The Customer Data Protection Policy applies to customers who send us enquiries or carry out transactions with us in the course of their business or professional activities, including consumer, business and institutional customers. The document sets out the type of personal data we collect from you as a customer, the purposes for which this is done, how we use the personal data we receive and informs you about who we are, how to contact us, what rights you have and how you can exercise them.
The administrator of your personal data is switchit sp. z o.o., business address: Przyczółkowa 350, 02-962 Warsaw, NIP PL7010944433.
You can contact us:
by letter: Przyczółkowa 350, 02-962 Warsaw
by e-mail: email@example.com
We process your personal data which we have obtained from you in connection with enquiries made to us via the contact form or transactions carried out with us confirmed by VAT invoices issued.
We process the personal data you have provided when filling in the contact form, such as your name, surname, company, residential or business address. In addition to the data indicated in the contact form, we may process data from publicly available sources, including: CEiDG, KRS, REGON or other registers and records kept by public administration bodies.
We also process the bank account number from which payments were made or to which refunds were made.
In addition, we also process your behavioural data, i.e. data about your behaviour, including: queries you make, transactions you carry out, complaints you make, your correspondence and contact history with us, your activity on our website, our profiles on social networks (e.g. Facebook).
This includes data such as products you have viewed, IP addresses or device identifiers, cookie data and locations, correspondence, contacts, as well as feedback about us and our products and services.
For the purposes of determining, asserting and defending claims, we may also collect data regarding your PESEL or NIP number and address from publicly available sources, including CEiDG, KRS, REGON or other registers and records maintained by public administration bodies.
We need and process your personal data for:
to take steps at your request prior to concluding a contract (e.g. to make an offer, provide a quotation or notify you of the availability of a product) – Article 6(1)(b) of the DPA – for the time necessary to carry out these steps;
the conclusion and performance of the contract – Article 6(1b) of the RODO – for the time necessary for the performance of the contract and settlements under it;
to comply with our legal obligations – legal basis Article 6(1c) RODO including but not limited to:
obligations under the warranty for defects – for the duration of the warranty liability;
obligations arising from withdrawal or termination of the contract – for the duration of the obligations arising from those titles;
obligations related to issuing and storing invoices and documents required by tax and accounting regulations – until the invoice or other documents are issued and then for the period of their storage specified by tax and accounting regulations;
retention of data for the purpose of demonstrating compliance with accountability and other obligations under data protection legislation, for the duration of any liability arising therefrom;
the pursuit of our so-called legitimate interests – legal basis Article 6(1) f) RODO – occurring in the case of:
establishment, defence, assertion of claims – until the statute of limitations for claims arising from the contract or our actions in connection with the contract or pre-contractual demands (maximum 10 years from the execution of the contract or pre-contractual demands or a final court decision);
to compile compilations, analyses and statistics for our internal purposes, including in particular reporting, research and planning for the development of our products, including services and the improvement of their quality, development work in our information systems – for the duration of the pre-contractual activities and until the execution of the contract, and then no later than the statute of limitations for claims arising from this contract or our activities in connection with the contract or the pre-contractual demands;
ensure network and information security – for the entire data retention period, i.e. until the statute of limitations for claims under the contract or our actions in connection with the contract or pre-contractual demands and the termination of our liability for accountability obligations and other obligations imposed by data protection legislation;
support customer service, including by adapting it to the needs resulting from orders, complaints, complaints, requests – for the duration of the contract or until the completion of actions taken upon request prior to concluding the contract;
for marketing purposes, including profiling, i.e. to provide information about our promotions, products, including services, events, actions, including special offers – for the duration of the contract until its execution.
We may also process your data on the basis:
the consent you have given us for the purposes set out therein (including, for example, on the basis of your consent to the processing of your data after or before the execution of the contract for marketing purposes, including profiling).
until you withdraw your consent, and after you have withdrawn your consent – until the statute of limitations for your claims arising from actions we have taken on the basis thereof and our liability for accountability obligations and other obligations imposed by data protection law ceases, in order to establish, defend or pursue your claims, to produce compilations, analyses and statistics for our internal purposes, to ensure network and information security (i.e. for the fulfilment of our so-called legitimate interests – Article 6(1)(f) of the RODO) and to demonstrate compliance with accountability obligations and other obligations imposed by data protection law (i.e. for the fulfilment of legal obligations – Article 6(1)(f) of the RODO) to pursue our so-called legitimate interests – Article 6(1)(f) of the DPA) and to demonstrate compliance with accountability and other obligations imposed by data protection legislation (i.e. to fulfil a legal obligation – Article 6(1)(c) of the DPA).
Your permission to share your personal data is fully VOLUNTARY.
Their provision is not a statutory obligation, but may be a mere contractual obligation. Your personal data is, however, necessary in order to send you an offer, to answer your questions, to issue a VAT invoice, as well as to conclude and perform a contract, e.g. to place an order in the online shop and to deliver the goods concerned, or to set up an online account, or to send you a newsletter or commercial information, or to recognize and deal with your complaints, as well as to fulfill our obligations under the aforementioned titles.
We may also ask you for optional data that is needed so that we can, for example, call you on provided contact number.
We may pass your data to the following recipients:
our employees and associates who need access to your data to perform our obligations or activities for you;
entities processing your personal data on our behalf and participating in the performance of our activities, i.e:
to our subcontractors assisting in the execution of contracts, including orders and customer service, e.g. in the handling of correspondence or in the customer service process, including delivery, or to other entities acting as intermediaries in the sale of our products, services and to experts acting on our behalf;
advertising agencies or other entities that conduct or organise or cooperate with or facilitate our marketing activities, including advertising campaigns;
entities operating our ICT systems or providing ICT tools, including IT platforms or server or website space;
entities providing us with advisory, consultancy, auditing services, or with legal, tax, accounting assistance;
research agencies acting on our behalf;
other administrators being:
advertising agencies or entities that conduct or organise, or cooperate with or arrange for the conduct or organisation of, our marketing activities (including advertising campaigns) or customer service, including the operation of sales outlets, or other entities that act as intermediaries in the sale of our goods or services, in order to account for any remuneration due to them;
operators of freight forwarding or shipping services for the purpose of delivering freight;
entities running postal or courier services – in order to deliver correspondence or parcels;
insurance companies to insure freight shipments;
payment institutions (banks, payment institutions) for the purposes of refunds or the operation of direct debit services;
credit providers (banks) to provide credit for the purchase of our products and for refunds;
debt purchasers – in the event of non-payment of the purchase price for the purchased goods or the remuneration for the execution of the order on time or other amounts due to us.
We may use your data for automated decision-making, including profiling, in order to prepare special offers for you:
for the duration of the contract until it is executed, and
after or prior to the conclusion of the contract, on the basis of your separate consent.
The decision to send you an offer will be made automatically, based on criteria such as your gender, the number and frequency of requests for quotations received from you and the number and type of goods purchased.
Once you have established that you meet the above criteria, the IT system will automatically send you information about the special offer. You may take advantage of the offer according to the terms and conditions specified in the information received, resign from the offer and appeal against the decision. The appeal should be addressed to us via the email address: firstname.lastname@example.org.
I. You have the following rights in relation to our processing of your data:
1. The right of access to your personal data, including the right to be informed about your personal data and to obtain a copy of your personal data;
The right to rectify (amend) personal data if it is inaccurate and the right to complete incomplete data;
The right to erasure of personal data. If in your opinion there are no grounds for us to process your data, you can request that we delete it;
the right to restrict the processing of your personal data. You can request that we restrict the processing of your personal data only to the storage thereof or to the performance of activities agreed with you, if in your opinion we have incorrect data about you or are processing it unfoundedly or you do not want us to delete it because you need it to establish, assert or defend your claims, or for as long as you object to the processing;
right to portability of personal data. You have the right to receive from us in a structured, commonly used and machine-readable format (e.g. “csv” format) the personal data concerning you which you have provided to us on the basis of a contract or your consent. You may also instruct us to send this data directly to another entity, provided that this is technically possible.
the right to lodge a complaint with a data protection authority, i.e. the President of the Office for Personal Data Protection, in the event of any unlawful processing of your personal data;
The right to withdraw your consent to the processing of your personal data. You have the right to withdraw your consent at any time for those personal data that we process on the basis of your consent. Withdrawal of consent will not affect the lawfulness of the processing that was carried out on the basis of your consent before its withdrawal.
Your rights listed in point 1 above, you can implement in every time.
The right to object to:
our processing of your data for direct marketing purposes, including so-called profiling (i.e. you object to us providing you with information about our promotions, offers, products, including services, actions and events, including special offers), but once you have raised such an objection we will no longer be allowed to process your data for marketing purposes;
the processing of your personal data by us for purposes arising from the so-called legitimate interests pursued by us – for reasons related to your particular situation.You can exercise your rights mentioned in point 1 above at any time.
2) You can make the requests referred to above by submitting a written statement to us:
by letter: Przyczółkowa 350, 02-962 Warsaw
by e-mail: email@example.com
3) We are obliged to inform you about the action taken on your requests, without undue delay and in any case within one month of receipt of the request. If necessary, we may extend the period referred to in the preceding sentence by a further two months due to the complexity of the request or the number of requests.
4) However, within one month of receipt of your request, we must inform you of such an extension of the time limit, stating the reasons for it.
5) If we do not take action on your request, we shall inform you immediately – at the latest within one month of receipt of the request – of the reasons for not taking action and of the possibility for you to lodge a complaint with the President of the Office for Personal Data Protection and to avail of legal remedies before the Court.
6) If we have reasonable doubt about your identity in connection with a request, we may ask you to provide additional information necessary to confirm it.
7) We will provide you with the information referred to in clause 4 above in writing, at our option:
by registered mail to the address you have provided, or
electronically to the e-mail address you have provided, except if you provide us with your request electronically and do not request the information in another form, in which case we will provide the information to you at the e-mail address you have provided.
8) All communications and actions taken by us in relation to your requests are free of charge. However, if your requests are manifestly unfounded or excessive, e.g. due to a continuing nature, we may:
charge a reasonable fee, taking into account the administrative costs of providing the information, communication or taking the action requested; or
refuse to act on the request.
9) We will inform of the rectification or completion or erasure or restriction of the processing of your personal data that we have carried out in execution of your request, to any recipient to whom they have been disclosed by us. We will not have to provide such information only if this proves impossible (e.g. the company has been liquidated) or requires disproportionate effort (the data was disclosed very many years ago and it has not been possible to contact the recipient despite attempts).
10) Upon your request, we will inform you of the recipients to whom we have provided information about the rectification or erasure or restriction of the processing of your personal data, as well as the recipients we have failed to notify.
You can also contact us for further information on how we process and protect your personal data:
by letter: Przyczółkowa 350, 02-962 Warsaw
by e-mail: firstname.lastname@example.org
Cookies (so-called “cookies”) are IT data. In particular text files, which are stored in the Service User’s terminal equipment and are intended for use on the Service’s websites. Cookies usually contain the name of the website from which they come, the time of storing them on the terminal equipment and a unique number.
The operator of the Website is the entity placing cookies on the Website User’s terminal equipment and accessing them.
Cookies are used for the following purposes:
maintaining a session of the Service user (after logging in), thanks to which the user does not have to re-enter login and password on each subpage of the Service;
to achieve the objectives set out above under “Essential marketing techniques”;
There are two main types of cookies used on the Website: “session” (session cookies) and “permanent” (persistent cookies). Session” cookies are temporary files that are stored in the final device of the User until logging out, leaving the website or switching off software (web browser). “Permanent” cookies are stored in the User’s terminal equipment for the time specified in the parameters of cookies or until they are deleted by the User.
Web browsing software (internet browser) usually allows the storage of cookies in the User’s terminal equipment by default. Users of the Website may change their settings in this respect. Internet browser allows to delete cookies. It is also possible to block cookies automatically. Detailed information on this subject is contained in the help or documentation of the Internet browser.
Cookies placed in the Service User’s end device may also be used by entities cooperating with the Service Operator, in particular these companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).