Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, the Data Controller informs you as follows:
1. Personal Data Controller
The Controller of your personal data is Decoratum Sp. z o.o., with its registered office in ul. Bożydara 7, 61-607 Poznań.
2. Data Protection Officer
Should you have any questions concerning the method and scope of processing your personal data by Decoratum Sp. z o.o. or your rights, you can contact our Data Protection Officer - Ms. Adriana Głuchowska at the following email address: This email address is being protected from spambots. You need JavaScript enabled to view it. or phone number: 696 011 969.
3. Purpose and legal grounds for the processing
Personal data is processed in connection with the implementation of the sales process, upon Article 6(1)(c) of the Regulation, and on the basis of the existing provisions of law, and concluded agreements (Article 6(1)(b)), and upon a consent granted to the extent and for the purpose specified in the content of such consent (Article 6(1)(a)).
4. Data recipients
In the course of our activities, your personal data may be transferred to other entities. The recipients of your data may be entities authorised to receive personal data on the basis of the relevant legal provisions and entities processing personal data on behalf of the Controller on the basis of a contract for processing personal data. The recipients of your personal data may be:
1) public authorities and entities performing public functions or acting on behalf of public authorities, to the extent and for the purposes resulting from the generally applicable laws and regulations;
2) other entities that process personal data upon the relevant contracts signed with the Company.
5. Information on transferring data to third countries
Personal data will not be transferred to third countries.
6. Purpose for processing and the storage period
The Controller may process personal data of the Clients for the purposes of performing statutory tasks defined in the applicable provisions of law. In other cases, personal data is processed only on the basis of a previously granted consent, to the extent and for the purpose specified in such consent.
7. Rights of data subjects
With regard to your personal data, you have the right to:
1) access your personal data,
2) rectify your personal data if it is e.g. outdated or incorrect,
3) delete your data,
4) restrict the processing of data,
5) transfer your data,
6) object to the processing of data,
7) in case of obtaining any knowledge of unlawful processing of your personal data, you have the right to submit a complaint to the supervisory authority that is the President of the Personal Data Protection Office with its registered office in Warsaw.
8) In the case where processing of your personal data is carried out on the basis of the data subject’s consent, providing the Controller with your personal data is voluntary. You have the right to withdraw your consent at any time. Any actions related to the processing of data made before such withdrawal will be in accordance with the law, without prejudice to the lawfulness of the processing based on your consent prior to its withdrawal.
8. Profiling
We also wish to inform you that we do not process personal data by automated means and that no data are subject of profiling.
In connection with requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as General Data Protection Regulation “GDPR”), we wish to inform you about monitoring rules applied on the Controller’s business premises:
1. The Controller of your personal data is Decoratum Sp. z o.o., with its registered office in ul. Bożydara 7, 61-607 Poznań.
2. Should you have any questions concerning the method and scope of processing your personal data by Decoratum Sp. z o.o. or your rights, you can contact our Data Protection Officer - Ms. Adriana Głuchowska at the following email address: This email address is being protected from spambots. You need JavaScript enabled to view it. or phone number: 696 011 969.
3. Collecting your personal data in the monitoring system is carried out in order to ensure safety of people visiting our premises, and our employees, as well as protecting property.
4. Article 6(1)(c) of the General Data Protection Regulation (“GDPR") constitutes the legal basis for the processing of personal data from the monitoring system.
5. Personal data obtained from the monitoring system will be processed and stored for a period of 14 days.
6. Any person recorded by the monitoring system has the right to access their personal data, remove, and rectify it. In addition, you have the right to restrict the data processing in the cases referred to in Article 18 of the GDPR.
7. We do not process data pursuant to Article 6(1)(e) or (f) of the GDPR, therefore you do not have the right of objection under Article 21 of the GDPR. Similarly, as Article 6(1)(c) of the General Data Protection Regulation “GDPR" is the only legal ground for the processing of data, you have no right to transmit your data on the basis of Article 20 of the General Data Protection Regulation “GDPR".
8. Personal data will not be transferred to any third country (outside the European Union) or to an international organization.
9. There are no recipients to whom personal data may be disclosed, i.e. personal data will not be made available to any third party. Monitoring data can only be disclosed upon a request of an authority empowered on the basis of generally applicable provisions of law for the purpose of conducted proceedings (e.g. police, public prosecutor's office, court).
10. In the event that the data processing is in breach of the applicable provisions of law, you can file a complaint to the President of the Personal Data Protection Office.
11. Personal data will not be processed by automated means, including in the form of profiling, as referred to in Article 22(1) and (4) of the GDPR. This means that no decisions are taken automatically and no profiles are created.
Cookies and system log files
1. The Service Provider informs the User that as soon as they connect to the Website, the information about the number (including IP) and the type of the User's terminal device from which the User connects to the Website, appears in the system log files. The Service Provider informs the User that, in accordance with the provisions of applicable law, it will also process data concerning the number (including IP) and the type of the User's terminal device, as well as the time of connection with the Website of the persons mentioned above, and other operational data concerning the User's activity. This data will be processed in particular for technical purposes and for the collection of general statistical information.
2. The Service Provider uses cookies (small text files sent to the User's device, identifying the User in a way necessary to simplify or cancel a given operation) in order to collect information related to the User's activity on the Website. Cookies help maintain the User's session, adapt the Website to the User's needs, and create the viewing statistics for subpages of the Website.
3. The User can change the settings for cookies at any time by changing the browser settings for cookies. These settings may be changed, in particular, in such a way as to block the automatic handling of cookies or to notify the User each time cookies are placed on their device.
Detailed information about the possibilities and ways of handling cookies is available in the software settings (of the web browser).