasure of their personal data where the Data Controller no longer has a legal basis for processing them or where the data are no longer necessary for the purposes for which they were processed;
   5. to restriction of processing (Article 18 GDPR) - to request restriction of the processing of personal data where:
      1. the data subject contests the accuracy of the personal data - for a period enabling the Data Controller to verify the accuracy of the data,
      2. the processing is unlawful and the data subject opposes the erasure of the personal data and requests restriction of their use instead,
      3. the Data Controller no longer needs the personal data, but they are required by the data subject for the establishment, exercise or defence of legal claims,
      4. the data subject has objected to processing - pending verification of whether the legitimate grounds of the Controller override those of the data subject;
   6. to data portability (Article 20 GDPR) - to receive the personal data concerning them which they have provided to the Data Controller in a structured, commonly used and machine-readable format, and to request that those data be transmitted to another Controller, where the processing is based on the data subject's consent or on a contract concluded with them and the processing is carried out by automated means;
   7. to object (Article 21 GDPR) - to object, on grounds relating to their particular situation, to the processing of their personal data for purposes based on the Controller's legitimate interests, including profiling. In such a case, the Data Controller assesses whether there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims. If the assessment shows that the interests of the data subject override the interests of the Controller, the Data Controller will be required to cease processing the data for those purposes;
   8. to withdraw consent at any time and without giving reasons; however, the processing of personal data carried out before the withdrawal of consent will remain lawful. Withdrawal of consent will result in the Data Controller ceasing to process personal data for the purpose for which the consent was given.
2. To exercise the rights referred to above, the data subject should contact the Data Controller using the contact details provided and indicate which right they wish to exercise and to what extent.

7. President of the Personal Data Protection Office

1. The data subject has the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office, with its registered office in Warsaw at ul. Stawki 2, and which may be contacted as follows:
2. by post: ul. Stawki 2, 00-193 Warsaw;
3. via the electronic submission box available at: https://www.uodo.gov.pl/pl/p/kontakt;
4. helpline: 606-950-0000.

8. Data Protection Officer

1. In every case, the data subject may also contact the Controller's Data Protection Officer directly by e-mail or in writing at the Data Controller's address specified in Section 1, point 2 of this Privacy and Cookies Policy.

9. Changes to the Privacy Policy

1. The Privacy and Cookies Policy may be supplemented or updated in line with the Controller's current needs in order to provide Customers/Users with up-to-date and reliable information.

10. Cookies

1. The Online Store collects information about Customers, Users and their behaviour in the following ways:
   1. through information voluntarily entered in forms, for purposes arising from the function of the particular form;
   2. through cookies stored on end devices;
   3. through web server logs collected by the Online Store's hosting provider, which are necessary for the proper operation of the service.
2. Cookies are IT data, in particular text files, which are stored on the Customer's/User's end device and are intended for use with the Online Store website. Cookies usually contain the name of the website from which they originate, the period for which they are stored on the end device, and a unique number.
3. The Online Store uses cookies only after the Customer/User of the Online Store has given prior consent. Consent to the Online Store's use of all cookies is given by clicking the "Close" button displayed in the Online Store's cookie notice or by closing that notice.
4. If the Customer/User of the Online Store does not consent to the Online Store's use of cookies, they may select the "I do not consent" option, which is also available in the Online Store's cookie notice, or change the settings of the web browser they are currently using; however, this may cause the Online Store website to function incorrectly.
5. To manage cookie settings, select the relevant web browser/system from the list and follow the instructions: Internet Explorer, Chrome, Safari, Firefox, Opera, Android, Safari (iOS), Windows Phone.
6. The legal basis for processing personal data obtained from cookies is the Data Controller's legitimate interests, consisting in ensuring high-quality services and maintaining the security of those services.
7. The Online Store uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the User's end device until the User logs out, leaves the Online Store, or closes the software (web browser). Persistent cookies are stored on the Customer's/User's end device for the period specified in the cookie parameters or until they are deleted by the Customer/User.

8. Cookies are used for the following purposes:
   1. creating statistics that help to understand how Customers/Users of the Online Store use the websites, thereby enabling improvements to their structure and content;
   2. maintaining the Customer's/User's session after login, so that the Customer/User does not need to re-enter their login details and password on every subpage of the Online Store;
   3. determining the Customer's/User's profile in order to display product recommendations and tailored advertising materials in advertising networks, in particular the Google network.
9. Web-browsing software (a web browser) usually permits cookies to be stored on the Customer's/User's end device by default. Customers/Users may change these settings. The web browser allows cookies to be deleted. It is also possible to block cookies automatically.
10. Restrictions on the use of cookies may affect certain functionalities available on the Online Store websites.
11. Cookies placed on the Customer's/User's end device may also be used by advertisers and partners cooperating with the Online Store.
12. Cookies may be used by the Google network to display advertisements tailored to the way in which the Customer/User uses the Online Store. For this purpose, they may retain information about the User's navigation path or the time spent on a particular page: https://policies.google.com/technologies/partner-sites.
13. Cookies may be used by Microsoft Clarity and Microsoft Advertising to capture how the Customers/Users use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement
14. We recommend that Customers/Users read the privacy policies of these companies in order to understand the rules governing the use of cookies employed for statistical purposes, including the Google Analytics Privacy Policy.
15. With regard to information about Customer/User preferences collected by the Google advertising network, the Customer/User may view and edit information derived from cookies using the following tool: https://www.google.com/ads/preferences/.
16. The Online Store website contains plug-ins that may transfer Customer/User data to controllers such as, for example: .
17. For the proper performance of the Distance Sales Agreement, the Data Controller may disclose Customer/User data to courier companies. The delivery methods currently available in the Online Store are listed at: https://soyter.pl/en/delivery.html.
18. For the proper performance of the Distance Sales Agreement, the Controller may disclose Customer/User data to online payment systems. The prepayment methods currently available in the Online Store are listed at: https://soyter.pl/en/payments.html.

11. Newsletter

1. The Customer may consent to receiving commercial information electronically by selecting the appropriate option in the registration form or later in the relevant section. If such consent is given, the Customer/User will receive information from the Online Store (the Newsletter), as well as other commercial information sent by the Seller, at the e-mail address provided by the Customer/User.
2. The Customer may unsubscribe from the Newsletter at any time by clearing the relevant checkbox on their Account page, using the form available at https://soyter.pl/en/newsletter.html, clicking the relevant link included in each Newsletter, or contacting Customer Service.

12. Account

1. The Customer/User may not post in the Online Store or provide to the Seller any unlawful content, including reviews and other unlawful data.
2. The Customer/User obtains access to the Account upon registration.
3. During registration, the Customer/User provides the account type or gender, first name, surname, company name, Tax Identification Number (NIP), details required to issue a sales document, shipping details, e-mail address, and selects a password. The Customer/User confirms that the data provided by them in the registration form are true and accurate. Registration requires the Customer/User to read the Terms and Conditions carefully and to confirm in the registration form that they have read and fully accept all provisions of the Terms and Conditions.
4. When the Customer/User is granted access to the Account, an agreement for the provision of electronic services concerning the Account is concluded between the Seller and the Customer for an indefinite period. A Consumer may withdraw from this agreement in accordance with the rules set out in the Terms and Conditions.
5. Registration of an Account on one of the Online Store websites simultaneously constitutes registration enabling access to the other websites through which the Online Store is available.
6. The Customer/User may terminate the agreement for the provision of electronic services at any time with immediate effect by notifying the Seller by e-mail or in writing at the Data Controller's address specified in Section 1, point 2 of this Privacy and Cookies Policy.
7. The Seller has the right to terminate the agreement for the provision of services relating to the Account if the Online Store service is discontinued or transferred to a third party, if the Customer/User breaches the law or the Terms and Conditions, or if the Customer/User remains inactive for a period of 6 months. The agreement will be terminated subject to seven days' notice. The Seller may stipulate that re-registration of the Account will require the Seller's consent.

In matters not regulated by the Terms and Conditions, the provisions of the Polish Civil Code and other applicable provisions of Polish law, as well as European Union law, shall apply, in particular the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).