EPS Design
Privacy Policy
This document describes the Privacy Policy of EPS Design S.A. with its registered office in Gdańsk (address: ul. Do Studzienki 63, 80-227 Gdańsk), entered into the register of entrepreneurs of the National Court Register, maintained by the District Court of Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register under KRS number: 0000876130, NIP: 9571129737 and REGON: 387885300, hereinafter referred to as the “Company”. Its purpose is to define the principles, method of processing and use of data and information from users of the website administered by the Company, including those contacting the Company through the contact indicated therein, and also contains information on the rights of natural persons in relation to the personal data provided by them. Please read the content of this policy carefully. By accessing or using this site, sending us any personal data or contacting us using the telephone number or email address provided on the Company website, you accept the terms of this Privacy Policy. Please note that by leaving the Company website (e.g. by going to a page on another domain using a link), you are entering an area where this Privacy Policy does not apply. The Company is not responsible for the privacy policies of websites operated by other entities.
The Company is the Administrator of personal data provided by users on the Company’s website: https://epsdesign.pl/
The Company takes special care to ensure that all personal data is processed in accordance with the purpose for which it was collected and used in accordance with the premises and categories of data processed permitted by law.
In all matters related to data protection and the processing of personal data from users of the website administered by the Company, as well as those contacting the Company via the telephone number or e-mail address indicated on the Company’s website, you can contact us via e-mail: biuro@epsdesign.pl or in writing at the Company’s address indicated in point 1.1. of the General Provisions.
The Company ensures the security of personal data through appropriate technical and organizational measures aimed at preventing unlawful processing of data and their accidental loss, destruction and damage. The Company’s website and the contact form on the Company’s website are encrypted.
The Company takes special care to ensure that personal information is processed in accordance with the principles of personal data processing specified in the GDPR, i.e.:
processed in accordance with the law, reliably and in a transparent manner for the data subject (principle of lawfulness, reliability and transparency);collected for specific, explicit and legally justified purposes and not further processed in a manner inconsistent with these purposes (principle of purpose limitation);
adequate, relevant and limited to what is necessary for the purposes for which they are processed (principle of data minimization);
correct and, where necessary, updated; personal data that are incorrect in light of the purposes of their processing will be immediately deleted or corrected (principle of accuracy);
stored in a form which enables the identification of the data subject for no longer than is necessary for the purposes for which the data is processed (processing limitation principle); processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organisational measures (integrity and confidentiality principle).
The Company collects personal data when:
a user of the website administered by the Company contacts the Company via a contact form;
the data subject contacts the Company via the telephone number provided on the website;
the data subject contacts the Company via the email address provided on the website.
The purpose of data processing by the Administrator results from actions taken by users of the website administered by the Company, as well as those who contact the Company via the telephone number or email address provided on the Company’s website.
The purposes and legal bases for collecting personal data in such cases are:
in the case of a contact form or contact via email address, personal data will be processed for the purpose of one-off contact in the indicated form with the data subject in connection with the submitted request, e.g. presentation of an offer, provision of information – legal basis: art. 6 sec. 1 lit. f GDPR (providing responses to notifications and inquiries sent using the contact form or in another form, including storing important requests and answers provided in order to maintain the principle of accountability);
in the case of telephone contact and recording of conversations during which personal data may be transferred, these data will be processed in order to enable contact with the data subject in connection with the reported demand, e.g. presenting an offer, providing information – legal basis: art. 6 sec. 1 lit. f GDPR (providing responses to notifications and inquiries sent using the contact form or in another form, including storing important requests and answers provided in order to maintain the principle of accountability);
in the case of simultaneous consent to receive marketing communications, personal data will be used to present information about the Company’s products and services; providing data and expressing such consent is voluntary, however, failure to provide them will prevent you from receiving marketing communications – legal basis: art. 6 sec. 1 lit. a GDPR (conducting marketing activities promoting the conducted activity using e-mail addresses and telephone numbers),
in the event of concluding an agreement with the Company, personal data will be used for the purposes of its implementation – legal basis: art. 6 sec. 1 letter b GDPR.
The Company examines whether personal data processed by it is not processed for a period longer than necessary for the purposes for which the data is processed.
Personal data processed on the basis of the consent granted will be processed until it is withdrawn or the purpose for which the data was collected ceases to exist. The consent granted may be withdrawn at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Data provided using the contact form or during telephone contact, via e-mail, will be processed for the duration of the reported request, e.g. presentation of an offer, provision of information, but no longer than 2 years in order to maintain the principle of accountability.
Data processed in connection with the presentation of an offer, provision of a service, conclusion and implementation of a contract, will be processed in accordance with applicable regulations, but no longer than until the expiry of the period in which the Company or the data subject may pursue claims related to it.
Data processed for the purpose of direct marketing will be processed until the consent is withdrawn or an objection is filed.