Privacy statements in line with the GDPR
I. Name and address of the data controller
The controller within the meaning of the General Data Protection Regulation and other national laws on the protection of personal data of the Member States and other provisions of the Act on the protection of personal data is:
Classen Floor Systems Sp. z o.o.
ul. Wyzwolenia
44-292 Zwonowice
+48 (32) 429 20 00
biuro@classenfloor.pl
Members of the Management Board:
Mathias Gorecki – President of the Management Board
Commercial register:
VAT identification number: PL NIP: 206 000 10 79
Website: www.classenfloor.com
II. General information on data processing
1. Scope of the personal data processing
We collect and use the personal data of our users only to the extent necessary for the provision of an efficient website as well as our content and services. The collection and use of personal data on a regular basis only takes place with your consent. The exception is such cases where obtaining the prior consent is impossible for factual reasons, and the processing of data is allowed by law.
2. Legal basis for the processing of personal data
If a consent for the operations of personal data processing from a data subject is obtained, the legal basis is Article 6(1)(a) of the European General Data Processing Regulation (GDPR).
In case of processing of personal data necessary for performance of an agreement to which the data subject is a party, the legal basis is Article 6(1)(b) of the GDPR. This also applies to processing operations that are necessary to take action prior to entering the agreement.
In the event that the processing of personal data is necessary to fulfil our company’s legal obligation, the legal basis is Article 6(1)(c) of the GDPR.
In case when the processing of personal data is necessary in order to protect the vital interest of the data subject or another natural person, the legal basis is Article 6(1)(d) of the GDPR.
If processing is necessary for the purposes of the legitimate interest pursued by our company or by a third party, except where such interest is overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis for such processing is Article 6(1)(f) of the GDPR.
3. Deletion of data and storage period
Personal data of a person who is data subject is deleted or access to it is blocked as soon as the purpose for which it is stored ceases. The data may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The blocking of access to data or the deletion of data also takes place when the storage period specified by the above-mentioned standards expires, unless it is necessary to further store data in connection with entering the agreement or the performance of an agreement.
III. Making the website available and creating log files
1. Description and scope of the processing
Every time you visit our website, our system automatically collects data and information from the computer system through which you visit the website.The following data are collected during this operation:
1. information on the type of browser and the version used;
2. your operating system;
3. your Internet service provider;
4. your IP address;
5. date and time of access;
6. the websites from which your system has accessed our website;
7. websites that your system has visited through our website.
These data are also stored in the log files of our system. These data are not stored together with your other personal data.
2. Legal basis for data processing
The legal basis for the temporary storage of data is Article 6(1)(f) of the GDPR.
3. Purposes of the processing
The temporary storage of the IP address by the system is necessary to allow your computer to access the website. To do this, your IP address must be saved for the duration of the session.
The purpose of storing log files is to ensure the proper functioning of the website. We also use this information to optimise our website and to ensure the security of our information systems.Therefore, there is no question of the data being used for marketing purposes.The aforementioned objectives also arise from our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
4. Storage period
Data shall be deleted when they are no longer necessary for the purpose of collection. In the case of data collection in connection with the provision of a website, this shall take place when the session ends.
If the data are stored in log files, this is done after seven days at the latest. Longer storage is possible. In this case, the IP addresses of the users are deleted or distorted in order to make it impossible to assign a client to the site.
5. Objection and removal possibility
The collection of data for the purpose of providing access to the website and the storage of data in log files is absolutely necessary for the website maintenance. Therefore, you have no possibility to object.
IV. Use of cookies
a) Description and scope of processing
Our website uses cookies. Cookies are text files that are stored in a web browser or saved in a computer system from a web browser. When a user opens a website, a cookie is saved on that user’s computer system. The cookies contain a distinctive string of characters that identifies a browser if the website is reopened.We use cookies to create a user-friendly website. Some of its elements require that the identification of the browser is possible also after changing the page.
The following data are stored and transmitted in cookies:
1. language settings,
2. logins.
We also use cookies on our website, which enable us to analyse the websites you visit.The following data can be sent this way:
1. the searched password entered;
2. the frequency of visits to the website;
3. the use of the website functions.
The user’s data collected on this website is pseudonymised by technical means. This makes it impossible to assign data to a user who visits the website. This data is not stored together with your other personal data.When opening our website, you are informed about the use of cookies for analytical purposes and your consent is obtained to the processing of the personal data collected in this connection. In this regard, reference is made to this privacy statement.
b) Legal basis for data processing
The legal basis for the processing of personal data with the use of technically necessary cookies is Article 6(1)(f) of the GDPR.
The legal basis for the processing of personal data with the use of cookies for analytical purposes is, if your relevant consent in given, Article 6 (1)(a) of the GDPR.
c) Purpose of data processing
The purpose of using technically necessary cookies is to facilitate the use of websites by users. Some features of our website do not work without the use of cookies. They require the browser to be re-recognized even after a page change.
Cookies are essential for the following functions:
1. taking over the language settings,
2. saving the search terms.
The data of users collected by technically necessary cookies are not used to create user profiles.The use of analytical cookies is intended to improve our website quality. Thanks to analytic cookies we learn how to use our website and we can constantly optimize our offer.The aforementioned objectives also arise from our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
d) Storage period, objection and deletion possibility
Cookies are stored on your computer and are sent from this device to the server operating the website. As a user, you have full control over the use of cookies. You can delete cookies that you have already saved at any time. This can be done automatically as well. If you disable the cookies on our website, you may not be able to use the website full functionality.
V. Google Analytics
Our company uses Google Analytics, a web analytics service offered by Google Inc. (“Google”) for its website http://www.classen.pl. Google Analytics uses so-called “cookies”, which are text files that are stored on your computer and which enable the analysis of your use of this website. The information generated by the cookies about your use of the website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is enabled on this website, Google will shorten the IP address for the computer in the Member States of the European Union or in other countries which are parties to the Agreement on the European Economic Area. In exceptional cases, the IP address will be transmitted in full to the Google server in the USA and transmitted there via the Internet. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage for website operators on behalf of website operators. Google will not associate your IP address, transmitted by Google Analytics to the website, with any other data held by Google. You may refuse the use of cookies by configuring your browser accordingly; however, please note that if you do this you may not be able to use the full functionality of this website.
You may also prevent the registration and processing of data stored by cookies about your use of the website (including your IP address), directly by Google. To do this, you will need to download and install a plug-in for your web browser available at the following address: tools.google.com/dlpage/gaoptout.
Our company uses its own cookies at http://www.classen.pl in various places to improve the Classen Group’s offer. Any user may prevent the installation of such cookies by configuring his or her browser accordingly. However, please note that if you do this, you may not be able to use all the features of http://www.classen.pl in full.
VI. Privacy Statement regarding your use of Google AdWords
Our website uses Google AdWords, the online advertising system of Google Inc. We also use a conversion tracking tool that allows Google AdWords to add cookies to your computer if you visit our site after a Google advert is displayed. A cookie is valid for 30 days. It is not used to track you personally. If you visit our website and the cookie is still active, this means for us and Google that you have clicked on the right advertisement and have been redirected to our website. Each AdWords customer is assigned a different cookie during this time. It is not possible to track cookies via the client’s website in AdWords. The data obtained by storing cookies on your computer is used to create conversion statistics for AdWords customers. We, as customers, therefore obtain information on the total number of users, who reacted to our advertisement and were then redirected to the page with the installed conversion tracking tag. During this operation we receive information by means of which we can identify you as a user. If you reject the tracking feature, you can disable Google’s conversion tracking cookie via your web browser. For further information, please use the help function of your browser if necessary. For detailed information on Google’s data protection, please visit https://policies.google.com/privacy?gl=pl
VII. Google Maps Plugin
We use the Google Maps plugin on our website. Google Maps is operated by Google Inc. with its registered office in the USA, CA 94043, 1600 Amphitheatre Parkway, Mountain View. By using Google Maps on your website, the data concerning your use of the website and your IP address will be transmitted to and stored by Google on servers in the United States. We are not aware of the exact content of the data transmitted or of any use that may be made of it by Google. In this context, the Company denies that these data are linked to information from other Google services and that personal data are collected. Google may also transfer this information to third parties. If you disable JavaScript in your browser, Google Maps will not work. You will not be able to use the map display on our website. By using our website, you consent to the collection and processing of information by Google Inc. Specific information on the protection of personal data and the terms and conditions of use of the Google Maps services are available at: https://www.google.com/intl/pl_US/help/terms_maps.html
VIII. Social plugins
To enable social interaction, the http://www.classen.pl offers you the so-called Social Buttons as an additional service. In order to prevent the undesired transmission of your usage data (e.g. the address of the page you are currently viewing) to these portals, please first click on the link to these portals (Social Media-Buttons). On a social networking site, so-called “social networking services” collect data about your use and about you. Our company has no influence on the collection and analysis of this data.
We therefore keep you informed to the best of our knowledge:
The first time you call a link from your browser, it establishes a direct connection to the social network servers. In this way, information that you have visited the company’s website is directly referred to these services. If you are already logged into the service with your personal user account when you visit http://www.classen.pl , you can usually leave a “Share” document after clicking on Social-Button (Sharing) or commentary, etc. If you do not want this to happen, the company advises you not to click on Social-Buttons.
The purpose and scope of data collection by social networking services and the subsequent processing and use of your data, as well as your associated rights and configuration options to protect your privacy, are set out in the privacy statement for these services.
IX. Facebook
Our website uses the Facebook.com plugins, which are managed by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
If you access a website that uses this plugin, a connection to the Facebook servers is established and the plugin is displayed on this website using information addressed to your browser. The information that you have visited is transferred to the Facebook server. If you are logged in to Facebook as a member during this time, Facebook assigns this information to your personal Facebook user account. When using the plugin features (e.g. by clicking on the “Like” button, adding a comment), the information will also be assigned to your Facebook account, which can only be avoided by logging out of the plugins.
For more information on Facebook’s data collection and use, your rights and opportunities to protect your privacy, please refer to the Facebook Privacy Statement.
X. YouTube
Our website uses the plugins of the YouTube website, which is managed by Google. These websites are operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. If you visit one of our websites that has a YouTube plugin, you are connected to the YouTube server. The information that you have visited from our pages is sent to the YouTube server.
If you are logged into your YouTube account, you can assign your behaviour on the Internet directly to your profile. You can prevent this by logging out of your YouTube account.
For more information on how to use your information, please see YouTube Privacy Statement: https://support.google.com/youtube/topic/2803240?hl=pl&ref_topic=6151248
XI. Rights of the data subject
In the event that your personal data are processed, you have the status of a data subject within the meaning of the GDRP and you have the following rights against the controller:
1. Right of access
You have the right to obtain confirmation from the controller as to whether your personal data is being processed by us. If this is the case, you are entitled to receive the following information from the controller:
(1) objectives of the personal data processing;
(2) categories of personal data concerned;
(3) information on the recipients or categories of recipients to whom your personal data have been or will be disclosed;
(4) planned storage period for your personal data and, if not possible, the criteria for determining such period;
(5) information on the right to request the controller to rectify, delete or limit the processing of your personal data and to object to such processing;
(6) information on the right to lodge a complaint with the supervisory authority;
(7) where personal data have not been collected from the data subject, all available information on their source;
(8) information on automated decision-making, including profiling as referred to in Article 22(1) and (4) of the GDPR, and, at least in these cases, relevant information on the rules for taking such decisions, as well as on the relevance and foreseeable consequences of the processing for the data subject.
You have the right to be informed whether your personal data are transferred to a third country or an international organisation. You may therefore request to be informed of the respective safeguards referred to in Article 46 relating to the transfer.
2. Right of data rectification
You have the right to request the controller to rectify and/or supplement any of your personal data that is incorrect or incomplete. The controller shall be obliged to rectify the situation without delay.
3. Right to limit processing
In the following cases, you have the right to request that the processing of your personal data be restricted:
(1) you contest the accuracy of your personal data for a period allowing the controller to verify the accuracy of the data;
(2) the processing is unlawful, and you oppose the personal data deletion, requesting that the use of the data be restricted instead;
(3) the controller no longer needs the personal data for the purpose of processing, but you require them for the establishment, exercise or defence of your claims;
(4) you have objected to processing under Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
Where the processing of your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a of a Member State.
If the restriction on processing in these cases has been obtained, you will be informed by the controller before the restriction of processing is lifted.
4. Right of data erasure
a) Obligation of the data erasure
You have the right to request the controller to erase your personal data without delay, and the controller is obliged to erase your personal data without undue delay, if one of the following circumstances occurs:
(1) your personal data are no longer necessary for the purposes they were collected for or otherwise processed;
(2) you have withdrawn the consent on which the processing in accordance with Article 6(1)(a) or Article 9(2)(a) of the GDPR is based and there is no other legal basis for the processing;
(3) you object under Article 21(1) of the GDPR to the processing and there are no overriding legitimate grounds for objection or you object under Article 21(2) of the GDPR to the processing;
(4) your personal data have been unlawfully processed;
(5) your personal data must be erased in order to comply with a legal obligation laid down by Union law or by the law of a Member State to which the controller is subject;
(6) your personal data have been collected in connection with the provision of the information society services referred to in Article 8(1) of the GDPR.
b) Information passed on to third parties
If the controller has made your personal data public and pursuant to clause 1 is obliged to erase such personal data, it shall, taking into account the available technology and the cost of processing, take reasonable steps, including technical measures to inform the controllers who process such personal data, that you demand that the controllers delete any links to the data, copies of the personal data or their replicas.
c) Exceptions
The right to erasure shall not apply if processing is necessary:
(1) to exercise the right to freedom of expression and information;
(2) to fulfil a legal obligation requiring processing under the Union law or the law of a Member State to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of the public authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
(4) for archival purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89(1) of the GDPR, if the law referred to in paragraph 1 is likely to make it impossible or difficult to achieve the purposes of such processing; or
(5) to determine, pursue or defend claims.
5. Right to be informed
If you have exercised your right to rectify, erase or limit the processing to the controller, you are obliged to inform the controller of the rectification or erasure or of the restriction of the processing to any recipient who has been disclosed your personal data to us, unless this proves impossible or involves an unreasonable effort.You have the right to the administrator to be informed of these recipients.
6. Right to data transfer
You have the right to receive your personal data in a structured, commonly used and machine-readable format, which you have provided to the controller. In addition, you have the right to send these personal data to another controller without any problems on the part of the controller who provided the personal data, if:
(1) processing is carried out on the basis of a consent in accordance with Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on the basis of an agreement in accordance with Article 6(1)(b) of the GDPR; and
(2) processing is carried out by automated means. In exercising the right to data transfer, you have the right to request that your personal data be transferred directly from the controller to another controller, as far as technically possible.
This right must not adversely affect the rights and freedoms of others. The right to transfer shall not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right to object
You have the right to object at any time – for reasons related to a particular situation- to the processing of your personal data based on Article 6(1)(e) or (f) of the GDPR, including profiling on the basis of these provisions.
The controller must not longer process such personal data unless it proves that there are valid legitimate grounds for processing overriding your interests, rights and freedoms or grounds for establishing, pursuing or defending claims.
Where personal data are processed for the purposes of direct marketing, you have the right at any time to object to the processing of your personal data for the purposes of such marketing, including profiling, to the extent that the processing is related to such direct marketing.
If you object to the processing for the purpose of direct marketing, your personal data must no longer be processed for this purpose.
You may, in connection with the use of information society services, without prejudice to Directive 2002/58/EC, exercise your right of objection by means of automated means using technical specifications.
8. Right to withdraw consent to personal data processing
You have the right to withdraw your consent at any time without affecting the lawfulness of the processing that has been carried out on the basis of the consent prior to its withdrawal.
9. Automated decision making, including profiling
You have the right not to be subject to a decision which is based solely on automated processing, including profiling, and which has legal effects on you, or a similar effect on you. This shall not apply if that decision:
(1) is necessary for the conclusion or performance of the agreement between you and the controller;
(2) is permitted by the Union law or by the law of a Member State to which the controller is subject and which provides for appropriate measures to safeguard your rights, freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions may not be based on specific categories of personal data referred to in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and there are adequate measures to protect your rights, freedoms and legitimate interests. In the cases referred to in clause (1) and (3), the controller shall implement appropriate measures to protect your rights, freedoms and legitimate interests, at least the right to obtain human intervention from the controller, to express his/her views and to challenge the decision.
10. Right to complain with a supervisory authority
Without prejudice to other administrative measures or legal protection measures before the court, you have the right to lodge a complaint with the supervisory authority, in particular in a Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint is addressed shall inform the complainant of the progress and outcome of the complaint, including the possibility of seeking judicial remedy pursuant to Article 78 of the GDPR.