Privacy Policy

Privacy Policy

 

By using our website and the services, features, and functionalities available on it, you entrust us with your information and data that allow the determination of personal data. In the context of individual services or functionalities, you may entrust them to entities with whom we cooperate directly or indirectly, primarily to ensure the highest quality of services for you, but also as part of marketing activities. The purpose of this Policy is to inform you about what data we collect, for what purpose, on what basis, and how we may use it. All the information contained in this Policy is significant for the protection of your rights and freedoms, so we encourage you to familiarize yourself with the contents of this document.

When processing your data, we rely on legal regulations, in particular, the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), as well as national law regulations, including the Act of 10 May 2018 on the protection of personal data.

 

Processed Data

 

We process data that you provide or leave when using our website. These are typically data necessary for contacting us or creating an account while using our services or functionalities, such as your name and email address provided through forms or windows available on our website. We also process data that you leave while navigating our website, including data left in so-called “cookie” files. We also process other data that you voluntarily provide in certain functionalities provided to you by us, such as data regarding preferences, hobbies, preferences, habits, address data, and detailed contact information. If you have any doubts about the scope of data collected, please refer to the information provided on each subpage, and you can always contact us with questions about the extent of processed data.

 

Personal Data Administrator

 

The administrator of your personal data is Folga Joint Stock Company with its registered office at ul. Grudziądzka 110-114/304, 87-100 Toruń, registered in the National Court Register under the KRS number: 0000766137, NIP: 9562344169, REGON: 382286256, email address: biuro@folga.com.pl, phone +48 59 725 71 89.

Your personal data will or may be transferred to the following entities processing data and providing services on our behalf:

  1. FRESHMAIL Sp. z o.o., KRS: 0000497051, NIP: 6751496393 – for the purpose of data storage on the server.

If your data is entrusted to other entities, we will promptly inform you about it via email, a message on the website, or a notification about changes to this Policy.

 

Data Protection Officer

 

We have appointed a Data Protection Officer whom you can contact for all matters related to the processing of personal data and the exercise of rights related to such processing. If you have any questions or concerns, you can use the contact information below:

Mailing address: Folga Joint Stock Company with its registered office at ul. Grudziądzka 110-114/304, 87-100 Toruń, with the note “DPO”

Email: iod@folga.com.pl

Purposes and Legal Bases for Processing

 

We process your data for the following purposes and in accordance with the following legal bases:

 

  1. To fulfill a contract in which you are a party, based on Article 6(1)(b) of the GDPR – necessity for the performance of a contract, until the expiration of the contract. Please note that in some cases, these data may also be processed after the contract has expired, but only if permitted or required by applicable law, such as processing related to the pursuit of claims, settlements, handling of complaints, and consumer rights enforcement, or for statistical purposes.
  2. For tax settlements and the fulfillment of other legal obligations, including reporting obligations, based on Article 6(1)(c) of the GDPR – necessity to comply with a legal obligation incumbent upon the data controller.
  3. If you provide additional consent, for direct marketing purposes, especially for sending information about products, promotions, services provided, and offers, and proposals to enter into a contract, and in this scope, for direct electronic contact via email, based on Article 6(1)(a) of the GDPR and Article 172 of the Act of July 16, 2004 – Telecommunications Law (as of September 15, 2017, Journal of Laws of 2017, item 1907, with subsequent amendments) – user’s voluntary consent, and Article 6(1)(f) of the GDPR – legitimate interests of the data controller solely for data retention purposes.
  4. For statistical measurements related to marketing, including data analysis and profiling for marketing purposes of our products and services or content customization based on your preferences through product or service suggestions, based on Article 6(1)(f) of the GDPR – legitimate interests of the data controller.
  5.  

Voluntary Provision of Data

 

Providing personal data is voluntary; however, please note that if you wish to contact us, failure to provide the data required in the form marked as essential will prevent us from responding to your inquiry and will make further communication impossible.

 

Data Recipients

 

Your data may be transferred to entities processing personal data on our behalf, in accordance with the above list. It’s important to note that these entities process data based on a contract with the Administrator and only in accordance with our instructions.

Furthermore, your data may also be disclosed to entities authorized to obtain them under applicable legal regulations, such as courts or law enforcement authorities, in case they submit a lawful request (e.g., for the purposes of criminal or civil proceedings).

In some cases, your data may be transferred to recipients in third countries, i.e., countries outside the European Economic Area (European Union + Iceland, Liechtenstein, and Norway), especially if it is necessary to provide services on your behalf or if it arises from another legal basis. Information about such necessity will be provided each time before placing an order, commencing service provision, or completing a contact form.

 

You have the right to:

 

  1. Access your data, obtain copies of the data, and the right to rectify them.
  2. Request the deletion of your personal data at any time.
  3. Request the limitation of the processing of your personal data.
  4. Object to further data processing.
  5. Data portability in a commonly used machine-readable format, e.g., for printing or saving to computer memory.
  6. Lodge a complaint with the President of the Office for Personal Data Protection if you believe that the processing of your personal data violates the law.

If your data is processed based on consent or in the execution of an order or provided service, you can additionally exercise the right to data portability in a commonly used machine-readable format, e.g., for printing or saving to computer memory. You can transmit this data to another data controller.

Please note that you have the right to withdraw your consent to processing at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You can exercise each of the above-mentioned rights by submitting a relevant written request to our address: Folga Joint Stock Company, located at ul. Grudziądzka 110-114/304, 87-100 Toruń, with the annotation “personal data,” or in electronic form by sending an email to iod@folga.com.pl or by using the contact form in the “Contact” tab, as well as by directing your request to the Data Protection Officer.

 

General Information Clause on the Processing of Personal Data

 

We hereby inform you that, in accordance with Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”),

  1. The Administrator of your personal data will be Folga Joint Stock Company, with its registered office at ul. Grudziądzka 110-114/304, 87-100 Toruń, registered in the National Court Register under KRS number: 0000766137, NIP: 9562344169, REGON: 382286256, email address: biuro@folga.com.pl, tel: +48 59 725 71 89, hereinafter referred to as the “Administrator”;
  2. We have appointed a Data Protection Officer, whom you can contact via email at: iod@folga.com.pl or by post to the Administrator’s address;
  3. Your personal data will be processed for the following purposes:
  1. To fulfill a contract in which you are a party, based on Article 6(1)(b) of the GDPR – necessity for the performance of a contract, until the expiration of the contract. Please note that in some cases, these data may also be processed after the contract has expired, but only if permitted or required by applicable law, such as processing related to the pursuit of claims, settlements, handling of complaints, and consumer rights enforcement. b. For tax settlements and the fulfillment of other legal obligations, including reporting obligations, based on Article 6(1)(c) of the GDPR – necessity to comply with a legal obligation incumbent upon the data controller. c. For direct phone or electronic contact related to the execution of concluded agreements, sales support, or order fulfillment, based on Article 6(1)(a) of the GDPR, based on your voluntary consent. d. To exercise your rights, update your data, maintain a customer database combining data from various systems and sources, based on Article 6(1)(f) of the GDPR, based on the legally justified interest of the Administrator. e. For archival (evidence) purposes and to secure information in case of a legal need to establish facts, potential investigations, or defense against claims, based on Article 6(1)(f) of the GDPR, based on the legally justified interest of the Administrator. f. For direct marketing, including sending information about products, promotions, services provided, and offers, and proposals to enter into a contract, including direct electronic contact via email or telephone contact at the provided phone number, based on Article 6(1)(a) of the GDPR, based on your voluntary consent.

Your personal data may also be disclosed or entrusted to our subcontractors, courier companies, intermediaries, or agents. If your data is entrusted to other entities, we will promptly inform you about it through written communication, electronic messages, telephone calls, or messages on our website.

  1. The Administrator informs that, in order to ensure the safety of persons and property on its premises, including the safety of its employees, it conducts video surveillance covering the premises located in Toruń at ul. Grudziądzka 110-114/304, Człuchów at ul. Przemysłowa 8, and Warsaw at ul. Bitwy Warszawskiej 1920 r. 23/U2. Relevant graphic and text information about the video surveillance is displayed at the entrances to the properties. By using our services or being on the premises of the aforementioned properties and the company, you simultaneously consent to the processing of personal data in the form of your image.
  2. The processing of personal data in the form of images is based on the legitimate interests of the Administrator, i.e., ensuring the safety of the company’s employees and customers, their property, as well as resolving disputes, pursuing claims, and handling complaints, based on Article 6(1)(f) of the GDPR – the legitimate interest of the Administrator.
  3. Personal data in the form of images will only be disclosed to entities authorized to obtain them under the law, such as law enforcement authorities, courts, or public administration authorities. Access to monitoring recordings is strictly limited and controlled.
  4. Video surveillance recordings will be stored until overwritten, but no longer than for a period of 3 (three) months.
  5. Your personal data will not be transferred to a third country (a country outside the European Economic Area) or to an international organization.
  6. Your personal data (excluding monitoring recordings) will be stored for a period of 10 years from the date of their transfer. After the expiry of the storage period, your personal data will be deleted from the Administrator’s IT systems, and paper documents will be destroyed.
  7. You have the right to access the content of your data and the right to rectify it.
  8. You have the right to request the erasure of your personal data at any time.
  9. You have the right to request the restriction of the processing of your personal data.
  10. You have the right to data portability in a commonly used machine-readable format, e.g., for printing or saving to computer memory.
  11. You have the right to object to further data processing.
  12. Each of the rights mentioned in points 8 to 12 can be exercised by sending a relevant written request to the Administrator’s address with the annotation “personal data,” or in electronic form by sending an email to iod@folga.com.pl.
  13. You have the right to withdraw your consent to data processing at any time without affecting the lawfulness of processing based on your consent before its withdrawal. A statement withdrawing consent to the processing of personal data can be submitted in writing, sent to the Administrator’s address with the annotation “personal data,” or in electronic form by sending an email to iod@folga.com.pl.
  14. You have the right to lodge a complaint with the President of the Office for Personal Data Protection if you believe that the processing of your personal data violates the provisions of the GDPR.
  15. Providing your personal data is entirely voluntary. However, if you do not provide data necessary to conclude a contract, we will not be able to provide services to you. Additionally, if you do not provide an email address or phone number, we will not be able to contact you by email or phone in connection with the execution of an agreement or in other cases related to service provision and marketing activities.