Privacy Policy

PRIVACY POLICY APPHURT.PL

The controller of personal data is:

ASATO Sp. z o.o., ul. Głogowska 82 /22, 60-741 Poznań, entered in the register of entrepreneurs of the National Court Register (registry files kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań, 8th Commercial Division - National Court Register), share capital 5000.00 PLN, KRS 0000993134, NIP 7792544540, REGON 523179876;

correspondence address: Online wholesale apphurt.pl, ASATO Sp. z o.o., ul. Firmowa 8, 62-023 Robakowo | e-mail: zamowienia@apphurt.pl

Data sources

We received your personal data from you when placing an order and registering a Customer Account (if you registered), as well as later, in connection with contact with our Store's Customer Service Office and in connection with updates to your data made by you on the Customer Account. Data regarding the status of your shipments and payments to the Store may be received directly from the carrier/payment operator.

Purposes of data processing

Customer Account: If you decide to create a Customer Account in our Store, we require you to provide the following personal data so that your Customer Account can be created (i.e., so that we can conclude and execute an agreement with you regarding the creation and maintenance of the Customer Account): company data (name, company address and NIP), first and last name of the person authorized to represent the company, as well as e-mail address and phone. If you do not provide this personal data, the Customer Account cannot be created. Providing additional personal data is voluntary - on the Customer Account you can additionally provide, among others, another delivery address. Data provided on the Customer Account can then be used by you (after logging in) in the course of placing orders in our Store, which usually speeds up the order placement process.

Order fulfillment: In order to place an order in our Store and its fulfillment, we require you to provide the following personal data so that the order can be placed and fulfilled: company data (name, company address and NIP), first and last name of the person authorized to represent the company, as well as e-mail address and phone. If you do not provide this personal data, the order cannot be placed and fulfilled (i.e., the sales contract cannot be concluded or fulfilled with us). Providing additional personal data is voluntary - you can additionally provide, among others, another delivery address. We use the provided personal data only for the purpose of fulfilling the order placed by you, enabling you to make payment for the order, delivery and sending you notifications about the status of order fulfillment and delivery.

Customer Service: If you contact our Customer Service Office (BOK), we require you to provide at least the following personal data so that we can respond to your request/inquiry (and possibly fulfill it), such as: company data (name, company address and NIP), first and last name of the person authorized to represent the company, as well as e-mail address and phone. If your request/inquiry concerns a specific order, it will also be necessary to provide data identifying your order (e.g., order number). If it is necessary to provide a response to your request/inquiry (and their possible fulfillment), we may additionally require you to provide other necessary data to provide a response to your request/inquiry (and their possible fulfillment). If you do not provide this personal data, providing a response to your request/inquiry (and their possible fulfillment) will not be possible. Providing additional personal data is voluntary.

Contact form: If you want to contact us using the contact form available on our website, we require you to provide at least the following personal data so that you can send a request/inquiry and we can respond to it (and possibly fulfill it), such as: company data (name, company address and NIP), first and last name of the person authorized to represent the company, as well as e-mail address and phone. If your request/inquiry concerns a specific order, it will also be necessary to provide data identifying your order (e.g., order number). If it is necessary to provide a response to your request/inquiry (and their possible fulfillment), we may additionally require you to provide other necessary data to provide a response to your request/inquiry (and their possible fulfillment). If you do not provide this personal data, providing a response to your request/inquiry (and their possible fulfillment) will not be possible. Providing additional personal data is voluntary.

Complaint, withdrawal from contract: If you file a complaint or make a return as part of the statutory right to withdraw from the contract, we require you to provide at least the following personal data so that we can carry out the complaint/withdrawal from contract process (i.e., exercise the rights you have from the contract concluded with us): company data (name, company address and NIP), first and last name of the person authorized to represent the company, and in the case of Customers who are not consumers or Entrepreneurs with consumer rights also an e-mail address, and data identifying your order (e.g., order number, invoice, etc.). If you do not provide this personal data, carrying out the complaint/withdrawal from contract process will not be possible. Providing additional personal data is voluntary.

Issuing invoices: If tax regulations require it or you request that we issue an invoice/nominal receipt/note, we process your personal data for the purpose of issuing such an invoice/nominal receipt/note. For this purpose, we require you to provide at least the following personal data: company data (name, company address and NIP). In addition, in the case of entrepreneurs, it is necessary to provide the NIP already when placing the order. If you do not provide this personal data, issuing an invoice/nominal receipt/note will not be possible. Providing additional personal data is voluntary.

Opinions about the Store: If you consent to this, the Store enables you to complete an anonymous survey on the Store's website and/or express your opinion about the Store on an external portal (e.g., Opineo, Ceneo). In such a case, you will receive an e-mail message with information on how to complete the survey/express an opinion at the e-mail address provided in the order. Providing additional personal data (including all data in the survey/opinion) is voluntary.

Contests, promotional campaigns: From time to time, contests/promotional campaigns are organized in the Store. Personal data of contest/promotional campaign participants (e.g., data necessary for contact) are used to conduct the contest/promotional campaign (e.g., notification of winning/sending a discount code). The data whose provision we require from you in order to participate in the contest/promotional campaign are indicated each time in the regulations/rules of the given contest/promotional campaign. If you do not provide this personal data, it will not be possible for you to participate in the contest/promotional campaign (including it will not be possible to receive a prize in the contest/obtain benefits as part of the promotional campaign). Providing additional personal data is voluntary.

Newsletter: If you subscribe to our newsletter, you will receive messages from us containing information about the Store's offer (including promotions, sales, etc., which constitute commercial information), as well as events, contests and advertising campaigns, etc., organized by the Store or in which the Store participates. For this purpose, we require you to provide personal data in the form of an e-mail address and/or phone. If you do not provide this data, it will not be possible to subscribe and receive messages from you as part of the newsletter. You can provide only e-mail (then you will receive the newsletter from us by email) or only phone (then you will receive the newsletter from us by SMS) or both of these data (you will receive the newsletter from us by email and SMS).

Data collected by the website and mobile devices: When it is necessary to provide a service to Store Customers or constitutes a legitimate interest of the Store or third parties (which is, for example, ensuring the security of IT resources, ensuring the security of other Store Customers. Direct marketing, including profiling, etc.), the Store is authorized to automatically obtain and record data transmitted to the server by web browsers or devices of Customers using the Store's website/mobile application. Such data may include, for example, cookies, IP address (i.e., the address that the device of a Customer using the Store's website/mobile application has), parameters of software and hardware used by the Customer (thanks to which we can improve, for example, the quality of services we provide), viewed pages, mobile device identification number, information about application use and other data regarding devices and system use. Collection of the above information will occur when using the Store's website/mobile application.

Processing of the above data may include profiling. Profiling does not increase the number of displayed ads/sent commercial information, but only makes them more tailored to your needs. Thanks to profiling, based on collected data from devices, such as opened product pages in our online store, saved cookies files, as well as personal data provided to us, the ads displayed to you and sent commercial information (if you have given separate consent to receive them) will be more tailored to your needs. Most browsers used accept cookies by default. You can set the browser to be able to reject requests to store cookies at all or selected cookies. This can be done through browser settings. Before you decide to change the default settings, however, remember that many cookies help improve the convenience of using the site. Disabling cookies may affect how our site will display in your browser, some functionalities on our site, and may cause problems with logging into the Customer Account. To exercise the right to object granted by GDPR, it is necessary to log out of all devices and delete cookies files from them. The update process may take up to 48 hours. More information about cookies can be found in the Cookie Policy.

If legal provisions require it, we may require you to provide other necessary data, e.g., for accounting or tax reasons.

We do not make any automated decisions about you (decisions without human involvement).

Legal bases for data processing

Performance of the contract concluded with you [Article 6 paragraph 1 letter b GDPR], which applies in particular to:

order fulfillment,
Customer Account service,
newsletter service,
contests/promotional campaigns in which you participate.

Expression of your consent to the processing of your personal data [Article 6 paragraph 1 letter a GDPR], which applies in particular to:

newsletter,
contests/promotional campaigns in which you participate,
saving data in cookies files and collecting data from websites and mobile applications,
displaying content tailored to your location,
tailoring offers and services according to your previous activity;
giving an individual character to your Account settings or data that you share with the Store when logging into the Store through an external service (e.g., Facebook),

Remember that you can withdraw your consent to the processing of personal data at any time in the same way you expressed it. We will process your personal data until you withdraw your consent.

Fulfillment by the Store (as controller) of obligations arising from legal provisions, which includes processing for tax and accounting purposes

[Article 6 paragraph 1 letter c GDPR in connection with tax and accounting provisions]

Legitimate interest of the Store (as controller) [Article 6 paragraph 1 letter f GDPR], which includes in particular:

matching ads and content according to previously viewed content, tailoring offers in Store settings or settings of external entities' services based on your activity in the Store (profiling),
conducting direct marketing of own services and/or goods and services and/or goods of third parties,
contacting Customers for purposes related to permitted marketing activities, through available and permissible communication channels,
ensuring payment services to the extent necessary to connect with the payment operator's system,
ensuring the security of services we provide electronically and preventing fraud and abuse and ensuring traffic security;
conducting surveys, research and Store analyses (among others, in terms of functioning, improving the operation of available services or estimating the main interests and needs of visitors),
monitoring Customer activity and managing traffic in the Store,
handling Customer requests/inquiries (submitted, among others, to the customer service office and through the contact form on the Store's website, when they are not directly related to the performance of the contract concluded with the Customer),
defense/assertion of claims, debt collection, conducting court, arbitration and mediation proceedings.
conducting statistical analyses,
storing data for archival purposes,
ensuring accountability, i.e., the ability to demonstrate that personal data is processed in accordance with the law, fairly and in a transparent manner for the person whose data concerns, the purpose of data processing is clearly defined, processed data is adequate, relevant and limited only to the purposes of their processing, personal data is correct and updated if necessary, personal data is processed in a manner ensuring appropriate security and that data storage is limited to the strict minimum necessary to achieve the purposes for which it is processed.

Disclosure of personal data

We do not sell your data or share it commercially with other third parties. We transfer your personal data to the necessary extent only to our partners who help us fulfill your order or other services we provide to you in our Store – electronic payment operators, companies providing courier, accounting, legal, IT services for us, etc. We conclude appropriate data processing agreements with all entities to whom we entrust the processing of your personal data, so that your data is always safe, and we maintain a register of these entities.

Below you can familiarize yourself with the categories of recipients to whom your data will be disclosed:

Our Employees: Employees/associates whom we have authorized to process specific personal data have access to your data. Payment operators: If you make a purchase in our online store, your data necessary to make a given payment (including to inform about the payment status), which you provide in the course of making payment after being redirected to the page of the given payment operator, will be received by the payment operator you selected, offering its financial services through the Store. The payment operator is an external entity and an independent Controller of your personal data (in the scope regarding the execution and handling of payment transactions), where the data processing process and execution of payment transaction takes place according to the principles applicable at that operator (you can familiarize yourself with them in the course of making payment after being redirected to the page of the given payment operator). The Store receives from the payment operator your personal data regarding payment for the order (especially payment status)

Couriers: If you make a purchase in our Store, your data necessary to deliver the shipment to you (including informing about the shipment status) will be received by the courier company/Polish Post you selected.

IT and technical service providers: Companies that provide IT and technical services for us, necessary for the proper operation and development of our website, IT systems and hardware/technical infrastructure, may gain access to your data.

Marketing service providers: Companies that provide marketing services for us, including in the scope of electronically sending our commercial information (e.g., newsletter), profiling and researching customer satisfaction levels, may gain access to appropriate data (taking into account consents granted by Customers).

Other service providers: Companies that provide other services necessary for our operation and development (e.g., accounting, legal, debt collection, advisory, etc.) may gain access to your data.

Place of personal data storage

Collected personal data is stored primarily within the European Economic Area (EEA), but sometimes it may also be sent to countries outside this area and processed there. Each operation of transferring personal data is performed in accordance with applicable law, in particular GDPR. If data is transferred outside the EEA, to countries for which the European Commission has not established an adequate level of data protection, we transfer it only to entities belonging to the Privacy Shield program or having another appropriate certificate, or complying with an appropriate code of conduct, or we make transfers using standard contractual clauses.

Your personal data may be transferred outside the European Economic Area to, among others:

Google LLC based in Mountain View, USA and Google Ireland Limited based in Dublin, Ireland. For statistical and administrative purposes and in connection with the use of personal data processing services offered by this entity, aimed at ensuring the provision of services by the Store and to ensure security.

Data retention period

Data is stored for the period necessary to achieve processing purposes, and after that time for the period and to the extent specified by generally applicable law (taking into account, among others, the length of limitation periods for claims [Article 118 of the Civil Code] and a reasonable time after their expiration, as well as tax regulations). In the case of ongoing proceedings before a court/authority regarding claims/taxes, etc., data may be processed longer - until the final conclusion of these proceedings and for a reasonable period after their expiration.

Your rights

Right of access to data: At any time you have the right to access your data. To exercise this right, contact us through the Customer Service Office or - if you have a Customer Account - you can check your personal data on your account page.

Right to correct data: You have the right to request correction of your personal data when it is incorrect. To exercise this right, contact us through the Customer Service Office or - if you have a Customer Account - you can correct your personal data on your account page.

Right to delete data: You have the right to request deletion of data if:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed, · if you have withdrawn your consent to the processing of personal data and there is no other legal basis for the processing of this data by the Store, · you have objected to the processing of your data for purposes arising from legitimate interests pursued by the controller or by a third party, · personal data is processed unlawfully, · personal data must be deleted in order to fulfill a legal obligation provided for in Union law or the law of a member state to which the Store is subject, · personal data was collected in connection with offering information society services to a child.

In such a case, the Store is obliged to delete your personal data without undue delay, unless one of the exceptions specified by legal provisions occurs. To exercise this right, contact us through the Customer Service Office or - if you have a Customer Account - you can delete some personal data on your account page.

Right to restrict data processing: You have the right to request that the Store restrict the processing of your personal data in situations where: · you contest the accuracy of personal data - for a period allowing the Store to verify the accuracy of this data, · data processing by the Store is unlawful (when you prefer the Store to restrict the use of your data instead of deleting it), · the Store no longer needs personal data for processing purposes, but you need it to establish, assert or defend claims, · you object to the processing of your data for purposes arising from legitimate interests pursued by the controller or by a third party - until it is determined whether the legally justified grounds on the part of the controller are superior to the grounds of your objection. To exercise this right, contact us through the Customer Service Office.

If processing has been restricted, your personal data can be processed (except for storage) only with your consent or if there is a reason for further such processing specified in the regulations.

Right to object to data processing based on the legitimate interest of the Store: You have the right to submit - for reasons related to your particular situation - your objection to the processing by the Store of your personal data due to the legitimate interest of the Store (including profiling). In such a case, the Store will stop processing your personal data, unless there are important and legally justified grounds for processing, superior to the reasons for objection, or it is necessary to assert or defend claims. To exercise this right, contact us through the Customer Service Office.

Right to object to data processing for direct marketing purposes, including profiling: You also have the right to submit your objection to the processing by the Store of your data for direct marketing purposes, including for profiling purposes. To exercise this right, contact us through the Customer Service Office. Profiling does not increase the number of displayed ads/sent commercial information, but only makes them more tailored to your needs. Thanks to profiling, based on collected data from devices, such as opened product pages in our online store, saved cookies files, as well as personal data provided to us, the ads displayed to you and sent commercial information (if you have given separate consent to receive them) will be more useful. We do not make any automated decisions about you (decisions without human involvement).

Right to withdraw consent to data processing: Regarding data processed by us based on your consent, you have the right to withdraw consent to the processing of personal data at any time (however, withdrawal of consent does not work retroactively). To exercise this right, contact us through the Customer Service Office.

Right to data portability: Regarding data processed by us in an automated manner based on your consent or in performance of the contract concluded with you, you have the right to data portability, i.e., you have the right to receive a copy of your data in a structured, commonly used and machine-readable format. This copy can be sent to you or to another entity. To exercise this right, contact us through the Customer Service Office.

Right to lodge a complaint with the supervisory authority: If you believe that the Store processes your personal data improperly, contact us through the Customer Service Office. You also have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office in case the processing by us of your personal data violates provisions regarding the protection of personal data.