This privacy policy (hereinafter: “Privacy Policy”) sets out the rules for the collection, processing and use of personal data collected from you in connection with the use of the Website, the Contact Form and the Order Form. The Privacy Policy also contains information on your rights in relation to the processing of your data.

1. Definitions

Whenever the following capitalised phrases are used in the following section of the Privacy Policy, they are to be understood in the sense given below:

• Administrator – Paged Meble Sp. z o.o. with its seat in Jasienica, ul. Cieszyńska 99, 43-385 Jasienica, entered into the register of entrepreneurs kept by the District Court in Bielsko-Biała, 8th Economic Division of the National Court Register under the KRS number: 0000277900, holding NIP: 5732425575 and REGON: 15159470, contact details: tel. 48 33 497 24 00, e-mail jasienica@paged.pl;
• User – any person using the Website, the Contact Form or the Order Form;
• Website – internet domain paged.uk, of which Paged Meble Sp. z o.o. is the administrator;
• Contact form – service provided electronically, available on the Website (under the “Contact” tab), the object of which is to enable the User to send a message to the Administrator;
• Order Form – a service provided electronically, available on the Website (under the ‘Outlet’ tab), the object of which is the desire to order post-auction products offered by Paged Meble Sp. z o.o.;
• RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

2. Data Protection Officer

The Administrator declares that at Paged Meble Sp. z o.o. a Data Protection Officer has been appointed (hereinafter: “IODO“). The person acting as IODO can be contacted by e-mail:iod_meble@paged.pl

3. Legal grounds for processing personal data

The User’s personal data is processed by the Administrator in order to provide the services of the Contact Form and the Order Form. The provision of data is voluntary, but necessary for the use of the above services.

Personal data is processed on the basis of the consent given by the User (pursuant to Article 6(1)(b) of the DPA), for the purposes of the Administrator’s legitimate interests (pursuant to Article 6(1)(f) of the DPA) and in cases where the law authorises the Administrator to process personal data.

4. Period of processing of personal data

Your personal data will be processed for the period necessary to fulfil the indicated purposes of the processing; however, no longer than until you withdraw your consent or object to the processing.

5. Recipients of the data

In the process of fulfilling the purpose of processing, the User’s personal data may be made available to other recipients or categories of recipients of personal data. Recipients of the aforementioned data may be processors performing processing activities on behalf of the Controller on the basis of a personal data processing entrustment agreement.

6. Rights of data subjects

The Administrator limits the collection and use of information about Users to the minimum required to provide services to them at the desired level. The Administrator applies technical and organisational measures to ensure respect for the privacy and protection of the Users’ personal data.

The user to whom the personal data relates has the right:

• Request information from the Controller about the processing of his/her personal data, i.e. confirmation as to whether the personal data of the data subject are being processed. If data about a person is processed, he or she is entitled to access it, to obtain a copy of it and to be informed of the following: the purposes of the processing, the categories of personal data, information about the recipients or categories of recipients to whom the data have been or will be disclosed, the period for which the data have been or will be stored or the criteria for determining them, the person’s rights in relation to the processing of his or her personal data, the possibility of lodging a complaint with a supervisory authority, the source of the personal data if not obtained directly from the data subject, and profiling and automated decision-making (the so-called “right of access”). right of access, Article 15 RODO);
• To rectify personal data concerning that person. If a person becomes aware that his or her personal data processed by the Controller is inaccurate, outdated or incomplete, he or she has the right to request that it be rectified or completed without delay (the so-called right to rectification, Article 16 RODO);
• Request the erasure of his/her personal data, whereby if the person has given his/her consent to the processing of personal data, the request for erasure will have the same effect as the withdrawal of consent (the so-called right to be forgotten, Article 17 RODO);
• Request the restriction of the processing of personal data (the so-called right to restrict processing, Article 18 RODO), i.e. request the cessation of processing except for storage, in situations where:
  1. The data subject questions the accuracy of the personal data – for the period during which the Administrator will verify the accuracy of the personal data;
  2. The data subject challenges the lawfulness of the processing of personal data by the Service Provider;
  3. The service provider no longer needs this data, but it is needed by the data subject to establish, assert or defend his or her claims;
  4. The data subject has objected to the processing – until the Administrator decides on the legitimacy of the objection;
• Object to the processing of its personal data for the legitimate purposes of the Service Provider;
• Transfer his/her personal data, receive in a structured, commonly used machine-readable format the personal data he/she has provided to the Controller, if the processing is based on consent, or request that the data be sent to another controller designated by the data subject (so-called data portability, Article 20 RODO).

In order to exercise the aforementioned rights, the data subject should send an e-mail to the contact details provided at the beginning of the Privacy Policy indicating which right they wish to exercise, to what extent and in what manner. Please provide your contact details to enable prompt contact at the stage of exercising the requester’s right, in particular if there is a need to ascertain the identity of the requester or to ascertain which right or to what extent the person wishes to exercise it (preferably a telephone number, but this is not obligatory).

7. Possibility of withdrawing consent

In cases where the processing of the User’s data is based on the consent given, the User has the right to withdraw this consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

In situations where your data has been processed on the basis of consent, withdrawal of consent prevents you from continuing to use the services offered by the Administrator (i.e. the Contact Form and the Application Form).

8. Data processing outside the EU

The controller declares that it will not transfer the entrusted personal data outside the territory of the European Union, unless it obtains in advance the written consent of the data subject and ensures the fulfilment of all obligations under the RODO regarding the transfer of personal data to third countries.

9. Right to lodge a complaint with a supervisory authority

If the processing of data by the Administrator has occurred in violation of the applicable legislation, the User has the possibility to lodge a complaint with the President of the Personal Data Protection Authority.

10. Cookie policy

Cookies are files stored on the device (computer, smartphone, tablet) on which the web browser is installed, with which the user browses websites.

In order to improve the functionality of the Website, the Administrator declares that it uses several types of cookies:

• cookies necessary for the proper functioning of the website. Some cookies are necessary to ensure that the User can make full use of the website and the functions it offers. For example, if the User wants to compare the parameters of two products, the Administrator uses cookies to remember the product being compared. At that time, the User can find the second product to compare on the website;
• cookies verifying visits. These are cookies which remember the User’s visits to the Website, the sub-pages and the links which the User has clicked on. They make it possible to personalise certain content and adapt it to the User’s individual preferences.

The cookies used by the Administrator do not store any personal data of the User. The User’s identity is not revealed through cookies.

The information collected by the Administrator shall not be made available to entities or persons other than those authorised under generally applicable laws and those authorised to administer the Websites.

In any case, the User can block the installation of cookies or delete permanent cookies using the relevant options of his/her Internet browser. In the event of problems, it is recommended to consult the help file of your browser or to contact the manufacturer of your browser.

Any User who does not agree to the use of cookies is obliged to modify the settings of his/her Internet browser. Configuration of the User’s system to allow the use of cookies means consent to the storage by the Administrator of the information referred to in Article 173(2) of the Act of 16 July 2004. – Telecommunications Law.

Cookies from third-party websites may also be stored on the User’s device, in particular: Facebook, Google, Twitter. Information on cookies from these websites can be found on the websites belonging to these entities.

11. Contact Form and Order Form

The Website contains a Contact Form and an Order Form, enabling any User to send a message to the Administrator. In order to use the Contact Form or the Order Form, you must:

1. fill in the field “Subject of the message” and “Body of the message” indicating respectively the title and the body of the message addressed to the Administrator;
2. fill in the “e-mail address” field, indicating the e-mail address to which the Administrator’s reply will be sent;
3. agree to the Administrator’s processing of the personal data provided by the User, by ticking the box containing the relevant consent clause.
4. What data is collected when using the Contact Form and Order Form?

Each time the Contact Form or Order Form service is used, an e-mail address is collected. Providing an e-mail address will enable the Administrator to respond to the User’s message. However, the User may provide additional information in the Contact Form (Order Form), such as: name, surname, telephone number, company name, mailing address. Providing the above data is voluntary and depends on the User’s will.

13. Profiling

The Administrator performs the functions of obtaining information about Users and their behaviour in the following ways:

• through the information voluntarily entered in the form (use of the Contact Form service and the Order Form);
• by collecting cookies.

The data provided by the User shall only be processed in accordance with the purpose for which the User has given his/her consent.

A User who is a natural person shall have the right to object to being subjected to the profiling mechanism at any time. The Administrator declares that it has the technical tools to enable the User who is a natural person to object.

14. Final provisions

The Administrator reserves the right to make changes to the Privacy Policy, which may be influenced by developments in Internet technology, possible changes in the law on the protection of personal data. Users will be informed of any changes in a visible and understandable manner.

If you are in doubt about any of the provisions of the Privacy Policy, please contact the Administrator at the addresses set out in the Privacy Policy.