PRIVACY POLICY DOCUMENT

§1 General Provisions

This document is an appendix to the Terms and Conditions. By using our services, you entrust us with your information. This Privacy Policy serves only as an aid to understanding what information and data is collected and for what purpose, and what we use it for. This data is very important to us, so please read this document carefully as it sets out the principles and ways in which we process and protect your personal data. This document also sets out the rules for the use of "Cookies". We hereby declare that we comply with the principles of personal data protection and all legal regulations that are provided for by the Personal Data Protection Act and the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.The person whose personal data is processed has the right to contact us in order to obtain comprehensive information on how we use his/her personal data. We always make a clear effort to inform you about the data we collect, how we use it, what purposes it is intended to serve and to whom we transfer it, what protection we provide for this data when it is transferred to other entities, and provide information about the institutions to contact in case of doubt. The vendor shall apply technical measures such as: physical protection measures for personal data, hardware measures for IT and telecommunications infrastructure, protection measures within the framework of software tools and databases, and organizational measures to ensure adequate protection of processed personal data, and in particular to protect personal data from being made available to unauthorized third parties, from being obtained by an unauthorized person and used for an unknown purpose, as well as from accidental or intentional change, loss, damage or destruction of such data.Under the terms of the Regulations and this document, we have exclusive access to data. Access to personal data may also be entrusted to other entities through which payments are made, which collect, process and store personal data in accordance with their Terms and Conditions, and entities that are tasked with processing an order. Access to personal data is granted to the aforementioned entities to the extent necessary and only to the extent that will ensure the performance of services.Personal data is processed only for such purposes for which you have given your consent by clicking on the appropriate fields of the form posted on the Website or in any other explicit manner. The legal basis for the processing of your personal data is your consent to the processing of data or the requirement to perform the service (e.g. ordering a Product) that you have ordered from us (pursuant to Article 6(1)(a) and (b) of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) - RODO.If the website does not require the customer to accept (checkbox) a consent clause for the processing of personal data when, for example, creating an account or placing an order, then the privacy policy should include a provision such as: "Use of the service requires processing of the customer's personal data in the scope of : .... (e.g. name, phone number, e-mail, home address, etc.). The data will be processed by ASKO sp. z o.o to the extent necessary to conclude and perform the contract . Transaction data, including personal data, may be transferred to "Polskie ePłatności" spółka z ograniczoną odpowiedzialnością, based in Tajęcina (formerly "Paylane" sp. z o.o.), address: Tajęcina 113, 36-002 Jasionka, KRS: 0000227278, NIP 5862141089 and REGON 220010531. to the extent necessary to process payment for the order. The customer has the right to access and correct the content of his/her data. Provision of data is voluntary, yet necessary to use the service."

§2 Privacy principles

We take privacy seriously. We are characterized by respect for privacy and the fullest possible and guaranteed convenience in the use of our service.We value the trust that Users place in us by entrusting us with their personal information to complete an order. We always use personal data fairly and in such a way as not to disappoint that trust, only to the extent necessary to fulfill the order including its processing.You have the right to be clearly and fully informed about how we use your personal data and for what purposes it is needed. We always clearly inform you about the data we collect, how and to whom we provide it, and provide information about the entities to contact in case of doubts, questions, comments.If you have any doubts about our use of your personal data, we will immediately take measures to clarify and resolve such doubts, fully and comprehensively answer all questions in this regard.We will take all reasonable measures to protect your data from improper and uncontrolled use and secure it comprehensively.

The administrator of your personal data is ASKO SP. Z O.O, ul. Parkowa 3 hall number 4, 62-069 Dąbrówka, NIP: 9720804286, mail: hello@pastform.pl , tel: +48603529118

The legal basis for the processing of your personal data is Article 6(1)(b) RODO. Provision of data is not mandatory, but necessary to take appropriate actions preceding the conclusion of the contract and its execution. We will transfer your personal data to other recipients entrusted with the processing of personal data in our name and on our behalf. Your data will be transferred on the basis of Article 6(1)(f) of the RODO, where the legitimate interest is the due performance of contracts/orders. In addition, we will share your personal data with other business partners. We store the collected personal data in the European Economic Area ("EEA"), but it may also be transferred to a country outside the EEA and processed there. Any transfer of personal data is carried out in accordance with applicable law. If data is transferred outside the EEA, we use standard contractual clauses and the Privacy Shield as safeguards for countries for which the European Commission has not established an adequate level of data protection.Your personal data related to the conclusion and performance of the contract for the execution of contracts will be processed for the period of their execution, and for no longer than provided by law, including the provisions of the Civil Code and the Accounting Act, i.e. no longer than for 10 years, counting from the end of the calendar year in which the last contract was executed.Your personal data processed for the purpose of concluding and executing future contracts will be processed until you object.You have the right to: access your personal data and receive a copy of the personal data being processed, rectify your inaccurate data; request deletion of your data (right to be forgotten) in the event of circumstances provided for in Article 17 RODO; request restriction of data processing in the cases indicated in Art. 18 RODO; to object to the processing of data in cases indicated in Article 21 RODO; to transfer data provided, processed by automated means.If you believe that your personal data is being processed unlawfully, you can file a complaint with the supervisory authority (Office for Personal Data Protection, 2 Stawki Street, Warsaw). If you need additional information related to the protection of personal data or wish to exercise your rights, please contact us by mail at the mailing address.We make every effort to protect against unauthorized access, unauthorized modification, disclosure and destruction of information in our possession. In particular:We control the methods of collecting, storing and processing information, including physical security measures to protect against unauthorized access to the system.We grant access to personal information only to those employees, contractors and representatives who need to have access to it. In addition, they are contractually obligated to maintain strict confidentiality, to allow us to inspect and check how they fulfill their assigned duties, and may face consequences if they fail to fulfill these obligations.We will comply with all applicable data protection laws and regulations, and will cooperate with data protection authorities and authorized law enforcement agencies. In the absence of data protection regulations, we will act in accordance with generally accepted data protection principles, rules of social coexistence as well as established customs.The exact manner in which we protect personal data is contained in the data protection policy (ODO: security policy, data protection regulations, IT system management manual) For security reasons, due to the procedures described therein, it is only available for inspection by state control authorities. If you have any questions about how to handle your personal data, you are welcome to contact us using the page from which you were redirected to this Privacy Policy. You always have the right to notify us if: you no longer wish to receive information or communications from us in any form; you wish to receive a copy of your personal data in our possession; you wish to correct, update or delete your personal data in our records; you wish to report violations, misuse or processing of your personal data. In order to make it easier for us to respond or respond to the information provided, please provide your name and surname and further details.

§3 Scope and Purpose of Personal Data CollectionWe process the necessary personal data in order to provide services and for accounting purposes and only such purposes, i.e. :to place an order,to conclude a contract,to make a complaint and withdraw from the contract,to issue a VAT invoice or other receipt. to monitor traffic on our websites;to collect anonymous statistics, for the purpose of determining how users use our website;to determine the number of anonymous users of our websites to control how often selected content is shown to users and what content is shown most often;to examine newsletter sign-ups and contact options;to use the tool to communicate both by email and subsequently by phone;to integrate with social network;possible online payments. We collect, process and store the following user data:first and last name,home address,delivery address (if different from home address),tax identification number (NIP),electronic mail address (e-mail),telephone number (mobile, landline), information about the web browser used, other personal data voluntarily provided to us.Provision of the above data by you is completely voluntary but also necessary for the full implementation of services. Purpose of collection and processing or use of data by us:direct marketing, archival purposes of advertising campaigns; fulfillment of obligations imposed by law by collecting information about undesirable activities;those inherent in the implementation and provision of services, making the Product available to you and those related to the need to ensure your participation in actions related to the Service. (we collect and use data in particular to contact people who have ordered and use the Product, people who participate in events organized by us, or other forms of activity, this is, for example, contact in the processing of complaints, evaluation of requests, etc.)to verify the quality of services provided, to conduct market statistics and for profiling purposes of users (see below Profiling and cookies)for commercial and promotional purposes (with the user's prior consent) (e.g., sending newsletters to the e-mail address provided by the user. sending the user commercial information about various products and services, our and our trusted partners, sending information about various contests, promotional campaigns, both our and our trusted partners). Importantly, each time your consent to process your personal data in such a way is voluntary and we do not make your ability to use our services dependent on it;
each time the extent to which we use your data for marketing and commercial purposes depends on what you have agreed to.We may transfer your personal data to servers located outside of your country of residence or to affiliates, third parties based in other countries including countries in the EEA (European Economic Area, EEA European Economic Area, EEA - free trade zone and common market, comprising the countries of the European Union and the European Free Trade Association EFTA) for the purpose of processing personal data by such entities on our behalf in accordance with the provisions of this Privacy Policy and applicable laws, customs as well as data protection regulations. We keep your personal data for no longer than they are needed for the proper quality of service and, depending on the mode and purpose of their acquisition, we keep them for the duration of the service and after its termination for the purposes of:Performance of obligations under the law, tax and accounting regulations;Marketing activities - for the duration of the contract, granting separate consent to process such data - until the completion of transaction processing activities, your objection to such processing or withdrawal of consent. Operational activities - until the statute of limitations imposed by the RODO Regulation and the relevant national laws, in order to demonstrate the fairness of the processing of your personal dataKeeping in mind the circumstances that in many of the countries to which this personal data is transferred, the same level of legal protection of personal data as in your country does not apply. Your personal data stored in another country may be accessed by, for example, courts, law enforcement and national security authorities in accordance with the laws of that country. Subject to lawful requests for disclosure, we undertake to require those processing personal data outside your country to take steps to protect the data in a manner adequate to the regulations of their national laws.

§4 "Cookies" Policy "

We collect information contained in cookies automatically for the purpose of collecting User data. A cookie is a small piece of text that is sent to the User's browser and which the browser sends back the next time the User visits the website. They are mainly used to maintain a session, e.g. by generating and sending back a temporary ID when you log in. We use "session" cookies that are stored on the User's terminal device until the User logs out, shuts down the website or shuts down the browser, and "permanent" cookies that are stored on the User's terminal device for the time specified in the parameters of the cookies or until they are deleted by the User.Cookies adjust and optimize the website and its offerings for the needs of Users through activities such as creating statistics on page views and ensuring security. Cookies are also necessary to maintain the session after leaving the website. The Administrator processes the data contained in cookies each time the website is visited by visitors for the following purposes: optimizing the use of the website;identifying Service Recipients as currently logged in;adapting, graphics, selection options and any other content of the website to the individual preferences of the Service Recipient;remembering completed automatically and manually, posted data from Order Forms or login data provided by the visitor; collecting and analyzing anonymous statistics showing the use of the Site in the administration panel and google analyticcreating remarketing lists based on information about preferences, behavior, use of interests from the Site and collecting demographic data, and then making these lists available in AdWords and Facebook Ads. Creating data segments based on demographic information, interests, preferences in the choice of products/services viewed.Using demographic and interest data in Analytics reports.The User can completely block and delete the collection of cookies at any time through his/her web browser. Blocking by the User the possibility of collecting Cookies on his device may hinder or prevent the use of certain functionalities of the site to which the User is fully entitled but must be aware of the limitations of functionality in such a situation.The User who does not want the use of "cookies" for the purpose described above at any time can delete them manually. For detailed instructions on how to proceed, please visit the website of the manufacturer of the web browser you are currently using.More information about cookies is available in the help menu of each web browser. Examples of web browsers that support the aforementioned "Cookies":Internet Explorer cookie settingsChrome cookie settingsFirefox cookie settingsOpera cookie settingsSafari cookie settingsAndroid cookie settingsBlackberry cookie settings iOS (Safari)Windows Phone cookie settings

§5 Rights and obligations

We have the right, and in cases specified by law also the statutory obligation, to provide selected or all information about your personal data to public authorities or third parties who make such a request for information under the applicable provisions of Polish law. The User has the right to access the contents of his/her personal data which he/she makes available, the User may correct and complete the data at any time, and also has the right to demand that the data be deleted from his/her databases or that processing of the data be discontinued, without giving any reason. In order to exercise his/her rights, the User may at any time send an applicable message to the e-mail address or any other way that will provide/receive such a request.The processing of personal data of individuals who are our customers is based on:The legitimate interest as a data controller (e.g., for database development, analytical and profiling activities, including activities concerning justified interest as a data controller (e.g. for the creation of a database, analytical and profiling activities, including activities related to the analysis of the use of products, direct marketing of our own products, securing documentation for the purpose of defense against possible claims or for the purpose of asserting claims)consent (including, in particular, consent to e-mail marketing or telemarketing)performance of a concluded contractobligations under the law (e.g. tax law or accounting regulations). The processing of personal data of individuals who are potential customers is based on:consent (including, in particular, consent for e-mail marketing or telemarketing)A request from the User to delete personal data or to stop processing by the User may result in the complete inability to provide the services by or a serious limitation of them.   We undertake to act in accordance with applicable laws and rules of social coexistence.Information about out-of-court settlement of consumer disputes. The authorized entity within the meaning of the Act on out-of-court handling of consumer disputes is the Financial Ombudsman, whose website address is: www.rf.gov.pl.

§6 Basic security

Every user should take care of his own data security and the security of his devices that are used to access the Internet. Such a device should absolutely have an antivirus program with an up-to-date regularly updated database of definitions, types and types of viruses, a secure version of the Internet browser it uses and a firewall turned on. The user should check that the operating system and the programs installed on it have the latest and compatible updates, as attacks take advantage of bugs detected in the installed software.Access data to services offered on the Internet are - such as logins, passwords, PINs, electronic certificates, etc., - should be secured in a place inaccessible to others and impossible to hack from the Internet. Do not disclose them or store them on the device in a form that allows unauthorized access and reading by unauthorized persons.Be careful when opening strange attachments or clicking on links in emails that you were not expecting, e.g. from unknown senders or from the spam folder. It is advisable to run anti-phishing filters in your browser, i.e. tools that check whether a displayed website is authentic and not used for phishing, e.g. by impersonating a person or institution.Files should be downloaded only from trusted places, services and sites. We do not recommend installing software from unverified sources especially from unknown publishers with an unproven reputation. This also applies to mobile devices, e.g. smartphones, tablets.When using a home Wi-Fi network, you should set such a password so that it is secure and difficult to break, it should not be any pattern and string of characters that is easy to guess (e.g. street name, host name, birthday, etc.). It is also recommended to use the highest possible Wi-Fi encryption standards that are possible to run on your equipment, such as WPA2. 

§7 Use of Social Media Plug-insPlug-ins so-called plug-ins of social networks facebook.com and Twitter and others, may be found on our sites. The related services are provided by Facebook Inc. and Twitter Inc.respectively.Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA Facebook. To see Facebook plug-ins go to: https://developers.facebook.com/docs/pluginsTwitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. To see Twitter plug-ins go to: https://dev.twitter.com/web/tweet-buttonWtyczka only provides its provider with information about which of our websites you accessed and at what time. If you are logged into your account located, for example, on Facebook or Twitter, while viewing or staying on our site, the provider is able to combine your interests, information preferences, and other data, obtained, for example, by clicking the Like button or leaving a comment, or entering your profile name in searches. Such information will also be transmitted by the browser directly to the provider.For more detailed information on data collection and use by Facebook or Twitter and on privacy, please visit the following pages:Data protection/privacy advice issued by Facebook: http://www.facebook.com/policy.phpOchrona data/privacy advice issued by Twitter: https://twitter. com/privacyTo avoid having a visit to your selected user account recorded by Facebook or Twitter on our website, you must log out of your account before browsing our websites.

Copyright

Notice to Terms and Conditions

The owner of all material copyrights in the template of this policy is LEGATO Law Firm, which has granted a non-exclusive and non-transferable right to use this document for the purpose of its own commercial activities on the Internet and extends legal protection to the aforementioned document for the duration of the contract. Copying and distribution of the template of this document without the permission of LEGATO Law Firm is prohibited and may be subject to both criminal and civil liability. Online merchants can learn more about the possibility of using the template privacy and cookies policy at http://www.kancelaria-legato.pl