TABLE OF CONTENTS:

1. Introduction – contact details
2. Personal data protection law regulations
3. Principles relating to the processing of your personal data
4. Users' rights in relation to the processing of personal data
5. Personal data security
6. How we process your data
7. Consent – withdrawal of consent
8. Storage of personal data
9. Making data available to other entities
10. Cookies
11. Changes in Policy
12. Copyright
13. Price lists

1. Introduction – contact details

   This Privacy Policy provides general information on the use (processing) by FAE Famed Łódź S.A. of personal data of existing and potential Customers, including website visitors.

   We respect the privacy of our Users and we provide this Privacy Policy to ensure that each User is aware of the extent to which their personal data is processed, including the ability to decide whether to use our services.

   This Privacy Policy describes in general terms how and to what extent we collect your personal data, for what purposes we use it, who we share it with and how we protect the data. The Privacy Policy also includes information about the Users' rights.

   The policy is of a general nature and selectively presents only certain issues. This Policy is further specified in the respective terms and conditions and the information clauses that the User will receive at the time of collecting personal data from them in connection with particular services, subscriptions (newsletter), contact forms, competitions, promotions, events, etc. Any rights of the data subjects and the principles of processing of the data are founded on the General Data Protection Regulation (GDPR) specified below.

   Contact details:

   FAE Famed Łódź S.A. with its registered office in Łódź (93-231) ul. Dostawcza 3D, entered into the Register of Entrepreneurs kept by the District Court for Łódź-Śródmieście in Łódź, 20th Division of the National Court Register, under KRS number 0000038333, with share capital of PLN 1,560,000 fully paid up, NIP (Tax Identification Number) 7240002634, Regon (National Business Registry Number) 000035582.

   Contact details of the FAE FAMED ŁÓDŹ S.A. Data Protection Officer :

   E-mail: iod@famed.lodz.pl
   
   Address:
   FAE Famed Łódź S.A.
   93-231 Łódź, ul. Dostawcza 3D.

2. Personal data protection law regulations

   The Privacy Policy refers to the following personal data protection regulations:

   • the Act of 29 August 1997 on the Protection of Personal Data (Journal of Laws of 2016, item 922) (in force until 25 May 2018)
   • Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 11) "GDPR" (in force as of 25.05.2018 with new national law)

3. Principles relating to processing of your personal data

   We value the trust that Users have placed in us. We attach great importance to processing your personal data in a secure, reliable, lawful and transparent manner.

   Below we present the most important principles that we follow:

   • We collect personal data only to the minimum extent necessary for the purposes for which it is collected.
   • The purposes of collecting Users' personal data are clearly defined and founded in the law – we do not process data in a manner inconsistent with the purposes.  
   • We ensure that the Users' personal data is up to date and accurate and we respond immediately to any request to rectify or update the data. 
   • We exercise the right of Users to access and rectify their personal data.
   • We also exercise Users' rights to erase the personal data, to withdraw consent, to limit the processing, to transfer the data, to object to the processing of data, the right not to be subject to decisions based solely on automated processing, including profiling.
   • We limit the storage of personal data in accordance with the law to the period necessary for the purposes for which it is collected, unless there are events that may extend the storage period.
   • We protect your personal data against loss, access by unauthorised parties, accidental loss or alteration and other unlawful forms of processing.
   • If personal data is made available to other entities, that takes place in a secure, contractually secured manner and in accordance with the applicable law.
4. Users' rights in relation to the processing of personal data

   We exercise Users' rights related to the processing of their personal data. These rights result from the applicable laws regarding personal data, in particular the GDPR (Articles 16-21).

   As User, you have the following rights:

   • Right to withdraw your consent to the processing of the personal data at any time (see point VII below)
   • Right of access: you have the right to obtain confirmation from us whether your personal data are being processed and how.  
   • Right to rectify outdated or inaccurate personal data, as well as the right to complete it if it is incomplete.
   • Right to object to the processing of your personal data if we process personal data on the grounds of our legitimate interest (e.g. analytical, evidential, archiving purposes), then, in the event of your objection, we will have to stop processing your data unless we demonstrate a compelling legitimate ground for the processing, which objectively overrides your disadvantage or constitutes a defence of our legal claims (e.g. in court proceedings). The right to object also applies if the processing includes direct marketing, including profiling, based on our legitimate interest, e.g. in connection with cookie-based profiling. In this event, the processing of personal data for this purpose shall be discontinued immediately.
   • Right to erasure of your personal data ("right to be forgotten") includes requiring the controller to immediately erase your personal data.
   • Right to restrict the processing of your personal data, which means that the access to your data for users may be temporarily blocked or the data may be transferred to another system.
   • Right to data portability: you have the right to receive a copy of your personal data that you have provided to us if the processing is based on your consent or on an agreement, and by automated means.
   • Right to lodge a complaint with the supervisory authority – the Inspector General for the Protection of Personal Data (then the President of the Personal Data Protection Office).

   Any requests regarding the processing of personal data, including your rights, can be sent by e-mail to: iod@famed.lodz.pl, or in writing to FAE Famed Łódź S.A. 93-231 Łódź, ul. Dostawcza 3D. For the request for withdrawal of consent see also point VII below.

   Your requests will be met without undue delay, not later than one month after receipt. This time limit may be extended by a further two months due to the complexity of the request or the number of requests, of which we will inform you. However, until your request is processed, we may provide you with information that you decided you didn't want by withdrawing your consent.

    

5. Personal data security

   We take technical and organisational measures to protect personal data against unlawful or unauthorised access or use, as well as against accidental destruction, loss or damage to its integrity. The principle of ensuring security has been guiding us during the design of IT infrastructure, standards and business practice. Our safety procedures include in particular: access protection, backup system, monitoring, review and maintenance, security incident management.

   To ensure the security of the processed personal data, we undertake to take into account:

   a) confidentiality – we will protect the data against accidental disclosure to third parties,
   b) integrity – we will protect data against unauthorised alteration,
   c) accessibility – we will provide access to your data by authorised persons if required.

   Your personal data may be processed by third parties only if the entity undertakes to provide appropriate technical and organisational measures to ensure the security of the processing of personal data, as well as to maintain the confidentiality of the data.  Each employee of FAE Famed Łódź S.A. who has access to personal data holds appropriate authorisation and is obliged to maintain confidentiality.

    

6. How we process your data?

   For what purpose and on what basis we process your data?

   We only process your personal data for specified, explicit and lawful purposes. We will not process your data in a way inconsistent with these purposes.

   We will inform you about the purpose and legal grounds for the processing of your personal data each time by means of a separate communication, e.g. on the website, in writing, etc., as part of our information obligation.

   Method of data collection

   Your personal data may be obtained from many sources, including, on the basis of your consent, from companies within FAE Famed Łódź S.A., from our websites in the form of e.g. contact forms, social media, helplines.  Independently, in connection with your use of our websites which also collect data from system logs (more details in point XII).

   What data can we process?

   The personal data referred to in this document may include your identification data, e.g. name, surname, contact details: e.g. phone number, e-mail address, location data, data concerning Your orders, requests, complaints. Each time we will determine and process only the necessary scope of data. If you provide contact data, you only need to provide us with one of the two available contact details: phone number or e-mail address.

   On our different websites, we may collect a variety of personal data, the provision of which is voluntary, although often necessary to process your order or enquiry. If you do not wish to provide data via web forms, you may always contact our employees in person.

    

7. Consent – withdrawal of consent

   With respect to the relationship with you, including the services offered through the website, you may be asked to consent to the processing of your personal data for marketing purposes, including electronic marketing, if the consent may constitute an appropriate legal ground for the processing of your personal data. The consent is not required when it is not necessary for a particular situation (although the obligation to obtain consent may result from other laws, such as consent for telephone or electronic marketing).

   Withdrawal of consent does not result in any adverse consequences or inconvenience – however, you must be aware that as a result of withdrawing consent, you may not be able to use services such as, for example, receiving a newsletter or receiving invitations to events for which we are required by law to obtain your consent.

   Please note that the withdrawal of consent does not affect the lawfulness of the processing of your data which was carried out on the basis of your consent before it was withdrawn.

   Your request will be processed without delay. Once the request has been processed, we will stop processing your data for marketing purposes, including the purpose of providing marketing and commercial information electronically and over the telephone. However, until your request is processed, we may provide you with information that you decided you didn't want by withdrawing your consent. If we possess your data for other purposes (e.g. contract performance, service provision, demonstration of evidence, the assertion of claims), we may continue to process it for these purposes on another legal basis.

    

8. Storage of personal data

   We store personal data for the period of time necessary for the purposes of which you have been informed. The period of storage of personal data is determined in strict compliance with the applicable laws. You have the right to obtain information on a possible storage period of your personal data.

    

9. Making data available to other entities

   With your consent, in accordance with the purpose of data processing and the content of your consent, your personal data may be made available to entities indicated in your consent.

   We may make your data available to processors – companies providing services on our behalf, to which we will commission activities requiring data processing, in particular with regard to IT services, marketing services (e.g. advertising agencies).

   With regard to the marketing purpose, the recipients of your personal data as a processor may be companies within the GK Organika or entities acting on our behalf. 

   We indicate that if the recipients of the data will collect personal data from the User independently and on their own behalf and e.g. offer products and services through their own channels, they constitute separate data controllers, and in this respect they shall be responsible for processing such personal data without being subject to the terms of our Policy.

    

10. Cookies

    In relation to your use of our websites we also collect data from system logs. We use it primarily for technical purposes related to the administration of our servers. Furthermore, we use this information for the collection of statistical demographic information. The statistics enable us, above all, to analyse the use of functionalities provided by the websites. The system logs collect information about IP addresses (network interface number), however, this data does not allow us to uniquely identify the User (indicating a specific person using a computer or another Internet-connected device).

    Cookies

    Cookies are small text information, sent by the portal and saved on the User's computer (or another device they use). We do not use cookies to collect personal information such as your name or e-mail address.

    The portal uses cookies to identify the User's personal preferences. This means that the cookies used by the websites allow the User's computer to be recognized during the next visit to the portal and are only meant to facilitate the use of the portal. 

    Profiling

    The processing of your personal data may include profiling:

    1. a) based on the User's consent – to match offers of products and services according to the needs of a given User (including the use of automated processes, consisting in the compilation of your data within the scope of the given consent, derived from various sources and a profile assigned on this basis, the consequence of which is to select and present you with advertisements or offers matching your profile;
       b) without consent, based on our legitimate interest in the processing of cookies, to customize the content and marketing messages displayed on our websites and on other websites you visit, based on data such as visits to and clicks on particular website functionalities, login and registration dates, data on the use of particular services on our websites.

    
    Banner advertisement

    We use the data collected during the User's visit to our websites to display the so-called banner advertisement (advertising). This advertisement usually uses cookies or pixels. Our objective is to develop an advertising offer that will be attractive and beneficial to the User, therefore as part of a banner advertisement, the User may view primarily the products they have already viewed on our website or products similar to those they have previously viewed on other websites (so-called retargeting). Within the banner advertisement, we do not use personal data that would directly indicate a particular User within the banner advertisement.

     

11. Changes in Policy

    We reserve the right to amend this policy, which may result from the need to comply with changes in law regulations or applicable privacy standards, or the extension of our offer. Therefore, we will inform you of any changes by means of a communication on our websites.

12. Copyright

    All rights to the website www.famed.pl, including all its graphic elements, photographs and page layout of the website and any other elements are reserved. All its elements are protected by law, in particular the Act of 4 February 1994 on Copyright and Related Rights (consolidated text of Journal of Laws of 2017, item 880, as amended), the Act of 16 April 1993 on Combating Unfair Competition (consolidated text of Journal of Laws of 2018, item 419) and the Act of 27 July 2001 on Protection of Databases (Journal of Laws of 2001 No. 128, item 1402, as amended).

13. Price lists

    Price lists and other information included on www.famed.pl do not constitute a commercial offer. Due to the promotional campaigns, it is possible to change the prices of the products presented on the websites and in the price lists.