1. Personal Data protection principles
1.1. Considering the nature, scope, context and purpose of processing and risk of violation of rights and freedoms of natural persons, Aristar makes every effort to process personal data in compliance with the purpose for which data is collected as well as to use data in compliance with the intended purpose.
1.2. Personal Data Controller is Aristar.
1.3. Any and all entrusted or provided personal data is processed in compliance with provisions of law, in particular in compliance with the Act of 18 July 2002 on provision of electronic services (the Official Journal of Laws of the Republic of Poland [Dz.U.] No. 144, item 1204), telecommunication law (the Official Journal of Laws of the Republic of Poland [Dz.U.] 2004, No. 171, item 1800) and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR)
2. Safety procedures and principles of data storage
2.1. Aristar ensures the safety of your personal data by applying appropriate technical and organizational measures used so as to prevent unlawful processing and accidental loss, destruction and damage.
2.2. Aristar makes every effort so that collected personal data is:
i. correct, accurate, up to date and processed in a lawful manner;
ii. processed in compliance with rights to which data subjects are entitled;
iii. collected for specified, explicit and legitimate purposes and not processed in a manner that is incompatible with those purposes;
iv. processed within the scope necessary to achieve the purpose, in compliance with the principles of personal data minimization;
v. stored in a safe manner for a duration of time no longer than is necessary.
3. Purposes and period of time for using Personal Data:
3.1. Personal Data will be processed by Aristar for the purpose and scope that is:
i. necessary to respond to questions generated by forms available at the Website – legal basis of such processing is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR, i.e. to undertake actions at the request of the data subject prior to entering into an agreement, and on the basis of a legitimate interest of the Data Controller, which is the necessity to respond to users.
ii. on the basis of the user’s consent, for marketing of the Data Controller’s products – legal basis of such processing is Article 6(1)(a) and Article 6(1)(f) GDPR, i.e. consent of the user and a legitimate interest of the Data Controller, which is marketing of his own products.
iii. on the basis of the user’s consent, for marketing of the Data Controller’s products via the Online Catalogue – legal basis of such processing is Article 6(1)(a) and Article 6(1)(f) GDPR, i.e. consent of the user by expressing his/her intention to obtain access to the Online Catalogue as well as a legitimate interest of the Data Controller, which is marketing of his own products.
3.2. Communication with individual users will be carried out only to respond to questions. After finished communication, personal data will be processed for purposes and for the period of time required to secure possible claims.
3.3. Personal data used for marketing of the Data Controller’s services will be processed until filing the objection or revoking the consent for personal data processing by the user.
3.4. Personal data obtained in connection with having access to the Online Catalogue will be processed only for the duration of such access and activities of the created account.
3.5. Aristar does not make personal data of the users available to third parties, with the exception of:
i. entities which are authorized under provisions of law, e.g. competent public authorities;
ii. entities which, at the request of Aristar, provide services that require personal data processing, e.g. accounting offices, IT service providers, etc.
4. Personal Data collection
4.1. Personal data, such as name and surname, company name and e-mail address, is obtained from the form available at the Website.
4.2. Providing personal data is voluntary. Failure to provide name and surname, company name and e-mail address will make it impossible to send request in the contact form.
5. Cookies files
While using the Website, information of the users is collected through the so called “cookies” files, which are small files saved on the user’s computer, in which information on the user’s devices is stored for proper functioning of the website and to collect statistics about the user. The user may at any time block receiving cookies using settings of his/her browser. For more information on the cookies, please see Policy of Cookies Files.
6. Rights of the user
6.1. Aristar acknowledges that each person has the right to request access to his/her personal data, rectify data, delete it, limit the processing and transfer data.
6.2. Each user has the right to limit processing of his/her personal data, object to data processing and the right to obtain copies of such data or information on where data is made available.
6.3. The user has the right to object to data processing on the basis of the legitimate interest of the administrator.
6.4. The user, who has given his/her consent to the processing of his/her personal data for marketing of the Data Controller’s services, can cancel it at any time. However, we hereby inform you that the withdrawal of such consent will have no influence on the compliance with the right to processing, which was made under the consent granted prior the withdrawal.
6.5. In Poland, the supervisory authority for personal data is the President of the Personal Data Protection Office. Each user has the right to make a complaint on his/her data processing which violates applicable provisions of law.