Privacy Policy

1. What is GDPR?
GDPR stands for the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, Official Journal EU L No. 119, p. 1), commonly referred to as GDPR (hereinafter referred to as GDPR).

2. What is the purpose of GDPR?
The main purpose of new regulations is to improve the protection of personal data of natural persons and to unify the rules of personal data processing within the EU.

3. When GDPR was introduced?
GDPR is effective as of 25 May 2018.

4. Who is the data controller?
How can I consult HART on GDPR? The data controller for your personal data is “HART” spółka z ograniczoną odpowiedzialnością with its registered office in Opole, ul. Morcinka 43, 45-531 Opole, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court in Opole, 8th Business Division of the National Court Register under KRS [National Court Register ] No.: 0000170602, NIP [VAT No.]: 7542748922, REGON [National Official Business Register No.]: 532402005, share capital of PLN 4,550,000.00 (hereinafter referred to as HART). If you have any questions regarding your personal data, you can contact us at rodo@hartphp.com.pl

5. Do I need to contact HART due to GDPR?
No, you do not need to do this. You should only read the information presented on this page.

6. How does HART collect my data?
We obtain your data primarily in connection with business relations established with you, i.e. when you establish cooperation or enter into agreements with us, place orders, sign up in our systems to have access, are involved in complaint handling procedure, attend training courses or give your consent to receive newsletters. We also process the personal data which other data controllers entrusted to us in order to enable us to provide our services in accordance with the terms stated in the agreements.

7. What is the basis for the processing of my personal data and how long are my personal data processed by HART?
The purpose of and legal basis for the processing of your personal data are as follows:

a) in order to enter into and execute the agreement, including to execute orders and guarantee the proper quality of services – for the term of the agreement (including for the duration of order execution) and to make appropriate settlements after its termination pursuant to Art. 6 section 1b of GDPR (this legal basis shall be hereinafter referred to as Execution of the Agreement);

b) in order to perform our legal obligations pursuant, to Art. 6 section 1c of GDPR (this legal basis shall be hereinafter referred to as Legal Obligation), e.g.:
- to issue and store invoices and other accounting documents,
- to process and respond to complaints – for the following period: - for the retention period required by the law, e.g. in relation to tax data,
- for the period necessary to perform our obligations, e.g. to issue invoices, or for the period required by the law, i.e. for the period during which we may incur legal consequences of failure to perform duties imposed by the law, e.g. state or local government offices may impose a fine on us, i.e. pursuant to Art. 6 section 1f of GDPR (this legal basis shall be hereinafter referred to as Our Legitimate Interest);

c) for the purpose of direct marketing including to send offers, and commercial and promotional information by electronic means (legal basis: Our Legitimate Interest) – for the term of the agreement, until you withdraw your consent or object to the processing of your personal data for this purpose;

d) to to assert and defend claims – – for the term of the agreement (legal basis: Execution of the Agreement), until the expiry of the limitation period for claims arising from the agreements and, if we assert claims, for the duration of the relevant proceedings (legal basis: Our Legitimate Interest).

8. What rights do I have due to GDPR?
In connection with the processing of your personal data by HART, you shall have the following rights:

        a) the right to access your personal data,
        b) the right to erasure your personal data (the right to be forgotten),
        c) the right to update/rectify your personal data,
        d) the right to transfer your personal data,
        e) the right to restrict the processing of your personal data.

You may also object to the processing of your personal data executed for the purposes of direct marketing. Following your objection, we shall be obliged to stop the processing your personal data for this purpose. In duly justified circumstances, you may object at any time to the processing of your personal data, even if Our Legitimate Interest or public interest constitute the legal basis for their use. In such a case, we shall no longer have the right to process the objected personal data on this legal basis, unless we prove that there are: grounds for establishing, asserting or defending claims, or important legitimate grounds for the processing of personal data, which, according to the law, shall be deemed overriding in relation to your interests, rights and freedoms. The scope of your rights and the cases in which you may exercise them result from the law and are determined, inter alia, by the legal basis for their use by HART. In order to exercise these rights, please contact us at rodo@hartphp.com.pl The deletion or transfer of your personal data, or restriction or objection to the processing of your personal data, may affect the services and may preclude the proper execution of the services.

9. Do I have to give consent to the processing of my personal data by HART?
We may process certain categories of data without your additional consent. For the processing of your personal data for purposes other than those provided for by the law, we will need your consent. The consent is not mandatory and can be withdrawn at any time. However, the withdrawal of consent shall not affect the lawfulness of the processing of your personal data prior to such withdrawal.

In order to exercise these rights, please contact us at rodo@hartphp.com.pl

10. Does HART transfer my data outside the EEA?
We do not transfer your data outside the European Economic Area (including the European Union, Norway, Liechtenstein and Iceland). However, if during our cooperation, there is a need to provide such data, we will do so to the extent permitted by law.

11. Can I complain about the processing of my personal data?
You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that HART violates the law by the processing of your personal data.

12. The Newsletter subscription
Under the Newsletter subscription, Hart sends e-mails with the information on the Hart’s offer and Company’s specials to the e-mail address indicated by the service user. The user who consented to the Newsletter subscription by entering into the Newsletter subscription agreement with Hart shall indicate their e-mail address in the registration form on the Company’s website to receive e-mails referred to in the Newsletter Terms and Conditions. Information on the Newsletter subscription service can be found on https://hartphp.com.pl/en/newsletter-terms-and-conditions.

13. Cookies.
Websites www.hartphp.com.pl, store.hartphp.com.pl and www.zamowienia.hartphp.com.pl use cookies. Cookies are collected solely for the purpose of collecting information in order to tailor sales to products, and individual needs and preferences of the Customers. Cookies are stored by your browser on your hard drive and do not directly collect personal data. You can block cookies in your browser. However, if you do so, you will limit or preclude the use of www.hartphp.com.pl and www.zamowienia.hartphp.com.pl. Complete information on cookies can be found in the Cookies Policy on https://www.hartphp.com.pl/en/cookies.

14. Google Analytics
Website www.hartphp.com.pl uses Google Analytics. The function analyses the Internet services offered by Google Inc. („Google”). Google Analytics uses so-called „Cookies” https://www.hartphp.com.pl/en/cookies. The cookie information on how you use the website is usually transmitted to and stored on the Google server. If IP address anonymisation is activated on this website within a EU member state or other EEA state, your IP address will be truncated by Google. At the request of the website owner, Google will use this information to evaluate your use of the website, to prepare reports on website activity and to provide other services relating to the use of the Internet to the website owner. Google will not associate the IP address transmitted by your browser under Google Analytics with any other data held by Google.

You can prevent the storage of cookies in the settings of the browser software https://www.hartphp.com.pl/en/cookies. Please note, however, that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting and processing cookies’ data on your use of the website (including your IP address). To do so, you need to download and install the browser plug-in available on  tools.google.com/dlpage/gaoptout.
This website uses Google Analytics with the extension “anonymizeIp()”. As a result, IP addresses are truncated before further processing to exclude direct associations to persons. If your personal data may be directly associated to a given person, such association is immediately removed and such personal data is immediately deleted.
We use Google Analytics to analyse your use of the website and to improve the functionality of the website on a regular basis. Thanks to the statistics obtained, we can improve our offer and make it more interesting for you as a user. With respect to the exceptional cases in which personal data is transferred to the United States, Google complies with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. Art. 6 section 1f, first sentence of GDPR constitutes the legal basis for using Google Analytics.
External supplier details: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms of use: www.google.com/analytics/terms/en.html
Information on the protection of personal data: www.google.com/intl/en/analytics/learn/privacy.html. 
Data Protection Statement: www.google.de/intl/en/policies/privacy

As the data controller for your personal data, Hart makes every effort to ensure all physical, technical and organisational measures to protect personal data against accidental or intentional destruction, accidental loss, alteration, unauthorised disclosure, use or access in accordance with all applicable laws.

For this specific purpose, Hart engaged specialists in the field of GDPR and ISO 27001:2015, and brought into line the above mentioned sets of standards in the field of personal data processing with the provisions of law.

CONTACT AND INFORMATION ON GDPR:
„HART” Sp. z o.o.
ul. Morcinka 43
45-531 Opole
rodo@hartphp.com.pl