Privacy policy
The controller of your personal data is NOBA-EXIM Bartłomiej Norkowski Kawęczyn 1, 87-123 Dobrzejewice Poland Tax Identification Number NIP 879-127-71-49, National Business Registry Number REGON 871569582.
You may contact the Controller:
- in writing - mailing address: Kawęczyn 1, 87-123 Dobrzejewice Poland
- by e-mail sent to: office@noba-project.com
- by telephone - on +48600131800.
Your personal data in your capacity as a user ("the User") of www.noba-project.com ("the Site") is processed in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the General Data Protection Regulation) ("RODO") and in accordance with the Act on the provision of services by electronic means of 18 July 2002.
Is your data safe?
The controller undertakes to take all the security and data protection measures required by the applicable legislation and collect the data with due care and adequately protect them from being accessed by unauthorised persons.
Purposes of processing personal data
The controller may process your personal data if this is necessary for you to use the Site.
The basis for processing your personal data is to enable you to use the Site, including for the purpose of completing the Contact Form.
The purposes of the processing of your personal data relate to:
- providing services by electronic means consisting in:
- concluding with the User of the Site and performing contracts for the sale of products ordered by the User via the Site, including the return and exchange of products and the processing of complaints - the legal basis for processing is art. 6.1(b) RODO,
- setting up and operating the User's account on the Site - the legal basis for the processing is art. 6.1(b) RODO,
- complying with legal obligations, including bookkeeping, accounting, and financial reporting - the legal basis for the processing is art. 6.1(c) RODO,
- pursuing the legitimate interest of the controller (the legal basis for the processing is art. 6.1(f) of the RODO), which is understood to mean:
- conducting marketing activities, including a newsletter,
- communicating with you in relation to your message sent via the contact form,
- ensuring the proper operation of the Site, including the contact form, registration form, and order form,
- archiving, keeping statistics and possible assertion or defence of claims relating to the performance of the contract provided electronically.
Data processing time
Your personal data will be processed for the period necessary to fulfil the purposes for which the data are processed, i.e.:
- until the expiry of the statute of limitations for any claims relating to the operation of the Site, including those arising from contracts concluded via the Site;
- until such time as a legitimate objection is lodged in respect of data processed under the legitimate interest of the controller,
- until such time as you withdraw your consent to the sending of marketing information by e-mail or telephone or object to the processing of your data for marketing purposes,
- the expiry of the legal obligation to retain data, including the obligation to retain accounting documents relating to contracts concluded.
Recipient categories
Your data may be transferred to entities whose services the controller uses to fulfil its obligations and conduct its business. These are the following categories of entities: IT service providers, accounting service providers, marketing service providers, transport and postal companies, online payment operators.
In addition, your data may be communicated to other entities authorised to access your data to the extent and for the purpose specified by law.
Your personal data will always be processed using appropriate data protection and security measures.
The Controller does not intend to transfer your personal data to countries outside the European Economic Area or to any international organisation.
Automated decision-making/profiling
The Controller will not make decisions against you by automated means, including profiling.
Your rights
You have the right to:
- access your personal data and the right to request their rectification, erasure or restriction of their processing;
- data portability;
- withdraw your consent to the processing of your personal data - to the extent that the processing of your personal data is based on consent (withdrawal of consent does not affect the lawfulness of processing that was carried out on the basis of consent before its withdrawal);
- object to the processing of your personal data - to the extent that the processing of your personal data is based on a legitimate interest of the Controller;
- lodge a complaint with the data protection supervisory authority (President of the Data Protection Authority) if you are of the opinion that the processing violates the RODO.
To exercise your rights, contact the Controller.
Do you have to provide your personal data?
Providing personal data is voluntary but necessary for the purposes indicated in the Privacy Policy.
COOKIE POLICY
Cookies
Cookies are small text/number files that are stored by an information and communication system on your information and communication system (on your computer, telephone or other device from which you connect to the Site) when you browse the Site and allow you to be identified when you connect to the Site again from the device (e.g. computer, telephone) on which they are stored.
The following types of cookies are used on the Site:
- session cookies, which are automatically deleted when you close your web browser;
- persistent cookies, which are stored on your device for a limited period of time; the storage of these cookies is not dependent on your browser being closed;
- custom cookies set by the Site;
- third-party cookies set by other services, i.e. Google Analytics.
The Site uses its own and third-party cookies.
The controller uses the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to create statistics, analyse the functioning of the Site, improve the quality of the use of the Site (based on the legitimate interest).
The main purpose of the Controller's use of cookies is to manage the Site and to improve the quality of the content it provides. Cookies are necessary for the correct display and operation of the Site. The controller may also process the data contained in the cookies in order to keep anonymous statistics and analyses showing how the Site is used, and the average length of visits to the Site. Cookies are not used to identify users of the Site.
Cookies are used with your consent. The controller does not sell or share them with other companies. Your consent is given via the appropriate settings of the software, in particular the web browser, installed on the telecommunications device you use to view content on the Site.
Most browsers accept cookies by default. You may, at any time, withdraw or change the scope of your previously given consent to the use of cookies on the Site and delete them from your browser. You can restrict or disable cookies in your browser at any time by setting it so that it blocks cookies or warns you before a cookie is stored on the device you are using. In this case, however, you may not be able to access certain content on the Site and, in extreme cases, the correct display of the Site may be blocked altogether.
Use of the Site involves sending requests to the server on which the site is stored. Every request made to the server is recorded in the server logs. The logs include, among other things, your IP address, the date and time of the server, information about your web browser and the operating system you are using. The logs are saved and stored on the server. The data stored in the server logs are not associated with specific users of the site and are not used by me to identify you personally. The server logs are only ancillary material for the administration of the site, and their content is not disclosed to anyone other than those authorised to administer the server.