Privacy policy

GENERAL PROVISIONS

This Privacy Policy sets out the principles for the processing and protection of personal data of users of the Website available at: www.cabgo.plThis Privacy Policy fulfills the Controller’s information obligation pursuant to Art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”).

PERSONAL DATA CONTROLLER

The Personal Data Controller of the Website Users is STUDIO SERENUS SP. Z O.O., Tax Identification Number (NIP): 8141701022, address: ul. Lisy 4, 36-130 Raniżów, email: hello@cabgo.pl (hereinafter referred to as the “Administrator”).

PERSONAL DATA PROCESSING PRINCIPLES

    1. The Administrator processes the personal data of users of the Website in accordance with the provisions of the GDPR.
    1. The Administrator applies technical and organizational measures required by EU law to ensure the protection of processed personal data and to secure personal data against unauthorized access, interception by unauthorized persons, processing in violation of the regulations, and alteration, loss, or destruction.
    1. The Administrator declares that providing the data marked on the Website is required and voluntary, but necessary to use the functionalities, including creating and maintaining a user account and placing and fulfilling an order.

PURPOSES AND LEGAL BASIS FOR PERSONAL DATA PROCESSING

Users’ personal data will be processed for the following purposes:
    1. To process the User’s request submitted via the contact form. Personal data are processed for the purpose of handling the inquiry pursuant to Article 6(1)(a) of the GDPR. Providing the personal data indicated in the form is voluntary, but necessary to process the submitted inquiry.
    1. Performance of a sales contract and/or a contract for the provision of electronic services, or taking steps at the request of the data subject before entering into the aforementioned contracts. Processing is based on Article 6(1)(b) of the GDPR (performance of a contract). The data is stored for the period necessary for the performance, termination, or other expiration of the concluded contract.
    1. Direct marketing. Processing is based on Article 6(1)(f) of the GDPR (legitimate interest of the controller). The data is stored for the duration of the legitimate interest pursued by the Controller, but no longer than the limitation period for claims against the data subject arising from the Controller’s business activities. The limitation period is specified by law, in particular the Civil Code (the basic limitation period for claims related to business activity is three years). The Controller may not process data for direct marketing purposes if the data subject has effectively objected to this.
    1. Marketing. Processing