PRIVACY POLICY OF THE ONLINE SHOP www.dropmax.pl

General information

This document specifies the privacy principles applicable in the Online Shop www.dropmax.pl (hereinafter referred to as the “Online Shop”). The Administrator of the Online Shop is MarekBialic who conducts business activity under the business name BM-TECH Marek Stefan Bialic, entered to the Central Registration and Information on Economic Activity (CEIDG) maintained by the Minister of Development, address: Dębowa 14 lok. 3, 72-005Warzymice, Taxpayer Identification Number (NIP): 8392446099, National Official Register of Business Entities (REGON) number: 812415540.

Personal information

1. The Administrator collects information provided voluntarily by the Online Shop Customers. Moreover, the Administrator may record the information about connection parameters, like IP addresses, for technical purposes, for server administration and for collection of general, statistical demographic information (e.g. about the region from which the connection comes), and also for security purposes.
2. Personal information collected by the Administrator shall be processed in accordance with the provisions of the Data Protection Act of 29 August 1997 (Journal of Laws 1997, No. 133, Item 883, as amended) and the Act on Rendering Electronic Services of 18 July 2002 (Journal of Laws 2002, No. 144, Item 1204, as amended) solely under the authorization for data processing and solely for the purposes of processing the Order placed by the Customer, archiving, or for electronic services rendered by the Administrator, and for other purposes specified in the Terms and Conditions.
3. The Administrator shall make an extra effort in order to protect privacy and information about the Online Shop Customers provided to him. The Administrator shall exercise due diligence when selecting and applying appropriate technical measures, including those of programming and organizational nature, in order protect the processed data, and in particular he shall protect the data from unauthorized access, disclosure, loss and destruction, unauthorized modification, and also from their processing with the breach of the applicable provisions of law.
4. As Customers provide their personal information voluntarily, they shall have the right to access their personal information, to correct it, and they may also request the Administrator to remove the personal information they have provided previously from the data files maintained by the Administrator, subject to the provisions of the following sentence. The Administrator may refuse to remove the data if the Customer - with his current behaviour in the Online Shop - has breached the provisions of this document or of the Terms and Conditions or of applicable provisions of law, and if it is necessary to retain the data in order to clarify those circumstances and determine the Customer’s responsibility.
5. If the Customer’s data change, the Customer who has registered in the Online Shop may modify them, after logon in the Online Shop.
6. If the Customer has subscribed for the newsletter, the Administrator shall send, to the electronic mail address provided by the Customer, messages with information about products and services available in the Online Shop, and also information about organized competitions, promotions.
7. The Administrator may entrust processing of the Customers’ personal information to third parties which perform specific services, in particular delivery of the order, payment processing, assessing the Customer’s satisfaction with the Online Shop, i.e.:
1. to the Operator Poczta Polska S.A. with its seat in Warsaw (ul. Hiszpańskich 8, 00-940 Warszawa) as the data controller entered into the Register of Entrepreneurs maintained by the District Court for the capital city of Warsaw, XII Commercial Division of the National Court Register, under the No. 0000334972, with the share capital of PLN 774,140,000.00, paid in full, with the Taxpayer Identification Number (NIP): 525-00-07-313, an entity rendering postal services within the meaning of the Postal Services Act of 29 December 2012 (Journal of Laws 2012.1529). The transferred data shall be the data necessary for processing of the order, and in particular: name, surname, address.
2. to the Operator DPD sp. z o.o. with its seat in Warsaw (ul. Mineralna 15, 02-274 Warszawa) as the data controller entered into the Register of Entrepreneurs maintained by the District Court for the capital city of Warsaw, XIII Commercial Division of the National Court Register, under the No. 0000028368, with the share capital of PLN 228,604,000.00, with the Taxpayer Identification Number (NIP): 526-02-04-110, an entity rendering postal services within the meaning of the Postal Services Act of 29 December 2012 (Journal of Laws 2012.1529). The transferred data shall be the data necessary for processing of the order, and in particular: name, surname, address.
3. to the Operator UPS Polska sp. z o.o. with its seat in Warsaw (ul. Prądzyńskiego 1/3, 01-222 Warszawa) as the data controller entered into the Register of Entrepreneurs maintained by the District Court for the capital city of Warsaw, XII Commercial Division of the National Court Register, under the No. 0000036680, with the share capital of PLN 5,027,000.00, with the Taxpayer Identification Number (NIP): 522-10-04-200, an entity rendering postal services within the meaning of the Postal Services Act of 29 December 2012 (Journal of Laws 2012.1529). The transferred data shall be the data necessary for processing and transfer of the order, and in particular: name, surname, address.
4. to the Operator InPost S.A. with its seat in Kraków (ul. Malborska 130, 30-624 Kraków) as the data controller entered into the Register of Entrepreneurs maintained by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the National Court Register, under the No. 0000536554, with the share capital of PLN 11.558.000,00, paid in full, with the Taxpayer Identification Number (NIP): 6793087624, an entity rendering postal services within the meaning of the Postal Services Act of 29 December 2012 (Journal of Laws 2012.1529). The transferred data shall be the data necessary for processing of the order, and in particular: name, surname, address.
5. to the Operator of the online payment system PaypalPolska Sp. z o.o. with its seat in Warsaw (ul. EmiliiPlater 53, 00-113 Warszawa) as the data controller entered into the register of entrepreneurs maintained by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under the No. 0000289372, with the share capital of PLN 506,500 paid in full, with the Taxpayer Identification Number (NIP): 5252406419, an entity rendering payment services within the meaning of the Payment Services Act of 19 August 2011 (Journal of Laws 2011.199.1175 as amended). The transferred data shall be the data necessary for processing of the payment by PaypalPolska, and in particular: name and surname, electronic mail address, telephone number.
6. to the Operator IAI S.A. with its seat in Szczecin (al. Piastów, 70-064 Szczecin), entered into the register of entrepreneurs maintained by the District Court for Szczecin-Centrum in Szczecin, XIII Commercial Division of the National Court Register, under the No. 0000325245, with the Taxpayer Identification Number (NIP): 8522470967 and National Official Register of Business Entities (REGON) number:32014770600000, an entity rendering payment services and providing platform for the Online Shop. The transferred data shall be the data necessary for processing of the payment and providing platform for the Online Shop, in particular: name and surname, electronic mail address, telephone number.