Privacy policy
1. General provisions.
The privacy policy applies to the protection and processing of Users' personal data in connection with the use of the "www.paradyz.com" web page, hereinafter referred to as the Page, including its subpages, administered by the Ceramika Paradyż sp. z o.o. company based in Opoczno (ul. Piotrkowska 61, 26-300 Opoczno), entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Łódź – Śródmieście in Łódź, the 20th Commercial Division of the National Court Register, under the number 125109, with Tax Identification Number: 768-166-25-55, National Business Registry Number: 592184659, BDO: 000036011, with PLN 55.974.210,00 of share capital (hereinafter: the Administrator).
The privacy policy contains the rules for collecting and using User data in force on the Page.
The purpose of this privacy policy is to provide the Users of the Page with a level of privacy that meets at least the standards set in applicable laws, including in particular the Act of 18 July 2002 on providing services by electronic means (Journal of Laws 2017.1219 i.e. of 2017.06.24), the Act of 10 May 2018 on protection of personal data (Journal of Laws 2018.1000), the Act of 16 July 2004 the telecommunications law (Journal of Laws 2016.1489 i.e. of 2016.09.16).
The Page is owned by the Ceramika Paradyż sp. z o.o. company based in Opoczno.
All copyright and intellectual property rights to the Page and its elements, such as pictures, images, graphic files, text and other contents belong to the Administrator. All trademarks presented on the Page are the property of the Administrator unless specified otherwise. Contents of the Page may not be used in any manner without a previous written (null and void otherwise) consent of the Administrator, unless only for the Page User's personal purposes. It is forbidden, among others, to copy, modify, link and use them in such a manner that makes them public or for commercial purposes. Any actions beyond the above-mentioned permitted use are not permitted and may result in civil and criminal liability.
All contents, including interior arrangements, as well as some elements of the arrangements put on the Page, are for information purposes only and do not constitute an offer within the meaning of the Civil Code.
Pictures of ceramic tiles put on the Page are for illustrative purposes only, and as a consequence, the actual appearance of ceramic tiles may differ from the one shown in pictures. The actual colour of ceramic tiles may differ from the colour of ceramic tiles presented in the photographs on the Page. The actual dimensions of ceramic tiles may differ from the dimensions of ceramic tiles presented in the photographs on the Page.
The Administrator shall not be liable for any damages resulting from decisions made based on information found on the Page or in connection with its unauthorised use unless such a liability arises from generally applicable laws, particularly the provisions of consumer law in general.
The Administrator reserves the right to change some of the products' technical parameters, as well as their appearance.
The Administrator does not guarantee that the technical data provided on the Web Page is free from defects or errors.
The Administrator reserves the right to make any modifications to the contents of the Web Page, including this privacy policy. In particular, the Administrator is entitled to correct the information put on the Web Page, update the data, or remove specific contents, also without prior notice to the Users.
2. Personal data Administrator.
Introductory information
Respecting the right to privacy of the persons who entrusted Ceramika Paradyż Spółka z ograniczoną odpowiedzialnością with its registered office in Opoczno (ul. Piotrkowska 61, 26-300 Opoczno) (hereinafter referred to as "Ceramika Paradyż") their personal data, including the people using our services, our contractors and their employees, as well as the newsletter subscribers, we would like to declare that we process the obtained data in accordance with national and European law, and in conditions that guarantee their security.
In order to ensure the transparency of the processing processes being carried out, we present the principles for personal data protection adopted by Ceramika Paradyż, established on the basis of the Regulation of European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing the Directive 95/46/EC (the General Data Protection Regulation, hereinafter referred to as the "GDPR").
Data controller
The controller of your personal data, i.e. the entity making decisions on the purposes and methods of the processing, is Ceramika Paradyż Spółka z ograniczoną odpowiedzialnością with its registered office in Opoczno (ul. Piotrkowska 61, 26-300 Opoczno), entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Łódź – Śródmieście in Łódź, the 20th Commercial Division of the National Court Register, under the number 125109, with Tax Identification Number: 768-166-25-55, National Business Registry Number: 592184659, with PLN 55.974.210,00 of share capital.
In matters related to the processing of personal data, you can also contact us via e-mail at: mgrzegory@paradyz.com.pl
Data acquisition and the purpose of its processing
Ceramika Paradyż offers comprehensive solutions in the field of personal data protection and information security. In carrying out our business functions, we process personal data for the following purposes:
Purpose of the processing: |
Legal basis and data retention period: |
Legitimate interest |
Activities aimed at concluding and implementing a contract with a client or a contractor. |
Art. 6 item 1(b) (regarding clients); Art. 6 item 1(f) of the GDPR (regarding persons cooperating with us on behalf of a client/contractor). |
The need to contact employees/associates of clients and contractors in connection with the actions taken in order to conclude a contract or its implementation. |
Handling grievances, requests, and complaints. |
Art. 6 item 1(b), (c) and (f) of the GDPR For the duration of a contract or until the warranty expires or the complaint is settled. |
The need to contact employees/associates of clients in connection with handling grievances, requests, and complaints. |
Establishing, investigating, and defending claims. |
Art. 6 item 1(f) of the GDPR For the period of limitation of claims under the contract – in accordance with applicable law. |
Processing the data of clients or contractors and their employees/associates in connection with establishing, investigating, and defending claims. |
Bookkeeping, accounting, and financial reporting. |
Art. 6 item 1(c) of the GDPR Until the data retention obligations resulting from legal provisions expire, in particular the retention of accounting documents (as a rule – for 5 years after the year during which the legal event that required the issuance of an accounting document occurred). |
- |
Keeping statistics |
Art. 6 item 1(f) of the GDPR For the duration of another processing operation indicated in this table. We do not store keep data solely for statistical purposes. |
Streamlining the business with the conclusions drawn from statistical activities. |
Conducting marketing activities (including using electronic communication means). |
Art. 6 item 1(f) of the GDPR In the case of conducting marketing activities using a telephone number or an e-mail address, the controller shall obtain consent for the communication channel in accordance with the Act on the provision of electronic services or the Telecommunications Law Act. Until an objection is raised, i.e. informing us in any way that you do not want to stay in touch with us or receive information about the actions we undertake, or until the period of limitation of claims expires. |
Conducting marketing activities promoting products and services. |
Monitoring on the premises of the data controller's registered office in order to increase the safety of employees and to protect property, as well as to maintain information confidentiality. |
Art. 6 item 1 (f) of the GDPR Image recordings are being processed only for the purposes for which they were collected, and kept for a period not exceeding 30 days from the date of recording or until a justified objection is raised, unless the recording constitutes evidence in proceedings – then until the final conclusion of these proceedings. |
Maintaining access control for people staying at the premises of the Ceramika Paradyż registered office is our legitimate goal, and in the case of employees, it results from the law (Art. 22² of the Labour Code). |
Data processing as part of the Ceramika Paradyż profile on the Facebook social networking site. |
Art. 6 item 1(f) of the GDPR The data is jointly controlled by Ceramika Paradyż and the Facebook site. The data shall be processed until an objection to data processing is raised. |
Handling ongoing correspondence using the tools provided by the Facebook site, including the Messenger communicator, and conducting other marketing activities. |
Processing cookies. |
Art. 6 item 1(f) of the GDPR The data shall be processed for the periods indicated in the items regarding cookies (item 7) or until an objection to data processing is raised. Raising an objection may only be made by changing the settings of the end user's browser, which shall prevent the collection of information using cookies. |
Adapting the content of websites to the needs of users, including for marketing purposes, optimising the use of websites. |
Managing human resources – employees and associates. |
Art. 6 item 1(a), (b), (c) and (f) of the GDPR; Art. 9 item 2(b) of the GDPR In accordance with the applicable regulations obliging us to archive documents concerning labour law, i.e. we store personal files for 50 or 10 years. The 10-year retention period for documentation concerning matters related to the employment relationship and the employee's personal files is applied to all employees employed after 1 January 2019. In accordance with the applicable regulations obliging us to archive documents concerning labour law, i.e. we keep personal files for 50 or 10 years. The 10-year retention period for documentation concerning matters related to the employment relationship and the employee's personal files is applied to all employees employed after 1 January 2019. In the case of employees employed after 31 December 1998, and before 1 January 2019, the documentation related to the employment relationship and the employee's personal files shall be kept for 50 years from the date of termination or expiry of the employment relationship, and with regard to those of the above-mentioned employees for which the employer shall submit the information report referred to in Art. 4 item 6(a) of the Act of 13 October 1998 on the social insurance system, the retention period for documentation and files is reduced to 10 years from the end of the calendar year during which such a report was submitted. If the retention period for selected documents is shorter, the controller shall respect the shorter period. Civil law contracts shall be stored until the limitation periods for the resulting claims expire. |
Disseminating the image of an employee/associate on the basis of a copyright consent. |
Conducting recruitment. |
Art. 6 item 1(a) and (c) of the GDPR (regarding candidates for employees); Art. 6 item 1(a) and (b) of the GDPR (regarding candidates for employees) Up to 6 months from the end of the recruitment process, and in the case of a consent to further recruitment processes – no longer than a year. |
- |
If the retention periods for the documents indicated in the "Bookkeeping, accounting and financial reporting" section are longer than the periods appropriate for asserting possible claims, the indicated longer periods shall apply.
Data recipients
In connection with the conducted activity, Ceramika Paradyż shall disclose your personal data to the following entities:
-
the persons running a business, including attorneys-at-law and legal advisers, cooperating with Ceramika Paradyż in the field of consulting services provided to the clients of Ceramika Paradyż,
-
the state authorities or other entities authorised under the law,
-
the entities supporting us in our activities on our behalf, in particular: the suppliers of external ICT systems supporting our activities, including the Microsoft company, the entities auditing our activities, or the entities cooperating with Ceramika Paradyż as part of marketing campaigns, Provision of services offered by Ceramika Paradyż, whereas such entities shall process data on the basis of an agreement with Ceramika Paradyż and only in accordance with our instructions,
-
the payment service providers within the meaning of the Act of 19 August 2011 on payment services, i.e. PayU S.A. with its registered office in Poznań, as well as banks, if it is necessary for bookkeeping,
-
in the case of job candidates – also to online recruitment portals.
Data processing rights and voluntary provision
Every person whose data is being processed by Ceramika Paradyż has the right to:
-
access their data and obtain its copy,
-
rectify (correct) their data,
-
delete their data,
-
limiting the processing of their data,
-
transfer their data – if the legal basis for its processing is a consent (Art. 6 item 1(a) or Art. 9 item 2(a) of the GDPR) or a contract (Art. 6 item 1(b) of the GDPR),
-
object to the processing of their personal data – if the legal basis for its processing is a legitimate interest (Art. 6 item 1(f) of the GDPR).
For more information on the rights of data subjects, see Art. 12-23 of the GDPR.
In addition, the person whose data is being processed by Ceramika Paradyż has the right to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection.
More information can be found here: https://uodo.gov.pl/pl/p/skargi.
Do you have to provide Ceramika Paradyż with your personal data?
Providing the data is necessary to conclude contracts and settle the business activities, as well as to fulfil legal requirements by Ceramika Paradyż. This means that if you want to use the services we offer (including using the online store, the showrooms), you want to become our contractor (supplier) or employee/associate, you must provide your personal data.
If your employer or another entity indicated you as a contact person in relation with the conclusion/performance of a contract with Ceramika Paradyż (including your participation in a training course or webinar being organised by us), your data shall be processed to the extent disclosed by this entity (this is by default the name, surname, position, e-mail address and telephone number).
In the remaining scope (in particular concerning the data processing by Ceramika Paradyż for marketing purposes), providing the data is voluntary.
Transferring data to third countries
Personal data shall not be transferred outside of the European Economic Area (hereinafter referred to as: the "EEA"). However, bearing in mind the provision of services by our subcontractors in the implementation of support for ICT services and IT infrastructure, ODO 24 may outsource specific IT activities or tasks to the recognised subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA. In accordance with the decision of the European Commission, the countries of recipients outside the EEA ensure an adequate level of personal data protection in line with the EEA standards.
In the case of recipients in the territory of countries not covered by the decision of the European Commission, in order to ensure an adequate level of this protection, the controller concludes contracts with personal data recipients, which are based on the standard contractual clauses issued by the European Commission in accordance with Art. 46 item 2(c) of the GDPR.
A copy of the standard contractual clauses may be provided by the controller – their contact details are given above. The method of securing your data used by the administrator is consistent with the principles provided for in Chapter V of the GDPR. You can request further information on the security features applied in this regard, obtain a copy of these security features, as well as find out where they are being shared.
Processing of personal data in an automated manner
Your personal data shall not be used for the purpose of automated decision-making (including in the form of profiling) in such a way that, as a result of such automated processing, any decisions that would have legal effects or similarly affect any effects for the clients, the contractors, their employees or associates, as well as for the employees or associates of the controller or job candidates could be made.
3. Rules for collecting personal data and information.
Each visitor to the Page automatically becomes its User, in accordance with this privacy policy. During browsing the Page by Users, automatically collected is the information about the use of the Page by Users, their IP addresses, and location information of the User being the owner of the IP address.
The User is asked through the Page if he/she agrees to identify and share his/her location. Expressing consent to share the location results in showing the Page the Company's point of sale that is closest to the User. If the User does not agree to share his/her location, he/she should close the query window. The User can express his/her consent to share his/her location also through the appropriate web browser settings that is being used while browsing the contents of the Page, as well as through the subpage containing a map showing the sales network.
The User can at any time revoke the permission to share his/her location by web browser by adjusting the settings so that the User is each time asked for permission to find his/her location.
Using some functions of the Page may be preceded by the need for providing personal data by the User. In the event of refusing to provide personal data by the User, using some functions of the Page can be limited.
Available on the Page are: a contact form, a newsletter subscription form and a form for designers. Filling out the forms requires providing certain personal data by the Users.
4. The scope of collected data, method of using and processing it.
The Administrator is also a data administrator within the meaning of the Act of 10 May 2018 on the protection of personal data (Journal of Laws 2016.1000, consolidated text ), and the Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing the Directive 95/46/EC (the General Data Protection Regulation). The Administrator declares that the User browsing the Page remains anonymous until subscribing to the newsletter, filling out the contact form on the Page, or filling out the form for designers. When browsing the Page, the User may be asked to provide the following personal information: full name, the address of residence, telephone number, e-mail address.
Personal data collected during filling out the contact form by the User are used only for the purpose of sending the ordered newsletter, responding to a question asked via the above-mentioned contact form or contacting the author of a project.
Submitting data by the User is voluntary, but using some of the Page's functions is not possible without it.
The collected data is also used to set the User's profile and allow for customising the contents of the Page and the newsletters to suit his/her needs. Personal data processing is carried out in accordance with the Act on the protection of personal data and on the provision of services by electronic means.
Automatically obtained information is used to manage the Page, identify potential security risks, for Page's traffic analysis and for statistical purposes, including using the Google Analytics tool, concerning e.g. the area of the connection, IP number, date and time of the connection, source and number of connections, number of subpages opened, or for personalisation of the content of subpages. This information is not linked to Page User's personal data and is not used to identify the User. The extent of information collected automatically depends on the settings of User's web browser. The User can check web browser settings to see what information is shared by the web browser automatically or to change these settings. Location information is used to adjust the content of the Page to Users' needs.
Users' personal data is processed on the basis of the consent expressed by the User they concern and in the cases provided for by law, which authorise the Administrator to process the User's personal data. The User's consents to the processing of his/her personal data and is expressed by checking the indicated field during the procedure enabling the User to use particular functions of the Page.
The Administrator does not sell or otherwise make available to third parties the personal or address data of Users without their explicit consent unless it is obliged to do so by authorised state bodies.
The Administrator may entrust to another entity, by way of a written agreement, the processing of User's personal data collected through the Page, in accordance with art. 31 of the Act on the protection of personal data.
5. User's permissions.
The User is allowed to:
- obtain information on whether and to what extent his/her personal data is processed;
- access his/her personal data and to demand their correction or cessation of processing them.
6. Newsletter.
The Administrator provides Users, through the Page, with a newsletter delivery service, and as part of it, messages are sent by the Administrator to the User's e-mail address, regarding subjects of Administrator's choice, concerning, in particular, the product offer of the Administrator, including new products, current promotions or information on sales network for Administrator's products.
The newsletter service is provided free of charge. The newsletter service agreement is concluded at the moment of subscribing to the newsletter using the form available on the Page, and then clicking on the confirmation link sent to the e-mail address provided by the User during subscription. Such an agreement can be terminated by the User at any time and with immediate effect by sending an appropriate request to the Administrator. Each of the messages sent by the Administrator as part of providing the newsletter service contains a link allowing for termination of the above-mentioned agreement (the resign link option, located in the footnote of the message). The Administrator, by means of the relevant messages sent to the e-mail address provided by the User, confirms both the start and end of providing the newsletter service. The requirement for using the newsletter service is owning a device with Internet access and an e-mail address. The Administrator is also the administrator of the personal data of Users for which the newsletter service is provided. The User has the right to change the e-mail address to which the Administrator sends messages as part of providing the newsletter service. The Administrator is forbidden to send unlawful contents as part of providing the newsletter service.
7. Cookies.
In order to improve the functionality of the Page, in particular by adjusting it to the individual needs of Users, the Administrator uses cookie files, that is short text and numeric information, which are saved by the computer system on the User's computer system (on a computer, on a phone or other device on which the User visits the Page) while browsing the Page. These files allow for identifying such a device later, and consequently for identifying the User, in the case of visiting the Page in the future.
Cookies collect information about User's activity on the Page. Their main purpose is to make it easier for the User to use the Page, to adjust the contents of the Page to User's preferences. They allow for recognising the User's Device and displaying a web page tailored to his/her individual needs. Cookies allow for creating statistics that help to understand how the Page Users use the Page, which makes possible to improve its structure and contents.
The Page uses the following types of cookies:
- Performance cookies – allow for collecting information on how the Page is being used.
- Functional cookies - allow for "remembering" User's settings.
- Session cookies - are stored on User's device and remain there until the end of the session on a given browser. The stored information is permanently deleted from the device's memory. The session cookies mechanism does not allow for downloading any personal data or confidential information from User's device.
- Permanent cookies – are stored on User's device and remain there for the time specified in the file parameters or until they are manually removed by the User.
Cookies put on the Page by third parties:
- Cookies put by Google Analytics – used to keep records on Page's statistics.
Every web browser has the option to change cookie settings. Below, we show how to change cookie settings in most popular and commonly used web browsers:
- Mozilla Firefox - select from the browser menu: Tools > Options > Privacy. Check the field Firefox Program: "will use user's settings". How cookies are being treated is decided by clicking – or not – on "Accept cookies" / More information – Mozilla Firefox
- Internet EXPLORER 6.0 I 7.0 – select from the browser menu: Tools > Internet Options > Block all cookies. / More information Internet Explorer
- Google Chrome - select from the browser menu (upper right corner): Settings > Show advanced settings. In the Privacy section, click the Content settings button. In the Cookies section, change the following cookie settings:
- Removing cookies,
- Default blocking cookies,
- Default allowing cookies,
- Default keeping cookies and further pages until closing the browser,
- Defining exceptions for cookies from specific sites or domains.
- Opera – select from the browser menu: Tools > Preferences > Advanced. How cookies are being treated is decided by clicking or not on the Cookies position.
- Mobile phones – after opening the Internet, choose Settings > Privacy > Cookie settings.
Cookies are used on the Page with User's consent. The consent may be expressed by the User through appropriate settings of the web browser used to view the Page. The User can at any time revoke or change the extent of the prior consent to allow the cookies used on the Page and remove them from his/her browser. The User can at any time block or limit access of cookies to his/her device and permanently delete the files already saved. The Administrator declares that blocking or restricting the access of cookies to User's device may adversely affect the ability to use some of the functions of the Page, and ensures that storing cookies on User's device does not cause any configuration changes both in the device and its software.
Cookie files do not contain information that constitutes Users personal data.
8. Personal data protection.
Ceramika Paradyż Sp. z o.o. guarantees the protection of privacy and personal data of Users of the Page, in accordance with the statements made when entering personal data, as well as in accordance with the Act of 10 May 2018 on the protection of personal data (Journal of Laws 2016.1000, consolidated text ), and the Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing the Directive 95/46/EC (the General Data Protection Regulation). Additionally, information on Page's statistics are collected, and its collection and use are carried out in the manner described in this privacy policy, in accordance with the law.