Privacy Policy

PRIVACY AND COOKIES POLICY

INTERNET SHOP

www.tridis.en

last updated 1.9.2023

§ 1. PERSONAL DATA CONTROLLER, DEFINITIONS, INTRODUCTORY INFORMATION

Notwithstanding any other definitions established in the body of this Privacy Policy, whenever the following terms are capitalized in the text of the Privacy Policy, they shall have the meaning ascribed to them below:

1. The Operator of the Internet Shop service and the Administrator of personal data of the Customers and the Users of the Internet Shop, hereinafter also referred to as Seller or Administrator, is:

TRIDIS LIMITED LIABILITY COMPANY LIMITED PARTNERSHIP based in Kurzętnik, 7A Sienkiewicza Street, 13-306 Kurzętnik, NIP: 1182120206, REGON: 363796199, entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0000604129.

Administrator's contact information:

Mailing address - 7A Sienkiewicza St., 13-306 Kurzętnik

E-mail address - e-mail: info@tridis.en

Phone number - +48 56 647 29 97.

2. Customer - a natural person with full legal capacity, a natural person who is a Consumer, a legal person or an organizational unit without legal personality, which is granted legal capacity by law, who concludes a distance sales agreement with the Seller (hereinafter referred to as "Sales Agreement"), which is also a User.
3. Account - set of data stored in the Online Store and in the Seller's ICT system concerning a given Customer and the Orders placed by him/her and the Sales Agreements concluded by him/her, with the use of which the Customer may place Orders, conclude Sales Agreements, place and publish Evaluations and other content to the extent and in the manner specified in the Regulations.
4. Newsletter - information, including commercial information within the meaning of the Act of 18 July 2002 on the provision of electronic services, originating from the Seller and sent to the Client/User electronically; receipt of the Newsletter is voluntary and requires the consent of the Client/User.
5. Privacy Policy - means this Privacy and Cookies Policy of the Online Store www.tridis.en available at www.tridis.en under the tab titled "Privacy Policy".
6. RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
7. Online Shop - internet service run by the Seller available at the address: www.tridis.en through which the User / Customer can obtain information about the products offered by the Seller and their availability, and make a selection and purchase of the product, as well as perform other activities covered by the functionality of the Online Store and provided for in the Regulations and this Privacy Policy.
8. Personal Data Protection Act - law of may 10, 2018. on personal data protection (t.j. OJ. U. of 2019. pos. 1781).
9. User - a natural person accessing the website(s) of the Online Store and/or using the services and functionality described in this Privacy Policy and the Online Store Terms and Conditions (hereinafter referred to as "Regulations").
10. The definitions contained in the Terms and Conditions shall apply to this Privacy Policy accordingly, unless certain expressions or phrases are directly defined herein otherwise.
11. Provision of personal data for the purposes of processing by the Administrator is voluntary, and consent to its processing may be withdrawn at any time.
12. Users' personal data are stored in a database, on the Administrator's servers or on servers belonging to the Administrator's service providers, using technical and organizational measures required by generally applicable law.
13. The administrator shall apply security measures to protect personal data from loss, misuse and modification.
14. This Privacy Policy does not include in its scope any information, advertising and content about goods and services provided by entities other than the Seller, which have been posted on the pages of the Online Store regardless of the basis and purpose of their posting. The User/Customer is advised to read the privacy policy of the relevant third party before using or taking any action in relation to the posted information and content.
15. The Administrator makes this Privacy Policy available through a link on the home page of the Online Store. You have the opportunity to review the Privacy Policy at any time of your choosing. The user can also download it and make a printout of it.

§ 2. PURPOSES, LEGAL BASIS AND DURATION OF PERSONAL DATA PROCESSING

1. The Administrator may process the following categories of personal data and information concerning Users:

1. information about the User's device in order to ensure the correctness of the provision of services: the IP address of the computer, the domain name, information contained in cookies or other similar technologies, session data, data and type of Internet browser, type of operating system, data about the device, data about activity on the website of the Internet Store, including on individual subpages;
2. geolocation information, if the User has consented to the Seller's access to the User's geolocation; geolocation information is used to provide more customized offers of Products and services provided by the Seller to the User;
3. users' personal data: name, surname, address of the registered office/residence, correspondence address, e-mail address, telephone number, taxpayer identification number, bank account number, payment details or other personal data which are necessary to register an Account, place an Order and complete a purchase, and which are required to be provided by the Seller in the purchasing process through appropriate electronic forms or established procedures of conduct.

2. Although not all of the information listed in § 2 para. 1 of the Privacy Policy may be considered as personal data of Users, as a result of the fact that, in combination with other information, they may obtain such qualification, the Administrator covers them with the full protection afforded to personal data under the RODO.
3. Personal data may be processed for the following purposes and on the following legal grounds:

1. in order to conclude and perform the agreement for the provision of Services by electronic means and the Sales Agreement (legal basis - art. 6(6). 1 litre. b RODO) - the purpose of processing personal data is to provide Services (by using the Online Store and agreeing to the provisions contained in the Terms and Conditions, the User enters into a contract with the Administrator for the provision of Services, consisting of enabling the use of the functionality of the Online Store), registration and use of the Account, placing and executing an Order, concluding and executing a Sales Agreement, accepting and handling inquiries made by the Users of the Online Store, taking certain actions at the request of the person to whom the personal data pertains, accepting objections and complaints and processing them, as well as supporting and executing payment processes; without providing the required personal data, the Seller is unable to provide certain Services to the User, and the User is unable to make full use of the Online Store;
2. in order to perform the legal obligations incumbent on the Administrator in connection with the concluded Sales Agreement (legal basis art. 6(6). 1 litre. c RODO in zw. with Article. 6(6). 1 litre. b RODO) - the purpose of processing personal data is to fulfill the Administrator's legal obligations related to the concluded Sales Agreement, in particular, to fulfill tax and accounting obligations, as well as rights and complaint obligations;
3. for the purpose of defending, asserting or establishing claims related to the agreement for the provision of Services by electronic means and the Sales Agreement, which constitutes the legitimate interest of the Administrator (legal basis Art. 6(6). 1 litre. f RODO) - The purpose of processing personal data is to secure information in case of a legal need to prove certain events, which is a legitimate interest of the Controller;
4. for marketing purposes, to inform about news in the Online Store, based on the consent of the data subject (legal basis Art. 6(6). 1 litre. a RODO) - the purpose of processing personal data is to provide marketing information, information about news and opportunities, also in an automated manner; the processing of personal data in the subject area takes place only on the basis of a separate consent expressed by the User for the processing of personal data, the use of cookies or other similar technologies, including geolocation, expressed by a statement made by the User in the process of registering an Account or submitting an Order electronically via the relevant functionalities of the Online Store, i.e. before concluding the contract for the provision of Services electronically and the Sales Agreement; the Administrator may use electronic communication tools for this purpose, such as the e-mail address provided by the User;
5. for direct marketing purposes (legal basis Art. 6(6). 1 litre. f RODO) - the purpose of offering products and services of the Administrator and the Administrator's partners, most often in the form of online advertising, selected according to the User's interests, which is the Administrator's and the Administrator's partners' legitimate interest;
6. for analytical purposes (legal basis Art. 6(6). 1 litre. f RODO) - and including - researching opinions of the Internet Store Users, contacting the Internet Store Users for analytical purposes; on the basis of analysis of the User's activity in the Internet Store, the Administrator is able to better select content and services and adjust them to the needs of the Users, develop statistics related to the use of the Internet Store, research satisfaction with the offered services and determine their quality, as well as take care of data security in the service, which constitutes the legitimate interest of the Administrator.

4. Personal data collected by the Administrator will be processed for no longer than necessary for the purposes for which the personal data were taken:

1. Personal data collected for the purpose of entering into and performing an agreement for the provision of Services by electronic means and entering into and performing a Sales Agreement will be stored and processed for the period of entering into and performing the respective agreement, and thereafter for the required data archiving period provided by law.
2. Personal data collected for the purpose of fulfilling the Administrator's legal obligations in connection with concluded contracts will be processed for the period necessary for the purposes of fulfilling the Administrator's legal obligations.
3. Personal data collected for the purpose of defending, asserting or establishing claims related to concluded contracts will be processed for the period of asserting, defending or establishing claims, but no longer than until the statute of limitations on claims.
4. Personal data collected for the purpose of handling inquiries made by the Users of the Internet Store will be processed for the period necessary to make contact with the User and settle the matter.
5. Dhe personal data collected for marketing, analytical and news reporting purposes will be processed for the duration of the marketing action or until you withdraw your consent to its processing or object to such processing.
6. Dhe personal data collected for the purpose of the Users' opinion poll will be processed for the duration of the poll and for the period of analysis of its results.
7. Dane personal data collected for purposes related to cookie technology - personal data will be processed until you withdraw your consent.
8. Dane personal data will also be processed until the expiration of the statutory periods of limitation of claims or the expiration of archiving obligations under applicable laws, in particular with regard to accounting, tax and financial documents.

5. The administrator will stop processing personal data that has been collected at on the basis of the legitimate interest of the Administrator, in each case when the person whose personal data is being processed objects to the processing of personal data and, moreover, when the consent on the basis of which the personal data was taken and is being processed is withdrawn, or the Administrator determines that the data is no longer valid.
6. Information and personal data about Users are obtained through voluntary entry of personal data and information into the systems of the Online Store via electronic forms available on its pages, as well as in an automated manner, through cookies stored in the final devices and through the collection of web server logs by the Website hosting operator (necessary for the proper operation of the Online Store).
7. A user may enter the website of the Online Store without registering and providing any personal data and browse the pages of the Online Store in such a mode, subject to the data which are collected automatically, which include, above all - IP address, domain name, type and type of browser, type of operating system, interests, age and gender of the user of the Service. The data in question is collected automatically mainly through cookies.
8. Although the provision of personal data is voluntary and the consent to their processing may be withdrawn at any time, in a situation where the provision of personal data is necessary due to an existing legal obligation or for the purpose of entering into and performing a contract for the provision of Services and/or a Sales Agreement and taking necessary actions prior to its conclusion, the User's failure to provide the required personal data may result in the impossibility of entering into and performing a contract for the provision of Services and/or a Sales Agreement.
9. Personal data may be subject to automated decision-making, including profiling for the purpose of providing services under the concluded contract and for direct marketing purposes. Profiling consists, in particular, in adjusting the display of content to Users' preferences based on their previous choices.
10. The user consents to the processing of personal data:

1. after entering the website of the Online Store by selecting the option "I agree, he wants to go to the site" from the available options in the cookie notice and Privacy Policy;
2. before placing an Order via the Online Store, by checking the appropriate checkbox.

§ 3. RECIPIENTS OF USER DATA

1. The Administrator may provide personal data to entities that process personal data on behalf of the Administrator, i.e. external entities that provide services to the Administrator, on the basis of agreements concluded for the entrustment of personal data processing in order to perform services for the Administrator and in accordance with the Administrator's instructions.

2. Users' personal data may be transferred to the following categories of entities that provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing meets the requirements of the RODO and the Personal Data Protection Act and protects the rights of data subjects:

1. Subcontractors - external companies providing services for the Administrator, in particular, such as: hosting, maintenance of servers, including email servers, maintenance of databases, transmission of automated information to Users, maintenance, diagnostic and repair work, marketing, analytics, accounting, provision of widgets to be placed on the website, provision of a helpdesk type system, provision of a store platform, creation and delivery of backups, courier services, postal services, services related to testing the quality of services provided, hosting, technical / IT support, marketing and PR services, legal and consulting services, insurance companies, payment services, banks, advertisers and similar entities, and, moreover, to the extent resulting from legal obligations, to public authorities. These entities are data recipients, processors acting on behalf of and at the direction of the Controller.

2. Payment intermediaries - when using paid services, personal data related to payments are transferred to payment operators and intermediaries. The administrator has access to the personal data submitted to the payment operator and the transactions carried out through it.

3. Advertisers - i.e. entities that, on the basis of information contained in cookies or other similar identifiers (if they contain personal data), participate in the process of selecting the content of advertisements that are displayed to Users on the Online Store. For more information on what cookies are and how they work, and how you can adjust your browser settings in this regard, see §7 of this Privacy Policy.

3. Personal data will not be processed in third countries.

§ 4. RIGHTS OF PERSONAL DATA SUBJECTS

1. Any person affected by the processed personal data has the right:

1. access (art. 15 mouth. 1 RODO) - obtain confirmation from the Administrator as to whether personal data concerning it is being processed. If personal data concerning a person is processed by the Administrator, he or she is entitled to access it and obtain the following information: about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the data have been or will be disclosed, the period for which the data are stored or the criteria for determining the period in question, the right of the data subject to request from the Administrator rectification, erasure or restriction of the processing of personal data and to object to such processing, information about the right to lodge a complaint with a supervisory authority, and in addition, if the personal data have not been collected from the data subject - any available information about their source, information about automated decision-making, including profiling;

2. to receive a copy of the data (art. 15 mouth. 3 RODO) - obtain a copy of the data being processed, with the first copy being free of charge, and for subsequent copies the Data Controller may impose a reasonable fee based on administrative costs;

3. to rectify data (art. 16 RODO) - request the rectification of personal data concerning a person that is incorrect, or the completion of incomplete data by providing an additional statement;

4. to delete data (art. 17 RODO) - request erasure of personal data concerning the data subject if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, the data subject has withdrawn the consent on which the processing is based and there is no other legal basis for the processing, the data subject objects to the processing and there are no overriding legitimate grounds for the processing, the personal data have been processed unlawfully, the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which the Controller is subject, unless the processing of the personal data is necessary for the establishment, investigation or defense of claims, or there are other circumstances listed in Article. 17(1). 3 RODO;

5. to restrict processing (art. 18 RODO) - request the restriction of the processing of personal data concerning a person when:

1. the data subject disputes the accuracy of the personal data - for a period that allows the Data Controller to verify the accuracy of the data,
2. processing is unlawful, and the data subject objects to the erasure of the data by requesting restriction of its use,
3. The controller no longer needs the data, but it is needed by the data subject to establish, assert or defend a claim,
4. the data subject has objected to the processing - until it is determined whether the legitimate grounds on the part of the Controller override the grounds of the data subject's objection;

6. to data portability (art. 20 RODO) - to receive in a structured, commonly used, machine-readable format personal data concerning the data subject that he or she has provided to the Controller, and to request that the data be sent to another controller if the data are processed on the basis of the data subject's consent or a contract with him or her, and if the data are processed by automated means;

7. to the objection (art. 21 RODO) - object to the processing of its personal data for the legitimate purposes of the Administrator, on grounds related to its particular situation, including profiling. In such a case, the controller shall not be entitled to process such personal data unless the controller demonstrates the existence of compelling legitimate grounds for the processing overriding the interests, rights and freedoms of the data subject, or grounds for establishing, asserting or defending claims. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling, to the extent that the processing is related to such direct marketing;

8. to withdraw consent at any time and without giving a reason, with the proviso that withdrawal of consent does not affect the legality of the processing that was carried out on the basis of consent before its withdrawal. Withdrawal of consent will result in the Administrator ceasing to process personal data for the purpose for which the consent was given;

9. lodge a complaint to the President of the Office for Personal Data Protection in any case in which the User recognizes that the Administrator, by its actions, has violated the regulations on personal data protection.

4. In order to exercise the aforementioned rights, the data subject should contact the Administrator, using the Administrator's contact information indicated in § 1(1) of the. 1 of this Privacy Policy and inform him/her of which right and to what extent he/she wishes to exercise it. Please note and bear in mind that the execution of the User's request will require confirmation of the User's identity, which may require additional activity on the part of the User.

§5. PRESIDENT OF THE OFFICE OF PERSONAL DATA PROTECTION

1. The subject of the processed personal data has the right to lodge a complaint to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection, based in Warsaw, who can be contacted as follows:

1. by mail: 2 Stawki Street, 00-193 Warsaw;
2. via the electronic mailbox available at: https://www.uodo.gov.en/en/p/contact;
3. by phone through the hotline, at 606-950-000.

2. You can read more about how to complain to the regulator on the website: https://uodo.gov.en/en/83/155.

§6. PRIVACY POLICY CHANGES

1. The contents of the Privacy Policy set forth herein are effective as of the date indicated on the first page of the Privacy Policy, under the title, in place of "last updated (...)".

2. The Privacy Policy may be supplemented or updated according to the current needs of the Administrator in order to provide current and reliable information to the Users of the Internet Store and take into account any factual and legal developments that have occurred. The current Privacy Policy is available to Customers / Users in the corresponding link in the Online Store.

§7. COOKIES

1. The Online Store performs the functions of obtaining information about Customers, Users and their behavior as follows:
1. through information entered voluntarily by the Customer / User into electronic forms made available by the Seller within the Online Store and for purposes resulting from the function of a specific form;
2. by means of cookies ("cookies") saved in the User's / Customer's terminal equipment - by using the website of the Online Store, the User / Customer accepts that cookies will be installed in the terminal equipment, which will enable the Seller to provide services;
3. through the collection of web server logs by the Internet Store's hosting operator (necessary for proper operation of the service).
2. Cookies are computer data, in particular text files, which are sent while browsing the website of the Internet Store and stored on the final device of the Customer / User and are intended for the use of the website of the Internet Store. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number.
3. The entity placing on the User's/Customer's end device of the Internet Shop cookies and accessing them is the Administrator. The legal basis for the processing of personal data derived from cookies is the Administrator's legitimate interests in ensuring high quality and security of services provided.
4. The Internet Shop uses cookies after the Customer/User of the Internet Shop has given his/her prior consent in this respect. Consent to the Online Store's use of all cookies is given by selecting the appropriate option from those available in the message regarding the Online Store's use of cookies, which is displayed when you first access the Online Store's website, by clicking on the button: "I agree, I want to go to the page", or by closing this message without selecting any available option (the two available options are: "I agree, it wants to go to the page" or "I do not agree").
5. If the Customer/User of the Online Store does not consent to the Online Store's use of cookies, he/she can use the option and check the button: "I do not consent", available in the message concerning the use of cookies by the Internet Shop, which is displayed after the first entry to the Internet Shop website, or make changes in the settings of the Internet browser, which is currently used (however, this may cause incorrect operation of the Internet Shop website).
6. The process of giving and withholding consent may vary depending on the web browser you are using. For details, refer to the help or documentation of your web browser. To manage your cookie settings, select your web browser/system from the list and follow the instructions: Internet Explorer, Chrome, Safari, Firefox, Opera, Android, Safari (iOS), Windows Phone.
7. There are two main types of cookies used within the Online Store: "session" (session cookies) and "permanent" (persistent cookies). "Session" cookies are temporary files that are stored on the User's terminal device until the User logs out, leaves the Online Store or shuts down the software (web browser). "Permanent" cookies are stored on the Client's/User's terminal device for the time specified in the parameters of the cookies or until they are deleted by the Client/User. In addition, we distinguish between our own files (coming directly from the Online Store) and external files (coming from a third party through the Online Store). In the latter case, it is advisable to read the privacy and cookie policy of the third party in question.
8. Cookies are used for the following purposes:
1. cookies remember the user's preferences, which allows to increase the quality of services provided and improve the relevance of search results;
2. creating statistics that help to understand how the Customers/Users of the Internet Shop use the websites, which allows to improve their structure and content;
3. maintain the Customer/User session (after logging in), so that the Customer/User does not have to re-enter the Login and Password on each sub-page of the Online Store;
4. determine the profile of the Customer/User in order to display product recommendations and tailored advertising materials to him/her, in particular the Google network.
9. Web browsing software (Internet browser) usually allows cookies to be stored on the Client/User's terminal device by default. Customers/Users can change their settings in this regard. Your web browser allows you to delete cookies. It is also possible to automatically block cookies through the appropriate settings of your web browser.
10. Cookies do not cause configuration changes in devices and software installed in the User's / Customer's devices.
11. Restrictions on the use of cookies may affect some of the functionality available on the web pages of the Online Store, and in some cases completely prevent the use of some of its functions and options.
12. Cookies placed on the Customer's/User's terminal device may also be used by advertisers cooperating with the Internet Shop and partners of the Internet Shop.
13. Cookies may be used by the Google network, to display advertisements tailored to the way the Customer / User uses the Online Store. For this purpose, they may retain information about the user's navigation path or the time they stayed on a particular page: https://policies.google.com/technologies/partner-sites.
14. The website uses statistical analysis of site traffic through Google Analytics (Google Inc. based in the USA). Google Analytics system, which automatically collects data about the User, is a web analytics system by means of which the Administrator obtains insight into the data traffic of the Online Store and the demographic data of Users, used for marketing purposes. It is recommended that you read the Google Analytics privacy policy to learn about the use of cookies used in statistics: Google Analytics privacy policy can be found at the link: https://policies.google.com/privacy?hl=en. In order to block Google Analytics, you must disable the use of cookies.
15. With regard to the information about the Client's / User's preferences collected by the Google advertising network, the Client / User can view and edit the information resulting from cookies using the tool: https://www.google.com/ads/preferences/.
16. The website of the Online Store has plug-ins that may transmit Customer/User data to administrators of portals such as: Facebook, Google, Instagram, LinkedIn, YouTube, Salesmanago, Gemius and others. The tool in question allows the designated portals to identify visitors to the Online Store as a target group, to whom ads with appropriate content can then be displayed. In order to avoid the transfer of the data in question to the indicated portals, you should avoid clicking on links that take you to the portals in question or log out of your account on the portal in question before clicking on the link. The processing of personal data by the above portals is carried out on the basis of the rules and policies applied by the above portals. The administrator recommends reading the documents in question before making the moves described in the preceding sentences.
17. In order to properly perform the Sales Agreement, the Administrator may share Customers/Users' data with courier companies.
18. In order to properly perform the Sales Agreement, the Administrator may share the Customers/Users' data with online payment systems.

§ 8. NEWSLETTER

1. The Customer/User may agree to receive commercial information electronically, by selecting the appropriate option in the registration form in the process of registering an Account in the Online Store, placing an Order or, at a later date, in the appropriate tab of the Online Store or through the appropriate functionalities of the Online Store. In the case of giving such consent, the Client/User will receive at the e-mail address provided by him/her commercial information concerning the Seller, the Online Store and the Products offered by the Seller (Newsletter), as well as other commercial information sent by the Seller.
2. The Customer/User may unsubscribe from the Newsletter at any time on his/her own by unchecking the appropriate box on his/her Account page, visiting the website and filling out the form https://tridis.yourtechnicaldomain.com/newsletter.php, by selecting the appropriate link located in the content of each Newsletter or by contacting the Seller through the data indicated in § 1 par. 1 Privacy Policy.

§ 9. SECURITY OF PERSONAL DATA PROCESSING

1. The Administrator shall apply security measures to protect personal data from loss, misuse and unauthorized modification.
2. Taking into account the state of the art, the nature, scope and purposes of the processing and the risk of violation of the rights or freedoms of natural persons with different probability of occurrence and severity, the Administrator shall implement appropriate technical and organizational measures to ensure a degree of security corresponding to the existing risk, in particular, it shall apply the measures listed below:

1. Minimize the required, collected and processed personal data;
2. Ability to continuously ensure the confidentiality, integrity, availability and resilience of processing systems and services;
3. Ability to quickly restore personal data availability and access in the event of a physical or technical incident;
4. Regularly test, measure and evaluate the effectiveness of technical and organizational measures to ensure processing security;
5. By default, only those personal data that are necessary to achieve each specific processing purpose are processed;
6. Collecting personal data for designated legitimate purposes and not subjecting it to further processing incompatible with those purposes;
7. Keeping personal data in a form that allows identification of the persons to whom it relates for no longer than necessary to achieve the purpose of processing;
8. Processing of personal data in a substantively correct and adequate manner in relation to the purposes for which they are processed;
9. Keeping records of persons authorized to process personal data. Persons who have been authorized to process data are obliged to maintain strict secrecy of personal data and ways of securing them;
10. Regular updating of all software used by the Administrator to process personal data, which in particular means regular updates of software components.