PRIVACY POLICY AND COOKIE POLICY

Data Controller: ALU-MARKET SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
Registered Office and Address: ul. Siennicka 25B, Hala E, 80-758 Gdańsk, Poland
Registration Numbers: NIP: 5833485917 | REGON: 526102495 | KRS: 0001052751
GDPR Contact: E-mail: profile@alu-market.com / bramy@alu-market.com | Tel.: +48 796 429 216 / +48 732 228 551

1. GENERAL PROVISIONS AND DATA CONTROLLER

1.1. This Privacy Policy sets out the rules for the processing and protection of personal data of users of the website https://alu-market.pl (hereinafter referred to as the “Store”).

1.2. The Data Controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) is ALU-MARKET Sp. z o.o., with its registered office in Gdańsk.

1.3. Protecting the privacy and personal data of Buyers is a priority for the Data Controller. Personal data is processed in accordance with applicable Polish and European Union legislation.

2. SCOPE AND PURPOSES OF PERSONAL DATA PROCESSING

The Data Controller collects and processes users’ personal data only to the extent necessary to fulfil specific business and legal purposes:

Placing and Processing Orders: Processing of data (first name, last name, delivery address, e-mail address, telephone number, company name and NIP/EU VAT number) for the purpose of concluding and performing the sales contract (placing orders via the shopping cart, by telephone or by e-mail) — on the basis of Article 6(1)(b) of the GDPR.

Handling Enquiries and Contact (Contact Form, Telephone, JivoChat): Processing of data provided during telephone contact, via the contact form or live chat (JivoChat) for the purpose of responding to technical and commercial enquiries and preparing quotations — on the basis of Article 6(1)(f) of the GDPR (the legitimate interest of the Data Controller).

Payments and Accounting: Processing of data for the purpose of issuing invoices, maintaining accounting records and processing payments by traditional bank transfer to the Data Controller’s bank account — on the basis of Article 6(1)(c) of the GDPR (legal obligation).

Handling Complaints and Returns: Processing complaints and returns of standard goods — on the basis of Article 6(1)(c) of the GDPR.

3. NO USER ACCOUNT REGISTRATION AND NO NEWSLETTER

3.1. The Alu-market.pl Store does not require or provide User Account registration. Purchases are made in guest mode.

3.2. The Data Controller does not send newsletters, promotional e-mail/SMS messages, or conduct mass marketing subscriptions. Personal data is not used for direct marketing purposes without the User’s explicit consent.

4. DATA RECIPIENTS AND TRANSFER TO THIRD PARTIES

Buyers’ personal data is disclosed exclusively to trusted third parties to the extent necessary for the proper provision of services:

Physical Delivery of Goods: Distributors and providers of courier and transport services responsible for delivering oversized and standard shipments within Poland and the European Union, including, among others: DPD, DHL, Erontrans, Moldtrans, as well as other specialised carriers.

Live Chat Service Provider: The JivoChat service (JivoSite Inc.), which provides real-time communication.

Legal, Accounting and Hosting Services: Accounting offices, hosting providers and IT service providers responsible for operating and maintaining the Store’s infrastructure.

5. DATA RETENTION PERIOD

5.1. Data related to the processing of orders and the issuance of sales documents is stored for a period of 5 years, calculated from the end of the calendar year in which the tax payment deadline expired (in accordance with applicable tax and accounting regulations).

5.2. Data provided via the contact form, e-mail, telephone or JivoChat is stored for the period necessary to handle the enquiry or until the User effectively objects to the processing of their data.

6. COOKIE FILES (COOKIES)

6.1. The Store uses only technical cookies that are necessary for the proper functioning of the website, maintaining the user session and correctly processing orders through the shopping cart.

6.2. The Store does not use cookies for tracking user behaviour, profiling or advertising purposes.

6.3. If analytical or marketing cookies are introduced in the future, they will only be activated after obtaining the User’s prior and explicit consent.

7. USER RIGHTS (GDPR)

Each User is entitled to the following rights under the GDPR:

1. The right to access their personal data and obtain a copy thereof (Article 15 of the GDPR);
2. The right to rectify (correct) their personal data (Article 16 of the GDPR);
3. The right to erasure of personal data (“the right to be forgotten”) in the cases specified in Article 17 of the GDPR;
4. The right to restriction of the processing of personal data (Article 18 of the GDPR);
5. The right to object to the processing of personal data (Article 21 of the GDPR);
6. The right to lodge a complaint with the competent supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. DATA SECURITY AND CHANGES TO THE PRIVACY POLICY

8.1. The Data Controller implements appropriate technical and organisational measures to ensure the protection of processed personal data, in particular protecting the data against disclosure to unauthorised persons, loss or damage (SSL encryption).

8.2. This Privacy Policy enters into force on the date of its publication on the Store’s website.