1. General Information

  1. This policy applies to the website operating under the URL: www.dumarecycling.com
  2. The operator of the website and the Data Controller is: S. Duma Recycling Spółka Komandytowa, registered at: ul. Żarecka 24, 42-360 Masłońskie, Poland.
  3. Contact email address of the operator: info@dumarecycling.com
  4. S. Duma Recycling Spółka Komandytowa has appointed a Data Protection Officer (DPO), who can be contacted by phone at +48 501 872 590 or by email at info@dumarecycling.com
  5. We comply with personal data protection principles and all legal regulations as outlined in the Personal Data Protection Act and the General Data Protection Regulation (GDPR) (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC.
  6. Upon request from any person whose data is processed, we provide comprehensive information on how their personal data is used. We always strive to clearly inform about the data we collect, how we use it, for what purposes, to whom we disclose it, how we protect this data when transferred to third parties, and we provide contact details for institutions to reach out to in case of any doubts.
  7. The operator is the controller of your personal data in relation to data provided voluntarily via the website.
  8. The website gathers information about users and their behavior in the following ways:
    • Through data voluntarily entered into forms and submitted to the operator’s systems.
    • Through cookies saved on end-user devices.

2. Privacy Principles

  1. We respect your privacy and aim to ensure a convenient user experience with our services.
  2. We value the trust you place in us by providing your personal data to enable us to deliver our services. We always use personal data fairly and only to the extent necessary to fulfill these services, without compromising your trust.
  3. As a user, you have the right to clear and comprehensive information on how we use your personal data and the purposes for which it is processed. We clearly inform about the data we collect, how and to whom it is disclosed, and we provide contact information for parties to approach in case of doubts.
  4. If you have any concerns about how we use your personal data, we will immediately act to clarify and resolve those concerns. We provide exhaustive answers to all related questions.
  5. We take all reasonable steps to protect your data from misuse and unauthorized access.
  6. The legal basis for processing your personal data is:
    • Article 6(1)(a) — The data subject has given consent to the processing of their personal data for one or more specific purposes.
    • Article 6(1)(b) — Processing is necessary for the performance of a contract or to take steps prior to entering into a contract.
    • Article 6(1)(c) — Processing is necessary to comply with a legal obligation to which the controller is subject.
    • Article 6(1)(d) — Processing is necessary to protect the vital interests of the data subject or another natural person.
    • Article 6(1)(e) — Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
    • Article 6(1)(f) — Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
  7. Your personal data related to the conclusion and execution of contracts will be processed for the duration of the contract and for a period not exceeding the timeframes provided by law, including the Civil Code and the Accounting Act, i.e., no longer than 10 years from the end of the calendar year in which the last contract was performed.
  8. Your personal data processed for the purpose of concluding and executing future contracts will be processed until you object to such processing.
  9. You have the right to:
    • access your personal data and receive a copy,
    • correct or rectify your incorrect data,
    • request the deletion of your data (“right to be forgotten”) in circumstances outlined in Article 17 of the GDPR,
    • request restriction of data processing under conditions specified in Article 18 of the GDPR,
    • object to the processing of your data under circumstances specified in Article 21 of the GDPR,
    • request data portability for data processed in an automated manner.
  10. If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority: Personal Data Protection Office (Urząd Ochrony Danych Osobowych), ul. Stawki 2, Warsaw, Poland.
  11. For more information regarding data protection or to exercise your rights, please contact us by post using our correspondence address.
  12. We comply with all applicable laws and regulations regarding data protection and cooperate with data protection authorities and law enforcement agencies. In the absence of specific regulations, we follow generally accepted data protection principles, good practices, and established norms.
  13. For any questions, please contact us via the website from which you were redirected to this Privacy Policy. Your request will be forwarded to the appropriate designated person.
  14. To help us respond effectively, please provide your full name.

3. Scope and Purpose of Personal Data Collection

  1. We process only the personal data necessary to provide services and for accounting purposes.
  2. We collect, process, and store the following user data:
    • first name and surname,
    • home address,
    • mailing address (if different from home address),
    • tax identification number (NIP),
    • email address,
    • telephone number (mobile and/or landline),
    • information about the internet browser used,
    • any other personal data provided voluntarily.
  3. Providing this data is entirely voluntary but necessary for the full provision of our services.
  4. We may transfer personal data to servers located outside the country of residence or to affiliated entities and third parties located in other countries, both within and outside the EU (e.g., email services).
  5. During the processing of your data, the Administrator ensures the highest level of data security.

4. Cookies

  1. The website may use cookies, small text files stored on the user’s device, to customize the service to individual preferences and optimize its use. Cookies allow information about user preferences to be saved.
  2. The user can delete cookies from their device at any time or change browser settings to prevent new cookies from being saved.
  3. Cookies may be used for analyzing site activity, generating statistics, and studying user behavior to better tailor content to user needs.