1. Identity of the Data Controller

The administrator of your personal data is MAGDALENA KUMAR FIRMA HANDLOWA "RAILING 2" – ul. Wichrowa 7, 05-090 Janki, NIP: 5562189956, REGON: 015737217.

2. Contact Details of the Data Controller

You can contact the Data Controller through the Data Protection Officer. This person is the contact point for all matters related to the processing of personal data and the exercise of rights regarding personal data processing by the Data Controller:

1. In writing at the address:
   Magazyn Janki
   Ul. Wichrowa 7,
   05-090 Janki, Poland

2. Electronically via email: kontakt@magazynjanki.pl

3. By phone: +48 728 050 303

3. Purpose and Legal Basis for Data Processing

The Data Controller may process your personal data if it is necessary for you to use the website. The basis for processing your personal data is to enable you to use the website, including filling out the Contact Form.

Whenever the term "GDPR" is mentioned, it refers to the General Data Protection Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons regarding the processing of personal data and the free movement of such data. You can find the full text of the GDPR on the website of the Polish Data Protection Office: https://uodo.gov.pl/pl/404/224.

4. Processing Purposes of Data Provided in the Contact Form

Your data is processed for the following purposes:

• Communication regarding your inquiry submitted via the Contact Form – based on the legitimate interest pursued by the Data Controller (Article 6(1)(f) of the GDPR). The Data Controller’s legitimate interest is to communicate with you. Additionally, your data is processed based on your consent, expressed by entering your data in the form and sending it to us (Article 6(1)(a) of the GDPR).

• Communication regarding your consent to marketing activities – based on the legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR), where the legitimate interest is to conduct direct marketing of the Data Controller’s own products and services. Your data is also processed based on your consent, expressed by entering data in the form and sending it (Article 6(1)(a) of the GDPR).

• Archiving documents, statistics, and potential claims processing or defense – based on the legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR). The legitimate interest of the Data Controller includes document archiving, statistical analysis, and handling or defending claims.

The purpose, scope, and categories of recipients of the data processed by the Data Controller depend on the actions taken by you when using the website.

The Contact Form collects the following data: name, surname, phone number, and email address. Optionally, you may provide additional personal data in your message, which you do so voluntarily. These details are necessary to respond to your inquiry.

Providing data is voluntary, but failure to do so will result in the inability to contact you and respond to your message.

5. Data Retention Period

Your personal data will be processed for the period necessary to achieve the processing purposes or until you object to processing (if the basis is a legitimate interest) or withdraw consent (if the basis is consent). After that, the Data Controller may store your data until the expiration of possible claims or legal obligations to retain data.

6. Categories of Data Recipients

Your data may be processed by subcontractors of the Data Controller – these are entities whose services the Data Controller uses in fulfilling its duties.

Your personal data will always be processed with appropriate safeguards and data protection measures.

Since the Data Controller uses service providers that store data on US-based servers (e.g., Google LLC), your data may be transferred outside the European Economic Area (EEA). However, these subcontractors comply with the Privacy Shield program, ensuring a level of data protection in line with European regulations.

7. Automated Decision-Making and Profiling

The Data Controller does not make automated decisions, including profiling, based on your personal data.

8. Your Rights

You have the right to:

• Access your personal data and request their correction, deletion, or processing restriction.

• Data portability.

• Withdraw consent for data processing at any time (withdrawal does not affect the legality of processing before consent withdrawal).

• Object to the processing of your personal data, where the legal basis is the legitimate interest of the Data Controller.

• Lodge a complaint with the supervisory authority (President of the Polish Data Protection Office) if you believe that data processing violates the GDPR.

To exercise your rights, contact the Data Controller.

9. Cookies

What are cookies?

Cookies are small text and numerical files stored on your device (computer, phone, or tablet) when visiting the website. They allow the system to recognize your device when you reconnect.

Legal Basis for Using Cookies

Cookies are used with your consent, given through your browser settings or other software installed on your device.

Why Does the Data Controller Use Cookies?

The primary purpose of cookies is to manage the website and enhance its quality. Cookies help ensure proper display and functionality of the website. They are also used for anonymous statistics and analysis of site usage, such as visit duration.

Cookies do not identify users personally.

Types of Cookies Used on the Website

• Session cookies – automatically deleted when you close your browser.

• Persistent cookies – stored on your device for a specified time, even after closing the browser.

• First-party cookies – set by the website itself.

• Third-party cookies – set by external services like Google Analytics and Google Tag Manager.

10. Tools Used by the Data Controller

The Data Controller uses Google Analytics and Google Tag Manager, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to analyze and improve the website's performance. These tools collect anonymous statistical data that help improve the website's functionality.

Google Analytics uses cookies for data analysis but does not personally identify users. You can block Google Analytics tracking by installing a free browser plugin: https://tools.google.com/dlpage/gaoptout.

For more details on how Google collects and processes data, visit: www.google.com/intl/pl/policies/privacy/partners/.

11. How to Change Cookie Settings

Most browsers automatically accept cookies. However, you can withdraw or change your cookie preferences at any time via your browser settings.

Blocking cookies may limit access to certain website features.

12. Server Logs

Using the website involves sending requests to the server, which are recorded in server logs. These logs include your IP address, date and time of request, browser information, and operating system.

Server logs are used only for website administration and are not shared with third parties. They do not identify users personally.