1. General Information

The data controller is Aroks Group Sp. z o.o., based in Lublin, NIP 8133842216. Data protection is carried out in accordance with applicable laws, and data is stored on secured servers.

The glossary of the Personal Data Protection Policy is used for the interpretation of terms.

For better readability of the Privacy Policy, the term “Data Subject” is replaced with “You” or “User,” and “Controller” is replaced with “We.” The term “GDPR” refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

We respect the right to privacy and take care of data security. To ensure this, we use, among other things, a secure communication encryption protocol (SSL).

Personal data provided in the registration form is treated as confidential and is not visible to unauthorized persons.

Registration on the Website, the use of any services on the Website (including as a User who has not completed the registration process), as well as posting any information, photos, advertisements, or comments on the Website, confirms the User’s consent to these rules and requires full compliance with their terms.

2. Data Controller

The Controller processes only the data that the User of the platform voluntarily provided in the registration form: name, phone, email, and the actions performed by the User on the Website. Personal data is processed:

• in accordance with data protection regulations;

• in accordance with the implemented Privacy Policy;

• to the extent and for the purpose necessary for the proper provision of Services, and to the extent and for the purpose necessary to fulfill legitimate interests (lawful purposes), without violating the rights and freedoms of the person to whom the data relates.

Every person whose data is being processed (if we are the controller) has the right to access the data, rectify it, delete it, or restrict its processing, as well as the right to object and the right to lodge a complaint with the supervisory authority.

You can contact the person supervising the processing of personal data by email at: aroksds@gmail.com.

We reserve the right to process Your data after the withdrawal of consent only to the extent necessary to pursue possible claims in court or if national, EU, or international regulations require us to retain data.

The Controller has the right to provide the personal data of the User of the platform and other data to entities authorized under applicable laws (e.g., law enforcement authorities).

Personal data may be deleted as a result of withdrawing consent or submitting a lawful objection to data processing.

The Service Provider provides personal data to entities authorized under applicable laws or solely to provide services to the User of the platform.

Personal data is processed only by persons authorized by us or processors with whom we closely cooperate.

3. Cookies

The Website uses cookies. These are small text files sent by a web server and stored by the computer browser software. When the browser reconnects to the site, the site recognizes the type of device from which the User connects. Parameters allow the information contained in them to be read only by the server that created them. Cookies make it easier to use previously visited websites. The collected information includes the IP address, type of browser used, language, type of operating system, internet service provider, information about time and date, location, and information sent to the site via the contact form.

Types of Cookies Used

We use the following cookies on our Website:

• Session cookies: stored on the User’s device and remain there until the session of a given browser ends. The stored information is then permanently deleted from the device’s memory. The session cookie mechanism does not allow the collection of any personal data or confidential information from the User’s device.

• Persistent cookies: stored on the User’s device and remain there until they are deleted. Ending a session of a given browser or turning off the device does not delete them from the User’s device. The persistent cookie mechanism does not allow the collection of any personal data or confidential information from the User’s device.

Purposes of Using Cookies

The Controller uses its own cookies for the following purposes:

• Service configuration: recognizing the User’s device and its location and properly displaying the website, tailored to the User’s individual needs; font size, website appearance, etc.

• Implementation of processes necessary for full website functionality: adjusting the content of the website to the preferences of the User and optimizing the use of the website. In particular, these files allow recognizing the basic parameters of the User’s device and properly displaying the website, tailored to the User’s individual needs.

• Analysis, research, and audit of views: creating anonymous statistics that help understand how Users use the platform, which allows improving its structure and content.

External Cookies

To ensure the safety and reliability of the platform, the Controller uses external cookies for the following purposes:

• Collecting general and anonymous statistical data through analytical tools Google Analytics [cookie administrator: Google Inc based in the USA];

• Using interactive functions to popularize the service through social networks Facebook.com [cookie administrator: Facebook Inc based in the USA or Facebook Ireland based in Ireland].

Cookie Management

The User can independently and at any time change the cookie settings, specifying the conditions for their storage and access to the User’s device via cookies. Changes to the settings mentioned in the previous sentence can be made by the User through the settings of their web browser. These settings can be changed, in particular, to block the automatic handling of cookies in the web browser settings or to inform about each placement of cookies on the User’s device. Detailed information about the possibilities and ways of handling cookies is available in the software settings (web browser).

The User can delete cookies at any time using the available functions in the web browser they use.

Limiting the use of cookies may affect some of the functionalities available on the platform.

4. Purposes and Legal Basis of Processing

The purposes of processing Your data are specified. As a Controller, we will process Your data for the following purposes:

• Accepting an application to use the service of intermediary services, direct marketing of offered services;

• Our legitimate interest, which involves processing data to establish, pursue, or defend possible claims (Art. 6(1)(f) GDPR);

• Conducting all necessary activities related to ensuring complete security;

• Archiving data related to participation applications;

• Sending responses to submitted comments, letters, requests, objections, complaints;

• Fulfilling the Controller’s legal obligations.

5. Information about Registration Forms

The Website collects information voluntarily provided by the user.

The Website may also store information about connection parameters (timestamp, IP address).

Personal data provided in the registration form is recorded by the Website’s Controller, by persons authorized by us, or by organizations.

A person who fills out the registration form has the right to access, modify, and request cessation of processing their data at any time.

6. Right to Object

You have the right to object to the processing of Your data described above at any time. We will cease processing Your data for these purposes unless we can demonstrate that there are valid, legitimate grounds for processing Your data that override Your interests, rights, and freedoms, or Your data is necessary for us to establish, pursue, or defend claims.

You have the right to object to the processing of Your data for direct marketing purposes at any time. If you exercise this right, we will cease processing data for this purpose.

Data processing up to the moment of withdrawal of Your consent remains lawful.

7. Data Retention Period

Your personal data resulting from contracts or submitted letters will be processed for:

• the period during which intermediary services or direct marketing services provided by the Website are offered;

• the period necessary to protect the Controller’s interests;

• the period for which consent was given;

• the period during which laws may oblige the Controller to process data for a specific time (e.g., accounting law);

• submission of Your objection to the processing of Your personal data – in cases where the basis for processing Your data was the legitimate interest of the Controller or when the data was processed for direct marketing purposes, including the registration of the user’s profile on the Website.

8. Data Recipients

Your data may be transferred to:

• Partners and clients, with whom the Controller cooperates to provide services;

• Courier and postal companies, that will deliver shipments to You;

• Law firms and legal companies, entrusted by the Controller, e.g., with conducting proceedings;

• Entities that provide us with technical support;

• Entities or authorities authorized under the law.

9. Rights of Data Subjects

Under GDPR, You have the right to:

• Access your data and receive a copy of it;

• Rectify (correct) your data;

• Delete data or restrict data processing;

• Object to data processing;

• Data portability;

• Lodge a complaint with the supervisory authority.

10. Information on the Voluntary Nature of Providing Data

Providing data is voluntary, but it is necessary to use the service of intermediary or direct marketing services provided by the Website.