PRIVACY POLICY

This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with the use of AVAPSSYSTEM services. This document has been prepared on the basis of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

1. Data Controller

The controller of your personal data is AVAPSSYSTEM Sp. z o.o. based in Warsaw, ul. Michała Kleofasa Ogińskiego 11-9, PL-03-318, Warsaw, entered into the register of entrepreneurs of the National Court Register under KRS number: 0001225025, NIP: 5243065717, REGON: 383575212.

2. Purposes and legal bases of processing

Your personal data is processed for the purpose of performing a contract (Art. 6(1)(b) GDPR), fulfilling legal obligations (c), the legitimate interest of the controller (f) and on the basis of user consent (a) — e.g. newsletter or optional cookies.

3. Recipients of data

Your personal data may be transferred to processors acting on our behalf (IT, hosting, marketing), courier and logistics companies, an accounting office and public authorities where required by law.

4. Data retention period

Data related to the performance of a contract is kept for its duration and the claim limitation period (usually 3 or 6 years). Tax and accounting data — 5 years. Data processed on the basis of consent — until its withdrawal.

5. User rights

Under the GDPR you have the rights: of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection and withdrawal of consent. You also have the right to lodge a complaint with the President of the UODO.

6. Cookies

Our website uses cookies necessary for operation, analytical (traffic analysis) and marketing cookies. You can change your browser cookie settings at any time or delete them completely.

7. Data Protection Officer (DPO) contact

We have appointed a Data Protection Officer whom you can contact on all matters relating to the processing of personal data.