PRIVACY & COOKIES POLICY
OF THE WEBSITE
www.latexopony.pl

§ 1.
PERSONAL DATA CONTROLLER, DEFINITIONS, INTRODUCTORY INFORMATION

The operator of the Internet Service as well as the Data Controller of the Users’ Personal Data of the Internet Service, hereinafter also referred to as the Administrator, is:

LATEX TYRES LIMITED LIABILITY COMPANY with its registered office in Opole, ul. Krapkowicka 21, 45-760 Opole, Tax Identification Number (NIP): 7543058869, National Business Registry Number (REGON): 161436072, registered in the National Court Register under the number KRS: 0000955942, a company engaged, among others, in the supply of tires, rims, wheels, and wheel accessories.

Administrator’s registered office address:
21 Krapkowicka Street, 45-760 Opole
E-mail: sekretariat@latexopony.pl
Phone: +48 77 451 98 00
Privacy Policy means the Privacy and Cookies Policy of the Website www.latexopony.plspecifying detailed rules for the processing and protection of Users’ personal data and the use of cookies on the Website, available on the website www.latexopony.plin the tab calledPrivacy Policy”.
Regulations – these regulations, drawn up pursuant to Art. 8 of the Act of 18 July 2002. on the provision of services by electronic means, specifying in particular the rules for concluding contracts for the provision of services by electronic means, the rules for the performance of these contracts and the rights and obligations of the parties, available on the website www.latexopony.pl, in the tab called „Regulations„.
Internet service – website run by the Administrator, available at: www.latexopony.pl, through which the User can obtain information about the Administrator, the activities conducted by the Administrator and the possibility of concluding a specific contract the subject of which are the goods and services offered by the Administrator, establish contact with the Administrator or the Administrator’s representatives, as well as perform other activities covered by the functionalities of the Website and provided for in these Regulations.
Ustawa o ochronie danych osobowych – ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych (t.j. Dz. U. z 2019 r. poz. 1781).
User a natural person visiting the website(s) of the Website and/or using the services and functionalities described in theseRegulations.”).
Provision of personal data for the purposes of processing by the Administrator is voluntary and consent to processing may be withdrawn at any time.
Users' personal data are stored in a database, on the Administrator's servers or on servers belonging to the Administrator's service providers, using technical and organizational measures required by generally applicable laws.
The Administrator uses security measures to protect personal data from loss, misuse and modification.
This Privacy Policy does not cover in its scope any information, advertising and content regarding goods and services provided by entities other than the Administrator, which are posted on the Website regardless of the basis and purpose of their posting. The User is advised to read the privacy policy of the relevant third party before using or taking any action in relation to the posted information and content.
This Privacy Policy does not cover the manner and extent of processing, storage and protection of the personal data of Users who, through the relevant functionalities of the Website (in particular: the tab ’Register with XPARTNER. LOG IN,‘ or the buttonBecome our partner‘) moved to the page www.xpartner.net.pl. Website "XPARTNER‘ is a separate platform and this Privacy Policy and the Terms and Conditions, do not apply to it, unless otherwise directly stated in the Terms and Conditions and/or Privacy Policy.
The Administrator makes this Privacy Policy available through a link on the home page of the Website, in the bottom toolbar and functionalities. The User has the possibility to read the content of the Privacy Policy at any time he/she chooses.

§ 2.
PURPOSES, LEGAL BASIS AND DURATION OF PERSONAL DATA PROCESSING

The Administrator may process the following categories of personal data and information concerning Users:

1) information about the User's device in order to ensure the correctness of the provision of services: the IP address of the computer, domain name, information contained in cookies or other similar technologies, session data, data and type of Internet browser, type of operating system, data about the device, data about activity on the Website, including on individual subpages;

2) geolocation information, if the User has consented to the Administrator's access to the User's geolocation; geolocation information is used to provide more customized information and offers to the User;

3) Users' personal data: name, surname, e-mail address, telephone number, mailing address, which the Administrator requires to be provided in order to contact the Administrator or its representatives, via an electronic form available under ”Contact“ and the procedures of conduct established therein, or for the purpose of initiating and carrying out the complaint process described in the Regulations.
Although not all of the information listed in § 2(1) of the Privacy Policy may be considered personal data of Users, as it may obtain such qualification in combination with other information, the Administrator covers it with the full protection afforded to personal data under the RODO.
Dane osobowe mogą być przetwarzane w poniższych celach i na niżej wskazanych podstawach prawnych:

1) w celu zawarcia i wykonania umowy o świadczenie usług drogą elektroniczną (podstawa prawna – art. 6 ust. 1 lit. b RODO) – celem przetwarzania danych osobowych jest świadczenie usług; korzystając z Serwisu Internetowego i wyrażając zgodę na postanowienia zawarte w Regulaminie oraz Polityce prywatności, Użytkownik zawiera z Administratorem umowę o świadczenie usług drogą elektroniczną, polegających na umożliwieniu korzystania z funkcjonalności Serwisu Internetowego, a w szczególności przyjmowania i obsługi zapytań kierowanych przez Użytkowników Serwisu Internetowego, podjęcie określonych działań na żądanie osoby, której dane osobowe dotyczą; brak podania wymaganych danych osobowych może spowodować ograniczenie możliwości korzystania przez Użytkownika ze wszystkich funkcjonalności Serwisu Internetowego;

2) w celu wykonania obowiązków prawnych ciążących na Administratorze w związku z zawartą umową o świadczenie usług drogą elektroniczną (podstawa prawna art. 6 ust. 1 lit. c RODO w zw. z art. 6 ust. 1 lit. b RODO) – celem przetwarzania danych osobowych jest zrealizowanie przez Administratora obowiązków prawnych związanych z zawartą umową o świadczenie usług drogą elektroniczną, w szczególności realizacja uprawnień i zobowiązań reklamacyjnych;

3) w celu obrony, dochodzenia lub ustalenia roszczeń związanych z umową świadczenia usług drogą elektroniczną, co stanowi prawnie uzasadniony interes Administratora (podstawa prawna art. 6 ust. 1 lit. f RODO) – celem przetwarzania danych osobowych jest zabezpieczenie informacji na wypadek prawnej potrzeby wykazania pewnych zdarzeń, co jest prawnie uzasadnionym interesem Administratora;

4) w celach związanych z technologią cookies, na podstawie zgody osoby, której dane dotyczą (podstawa prawna art. 6 ust. 1 lit. a oraz art. 6 ust. 1 lit. f RODO) – przetwarzanie danych osobowych w przedmiotowym zakresie następuje wyłącznie na podstawie odrębnej zgody wyrażonej przez Użytkownika na przetwarzanie danych osobowych, stosowanie plików cookies lub innych podobnych technologii, wyrażonej przez oświadczenie złożone w momencie pierwszego odwiedzenia Serwisu Internetowego z urządzenia Użytkownika, za pośrednictwem odpowiednich funkcjonalności Serwisu Internetowego, a więc przed zawarciem umowy świadczenia usług drogą elektroniczną;

5) w celach marketingu bezpośredniego (podstawa prawna art. 6 ust. 1 lit. f RODO) – celem oferowania produktów i usług Administratora oraz partnerów Administratora, najczęściej w formie reklamy internetowej, dobieranej pod kątem zainteresowań Użytkownika, co jest Administratora i partnerów Administratora prawnie uzasadnionym interesem; Administrator może wykorzystywać w tym celu narzędzia komunikacji elektronicznej takie jak, w szczególności, podany przez Użytkownika adres e-mail;

6) w celach analitycznych (podstawa prawna art. 6 ust. 1 lit. f RODO) – a w tym – badania opinii Użytkowników Serwisu Internetowego, kontaktu z Użytkownikami Serwisu Internetowego dla celów analitycznych; na podstawie analizy aktywności Użytkownika w Serwisie Internetowym, Administrator jest w stanie lepiej dobierać treści i usługi oraz dopasowywać je do potrzeb Użytkowników, opracowywać statystyki związane z korzystaniem ze Serwisu Internetowego, badać satysfakcję z oferowanych usług i określać ich jakość, a także dbać o bezpieczeństwo danych w serwisie, co stanowi prawnie uzasadniony interes Administratora.
Personal data collected by the Administrator will be processed for no longer than necessary for the purposes for which the personal data was collected:

1) Personal data collected for the purpose of entering into and performing a contract for the provision of electronic services will be stored and processed for the period of entering into and performing the contract in question, and thereafter for the required data archiving period provided by law.

2) Personal data collected for the purpose of fulfilling the Administrator's legal obligations under the concluded contracts will be processed for the period necessary for the purposes of fulfilling the Administrator's legal obligations.

3) Personal data collected for the purpose of defending, asserting or establishing claims related to concluded contracts will be processed for the period of assertion, defense or establishment of claims, but not longer than until the statute of limitations for claims.

4) Personal data collected for the purpose of handling inquiries made by Users of the Website will be processed for the period necessary to contact the User and settle the matter.

5) Personal data collected for marketing and analytical purposes will be processed for the duration of the marketing action or until you withdraw your consent to its processing or object to such processing.

6) Personal data collected for the purpose of the User Opinion Survey will be processed for the duration of the survey and for the period of analysis of the results.

7) Personal data collected for the purposes of cookie technology - personal data will be processed until you withdraw your consent.

8) Personal data will also be processed until the expiration of statutory limitation periods for claims or the expiration of archiving obligations under applicable laws.
The Administrator shall cease processing personal data which were collected on the basis of the Administrator's legitimate interest, whenever the person whose personal data are being processed objects to the processing of personal data and, moreover, when the consent on the basis of which the personal data were collected and are being processed is withdrawn, or the Administrator determines that the data are no longer relevant.
Information and personal data about Users are obtained through voluntary entry of personal data and information into the systems of the Website through electronic forms available on its pages, voluntary provision of personal data in the process of contacting the Administrator through other methods, as well as in an automated manner, through cookies stored in terminal devices and through the collection of web server logs by the Website's hosting operator (necessary for the proper operation of the Website).
The User may enter the Website without providing any personal data and browse the pages of the Website in such a mode, subject to the data which are collected automatically, which include mainly - IP address, domain name, type and type of browser, type of operating system, interests, age and gender of the Website user. The data in question are collected automatically mainly through cookies.
Although the provision of personal data is voluntary and the consent to their processing may be withdrawn at any time, in a situation where the provision of personal data is necessary due to an existing legal obligation or for the purpose of entering into and performing a service contract and taking necessary actions prior to its conclusion, the User's failure to provide the required personal data may result in the inability to enter into and perform a service contract.
Personal data may be subject to automated decision-making, including profiling for the purpose of providing services under the concluded contract and for direct marketing. Profiling consists, in particular, in adjusting the display of content to Users' preferences based on their previous choices.
The user consents to the processing of personal data:

1) when first accessing the Website by selecting ”I agree and want to go to the site“ from the available options in the cookie notice and Privacy Policy;

2) before selecting the button ”Send“ and thus - by sending an inquiry through the contact form available under ”Contact“ of the Website, by checking the appropriate checkbox regarding consent to the processing of personal data;

3) by initiating the complaint process, described in the Regulations, which requires the User's personal information in order to process and respond to the User's complaint.

§ 3.
RECIPIENTS OF USER DATA

The Administrator may provide the User's personal data to entities that process personal data on behalf of the Administrator, i.e. external entities that provide services to the Administrator, on the basis of agreements concluded for the entrustment of personal data processing in order to perform services for the Administrator and in accordance with the Administrator's instructions.
Users' personal data may be transferred to the following categories of entities that provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing meets the requirements of the RODO and the Personal Data Protection Act and protects the rights of data subjects:

1) Subcontractors - external companies providing services for the Administrator, in particular, such as: hosting, maintenance of servers, including email servers, maintenance of databases, maintenance, diagnostic and repair work, marketing, analytics, accounting, providing widgets to be placed on the website, providing a helpdesk type system, creating and providing backups, services related to testing the quality of services provided, hosting, technical / IT support, marketing and PR services, legal and consulting services, advertisers and similar entities, and, moreover, to the extent arising from legal obligations - public authorities. These entities are recipients of the data, processors acting on behalf of and at the direction of the Administrator.

2) Advertisers - that is, entities which, on the basis of the information contained in cookies or other similar identifiers (if they contain personal data), participate in the process of selecting the content of advertisements that are displayed to Users on the Website. For more information on what cookies are and how they work, and how you can adjust your browser settings in this regard, see § 7 of this Privacy Policy.
Personal data will not be processed in third countries.

§ 4.
RIGHTS OF PERSONAL DATA SUBJECTS

Any person affected by the processed personal data has the right:

1) Acces (art. 15 ust. 1 RODO) – uzyskania od Administratora potwierdzenia, czy przetwarzane są dane osobowe jej dotyczące. Jeżeli dane osobowe dotyczące danej osoby są przetwarzane przez Administratora, jest ona uprawniona do uzyskania dostępu do nich oraz uzyskania następujących informacji: o celach przetwarzania, kategoriach danych osobowych, odbiorcach lub kategoriach odbiorców, którym dane zostały lub zostaną ujawnione, o okresie przechowywania danych lub o kryteriach ustalania przedmiotowego okresu, o prawie do żądania od Administratora sprostowania, usunięcia lub ograniczenia przetwarzania danych osobowych przysługujących osobie, której dane dotyczą, oraz do wniesienia sprzeciwu wobec takiego przetwarzania, informacje o prawie do wniesienia skargi do organu nadzorczego, a dodatkowo jeśli dane osobowe nie zostały zebrane od osoby której dotyczą – o wszelkich dostępnych informacjach o ich źródle, informacje o zautomatyzowanym podejmowaniu decyzji, w tym o profilowaniu;

2) to receive a copy of the data (Article 15(3) of the RODO) - to obtain a copy of the data being processed, with the first copy being free of charge, and for subsequent copies the Data Controller may charge a reasonable fee based on administrative costs;

3) to rectify data (Article 16 of the RODO) - to request the rectification of personal data concerning a person that is incorrect, or the completion of incomplete data by providing an additional statement;

4) to delete data (Art. 17 RODO) - to request the erasure of personal data concerning a person if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, the data subject has withdrawn the consent on which the processing is based and there is no other legal basis for the processing, the data subject objects to the processing and there are no overriding legitimate grounds for the processing, the personal data have been processed unlawfully, the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which the Controller is subject, unless the processing of the personal data is necessary for the establishment, investigation or defense of claims, or there are other circumstances listed in Art. 17(3) RODO;

5) to restrict processing (Article 18 of the RODO) - to request the restriction of processing of personal data concerning a person when:

i. the data subject questions the accuracy of the personal data - for a period of time that allows the Data Controller to verify the accuracy of the data,

ii. the processing is unlawful and the data subject objects to the erasure of the data by requesting restriction of its use,

iii. The controller no longer needs the data, but it is needed by the data subject to establish, assert or defend a claim,

iv. the data subject has objected to the processing - until it is determined whether the legitimate grounds on the part of the Controller override the grounds of the data subject's objection;

6) to data portability (Article 20 RODO) - to receive in a structured, commonly used, machine-readable format personal data concerning a person that he or she has provided to the Controller, and to request that the data be sent to another controller if the data are processed on the basis of the data subject's consent or a contract with him or her, and if the data are processed by automated means;

7) objections (Article 21 RODO) - to object to the processing of his/her personal data for the legitimate purposes of the Controller, on grounds related to his/her particular situation, including profiling. In such a case, the Controller shall not be entitled to process such personal data unless the Controller demonstrates the existence of compelling legitimate grounds for processing overriding the interests, rights and freedoms of the data subject, or grounds for establishing, asserting or defending claims. If personal data are processed for the purposes of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling, to the extent that the processing is related to such direct marketing;

8) to withdraw consent at any time and without giving a reason, with the proviso that the withdrawal of consent does not affect the lawfulness of processing that was carried out on the basis of consent before its withdrawal. Withdrawal of consent will result in discontinuation of the Administrator's processing of personal data for the purpose for which the consent was given;

9) make a complaint to the President of the Office for Personal Data Protection in any case in which the User believes that the Administrator has violated data protection regulations by his/her actions.
In order to exercise the above-mentioned rights, the data subject should contact the Administrator using the Administrator's contact information indicated in § 1.1 of this Privacy Policy and inform the Administrator which right and to what extent he/she wishes to exercise. Please note and bear in mind that the execution of the User's request will require confirmation of the User's identity, which may require additional activity on the part of the User.

§5.
PRESIDENT OF THE OFFICE OF PERSONAL DATA PROTECTION

The subject of the processed personal data has the right to lodge a complaint to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection, based in Warsaw, who can be contacted as follows:

1) by mail: 2 Stawki Street, 00-193 Warsaw;

2) through the electronic mailbox available on the website: https://www.uodo.gov.pl/pl/p/kontakt;

3) by telephone through the hotline, at 606-950-000.
You can read more about how to complain to the regulator on the website: https://uodo.gov.pl/pl/83/155.

§6.
PRIVACY POLICY CHANGES

The contents of the Privacy Policy set forth herein are effective as of the date indicated on the first page of the Privacy Policy, under the title, in place of ”latest update (...)”.
The Privacy Policy may be supplemented or updated according to the current needs of the Administrator in order to provide current and reliable information to the Users of the Website and to take into account any factual and legal changes that have occurred. The current Privacy Policy is available to Users at the appropriate link on the Website.

§7.
COOKIES

The Website performs the functions of obtaining information about Users and their behavior in the following ways:

1) through information voluntarily entered by the User into electronic forms made available on the Website and for purposes resulting from the function of a specific form, or provided to the Administrator in another form for the purpose of initiating and carrying out the complaint process described in the Regulations;

2) through cookies stored in the User's terminal equipment (so-called “cookies”) - by using the Website, the User accepts that cookies will be installed in the User's terminal equipment to enable the Administrator to provide services;

3) through the collection of web server logs by the Website hosting operator (necessary for proper operation of the Website).
Cookies are IT data, in particular text files, which are sent while browsing the Website and stored on the User's terminal device and are intended for the use of the Website. Cookies usually contain the name of the website they come from, the time they are stored on the User's terminal device and a unique number.
The entity placing cookies on the User's terminal equipment of the Website and accessing them is the Administrator. The legal basis for the processing of personal data derived from cookies is the Administrator's legitimate interests in ensuring high quality and security of services provided, and the consent of the User whose personal data is involved.
The Website uses cookies after the User of the Website has given prior consent in this regard. Consent to the Internet Service's use of all cookies is given by selecting the appropriate option from those available in the message regarding the Internet Service's use of cookies, which is displayed after first accessing the Internet Service's website, by clicking on the button: ”I agree, I want to go to the website”, with the two available options being: ”I agree and want to go to the site” or „I do not agree”.
If the User of the Website does not consent to the Website's use of cookies, he/she may use the option and check the button: ”I do not agree”, available in the message regarding the use of cookies by the Website, which is displayed when you first access the Website's website, or make changes in the settings of the Internet browser you are currently using (however, this may cause the Website's website to work incorrectly).
The process of giving and refusing consent may vary depending on the web browser you use. Please refer to your browser's help or documentation for details. To manage your cookie settings, select your browser/system from the list and follow the instructions: Internet Explorer, Chrome, Safari, Firefox, Opera, Android, Safari (iOS), Windows Phone.
The Website uses two main types of cookies: “session” (session cookies) and ‘permanent’ (persistent cookies). “Session” cookies are temporary files that are stored on the User's terminal equipment until the User leaves the Website or shuts down the software (web browser). “Permanent” cookies are stored on the User's end device for the time specified in the parameters of the cookies or until they are deleted by the User. In addition, we distinguish between own files (coming directly from the Website) and external files (coming from a third party through the Website). In the latter case, it is recommended to read the privacy and cookies policy of the third party.
Cookies are used for the following purposes:

1) cookies remember the user's preferences, which allows to improve the quality of services provided and improve the relevance of search results;

2) creation of statistics that help to understand how the Users of the Website use the websites, which allows to improve their structure and content;

3) determine the profile of the User in order to display product recommendations and tailored advertising materials to the User, in particular the Google network.
Web browsing software (Internet browser) usually allows cookies to be stored on the User's terminal device by default. Users can change their settings in this regard. The web browser allows the removal of cookies. It is also possible to automatically block cookies through the appropriate settings of the web browser.
Cookies do not cause configuration changes in devices and software installed in User's devices.
Restrictions on the use of cookies may affect some of the functionality available on the Website, and in some cases completely prevent the use of some of its functions and options.
Cookies placed in the User's end device may also be used by advertisers cooperating with the Website and Website partners, including in particular the website ”XPARTNER” (www.xpartner.net.pl).
Cookies may be used by the Google network, to display advertisements tailored to the way the User uses the Website. For this purpose, they may retain information about the User's navigation path or the time he or she stayed on a particular page: https://policies.google.com/technologies/partner-sites.
The Website uses statistical analysis of website traffic through Google Analytics (Google Inc., based in the USA). Google Analytics, which automatically collects data about the User, is a web analytics system through which the Administrator obtains insight into the Website's data traffic and User demographics, used for marketing purposes. It is recommended that the User read the Google Analytics privacy policy to learn about the use of cookies used in statistics: Google Analytics privacy policy can be found at the link: https://policies.google.com/privacy?hl=pl. In order to block Google Analytics, you must disable the use of cookies.
With regard to information about User preferences collected by the Google advertising network, the User can view and edit the information resulting from cookies using a tool: https://www.google.com/ads/preferences/.
There are plug-ins on the Website that may transmit Users' data to administrators of portals such as: Facebook, Google, Instagram, LinkedIn, YouTube, Salesmanago, Gemius and others. The tool in question allows the indicated portals to identify visitors to the Website as a target group, to whom advertisements with appropriate content can then be displayed. In order to avoid transferring the data in question to the indicated portals, you should avoid clicking on links that take you to the portals in question or log out of your account on the portal in question before clicking on the link. The processing of personal data by the above portals shall be based on the rules and policies applied by the above portals. The Administrator recommends that you familiarize yourself with the documents in question before making the moves described in the preceding sentences.

§ 8.
SECURITY OF PERSONAL DATA PROCESSING

The Administrator uses security measures to protect personal data from loss, misuse and modification.
Taking into account the state of the art, the nature, scope and purposes of the processing and the risk of violation of the rights or freedoms of natural persons with different probability of occurrence and severity, the Administrator has implemented appropriate technical and organizational measures to ensure a degree of security corresponding to the existing risk, in particular, it applies the measures listed below:

1) Minimize the required, collected and processed personal data;

2) Ability to continuously ensure the confidentiality, integrity, availability and resilience of processing systems and services;

3) Ability to quickly restore personal data availability and access in the event of a physical or technical incident;

4) Regularly test, measure and evaluate the effectiveness of technical and organizational measures to ensure processing security;

5) By default, only those personal data are processed that are necessary to achieve each specific processing purpose;

6) Collecting personal data for designated legitimate purposes and not subjecting it to further processing incompatible with those purposes;

7) Processing of personal data in a substantively correct and adequate manner in relation to the purposes for which they are processed;

8) Keeping records of persons authorized to process personal data. Persons who have been authorized to process data are obliged to maintain strict secrecy of personal data and ways of securing them;

9) Regular updating of all software used by the Administrator to process personal data, which in particular means regular updates of software components.

PRIVACY & COOKIES POLICYOF THE WEBSITEwww.latexopony.pl

PRIVACY & COOKIES POLICY
OF THE WEBSITE
www.latexopony.pl