ALUMASTER POLSKA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ WITH ITS REGISTERED OFFICE IN TORUŃ) is entered in the Register of Entrepreneurs kept by the District Court in Toruń, 7th Commercial Division of the National Court Register, under KRS number 0000311086, has a share capital of PLN 170,000.00, uses the following numbers: NIP 879-256-78-72 and Regon 340470745, and is referred to in this PRIVACY POLICY as the “Administrator” (hereinafter: ‘Administrator’, “we”/ “us”/“our”).
We are the entity responsible for processing personal data obtained from you or about you (“you,” “your”). As our headquarters are located within the European Union, we process personal data in accordance with European data protection regulations and other applicable statutory provisions.
Personal data is information that allows you to be directly or indirectly identified as a natural person (“indirectly” means in combination with other information) based on elements such as: name and surname, postal address, email address, social security number, telephone number, or unique device identifier.
We use your personal data for the purposes described below. We do not collect or process more or other types of personal data than are necessary to achieve the relevant purposes. We use personal data only in accordance with this Privacy Policy, unless you have given your separate consent to other uses of your personal data. If we plan to use your personal data processed with your consent for purposes other than those specified in such consent, we will inform you in advance and, if you give your consent, we will proceed to process your data for those other purposes.
We collect your personal data necessary for the provision of our services. This includes data such as your name, postal address, telephone number, email address, tax identification number, and bank account number. We use this data to communicate with you, present our service offer, our terms and conditions, conclude and perform contracts, and make financial settlements. We also use personal data and the content of communications to respond to your questions that arise during contact.
On the basis of separately expressed consents, personal data may also be processed for the following purposes:
a) sending commercial information
b) Sending marketing information electronically (email, phone, SMS), in accordance with the GDPR Regulation and the Electronic Communications Law of 10 November 2024 (art. 398–399).
Personal data may be processed for the purpose of sending commercial and marketing information regarding products and services offered by the Controller, using electronic communication means and telecommunications terminal devices such as email, telephone or SMS/MMS messages.
The legal basis for processing personal data for direct marketing purposes is:
We may be required to use and archive personal data for legal purposes and for compliance with applicable regulations:
This Privacy Policy also applies to the use of our website https://alumaster.pl (“Portal”) with regard to the following privacy-related elements:
The user can manage their cookie preferences through their browser settings and within our consent banner during their first visit to the site. The legal basis for using certain cookies is the user’s consent (Art. 6(1)(a) GDPR) — storing information or gaining access to information already stored on the user’s device is only possible after obtaining prior, explicit consent.
As a rule, when we obtain your personal data from other sources, we make sure that the given company has already contacted you to inform you about the transfer of the data, or we ourselves provide you with this information during our first contact, while also providing other information required by law.
We disclose users’ personal data for the purposes described below only to the entities listed below — unless we have your explicit consent to transfer personal data to third parties of other categories mentioned elsewhere. We take all steps necessary to ensure that your personal data is processed, protected and transferred in accordance with the law.
When necessary, we commission other entities (companies) and individuals to perform certain tasks related to our services on our behalf under data processing agreements. For example, we may transfer personal data to representatives, contractors or partners to provide hosting for our databases and applications, perform data processing services, or send you information you have requested.
The data shared with external service providers is transferred only to the extent required to achieve the specific purpose. External providers may not use the personal data received from us for any other purpose, particularly for their own benefit or the benefit of third parties. External service providers are contractually obliged to maintain the confidentiality of your personal data.
In the event of reorganization, restructuring, merger, sale or another type of asset transfer (collectively “asset transfer”), we may transfer information, including personal data, to the necessary extent and only when permitted, provided that the receiving party agrees to handle your personal data in a manner compliant with applicable data protection laws.
We remain committed to protecting the confidentiality of personal data and to notifying relevant users if their personal data becomes subject to a different privacy policy.
We disclose your personal data to public administration authorities when required by applicable law. For example, we respond to requests from courts, law enforcement agencies, regulatory bodies and other public institutions, including authorities outside your country of residence.
In some cases, it may be necessary to transfer your personal data to other countries. This Privacy Policy also applies when we transfer personal data to third countries, where a different level of data protection may apply than in your country of residence.
We take data security very seriously. We apply appropriate security measures and implement physical, electronic and administrative procedures designed to protect the collected information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data that is transferred, stored or processed. Our information security policies and procedures are aligned with widely recognized international standards. They are regularly reviewed and updated to reflect business needs, technological changes and regulatory requirements. Access to your personal data is granted only to employees, service providers and entities that need it to perform their duties.
Every data subject, including you, has specific rights related to the personal data being collected. This applies to the entire data processing described in this Privacy Policy.
We respect each person’s rights and handle your concerns accordingly.
The list below provides information about your rights under data protection regulations according to the following rules:
Access limitations: In some cases, we may not be able to provide you with access to all or part of your personal data due to statutory requirements. If we refuse access to data, we will provide the reason for such refusal.
Inability to identify: In certain situations, we may not be able to verify your personal data due to the identifiers you provide in your request. Personal data that we cannot retrieve if you provide only your name and email address includes, for example, data collected through browser cookies.
If we are unable to identify you as the data subject, we cannot fulfill your request to exercise your rights as described in this section, unless we receive additional information that allows such identification.
Exercising your rights: To exercise your rights, please contact us in writing, for example by email or traditional mail. Contact details are provided at the end of this Privacy Policy.
We reserve the right to make changes — at our discretion — to the actions we take to ensure privacy, as well as to make amendments to this Privacy Policy at any time. Therefore, we encourage you to review this Privacy Policy regularly. This Privacy Policy is valid as of the date indicated as the “last modification” shown above. If you do not have an account on our Portal, we will inform you of any changes by email or traditional mail and provide you with an updated version of the Privacy Policy. We commit to treating your personal data in accordance with the Privacy Policy under which it was collected, unless we receive your consent to process it differently.
