This document describes the privacy and cookie policy. It defines the principles, methods of processing, and use of data and information from customers and users of the website.

Please read this policy carefully. By accessing or using this website and submitting any personal data to us, you agree to the terms of this privacy policy.

We process your personal data based on applicable law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”) and the Personal Data Protection Act of 10 May 2018 (“Act”).

I. Personal data administrator

The Controller of your personal data is Fabryka Opakowań Foliowych ROSSOPLAST D. i R. Rossochaccy Spółka Jawna with its registered office in Lidzbark Warmiński (11-100) at ul. Dantyszka 19, entered into the register of entrepreneurs of the National Court Register by the District Court in Olsztyn, 8th Commercial Division of the National Court Register under the KRS number 0000073077, Tax Identification Number (NIP) 7430005765, National Business Registry Number (REGON) 510050167 (Controller).

II. Contact with the Administrator

Correspondence address: ul. Dantyszka 19, 11-100 Lidzbark Warmiński

Phone: +48 (89) 767 05 00 wew. 44

e-mail: siedlikowska@rossoplast.pl

III. Principles of personal data protection

1. We take special care to ensure that all personal data is processed in accordance with the purpose for which it was collected and used in accordance with the scope of granted permissions (consents) and the areas of processing permitted by law.
2. We ensure that personal data is processed in accordance with the principles of substantive correctness and appropriate to the purposes for which it was collected.
3. We process data for the period necessary to achieve the purposes for which they were collected, and additionally for the period for which we are obliged to do so under generally applicable law.
4. We ensure the confidentiality, integrity and accountability of the personal data we process.
5. The personal data we process will be transferred to third parties only when necessary to perform a contract or take other actions at your request, based on a statutory obligation, our legitimate interest, or if you have previously given us your consent. Recipients of your personal data may include our authorized employees and associates, as well as external service providers, IT system providers, entities providing IT, accounting, legal, advisory, analytical, and marketing services, postal operators and couriers, electronic payment system operators and banks for payment processing, and authorities authorized to receive personal data under applicable law.
6. The processed personal data are not transferred to countries outside the European Union and the European Economic Area or to international organisations.

IV. Methods of obtaining data

Personal data is obtained through:

1. forms completed online – information is collected through forms available on our website, used for contact purposes, submitting questions and expressing comments;
2. contact without the use of the Internet – the website contains various telephone and fax numbers and email addresses where you can contact us;
3. when using the resources of the website https://esfom.pl – information about users is collected via files such as “cookies” or “web beacons”.
   
   • Cookies are small text files called “cookies,” sent by our website and stored on the user’s end device (computer, laptop, smartphone). We use them to tailor content and services to the individual needs and interests of the Administrator’s website users, to understand how users use our website, and to continually improve our website, making it even more user-friendly and better tailored to user needs. Users can disable cookies in their browser at any time; however, such a change may result in the loss of the ability to use the Administrator’s website.
   • Web beacons are electronic graphic elements (also known as web bugs, clear gifs, or trackers) that allow us to count users who have visited our website by clicking on an advertisement for our products and services from a third-party website. Web beacons collect limited information, including a cookie number, the time and date of the page access, and a description of the page on which the web beacon is located. Our websites do not contain web beacons placed by other advertisers, but we use third-party services to collect this data for us. Because web beacons are used in conjunction with cookies, you can disable them by disabling cookies or changing your browser’s cookie settings.

V. For what purposes is the data we collect used?

1. Personal data is used:

• for the purposes of providing services and delivering products ordered by customers and related activities (e.g. submitting complaints) – i.e. pursuant to Article 6(1)(b) of the GDPR,
• legal obligations incumbent on the Controller – i.e. pursuant to Article 6(1)(c) of the GDPR.

2. If appropriate consent is obtained, the data are also used for the purposes of direct marketing of the Controller’s products and services pursuant to Article 6 paragraph 1 letter a) of the GDPR.

VI. Information security and storage

The Administrator ensures the security of personal data through appropriate technical and organizational measures aimed at preventing unlawful processing of data and their accidental loss, destruction and damage.

VII. User rights

1. Providing personal data to the extent necessary for the delivery of products and services offered by the Administrator is mandatory, and in the remaining scope it is voluntary.
2. The Administrator respects the rights of every person whose data is processed: access to data, rectification of data, erasure of data, restriction of processing, data portability, the right not to be subject to a decision which is based solely on automated processing, including profiling, and produces legal effects for that person or otherwise significantly affects him/her.
3. If processing is based on the consent of the data subject, that person has the right to withdraw consent at any time, provided that this does not affect the lawfulness of processing based on consent before its withdrawal.
4. The person whose data we process may exercise their rights by sending a letter to the Controller in which they present their demands.
5. The person whose data we process has the right to lodge a complaint with the supervisory authority if they believe that their rights have been violated.

VIII. Changes to the privacy policy

The Administrator reserves the right to change this privacy policy. Changes to the privacy policy may be affected by changes in the personal data protection legislation, as well as other factors. Customers and users will be promptly notified of any changes on the Administrator’s website.