document created on 10.06.2023 at 08:54

Privacy Policy

The Data Controller responsible for data processing is:
IMPEA Sp. z o.o., with its registered office in Katowice, at the address: ul. Zimorodków 17/1, 40-534 Katowice,
entered into the Register of Entrepreneurs kept by the District Court Katowice-East, 8th Commercial Division of the National Court Register (KRS) in Katowice under KRS number 284967, NIP (Tax Identification Number): 6342641900, and REGON (National Business Registry Number): 240668025, with a share capital of PLN 990,000.00.
For more information, you can contact us using the email address: biuro@impea.pl or the mailing address: IMPEA Sp. z o.o, ul. Zimorodków 17/1, 40-534 Katowice.

Thank you for your interest in our online store. The protection of your privacy is very important to us. Below you will find detailed information on the handling of your data.

1. Access data and hosting

You can visit our websites without providing personal data. With every visit to the website, the server automatically saves only the so-called server log files, e.g., the name of the requested file, your IP address, date and time of the request, amount of data transferred, and the requesting Internet service provider (so-called access logs), and documents the page request. This data is analyzed exclusively to ensure the proper functioning of our website and to improve our offer. This serves, pursuant to Art. 6(1)(f) of the GDPR, to safeguard our legitimate interest in properly presenting our website and offer optimally. All access data is deleted within seven days from the end of your visit to the site.

Hosting

Hosting and website display services are partially provided on our behalf by our service providers as part of data processing entrustment. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis of cooperation with them, please contact us. Our contact details can be found in the section “Our contact details and your rights”.

2. Data collection and processing for contract execution and contact purposes

2.1 Data processing for the purpose of executing a contract

We collect personal data when you provide it to us by placing your order or contacting us (e.g., via the contact form or by email). Mandatory fields are marked as such because they concern data necessary to perform the contract or handle the matter you are contacting us about. Without providing them, the order cannot be completed, or contact cannot be made. What data is collected results directly from the forms into which the data is entered.

We use the data provided by you in accordance with Art. 6(1)(b) of the GDPR in order to perform the contract and respond to your inquiries (including inquiries regarding warranty or guarantee claims and regarding the obligation to inform about necessary updates). Further information on the processing of your data, in particular regarding the transfer of data to our service providers for the purpose of processing orders, payments, and shipping, can be found in the subsequent sections of this privacy policy. After the contract has been fully executed, the processing of your data will be restricted, and after the retention periods required by tax law and the Accounting Act have expired, this data will be deleted (Art. 6(1)(c) of the GDPR), unless you expressly consent (Art. 6(1)(a) of the GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we inform you in such a situation in this privacy policy.

2.2 Data processing for contact purposes

As part of customer communication, we process personal data to handle your inquiries (Art. 6(1)(b) of the GDPR). You provide this data to us voluntarily when contacting us (e.g., via a contact form or email). Mandatory fields are marked as such because they concern data necessary to process the inquiry. What data is collected results directly from the forms into which the data is entered. After your inquiry has been fully processed, your data will be deleted, unless you explicitly consent (Art. 6(1)(a) GDPR) to further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, which we inform you about in this privacy policy.

3. Data processing for delivery purposes

In order to execute the contract (Art. 6(1)(b) of the GDPR), we may transfer your data to the shipping company selected by you during the ordering process, which has been commissioned to deliver the ordered products.

4. Data processing for payment purposes

In order to process payments in our online store, we cooperate with external service providers handling online electronic payments and we transfer your data to the payment handling company chosen by you during the ordering process. This serves the execution of the contract (Art. 6(1)(b) of the GDPR).

Data processing for the purpose of preventing fraud and optimizing payments

In some situations, we may provide our service providers with additional information that they may use together with the information necessary to process the payment. These service providers act on our behalf as data processors and provide services to us in the field of fraud prevention and optimization of payment processes (e.g., invoicing, analysis of rejected payments, accounting support). Pursuant to Art. 6(1)(f) of the GDPR, this serves to implement our legitimate interests in protection against abuse and fraud as well as in effective payment management.

5. Cookies and similar technologies
General information

To make visiting our website attractive and enable the use of its key functions, we use technological tools, including so-called cookies. Cookies are small text files automatically saved on your end device. Some cookies we use are deleted after the browser session ends, i.e., after closing it (so-called session cookies). Other cookies are kept on your end device and allow us to recognize your browser on your next visit (so-called persistent cookies). We use technologies that are absolutely necessary to ensure proper and optimal use of essential functions of our website (e.g., shopping cart function). These technologies process data such as your IP address, time of visit, device and browser information, as well as information about your use of our website (e.g., contents of the shopping cart). In accordance with Art. 6(1)(f) of the GDPR, this serves to implement our legitimate interest in the optimal presentation of our offer.

Furthermore, we also use technological tools to fulfill legal obligations to which we are subject (e.g., to prove receipt of consent to process your personal data), as well as for web analytics and internet marketing. Further information on this subject, including the relevant legal basis for data processing, can be found in subsequent sections of this privacy policy.

In your web browser’s help menu, you will find explanations on changing cookie settings. They are available under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

When you have given us your consent to use specific technological tools (Art. 6(1)(a) of the GDPR), you may withdraw it at any time. To withdraw your consent, please contact us using the contact address indicated in the section “Our contact details and your rights”.

6. The use of cookies and similar technological tools for web analytics and marketing purposes

If you have consented to this (Art. 6(1)(a) of the GDPR), we use the cookies and other similar technological tools of external service providers listed below on our website. After the purpose of processing has been fulfilled and the use of the given technological tool has ended, the data collected as part of using these tools will be deleted. The consent granted may be withdrawn by you at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the “Cookies and similar technologies” section. Further information can be found on the websites of individual service providers. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section “Our contact details and your rights”.

6.1 The use of Google services

We use the technological tools of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) indicated below. Information automatically collected by Google’s technologies regarding the use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is processed when using Google’s technological tools, your address is shortened before being saved on Google servers thanks to IP anonymization being enabled. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. Unless otherwise specified for the individual Google technologies described in this privacy policy, data processing takes place on the basis of a joint controllership agreement concluded with Google pursuant to Art. 26 of the GDPR. Further information on data processing by Google can be found in Google’s privacy policy.

Google Analytics

For the purpose of analyzing the use of our website, we use Google Analytics – a web analytics tool from Google, which automatically processes your data for this purpose (IP address, time of visit, device and browser information, and information about the use of our website) and creates pseudonymized user profiles based on it. Cookies may be used for this purpose. As a rule, your IP address is not combined with other data collected by Google. Data processing under the Google Analytics service takes place on the basis of a data processing agreement concluded with Google.

Google Maps

For the visual presentation of geographical information, Google Maps will save and process information on how you use the maps and individual functions, including, e.g., your IP address and location data. We have no influence on the aforementioned data processing by Google.

Google reCAPTCHA

In order to protect against spam and prevent abuse and misuse of our online forms (e.g., by malicious bots), the Google reCAPTCHA tool has been integrated with our website, which processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information on the use of our website) and based on this, using JavaScript and cookies, analyzes your use of our website. Personal data entered by you in individual form fields on our pages will not be read or saved.

Google Fonts

In order to ensure a consistent presentation of content on our websites, the “Google Fonts” script is integrated with our website, which processes your data (IP address, time of visit to the website, information about the device and browser, and information about the use of our website). We have no influence on the aforementioned data processing by Google.

YouTube Video Plugin

In order to integrate third-party content using the YouTube video plugin – when playing a video, Google processes the following data: IP address, time of visit, user’s device and browser information.

6.2 The use of Facebook services
Facebook Pixel

We use the Facebook Pixel tool provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The scope of the Facebook Pixel functionalities we use is indicated below. The Facebook Pixel automatically collects and stores data (your IP address, time of visit to the website, device and browser information, as well as information on the use of our website, e.g., website visit or newsletter registration). Based on this data, pseudonymized user profiles are then created.
For this purpose, during a visit to our website, the Facebook Pixel saves a cookie on your device, which, using a pseudonymized Cookie-ID, enables automatic recognition of your browser when visiting other websites. Facebook will link this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of websites, in particular for ad personalization purposes. Information collected automatically by Facebook technologies regarding the way our website is used is usually transmitted to the server of Facebook, Inc. 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. The European Commission has not issued a decision stating an adequate level of data protection in relation to the USA. To the extent that data transfer to the USA lies within our responsibility, our cooperation is based on the standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in the Facebook privacy policy.

Facebook Analytics Tools

Within the framework of Facebook Business tools – based on data collected using the Facebook pixel code regarding your use of our website, statistics on user activity on our website are created. Data processing by Facebook takes place on the basis of a concluded data processing agreement. Data analysis (statistics on website usage) serves to optimize and make our website more attractive.

Facebook Ads (ad management)

Facebook Ads enables us to advertise our website on Facebook and other platforms. We define the parameters of a given advertising campaign. Facebook is responsible for the exact implementation, and in particular for the decision to display a given advertisement to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of a joint controllership agreement pursuant to Art. 26 of the GDPR. Joint responsibility is limited to data collection and its transmission to Facebook Ireland. This does not include the subsequent processing of data by Facebook Ireland.

Based on the pseudonymized Cookie-ID saved by the Facebook Pixel and the collected information on user activity on our website, we create personalized advertising via the Facebook Pixel Remarketing function.

7. Social media

7.1 Social media plugins: Facebook (Meta)

Social network plugins (buttons) are used on our website. These plugins are available via an HTML link, which ensures that when visiting our page containing such plugins (buttons), an automatic, direct connection with the servers of the operator of a given social network is not established. After clicking on one of the buttons (plugin), a new window of your browser will open, displaying the page of a given social network, where you can confirm the use of a given button, e.g., “Like” or “Share”.

7.2 Our activity on social networks: Facebook

If you have consented to this to a given social network (Art. 6(1)(a) of the GDPR), when you visit our account/profile on the above-mentioned social networks, your data will be automatically collected and stored for web analytics and marketing purposes. Based on this data, pseudonymized user profiles are created. They can be used, for example, to place so-called personalized advertisements within and outside the social networks that presumably correspond to your interests. Cookies are usually used for this purpose.
Detailed information on the processing and use of your data by individual social networks, as well as information regarding your rights and the possibility of configuring privacy settings, and contact details for making an inquiry, are described in the privacy policies of individual social networks linked below. Should you need assistance in this regard, you may also contact us.

Facebook (by Meta) is a social network offered by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). Information processed automatically concerning your activity and way of using our fanpage on Facebook (by Meta) is as a rule sent to a server of Meta Platforms Ireland, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and saved there. The European Commission has not issued a decision stating an adequate level of data protection in relation to the USA. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing as part of a visit to the Facebook (by Meta) fanpage takes place in accordance with Art. 26 of the GDPR based on joint arrangements of joint controllers, which are available here. Further information regarding the processing of your personal data as part of visiting a Facebook fanpage (information regarding the page insights function) is available here.

8. Our contact details and your rights

8.1 Your rights

Data subjects have the following rights:

pursuant to Art. 15 GDPR: the right to obtain information about data processing to the extent specified in this article;
pursuant to Art. 16 GDPR: the right to rectify your inaccurate or incomplete personal data;
pursuant to Art. 17 GDPR: the so-called “right to be forgotten”, i.e. the right to delete your personal data stored by us, provided its further processing is not necessary:
to exercise the right of freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest;
for the establishment, exercise, or defense of legal claims;
pursuant to Art. 18 GDPR: the right to restrict the processing of personal data, provided that:
the accuracy of the personal data is contested by you;
the processing is unlawful and you oppose their erasure;
we no longer need the personal data, but they are required by you for the establishment, exercise, or defense of legal claims;
you have objected to processing pursuant to Art. 21;
pursuant to Art. 20 GDPR: the right to receive the personal data provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller;
pursuant to Art. 77 GDPR: the right to lodge a complaint with a supervisory authority (the President of the Personal Data Protection Office “UODO”).
Right to object

If, as described in this privacy policy, we process personal data to safeguard our legitimate interests, you may object to the processing of your data for this purpose – with effect for the future. If the processing is for direct marketing purposes, you can exercise the right to object at any time. If the processing is for other purposes, you have the right to object only on grounds relating to your particular situation.

After you have exercised your right to object, we will not continue to process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

The preceding sentence does not apply if data processing is carried out for direct marketing purposes. In this case, upon your objection, we will always cease further processing of your personal data.

8.2 Contacting us

If you have any questions regarding the collection, processing, and use of your personal data, as well as in the event of requests for information, rectification, restriction of processing, or deletion of data, and in order to revoke consents granted or object to the use of specific data, please contact the data controller indicated at the beginning of this privacy policy directly.