Based on Article 13(1) and (2) and Article 14(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), which has been in force since 25 May 2018, we inform you about the manner and purpose of processing your personal data (hereinafter referred to as "data"), as well as about your rights related to data protection.

1. Who is responsible for processing the data and who can you contact?

The controller of your data is: Printhub Spółka z ograniczoną odpowiedzialnością, ul. Lubieszyńska 33, 72-006 Mierzyn, NIP: 851-329-45-25, REGON: 525519655, KRS: 0001040710, hereinafter referred to as the CONTRACTOR, with whom you can contact:

in writing, by sending correspondence to the address: ul. Lubieszyńska 33, 72-006 Mierzyn
by phone, at the number: +48 91 852 22 22
by email, at the address: designer@drukarniaszczecin.pl

2. Why, for what purpose, and on what legal basis do we process your data?

All data is processed in accordance with the provisions of the GDPR and Polish data protection regulations. We do this because we fulfill:

obligations arising from the execution of the contract and take actions at the request of the person concerned before concluding the contract (Article 6(1)(b) GDPR),

What does this mean?

a. The data is processed for the purpose of performing activities, concluding or executing a contract, in connection with which it was provided, for example, to fulfill an order, establish a relationship under an agency, intermediary, cooperation, or other commercial contract, depending on the circumstances.

b. The data is processed to perform actions requested by the client before or in connection with the conclusion of a contract. For example, to prepare a calculation or respond to a received inquiry.

c. To fulfill the contract and issue a VAT invoice, it is necessary to provide the following data:

Company name
Company address
Company VAT number
Customer's first and last name
Shipping address
Email address
Contact phone number

d. All personal data provided during the ordering process is used solely for the formation, conclusion, modification, or termination of the Agreement between the CONTRACTOR and the CUSTOMER and to fulfill the Sales Agreement or electronic service agreement or order execution and is not disclosed to other institutions or third parties - except as described in point e.

e. In the case of product sales through the ONLINE STORE, in order to deliver products to the CUSTOMER, the necessary personal data for addressing and delivering the shipment is provided to companies professionally engaged in delivering shipments - especially courier companies - along with the handover of the shipment for delivery, and in the case of using online direct payment systems - to the administrator of the payment system.

f. The CONTRACTOR uses Google Analytics to track traffic on its website. To disable the tracking of your movements on our website, please use the following tool: https://tools.google.com/dlpage/gaoptout.

f. We do not process your data for marketing purposes.

Furthermore, it is important that:

we process data if necessary, for purposes arising from legitimate interests pursued by us or a third party (Article 6(1)(f) GDPR). We do this, for example, when we process data of persons acting on behalf of clients and contractors, to ensure the IT security of the CONTRACTOR, including pursuing claims and defending against claims.

Consent can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of the processing by the CONTRACTOR:

until the withdrawal of consent or in circumstances where the CONTRACTOR processes data on a different basis than your consent.

3. To whom can we disclose data?

Data may be shared with other recipients in order to fulfill the contract with you, to fulfill a legal obligation incumbent on the CONTRACTOR, based on your consent, or for purposes arising from the legitimate interests of the controller or a third party. Recipients may include, in particular: authorized employees of the CONTRACTOR and other persons acting on their behalf.
Data is also transferred to entities processing data on behalf of the CONTRACTOR and persons acting on their behalf, provided that such entities process data based on a contract with the CONTRACTOR and only in accordance with the CONTRACTOR's instructions, and subject to the obligation of professional and insurance secrecy (i.e., specific information protection obligations arising from applicable law).

Entities performing tasks on behalf of and for the CONTRACTOR include entities providing services particularly in the field of banking, IT, debt collection, legal, insurance (including insurance mediation), agency, intermediary activities.

4. Will your data be transferred to a third country (outside the European Union)?

We do not transfer data to recipients in countries outside the European Union ("third countries").

5. How long will your data be processed (stored)?

Your data will be processed for the period necessary to achieve the processing purposes indicated in point 2, i.e.:

in the scope of the execution of the contract concluded with the CONTRACTOR - until its execution is completed, and after that for the period required by law or for the realization of possible claims,
in the scope of fulfilling the legal obligations imposed on the CONTRACTOR in connection with conducting business and executing concluded contracts - until these obligations are fulfilled by the CONTRACTOR.
until the legitimate interests pursued by the CONTRACTOR, constituting the basis for this processing, are fulfilled or until you object to such processing, provided that there are no legitimate grounds for further processing of the data.
in practice, this means a period of 5 years for the execution of orders and 1 year for responding to an inquiry. These periods may be extended in particularly justified cases.

6. What rights do you have to ensure your data is adequately protected?

You have the right to:

access your data, as well as the ability to rectify, limit its processing, or delete it,
withdraw at any time the consent previously given for the processing of data in the scope of the consent, provided that the withdrawal of consent will not affect the legality of the processing carried out based on the consent before its withdrawal,
request the transfer of data provided to the CONTRACTOR by you, processed for the purpose of concluding and executing a contract or processed based on consent. The transfer involves receiving your data from the Administrator in a commonly used machine-readable format and the right to transmit it to another data controller, provided it is technically feasible. The right does not apply to data that constitutes the trade secret of the Administrator,
file a complaint with the supervisory authority, which in the Republic of Poland is the President of the Office for Personal Data Protection, if you consider that the processing of your data violates the regulations, including the GDPR.

Furthermore, you have the right to object at any time to the processing of your data by the CONTRACTOR:

for reasons related to your particular situation, when the CONTRACTOR processes the data for purposes arising from legitimate interests (Article 21(1) GDPR)

7. Are you obligated to provide data?

To the extent that the processing of your data is carried out to perform the requested activities or to conclude and execute a contract with the CONTRACTOR, the provision of your data is a condition for performing the requested activities or concluding this contract. Providing data is voluntary, but it is necessary to perform the requested activities or conclude and execute a contract with the CONTRACTOR. If you do not provide the necessary information or documents to the CONTRACTOR, the CONTRACTOR will not be able to carry out the requested activities or conclude and execute contracts and provide service.

8. Where do we obtain your data from and what are their categories?

Most of the data processed by the CONTRACTOR comes directly from the interested CUSTOMER.
Some data - this applies to entrepreneur data - we also obtain from other public sources, i.e., from: National Court Register, Central Registration and Information on Economic Activity, Central Statistical Office, or similar sources located in other countries and from private entities specializing in collecting and providing information about entrepreneurs.
In the case of data of persons representing entrepreneurs or otherwise acting on their behalf, data is obtained from both the sources mentioned above and the entrepreneurs themselves.

9. We do not use automated personal data processing, particularly profiling.

10. Using the Printhub online store implies acceptance of the regulations and privacy policy applied by Printhub Sp. z o.o.