Privacy policy

This Privacy Policy (hereinafter: the „"Policy"”) provides information about the processing of your personal data in connection with the use of the online store „adsystem.”, operating at the web address: https://www.adsystem.pl/ (hereinafter: „Store”).
Any terms written in capital letters that are not otherwise defined in the Policy shall have the meanings assigned to them in the Terms and Conditions available at: Regulamin.
Personal Data Controller
The Data Controller for your personal data is Adsystem spółka z ograniczoną odpowiedzialnością, with its registered office in Bielany Wrocławskie (address: ul. Atramentowa 11, 55-040 Bielany Wrocławskie), registered in the National Court Register maintained by the District Court for Wrocław-Fabryczna in Wrocław, VI Economic Division of the National Court Register under number KRS: 0000229449, holding the NIP no.: 8942678597, National Business Register (REGON) No.: 93266059700000, with a share capital of PLN 58,500 (fifty-eight thousand five hundred zloty) fully paid (hereinafter: the „Controller”).
Contacting the Controller
In all matters related to the processing of personal data, you can contact the Controller via e-mail, at:office@adsystem.pl.
Data Protection Measures
The Controller employs modern organizational and technical safeguards to ensure the best possible protection of your personal data and guarantees that it processes data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: „GDPR”), the Act of May 10, 2018, on the Protection of Personal Data, and other data protection regulations.
Information on the Processing of Personal Data
Using the Store requires the processing of your personal data. Below, you will find detailed information about the purposes and legal bases for the processing, as well as the processing period and whether providing the data is mandatory or voluntary.

 

Processing purpose	Personal data processed	Legal basis
Conclusion and execution of the Agreement for the provision of the Account Service	Name and surname, e-mail address, phone number, data provided by the User on Facebook and Google in the event of the conclusion of an Agreement for the provision of the Account Service through these platforms	Art. 6(1)(h) of the GDPR (processing is necessary for the performance of the Agreement for the provision of the Account Service concluded with the data subject or for taking steps to conclude the Agreement)
Providing the aforementioned personal data is a condition for concluding and performing the Agreement for the provision of the Account Service (providing the data is voluntary, but failure to provide it will result in the inability to conclude and perform the aforementioned Agreement, including the creation of an Account). The Controller will process the aforementioned personal data until the expiration of claims arising from the Agreement for the provision of the Account Service.
Processing purpose	Personal data processed	Legal basis
Conclusion and execution of the Sales Agreement	Name and surname, e-mail address, phone number, Residential/business address (street, house number, apartment number, city, postal code, country), Delivery address (if different from the residential/business address), Optionally – company and NIP (if the Buyer is an Entrepreneur or an Entrepreneur with Consumer rights)	Art. 6(1)(h) of the GDPR (processing is necessary for the performance of the Sales Agreement concluded with the data subject or for taking steps to conclude the Agreement)
Providing the aforementioned personal data is a condition for concluding and performing the Sales Agreement (providing the data is voluntary, but failure to do so will result in the inability to conclude and perform the Sales Agreement). The Controller will process the aforementioned personal data until the expiration of claims arising from the Sales Agreement.
Processing purpose	Personal data processed	Legal basis
Conclusion and execution of the Newsletter Delivery Agreement	1) first name, 2) e-mail address	Art. 6(1)(h) of the GDPR (processing is necessary for the performance of the Newsletter Delivery Agreement concluded with the data subject or for taking steps to conclude the Agreement) and Art. 6(1)(f) of the GDPR (The processing is necessary to pursue the Controller's legitimate interest, in this case, informing about news and promotions available in the Store.)
Providing the aforementioned personal data is voluntary but necessary to receive the Newsletter (the consequence of not providing the data will be the inability to receive the Newsletter). The Controller will process the aforementioned personal data until a valid objection is raised, the processing purpose is achieved, or until the expiration of claims arising from the Newsletter Delivery Agreement (whichever occurs first).
Processing purpose	Personal data processed	Legal basis
Conducting the complaint procedure	Name and surname, e-mail address, mailing address (in the case of submitting a complaint via traditional mail)	Art. 6(1)(c) GDPR (processing is necessary to fulfill the legal obligation of the Controller, in this case the obligations of: providing a response to the complaint – Article 7a of the Consumer Rights Act; fulfilling the Customer's rights under the provisions concerning the Controller's liability in case of non-compliance of the physical Goods with the Sales Agreement or the digital Product with the relevant Agreement)
Providing the aforementioned personal data is a condition for receiving a response to the complaint or for fulfilling the Customer's rights under the provisions regarding the Controller's liability in case of non-compliance of the physical Goods with the Sales Agreement or the digital Product with the relevant Agreement (the data provision is voluntary, but the consequence of not providing it will be the inability to receive a response to the complaint or to exercise the aforementioned rights). The Controller will process the aforementioned personal data for the duration of the complaint procedure, and in the case of exercising the aforementioned Customer rights, until the expiration of claims.
Processing purpose	Personal data processed	Legal basis
Conducting verification procedures and reviewing appeals regarding decisions on the handling of prohibited content	Name/company name, Contact information, including email address	Art. 6(1)(c) GDPR (processing is necessary to fulfill the legal obligation of the Controller, in this case the obligations of: ensuring a mechanism for reporting prohibited content (Article 16 of Regulation 2022/2065 on a Single Market for Digital Services and amending Directive 2000/31/EC (Digital Services Act, hereinafter: the „DSA”), handling complaints (Article 20 of the DSA).
Providing the aforementioned personal data is a condition for receiving a response to the report or exercising the User's rights under the DSA (providing this data is voluntary, but the consequence of not providing it will be the inability to receive a response to the report or exercise the aforementioned rights). The Controller will process the aforementioned personal data for the duration of the complaint procedure, and in the case of exercising the aforementioned User rights, until the expiration of claims.
Processing purpose	Personal data processed	Legal basis
Sending e-mail notifications	e-mail address	Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case, informing Clients about actions related to the execution of Agreements concluded with Clients)
Providing the aforementioned personal data is voluntary but necessary for receiving information about actions related to the execution of Agreements concluded with Clients (the consequence of not providing this data will be the inability to receive the aforementioned information). The Controller will process the aforementioned personal data until an effective objection is raised or the purpose of processing is achieved (whichever of these events occurs first).
Processing purpose	Personal data processed	Legal basis
Handling inquiries submitted by Clients	First name, e-mail address, other data included in the message to the Controller	Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case, to respond to the received inquiry)
Providing the aforementioned personal data is voluntary but necessary to receive a response to the inquiry (the consequence of not providing this data will be the inability to receive a response). The Controller will process the aforementioned personal data until an effective objection is raised or the purpose of processing is achieved (whichever of these events occurs first).
Processing purpose	Personal data processed	Legal basis
Sharing Reviews of Goods	e-mail address, optionally – other data included in the Review	Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case, to make the reviews available for informational and promotional purposes)
Providing the aforementioned personal data is voluntary but necessary to submit a review (the consequence of not providing this data will be the inability to submit the review). The Controller will process the aforementioned personal data until an effective objection is raised or the purpose of processing is achieved (whichever of these events occurs first).
Processing purpose	Personal data processed	Legal basis
Informing Customers about the Availability of Previously Unavailable Goods	e-mail address	Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case, informing customers about the availability of previously unavailable Goods)
Providing the aforementioned personal data is voluntary but necessary to receive a notification about the availability of previously unavailable goods (the consequence of not providing this data will be the inability to receive such a notification). The Controller will process the aforementioned personal data until an effective objection is raised or the purpose of processing is achieved (whichever of these events occurs first).
Processing purpose	Personal data processed	Legal basis
Fulfillment of Tax Obligations (including issuing VAT invoices, storing accounting documentation)	name and surname / company, residential address/registered office, Taxpayer Identification Number (NIP)	Art. 6(1)(c) GDPR (processing is necessary for compliance with a legal obligation to which the Controller is subject, in this case, obligations arising from tax law)
Providing the aforementioned personal data is voluntary but necessary for the Controller to fulfill its tax obligations (the consequence of not providing this data will be the inability for the Controller to meet these obligations). The Controller will process the aforementioned personal data for a period of 5 years from the end of the year in which the deadline for payment of the tax for the previous year expired.
Processing purpose	Personal data processed	Legal basis
Fulfillment of Obligations Related to Personal Data Protection	Name and surname, contact details provided by you (email address, correspondence address, phone number)	Art. 6(1)(c) GDPR (processing is necessary for compliance with a legal obligation to which the Controller is subject, in this case, obligations arising from personal data protection regulations)
Providing the aforementioned personal data is voluntary but necessary for the Controller to properly fulfill obligations arising from personal data protection regulations, including exercising the rights granted to you by the GDPR (the consequence of not providing this data will be the inability to properly exercise these rights). The Controller will process the aforementioned personal data until the expiration of the limitation periods for claims related to breaches of personal data protection regulations.
Processing purpose	Personal data processed	Legal basis
Establishment, Pursuit, or Defense Against Claims	name and surname / company, e-mail address, residential address/registered office, PESEL number (Tax ID), Taxpayer Identification Number (NIP)	Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case, the establishment, pursuit, or defense of claims that may arise in connection with the performance of Agreements concluded with the Controller).
Providing the aforementioned personal data is voluntary but necessary for the establishment, pursuit, or defense against claims that may arise in connection with the performance of Agreements concluded with the Controller (the consequence of not providing this data will be the inability for the Controller to undertake such actions). The Controller will process the aforementioned personal data until the expiration of the limitation periods for claims that may arise in connection with the performance of Agreements concluded with the Controller.
Processing purpose	Personal data processed	Legal basis
Analysis of Your Activity in the Store	date and time of visit, IP address of the device, type of device operating system, approximate location, type of internet browser, time spent in the Store, viewed Goods, visited subpages, and other actions taken within the Store.	Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case, obtaining information about your activity in the Store).
Providing the aforementioned personal data is voluntary but necessary for the Controller to obtain information about your activity in the Store (the consequence of not providing this data will be the inability for the Controller to obtain the above information). The Controller will process the aforementioned personal data until a valid objection is made or the processing purpose is achieved, whichever occurs first.
Processing purpose	Personal data processed	Legal basis
Administration of the Store	IP address, server date and time, information about the internet browser, information about the operating system These data are automatically recorded in server logs each time the Store is used (administering the Store without server logs and automatic recording would not be possible). .	Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case, ensuring the proper functioning of the Store).
Providing the aforementioned personal data is voluntary but necessary to ensure the proper functioning of the Store (the consequence of not providing this data will be the inability to ensure the Store's proper operation). The Controller will process the aforementioned personal data until a valid objection is made or the processing purpose is achieved, whichever occurs first.