PRIVACY POLICY

version effective from March 1, 2025

WHAT IS THE PRIVACY POLICY?

We would like to inform you about the details of how we process your personal data, to provide you with full knowledge and comfort when using our website.

As we operate in the online industry ourselves, we understand the importance of protecting your personal data. Therefore, we make every effort to protect your privacy and the information you provide to us.

We carefully select and implement appropriate technical measures, particularly those of a programmatic and organizational nature, to ensure the protection of processed personal data. Our website uses encrypted data transmission (SSL), which safeguards your identifying data.

In our Privacy Policy, you will find all the most important information regarding our processing of your personal data. We kindly ask you to read it, and we promise it won’t take more than a few minutes.

Who is the administrator of the www.plexigo.pl website?

The administrator of the website is Tomasz Kaczmarczyk, conducting business under the name Tomasz Kaczmarczyk “KOLOR PLUS STUDIO”, entered into the register of entrepreneurs of the Central Register and Information on Economic Activity maintained by the minister responsible for economy at ul. Łany 18, 32-700 Bochnia, NIP 8681718428, REGON 121492682, BDO 000416027 (i.e., us).

PERSONAL DATA

What legal act regulates the processing of your personal data?

Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1), commonly known as: GDPR. To the extent not regulated by the GDPR, the processing of personal data is governed by the Personal Data Protection Act of May 10, 2018.

Who is the administrator of your personal data?

The administrator of your personal data is Tomasz Kaczmarczyk, conducting business under the name Tomasz Kaczmarczyk “KOLOR PLUS STUDIO”, entered into the register of entrepreneurs of the Central Register and Information on Economic Activity maintained by the minister responsible for economy at ul. Łany 18, 32-700 Bochnia, NIP 8681718428, REGON 121492682, BDO 000416027, email: sklep@plexigo.pl, phone: +48 533 899 442.

Regarding your personal data, you can contact us via:

email: sklep@plexigo.pl,
traditional mail: ul. Łany 18, 32-700 Bochnia,
contact phone number: +48 533 899 442.

HOW DO WE PROCESS YOUR PERSONAL DATA THAT YOU PROVIDE TO US?

What personal data do we process and for what purposes?

On our website, we offer you many different services, for which purposes we process various personal data, based on different legal grounds.

Purpose	Personal data	Legal basis for processing	Data retention period
conclusion and performance of a contract	first name, last name, correspondence address, NIP, email address, phone number, bank account number, payment card number	Art. 6(1)(b) of the GDPR, i.e., processing for the purpose of taking action at your request prior to entering into a contract, and processing necessary for the performance of a contract to which you are a party	until the expiry of the limitation period for claims related to the performance of the contract
account creation and management	first name, last name, email address, correspondence address, phone number	Art. 6(1)(b) of the GDPR, i.e., processing for the purpose of taking action at your request prior to entering into a contract, and processing necessary for the performance of a contract to which you are a party	until the expiry of the limitation period for claims related to the performance of the contract
contact form	email address, phone number, first name, last name	Art. 6(1)(f) of the GDPR, i.e., processing for the purpose of pursuing our legitimate interest, which consists of maintaining continuous communication and enabling contact with us regarding our business activities	until an objection to the processing of personal data is raised
newsletter	email address, first name, last name	Art. 6(1)(a) of the GDPR, i.e., processing based on your expressed consent to the processing of your personal data	until consent to the processing of personal data is withdrawn
analysis of website traffic	location data, IP address, browser data	Art. 6(1)(f) of the GDPR, i.e., processing for the purpose of pursuing our legitimate interest, which consists of analyzing customer traffic on the store’s website	3 years or until consent to the processing of personal data is withdrawn
direct marketing of own goods and services, including remarketing	location data, IP address, browser data	Art. 6(1)(f) of the GDPR, i.e., processing for the purpose of pursuing our legitimate interest, which consists of direct marketing of our own services, including remarketing	3 years or until consent to the processing of personal data is withdrawn
establishment, assertion, and enforcement of claims and defense against claims in proceedings before courts and other state authorities	first name, last name, residence address, PESEL number, NIP, REGON, email address, phone number, IP address, bank account number, payment card number	Art. 6(1)(f) of the GDPR, i.e., processing for the purpose of pursuing our legitimate interest, which consists of the establishment, assertion, and enforcement of claims, and defense against claims in proceedings before courts and other state authorities	until the expiry of the limitation period for claims related to the performance of the contract
fulfillment of legal obligations arising from legal provisions, particularly tax and accounting regulations	first name, last name, company name, PESEL number, NIP or REGON, email address, phone number, correspondence address, payment card number	Art. 6(1)(c) of the GDPR, i.e., processing is necessary for compliance with legal obligations incumbent upon us, arising from legal provisions, particularly tax and accounting regulations	until the expiry of legal obligations incumbent upon the Administrator that justified the processing of personal data

Voluntariness of providing personal data

Providing the required personal data is voluntary but is a condition for us to provide services to you (e.g., sending newsletters or creating an account).

Recipients of personal data

You can find the current list of entities to whom we disclose your personal data here.

Automated decision-making (including profiling)

We do not make automated decisions concerning you, nor do we use profiling.

Will we transfer your personal data outside the EEA or to an international organization?

To use Google tools, your personal data may be transferred to the United States, where Google LLC servers are located.

Google LLC is listed in the Data Privacy Framework program participant list (link: https://www.dataprivacyframework.gov/s/participant-search), therefore, the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data under the EU-U.S. Data Privacy Framework (link: https://eur-lex.europa.eu/legal-content/PL/TXT/PDF/?uri=CELEX:32023D1795&qid=1710923455391).

To use Facebook tools, your personal data may be transferred to the United States, where Meta Platforms Inc. servers are located.

Meta Platforms Inc. is listed in the Data Privacy Framework program participant list (link: https://www.dataprivacyframework.gov/s/participant-search), therefore, the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data under the EU-U.S. Data Privacy Framework (link: https://eur-lex.europa.eu/legal-content/PL/TXT/PDF/?uri=CELEX:32023D1795&qid=1710923455391).

HOW WE PROCESS YOUR PERSONAL DATA RECEIVED FROM OTHER DATA ADMINISTRATORS (E.G., FACEBOOK)

Our online store allows for:

- sharing store content on your Facebook profile,
- sharing store content on your Instagram profile.

In such cases, we receive your personal data not directly from you, but from the services providing these functionalities, i.e.: Facebook, Instagram, Pinterest, Twitter, LinkedIn. To enable you full control over your data, we provide information below on how we process your personal data.

1. Categories of relevant personal data
  We process the following categories of relevant personal data:

identification data (i.e., personal data that you have published on your Facebook or Instagram profile, primarily first name, last name, nickname, email address, and image).

1. Source of personal data
  Your personal data originates from the service:

1. - Facebook, whose administrator is Meta Platforms Ireland,
  - Instagram, whose administrator is Meta Platforms Ireland.

1. Purposes and legal bases for processing personal data
  The personal data we have obtained will be processed for the following purposes:

Purpose	Personal data	Legal basis for processing	Data retention period
sharing content on your Facebook profile	first name, last name, image	Art. 6(1)(f) of the GDPR, i.e., processing for the purpose of pursuing the Administrator’s legitimate interest, which consists of enabling you to disseminate online store content using Facebook’s functionalities	until an objection to the processing of personal data is raised
sharing content on your Instagram profile	nickname, image	Art. 6(1)(f) of the GDPR, i.e., processing for the purpose of pursuing the Administrator’s legitimate interest, which consists of enabling you to disseminate online store content using Instagram’s functionalities	until an objection to the processing of personal data is raised

WHAT RIGHTS DO YOU HAVE REGARDING OUR PROCESSING OF YOUR PERSONAL DATA?

Under the GDPR, you have the right to:

request access to your personal data,
request rectification of your personal data,
request erasure of your personal data,
request restriction of personal data processing,
object to the processing of personal data,
request data portability of personal data.

If you submit any of the above-mentioned requests to us without undue delay – and in any case within one month of receiving the request – we will provide you with information on the actions taken in response to your request.

If necessary, we may extend the one-month period by another two months due to the complex nature or number of requests.

In any case, we will inform you within one month of receiving the request about the extension of the deadline and provide you with the reasons for the delay.

Right of access to personal data (Art. 15 GDPR)

You have the right to obtain confirmation as to whether or not we are processing your personal data. If we are processing your personal data, you have the right to:

access to personal data,
obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the planned period of data retention or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with the President of the Personal Data Protection Office, the source of this data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of this data outside the European Union;
obtain a copy of your personal data.

If you wish to request access to your personal data, please send your request to: sklep@plexigo.pl.

Right to rectification of personal data (Art. 16 GDPR)

If your personal data is inaccurate, you have the right to request us to rectify your personal data without undue delay. You also have the right to request us to complete your personal data. If you wish to request rectification or completion of your personal data, please send your request to: sklep@plexigo.pl.

Right to erasure of personal data, also known as the “right to be forgotten” (Art. 17 GDPR)

You have the right to request the erasure of your personal data when:

your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you have withdrawn specific consent, to the extent that personal data was processed based on your consent;
your personal data has been unlawfully processed;
you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of personal data is related to direct marketing;
you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by us or a third party.

Despite submitting a request for erasure of personal data, we may continue to process your data for the purpose of establishing, asserting, or defending claims, of which you will be informed.

If you wish to request the erasure of your personal data, please send your request to: sklep@plexigo.pl.

Right to request restriction of personal data processing (Art. 18 GDPR)

You have the right to request the restriction of processing of your personal data when:

you contest the accuracy of your personal data – in such a case, we will restrict the processing of your personal data for a period enabling us to verify the accuracy of such data;
the processing of your data is unlawful, and you request the restriction of processing of your personal data instead of erasure;
your personal data is no longer needed for the purposes of processing, but it is required by you for the establishment, assertion, or defense of legal claims;
you have objected to the processing of your personal data – pending the verification whether our legitimate interests override the grounds indicated in your objection.

If you wish to request the restriction of processing of your personal data, please send your request to: sklep@plexigo.pl.

Right to object to the processing of personal data (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the personal data Administrator or a third party;
processing for direct marketing purposes.

If you wish to object to the processing of your personal data, please send your request to: sklep@plexigo.pl.

Right to data portability of personal data (Art. 20 GDPR)

You have the right to receive your personal data from us in a structured, commonly used, and machine-readable format, and to transmit it to another personal data administrator.

By default, we will provide you with your personal data in CSV format. If you prefer the data to be provided to you in a different format, please specify your preferred format in your request. Where possible, we will endeavor to provide you with the data in your preferred format.

You may also request that we transmit your personal data directly to another administrator (where technically feasible).

If you wish to request the portability of your personal data, please send your request to: sklep@plexigo.pl.

Can you withdraw your expressed consent to the processing of personal data?

You may withdraw your given consent to the processing of your personal data at any time. The withdrawal of consent to the processing of personal data does not affect the lawfulness of processing carried out by us based on your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, please send your request to: sklep@plexigo.pl.

If you wish to withdraw consent for the processing of personal data for the “Newsletter” service, you can unsubscribe here.

Complaint to the supervisory authority

If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office, who replaced GIODO on May 25, 2018.

You can find more information here.

Cookies

General Information

When browsing the Online Store’s websites, “cookies” (hereinafter referred to as Cookies) are used. These are small text files stored on your end device in connection with your use of the Online Store. Their purpose is to ensure the proper functioning of the Online Store’s websites.

These files allow us to identify the software you use and customize the Online Store to your individual needs.

Cookie files typically contain the name of the domain they originate from, their storage duration on the device, and an assigned value.

Security

The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted or malicious software to enter your devices through Cookies.

Types of Cookies

We use two types of Cookies:

Session Cookies: These are stored on your device and remain there until the end of the browser session. The saved information is then permanently deleted from your device’s memory. The Session Cookie mechanism does not allow for the collection of any personal data or confidential information from your device.
Persistent Cookies: These are stored on your device and remain there until they are deleted. Ending a browser session or turning off the device does not remove them from your device. The Persistent Cookie mechanism does not allow for the collection of any personal data or confidential information from your device.

Purposes

We also use third-party Cookies for the following purposes:

configuring the Online Store;
promoting the online store on Facebook, administered by Facebook Ireland Ltd. Facebook’s privacy policy is available at the following link: https://pl-pl.facebook.com/privacy/explanation;
promoting the online store on Instagram, administered by Facebook Ireland Ltd. Instagram’s privacy policy is available at the following link: https://help.instagram.com/519522125107875;
creating statistics that help understand how Online Store users interact with the websites, which allows for improving their structure and content through Google Analytics analytical tools, administered by Google Ireland Ltd. based in Ireland. Google’s privacy policy is available at the following link: https://policies.google.com/privacy?fg=1;
determining the Customer’s profile to display tailored content in advertising networks, using the Google Ads online advertising tool, administered by Google Ireland Ltd. based in Ireland. Google’s privacy policy is available at the following link: https://policies.google.com/privacy?fg=1;
presenting and expressing opinions on the websites of the external online service Ceneo.pl, administered by Ceneo.pl sp. z o.o. based in Poznań. The cookie policy is available at the following link: http://info.ceneo.pl/polityka_plikow_cookies;
collecting information about User behavior using the Facebook Pixel tool, administered by Meta Platforms Ireland Limited, based in Ireland. Facebook’s privacy policy is available at the following link: https://www.facebook.com/help/cookies/.

To learn about the rules for using Cookies, we recommend reviewing the privacy policies of the aforementioned companies.

Cookies may be used by advertising networks, particularly the Google network, to display advertisements tailored to your preferences. For this purpose, information about your online activity or the time you spent on a website may be stored.

To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at the link https://www.google.com/ads/preferences/.

Using your web browser settings or service configuration, you can independently and at any time change your Cookie settings, specifying the conditions for their storage and access to your device by Cookies. You can modify these settings to block automatic Cookie handling in your web browser settings or to be informed each time a Cookie is placed on your device. Detailed information about the possibilities and methods of handling Cookies is available in your software (web browser) settings.

Others
Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.
Necessary	Necessary
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
Advertisement
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Functional
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

Privacy Policy