PRIVACY POLICY
PRIVACY POLICY
This privacy policy (hereinafter referred to as the „Privacy Policy”) defines the rules for collecting, processing, and using personal data obtained from you by the online store operated under the domain www.tulplast.pl (hereinafter referred to as the „Website” or the „Site” or the „Store”) by Tulplast Socha sp. k., taking into account applicable regulations, in particular the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR). We make every effort to ensure respect for your privacy and protection of the personal information you provide when using the Website and making purchases through our Store.
All terms in this Privacy Policy written with a capital letter, unless otherwise defined herein, have the meaning given to them in the Tulplast Online Store Terms and Conditions.
1. WHO PROCESSES YOUR DATA?
The administrator of your data is Tulplast Socha sp. k. with its registered office in Paczkowo (62-021) at ul. Wiosennej 27, entered into the register of entrepreneurs of the National Court Register kept by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register under number KRS 0000963210, NIP: 7773015295, REGON: 300664890, BDO: 000009360 (hereinafter referred to as „We”).
Contact:
You can contact us by mail at the above address or by email: sklep@tulplast.pl.
2. WHAT DATA DO WE COLLECT?
Through our Site, we may ask you to provide us with data, including personal data. This is related, among others, to the execution of your order placed via the Website, enabling the use of forms available on the Website, and for conducting marketing activities.
The data we collect includes, where applicable, in particular:
1. contact details, including name and surname, company name, email address/phone number, address, delivery address (street, house number, apartment number, postal code, city, country), residential/business address, registered office (if different from the delivery address),
2. tax identification number (NIP),
3. login and account information, including username, password, identifier,
4. data concerning your activity on the Site,
5. device identifier,
6. browser type, domain and communication language, operating system and its settings,
7. country,
8. time zone,
9. visited websites,
10. personal and marketing preferences,
11. cookies and pixel tags,
12. IP addresses,
13. Internet service provider name.
Other data, including personal data, may also be collected via the Site in connection with forms provided on the Website (e.g., account registration form, satisfaction survey).
Additionally, we collect, use, and share aggregated data, such as statistical or demographic data. For example, we may aggregate data regarding the use of our Site to calculate the percentage of users accessing a particular Website feature. However, if we combine aggregated data with your personal data, this may directly or indirectly identify you.
We do not collect special categories of personal data (including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, sexuality, or sexual orientation). We also do not collect any information regarding criminal convictions or offenses.
Our Website is not intended for use by children.
3. SERVER LOGS
Using the Site involves sending a request to our server each time. Individual requests are recorded in server logs and stored there. Data contained in the logs includes: your IP address, request arrival time, response time, browser and user operating system information. This data is not associated with specific persons using our Website and is not used for any user identification purposes. It is used solely for server administration purposes, and the storage period is generally 2 years.
4. COOKIES
Our Website collects data contained in cookies. Cookies are small text files sent by the Website and stored on your end device, containing certain information related to your use of the Website.
Cookies are used, among other things, to enable you to visit our Website, to display it correctly, to allow the use of all its functions, as well as to protect our Website against abuse and spam.
Subject to the consents you have given us, we may use cookies to personalize content and advertisements on our Website (and other websites) and to analyze traffic on our Website. Where applicable, we may also share information about your use of our Website with our partners, who may combine it with other information you have provided to them or which they have collected through your use of their services.
By consenting to marketing cookies, you agree to the sharing of your data with advertising and business partners, who may combine it with other information you have provided or that they have collected through your use of their services, and to the automated processing of your data for the purpose of personalizing content and ads on our Website and beyond.
Due to the use of statistical and marketing tools from providers such as Google on the Website, consent to statistical and/or marketing cookies is equivalent to consenting to the transfer of data to the United States, which is not subject to an adequacy decision by the European Commission under European data protection law.
More detailed information about the individual tools used on our Website can be found further in the Privacy Policy.
Our Website may contain links to other websites or applications, including those of our business partners. Please remember that websites of other entities may also use cookies. We have no influence on third-party websites and are not responsible for the cookies they collect or access. By clicking on a link or application, please note that each has its own cookie policy. Therefore, before using other websites or applications, please familiarize yourself with their privacy policies.
4.1. TYPES OF COOKIES
Depending on the storage period on the end device, the cookies we use can be divided into:
session cookies: stored on the user's device and remaining there until the browser session ends. The saved information is then permanently deleted from the device's memory.
persistent cookies: stored on the user's end device for the period specified in the cookie parameters or until deleted by the user.
We use the following types of cookies:
Necessary cookies contribute to the usability of the website by enabling basic functions such as navigation. The website cannot function properly without these cookies.
Preference cookies allow the site to remember information that changes the appearance or behavior of the site, e.g., preferred language or region where the user is located.
Statistical cookies help website owners understand how different users use the site.
Marketing cookies are used to track users across websites. The goal is to display ads that are relevant and interesting to individual users and thus more valuable to publishers and advertisers.
4.2. MANAGING COOKIES IN THE BROWSER
In many cases, software used for browsing websites by default allows storing cookies on the user's device, giving you the option to manage and/or delete cookies according to your preferences.
A link to the tool used on the Website to manage your cookie installation preferences can be found HERE.
To delete cookies stored on your computer, please follow the instructions provided by your browser manufacturer on the help page regarding cookie management in their products.
5. PURPOSES FOR WHICH WE COLLECT YOUR PERSONAL DATA AND LEGAL BASIS
As part of running the Website, we process your data (depending on the category of service) for the following purposes:
1. fulfilling obligations arising from the Agreement (e.g., Sales Agreement), if such has been concluded with you [Art. 6(1)(b) GDPR] or [Art. 6(1)(f) in the case of processing personal data of persons representing the Client, being an entrepreneur],
2. effective conclusion of the Sales Agreement and its documentation and settlement based on relevant legal regulations, including tax and accounting laws, as well as fulfilling legal obligations incumbent on us as the data controller [Art. 6(1)(c) GDPR],
3. enabling you to create and manage your account and allowing you to monitor your orders and their history – in connection with the performance of the contract concluded with you [Art. 6(1)(b) GDPR],
4. responding to inquiries, preparing sales offers for Products, clarifying information necessary to prepare sales offers, contacting the Client in case of receiving an inquiry – [Art. 6(1)(b) GDPR] or [Art. 6(1)(f) in the case of processing personal data of persons representing the Client, being an entrepreneur],
5. carrying out and processing payments – in connection with the performance of the Sales Agreement concluded with you [Art. 6(1)(b) GDPR],
6. conducting marketing activities related to our Products and services – based on your consent [Art. 6(1)(a)], taking into account consents given for the use of particular types of cookies, including sending commercial information within the meaning of the Act on the provision of electronic services, if you have consented to receive them – based on your consent [Art. 6(1)(a) GDPR],
7. analyzing your activity (including profiling) on the Website in order to adjust (including automated) services and content to your individual preferences, including targeted advertising – based on your consent [Art. 6(1)(a) GDPR], taking into account consents given for the use of particular types of cookies,
8. preparing general statistics regarding the use of the Website by users, including collecting general demographic information (e.g., about the region from which the connection is made) – based on our legitimate interest [Art. 6(1)(f) GDPR], taking into account consents given for the use of particular types of cookies,
9. enabling Website users to manage consents to install cookies and, where applicable, related processing of personal data – based on our legitimate interest [Art. 6(1)(f) GDPR],
10. examining your satisfaction with purchases in our Store through a satisfaction survey regarding our online Store and/or purchased Products – based on our legitimate interest [Art. 6(1)(f) GDPR],
11. handling and processing complaints you submit regarding our goods and services and providing warranty services – as appropriate, based on the Sales Agreement/service agreement concluded with you [Art. 6(1)(b) GDPR] or based on our legitimate interest [Art. 6(1)(f) GDPR],
12. handling inquiries and requests you send to us – based on our legitimate interest [Art. 6(1)(f) GDPR],
13. contacting you, in particular in connection with the provision of services – as appropriate, related to the necessity to perform the Sales Agreement/service agreement concluded with you [Art. 6(1)(b) GDPR] or based on our legitimate interest [Art. 6(1)(f) GDPR],
14. termination of the electronic services agreement, including the request to close an account (if you have previously created one) [Art. 6(1)(b) GDPR],
If you have been interested so far in receiving our marketing communications sent by electronic means (such as emails), you will continue to receive them unless you unsubscribe from the Newsletter. Remember, you can unsubscribe from marketing communications at any time by clicking the unsubscribe link included in every marketing message. We respect your decisions, so you can always change your mind if you no longer wish to receive any marketing information from us in the future.
Profiling based on personal data for the purpose of automated presentation of content tailored to your preferences takes place exclusively on the basis of your explicit consent.
6. TOOLS WE USE
To optimize the use of information contained, among others, in cookies, we use analytical tools and tools that enable us to manage advertising and marketing of our Products, including through displaying targeted advertising.
These tools also allow us to process the collected information in a way that supports our research and development work and marketing activities.
Subject to the consents you have given us, your personal data (collected, among others, via cookies) may be processed automatically (including profiling), and based on the collected information (e.g., data about your preferences), we may tailor the content presented on our Website and beyond, including advertising content.
Within the scope of consents granted by you, using these tools, we may also share information about your use of our Website with our social, advertising, and analytics partners, who may combine it with other information you have provided to them or which they have collected through your use of their services.
7. GOOGLE reCAPTCHA
We use the reCAPTCHA service on the Website, which is subject to Google's Privacy Policy and Terms of Service. We use the reCAPTCHA service solely to combat spam and abuse on our Website.
reCAPTCHA collects hardware and software information, such as IP address, browser characteristics (including browser type and version, screen resolution, language, time and date of access), your Google account data (if you are logged in), your browsing behavior, your interaction behavior with reCAPTCHA (e.g., mouse movements over the reCAPTCHA surface), and, if necessary, tasks involving image recognition, and sends it to Google for analysis. According to the reCAPTCHA Terms of Service, the information collected during the use of reCAPTCHA will be used to improve the service and overall security. However, it will not be used by Google to personalize displayed ads. Our legal basis for this processing is our legitimate interest in protecting our Website against abuse and spam.
8. COOKIE MANAGEMENT PLATFORM – COOKIEFIRST
To legally enable users of our Website to give consent for the installation of appropriate cookies and, where applicable, related processing and sharing of personal data, we use the CookieFirst platform.
User consent is recorded and documented by registering an anonymous IP number of the user, the user’s browser client, the URL of the website, the date and time of consent, and a unique, encrypted key stored in a data center at the cloud provider Digital Data Solutions B.V. After 12 months, the consent is automatically removed from the log.
The legal basis for this data processing is our legitimate interest related to compliance with the accountability principle under GDPR.
9. GOOGLE ANALYTICS, GOOGLE TAG MANAGER, GOOGLE ADS, META PIXEL
Using Google Ads marketing tools and Google Analytics analytical tools, combined with additional Google services such as Google Tag Manager, we process data related to your activity on our Site, including internet identifiers, to provide you with personalized ads based on profiling or monitoring your choices using statistical and marketing cookies. We conduct activities using these tools only within the scope of consents you have given for the use of specific types of cookies, including consents for automated decision-making and sharing data with advertising partners. You can check/change your consent settings at any time using the cookie consent management tool, which is also available in the footer of our Site. To delete cookies already saved on your computer, please follow the instructions provided by your browser manufacturer on managing cookies in their products.
1. GOOGLE ANALYTICS allows us to generate detailed statistics about how users use our Website. This tool collects data such as internet identifiers, including cookie IDs, IP address, device IDs, and user IDs. Using tools provided by Google, your IP address is anonymized.
According to the terms of the Google Analytics service, Google declares that it will not associate the IP address of the data subject with other data held by Google.
To opt-out of Google Analytics cookies, you can also download and install the Google Analytics Opt-out Browser Add-on: Google Analytics Opt-out Browser Add-on.
2. GOOGLE ADS: is Google’s advertising system, enabling, where applicable, the display of ads on the Google advertising network and YouTube portal. Due to the use of Google Ads tools, other companies, where applicable and respecting user consents, may place cookies in users’ browsers and read them or use web beacon images to collect information resulting from the display of ads on websites.
Google uses information shared on websites (including, where applicable, on our Sites) and apps to provide and improve services, manage them, develop new services, measure ad effectiveness, protect against fraud and abuse, and personalize content and ads displayed on Google and Google partners’ sites and apps. Detailed information about Google’s data usage can be found at: How Google uses data from sites and apps that use our services.
Every user with a Google account can disable ad personalization on the Internet in Google Ads Settings.
Logged-in Google users can also export all records from the Google page under "My Activity" (including ad-related data) using Google's Takeout data download feature.
3. GOOGLE TAG MANAGER: Google Tag Manager is a tool that allows us to manage scripts by easily adding code snippets to our Website. It enables us to track actions performed by users on the Website, such as completing various events. Thanks to it, we can easily configure the analytics of our Site. Within the tag manager, user data is processed in the form of internet identifiers, including cookie identifiers and IP addresses.
Due to our use of tools provided by Google, your personal data may be transferred to the United States. The USA is not subject to the European Commission’s decision recognizing an adequate level of protection according to European data protection law. Data transfer to the USA carries the risk of possible access to entrusted data due to programs enabling U.S. public authorities to access personal data transferred from the European Union to the United States for national security purposes, resulting in limitations on personal data protection that are not restricted in a way materially equivalent to the requirements of EU law. These regulations do not grant the data subjects enforceable rights against U.S. authorities in courts. The legal basis for transferring personal data to the USA in this case is your consent given when entering our Site. You can withdraw your consent at any time using the tool available in the footer of our website.
When transferring personal data obtained in connection with online advertising and measurement outside Europe – Google uses standard contractual clauses (SCC). The Google advertising services data processing terms regarding services for which Google acts as a processor include both the relevant SCC prepared by the European Commission (legitimizing data transfer in accordance with GDPR) and the UK SCC (legitimizing data transfer in accordance with GDPR provisions adopted in UK law), depending on the needs of the respective data transfer processes. Similarly, the Controller to Controller Data Protection Terms regarding services for which Google acts as a controller include both the relevant European Commission SCC and UK SCC, as required by the relevant data transfer processes.
4. META PIXEL: A short code placed on the website that allows measuring the effectiveness of ads based on analyzing user actions on the site. A person visiting the tulplast.pl website can give consent whether they accept cookies from the advertising category or not. If they consent, the META PIXEL code is added to the site’s code and begins collecting data about the user's behavior on the site. The person can withdraw their consent to data collection at any time. By activating advertising cookies, external partners Google and Meta will have information that a given person/device visited the tulplast.pl site. This knowledge allows these companies to display advertising content related to the product themes of the tulplast.pl site. META PIXEL records defined actions (events) on the site – such as adding a product to the cart or making a purchase.
Due to our use of tools provided by Meta, your personal data will be transferred to Meta Platforms Ireland Limited. Meta Platforms Ireland Limited’s data processing policies are available at: https://www.facebook.com/privacy/policy. According to this document, your personal data may be transferred or stored or processed outside the European Economic Area – in such cases, Meta Platforms Ireland Limited relies on decisions of the European Commission recognizing that certain countries and territories outside the European Economic Area provide an adequate level of protection for personal data (on this basis data may be transferred to Argentina, Israel, New Zealand, Switzerland, and, where applicable, Canada) or on standard contractual clauses approved by the European Commission or on exceptions provided for by applicable law regarding transfers to third countries (e.g., the basis for transferring personal data to Meta Platforms, Inc. are standard contractual clauses).
10. YOUTUBE VIDEOS EMBEDDED ON OUR WEBSITE
YouTube videos are placed on our Site in extended privacy mode – without using cookies that track user behavior data. This means that activity information will not be collected by the YouTube service for personalizing the viewing experience, and videos displayed with extended privacy mode enabled will not affect browsing content on YouTube.
11. NEWSLETTER
On the Website, we offer users the option to subscribe to the Newsletter. After providing your email address and giving the appropriate consents for personal data processing, receiving commercial information, and direct marketing – you may receive promotional offers, information about our company, and notifications about new Products.
You can unsubscribe from the Newsletter at any time by clicking the unsubscribe link included in every commercial message.
12. TECHNICAL MEASURES
We make every effort to secure your data and protect it from third-party actions. We apply all necessary server, connection, and Website security measures. In particular, communication between your computer and our server when we collect your personal data is encrypted using the SSL (Secure Socket Layer) protocol. Additionally, our databases are protected against third-party access. When using subcontractors’ services – we carefully verify their credibility and the security measures they apply to protect the data of our Website users. However, the measures we take may be insufficient if you do not follow security rules yourself. In particular, we encourage you to always keep your login and password for the Website confidential and not to share them with third parties. To prevent unauthorized use of your account, please log out after finishing using the Website.
13. RECIPIENTS OF YOUR DATA
Where appropriate, we may transfer data to:
1. persons authorized by us, our employees and collaborators who need access to the data to perform their duties,
2. processors to whom we outsource this task, including third parties involved in the execution of the Sales Agreement, for the proper performance of the agreement, e.g., logistics companies, freight forwarders, or providers of IT services related to the Online Store software, companies managing our IT systems or providing us with IT tools and server space, companies providing advisory and marketing services on our behalf, suppliers of analytical and remarketing tools we use, to the extent that they process data on our behalf;
3. other entities that will process personal data as independent data controllers: e.g., courier companies for shipment fulfillment, business partners (including advertising partners) within marketing tools used on the Website,
4. public authorities, if required by law.
14. PERIOD OF RETENTION OF YOUR DATA
Your personal data will be processed by us for the period necessary to perform the Customer Account service agreement (if concluded) and the Sales Agreement for Goods (if concluded), as well as for the period required by applicable law, especially taking into account the limitation period for claims arising from civil law relations between you and us.
Personal data processed based on your consent may be processed until you withdraw your consent or until processing is no longer necessary to achieve the purpose for which the data is processed, and when that purpose is achieved and completed.
In the case of responding to your inquiries, your personal data will be processed until the question is answered. After providing an answer, your data may be stored, but only for the period corresponding to the limitation period of claims that may be raised against us or that we may have against you.
Data processed based on our legitimate interest will be processed until you object, or until processing is no longer necessary to achieve the purpose for which the data is processed, and when that purpose is achieved and completed.
Detailed information about the duration of individual cookies is indicated in the tool used on the Website, which allows managing preferences and consents regarding the use of cookies.
15. YOUR RIGHTS
In connection with the processing of your personal data, you have the following rights within the limits set by law and where applicable:
1. access to your data and the right to rectify, erase, restrict processing, and data portability,
2. where we process your data based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal,
3. to object at any time to the processing of personal data based on our legitimate interest for reasons related to your particular situation. In such case, we will no longer process this personal data for that purpose unless we demonstrate overriding legitimate grounds for processing, which prevail over your interests, rights and freedoms, or grounds for establishing, exercising or defending legal claims,
4. to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the GDPR.
You can exercise your rights by sending an email to: sklep@tulplast.pl.
Profiling of personal data for the purpose of presenting content tailored to your preferences is done solely on the basis of your explicit consent.
Providing your data is voluntary, but in some cases may be necessary to conclude and perform an agreement, e.g., Sales Agreement or an agreement for the provision of electronic services in the Online Store (Customer Account management or Newsletter subscription). The scope of data required to conclude the agreement is indicated in advance on the Online Store website and in the Terms and Conditions.
16. CHANGES TO OUR PRIVACY POLICY
Our goal is to ensure the highest possible protection of your data. The development of technology and the Store’s offer means the Privacy Policy may be subject to changes.
17. QUESTIONS AND COMMENTS
Questions and comments regarding this Privacy Policy may be sent by email to: sklep@tulplast.pl.