1. This Privacy Policy sets out the principles for processing your personal data and the conditions for maintaining your confidentiality. The provision of personal data, as well as your consent to its processing, is entirely voluntary. Any personal data provided to us is processed only to the extent and for the purpose for which you have given your consent. However, if you decide not to provide us with the data necessary to process your enquiry or order, and you do not consent to its processing, we will unfortunately not be able to answer your questions or process your order.

 The controller of the personal data is:

TW Plast Sp. z o.o. with registered office in Piaseczno, 05-500 Piaseczno, 38 Puławska Street

1. 1. Method of collection of personal data.

The personal data collected by the Administrator is provided directly by the user by filling in forms available online, during e-mail or telephone contact. Providing personal data by the users is voluntary, however it is necessary for the transaction concluded through the online shop.

1. 1. Scope of personal data collected.

Buyer data - an adult user who purchases products offered by the Administrator via an online shop is obliged to provide: name and surname, e-mail address, contact telephone number, address of residence, shipping address. If the user decides to create a profile, the Administrator shall also process the history of orders placed by the buyer.

During registration you will be asked to provide the data necessary to set up an account in the online shop, so that with each subsequent purchase you will not need to fill in the entire order form again. 

At the time of registration you must provide:

name and surname - necessary for issuing a sales document later and addressing the parcel,

address (street, house number and/or number of house and premises, postal code and city) - necessary later to address the parcel;

e-mail - necessary for logging in and communication related to the use of the online shop

telephone number - necessary if there are difficulties in processing the order.

Data provided during registration are not used in any other way.

1. 1. Data collected automatically when visiting the shop "cookies"

The system may automatically collect "cookies" (cookies) - a small text file stored on your computer or mobile device and downloaded from there each time you visit the site online uses "cookies" to make visits to the site easier and more enjoyable. These cookies are not used to store personal information and are not disclosed to other parties.

If you block cookies, you may not be able to use certain features of the website.

1. 1. Purpose of data collection

Personal data shall be collected for the purpose of

1. 1. The provision of data is voluntary, but necessary to set up an account and use the available functionalities,

   2. to execute orders made in the online shop, providing the data is voluntary, but necessary to conclude and execute the Sales Agreement.

1. 1. Sharing of personal data.

Access to personal data is available to:

1. 1. Administrator's employees/co-workers responsible for operation and maintenance

   2. Entities operating ICT systems or providing ICT tools to the Controller

   3. Postal or courier companies

   4. Entities carrying out payment activities for the Controller of personal data

   5. Entities providing accounting, tax and legal services to the Controller of personal data

1. 1. Period of retention of personal data

Personal data will be stored for no longer than it is necessary for the purpose for which the data are processed. Thus, personal data shall be stored for the period necessary for the performance of the contract and the realization of any claims resulting from this contract that may arise both for the Administrator and the data subject. In other cases, personal data shall be stored for no longer than the data subject consents to the processing of personal data. In case the consent is withdrawn, the personal data shall be immediately deleted by the Administrator.

Users' personal data will be stored:

1. 1. personal data used to complete an order will be stored for five years from the end of the year in which the Goods are sold,

   2. in the case of deletion of an account as a result of the request of a User who has never placed an Order, the personal data will be deleted immediately;

   3. in the event of deletion of an account as a result of a request made by a User who has placed at least one Order, the data relating to the individual Orders shall be stored for five years from the end of the year in which the sale took place.

   4. Rights of data subjects

Every person who has provided his or her data to the Controller is entitled to:

1. 1. request from the Controller access to personal data, rectification, erasure or restriction of processing,

   2. to object to the processing of personal data by the Controller

   3. data portability,

   4. lodge a complaint to the supervisory authority, i.e. the President of the Office for Personal Data Protection,

   5. withdraw consent to the processing of personal data.

The User may, at any time, resign from receiving marketing e-mails from the Administrator or prohibit the transfer of their personal data to third parties (courier companies), provided that the prohibition does not concern the transaction being performed.

The decision concerning the execution of the above rights shall be notified to the Personal Data Controller by e-mail or by telephone. The execution of the above rights will be taken into account by the Personal Data Controller as soon as possible after it is received, but not longer than 14 days from the date of the request.

In order to process your order, the Data Controller uses the e-mail address you provide, and only in special situations, the telephone number you provide. 

If you have any questions or concerns about this privacy policy, please contact the Data Controller by sending an e-mail to iodo@twplast.pl.

If you wish to update or delete your personal data, you should either do it yourself or contact the Data Controller by sending an e-mail to iodo@twplast.pl. 

Data security.

The personal data controller has implemented a personal data processing policy that ensures effective protection of personal data. 

Only employees who have been trained in accordance with the Data Protection Policy and have signed the relevant declarations obliging them to protect personal data, have access to personal data.

The Personal Data Controller has applied technical and organisational measures to ensure the protection of the processed data in accordance with the requirements set out in data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ("RODO") and the Personal Data Protection Act.

The personal data transmitted from the website to the operator's server is protected by an encrypted SSL connection.

1. 8. Responsibility.

The administrator undertakes to apply the rules described in this document to guarantee the confidentiality of users.

1. 8. Changes to the privacy policy.

The personal data controller reserves the right to change the privacy policy if the applicable law requires it, the technological conditions of the online shop change, or the change introduces a standard higher than the minimum required by law. 

Users will be notified of such change by email (to the email address indicated at registration). Notification will be sent at least 30 days before the new privacy policy takes effect.

The current text of the privacy policy can always be found at www.twplast.pl