Privacy policy
I. General information
This Privacy Policy provides information on the ways in which the personal data of the Users (hereinafter "Users") of this Website located at the electronic address www.pgepaliwa.pl, hereinafter referred to as the "Website", will be protected in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation); (hereinafter "GDPR").
The Controller of the personal data of the Website's Users (hereinafter "PDC") is PGE Paliwa Sp. z o.o. with its registered office in Kraków, ul. Ciepłownicza 1, 31-587 Kraków. In all matters related to the processing of their personal data, the Users may contact the Data Protection Officer in writing at the aforementioned correspondence address (marked as "for the attention of the PDC") or via email at iod.pgepaliwa@gkpge.pl. Detailed information is available at www.pgepaliwa.pl/rodo
The content of the pages of the Website is the property of the Data Controller and is protected by law. The Website has an informative character. PGE Paliwa sp. z o.o. makes every effort to ensure that the presented data are as complete and up-to-date as possible.
In order to use the Website, the User should have a computer or a device with installed web browsing software and access to the internet. Access to the Website is possible by means of the most popular web browsers.
The Controller declares that the pages of the Website are free from content that violates any rights of third parties or the applicable law, and in particular from content containing information that causes or constitutes a threat to privacy or security of any person, information that promotes illegal activities or behaviour that is offensive, threatening, obscene, defamatory or libellous, racist; discriminating on the basis of ethnicity, culture or religion; promoting or encouraging criminal activities; infringing the rights of third parties, including intellectual property rights, or constituting any other form of infringement of legally protected rights.
The provision of personal data is voluntary; however, failure to provide such data may prevent the use of the Website.
II. Purpose and scope of data collection
The personal data of the Website's Users will be processed on the basis of Article 6(1)(f) of the GDPR – the processing is necessary for the purposes resulting from the legitimate interests of the Controller, which consist in providing access to and use of the Website, as well as enabling contact with the Controller through the contact form available on the Website. In such a case, personal data will be processed on the basis of Article 6(1)(b) of the GDPR – in order to take steps to conclude a contract at the request of the User.
In justified cases, personal data may also be processed in this regard for the purposes of archiving, as well as establishing, pursuing or defending legal claims.
The scope of personal data collected by the Website includes identification and contact details provided voluntarily by the Users. In exceptional cases, the Controller may also process other personal data of the Users. Detailed information in this regard can be obtained by contacting the PDC.
III. Right of access
In the cases and according to the rules set out in the generally applicable legislation on the protection of personal data, the Users have the right to access their data and receive a copy of their data, to rectify (amend) or delete their data, to restrict their processing or to object to their processing, to transfer their data and to lodge a complaint with the competent supervisory authority.
The Controller reserves the right to refuse to delete the User's data if their retention is necessary for the handling of legal claims or required by applicable law.
IV. Data recipients
The Users' personal data will be provided to authorised institutions as defined by law and to processors who provide services to the Controller and to whom personal data are entrusted.
Personal data will not be transferred to any third country or international organisation.
Only authorised employees or associates of the Controller have direct access to personal data collected by the Controller.
V. Safeguards and protection of personal data
The Controller declares that they process the Users' personal data in accordance with the GDPR and apply technical and organisational measures to ensure the adequate protection of processed data with regard to the risks and categories of data under protection and, in particular, the Controller protects the Users' personal data against unauthorised access, loss or damage.
VI. Personal data processing period
The Controller processes the Users' personal data for the period necessary for the purposes for which they have been collected (including the performance of a contract or the exercise of the PDC's legitimate interests), in accordance with the statutory requirements concerning data retention periods.
To the extent that the basis for the processing of personal data is the Users' consent, their personal data will be processed until the consent is withdrawn.
VII. Automated decision-making
IPlease be advised that no automated decisions will be made in the processing of the data referred to above and that the Users' data will not be used for profiling purposes within the meaning of the GDPR, subject to paragraph VIII below.
VIII. Cookie mechanism
Cookies are used to ensure the proper functioning of the Website. They are saved on the User's computer when the Website is used. Cookies are text files which enable the server to correctly present the data contained on the Website. Cookies are used solely for internal Website efficiency optimisation purposes and statistical analyses. The Controller does not collect cookies to User identification purposes.
The issue of enabling or disabling cookies depends on the configuration of the browser and can be independently modified by the User.
In accordance with the applicable legal regulations, the User is entitled to decide on the access of cookies to their computer by selecting particular cookies in their browser window.
How to manage cookies – instructions of web browser developers:
Mozilla Firefox: https://support.mozilla.org/pl/kb/ciasteczka
Internet Explorer: https://support.microsoft.com/kb/278835/pl
Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=pl&answer=95647
Safari: http://safari.helpmax.net/pl/oszczedzanie-czasu/blokowanie-zawartosci/
Opera: https://help.opera.com/pl/jak-mozemy-ci-pomoc/bezpieczenstwo-i-prywatnosc/
IX. Liability
This Privacy Policy does not cover any information relating to the services or goods of entities other than the Controller, i.e. information posted on the Website commercially, by its guests, on a reciprocal basis or for purposes that are not aimed at achieving any commercial effect.
The Controller is not liable for the Users' actions or omissions that result in the Controller's processing the personal data provided by them in the manner specified in this Privacy Policy.
The Controller reserves the right to make changes in, withdraw or modify the functions or features of the individual pages of the Website, as well as to cease operations, transfer the rights to the Website and perform any legal actions permitted under the applicable legal regulations. Any actions performed by the Controller must not infringe any rights of the Users.
X. Contact with the Controller
In the matter of personal data protection, you may contact the Data Protection Officer appointed by PGE Paliwa Sp. z o.o. at the email address: iod.pgepaliwa@gkpge.pl or at the registered office address indicated in paragraph I of this Policy.
If you have any questions regarding the Website www.pgepaliwa.pl, please contact us through the contact form.
XI. Changes to the Privacy Policy
The Controller reserves the right to make changes to the Privacy Policy if required by the applicable legal regulations or changes made to the Website. The Controller will notify the Users of any relevant changes and their effective date, in particular by posting a notice on the Website.
The date set out below is the effective date of the Privacy Policy in its latest version.
Data: 25 October 2023