General information
This document specifies the rights and terms related to the processing of personal data on the website owned by Action S.A., available at https://global.action.pl/ (the Website).
Basic rights and obligations relating to personal data protection are contained in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as: GDPR) and the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018.1000, as amended). Thus, for issues which are not regulated herein, the GDPR and the said act of the protection of personal data shall apply.
Data Controller
The controller of your personal data is ACTION S. A., based in Zamienie, ul. Dawidowska 10, 05-500 Piaseczno.
Contact details of the Data Protection Officer
In the case of doubts or inquiries regarding the safety of processing of your personal data, you may contact our Data Protection Officer by e-mail iod@action.pl or by post: Data Protection Officer Action S.A., Zamienie, ul. Dawidowska 10, 05-500 Piaseczno.
What data do we collect?
We collect data from HTTP inquiries sent to our servers. These include, among others, IP address, HTTP queries and responses of the website that links our Website, and technical data of transmission.
If you have used the contact form on our website, contact details are additionally collected: first and last name, e-mail address.
Information on the data collected in cookies can be found at: Cookie Policy page.
Who do we share your personal data with?
Your data may be transferred to entities belonging to the ACTION Capital Group and entities cooperating with it solely for the purpose for which we use them, and also entities cooperating with us, i.e. providing legal support, consulting and audit services, implementing marketing campaigns for us, providing ICT services to us and entities and bodies responsible for combating fraud and abuse.
Purpose and legal basis for the processing of your personal data
We process your personal data as it is necessary to ensure sales, use of our website and ability to respond to your inquiries. The following is a summary of all the purposes for which we process your personal data:
- providing services by electronic means as part of the use of the action.pl Website;
- ensuring resolution of technical problems;
- handling requests and enquiries you address to us (e.g. through a contact form, Skype, GG and other communication channels of your choice);
- providing you with marketing and information materials, placing trade offers and undertaking promotional activities now or in the future (direct marketing) – if you have given your consent to sending the above information.
We also process your personal data for the purposes set out below, based on the legitimate interest of ACTION, which is:
- monitoring your activity and the activity of other users, including, e.g. keyword search, placement of offers and management of your activity on the Website
- optimising website functions based on the content you are viewing.
You may withdraw your consent to the processing of your personal data at any time by sending a notification to iod@action.pl
Period of storing of your personal data
We store your personal data for the time necessary to:
- respond to inquiries, requests and complaints sent,
- prevent fraud,
- develop statistical and archiving analyses
but not longer than 1 year.
If you consent, we will store your personal data until you withdraw the consent For the organisation of loyalty programmes, competitions and promotional activities in which you may take part, we will process your data for the duration and settlement period of prize giving.
Do you have to provide your personal data to us?
We require you to provide your personal data in the contact form, as this is necessary to answer and possibly send the ordered materials.
If required by law, we may require you to provide other data which are necessary, e.g. for accounting or tax reasons. Providing your data is voluntary, but refusal to provide them may make it impossible to achieve the goal.
What are your rights with respect to ACTION S.A. regarding the data processed?
We inform you that at any time, you have the right to:
a. demand access to your Personal Data at any time;
b. immediately rectify any of your Personal Data which is incorrect and complete any of your Personal Data which is incomplete;
c. immediately erase your Personal Data;
d. restrict the processing if:
i. you question the accuracy of the Personal Data,
ii. the processing is unlawful, but you object to the erasure of your Personal Data,
iii. the Data Controller no longer needs your Personal Data for the purposes of processing, but you need it to investigate, enforce or defend legal claims,
iv. you have objected to processing – until the moment of determination of whether the grounds of the Controller take precedence over the grounds of the objection,
e. you have objected to the processing of your Personal Data on the basis of Article 6(1)(f) of the GDPR, in particular to the processing of Personal Data for the needs of direct marketing;
f. data portability, including to:
i. receive (in a structured, commonly used, machine-readable format) data, which you have provided to the Controller and to transfer it to another controller;
ii. request that the data are sent by the Controller directly to another controller, if technically possible;
iii. provided that the processing of your data is automated and provided that the processing takes place pursuant to Article 6(1)(b) of the GDPR,
g. lodge a complaint with the President of the Personal Data Protection Office, if you consider that the processing of your Personal Data is in breach of the provisions of the GDPR or the Polish Act of 10 May 2018 on the protection of Personal Data.
Send the respective request to: iod@action.pl
In what situations can you object to the processing of your personal data?
You have the right to object to the profiling of your activities for direct marketing at any time, and where the processing of your personal data is based on a legitimate interest or for statistical purposes and the objection is justified by a particular situation you are in.
In order to exercise the above rights, please contact the controller or the Data Protection Officer (contact details above).
Do we process your personal data automatically (including through profiling) in a manner affecting your rights?
We would like to inform you that your data may be profiled, in particular for marketing purposes, conducting research, evaluating your interests and shopping preferences, including offering and presenting advertisements, products and services based on your assigned preferences, as well as for internal analysis. The following categories of data will be used for profiling: information about products and services and the manner of their usage, information on payments, information contained in cookies, information about electronic addresses (subpages visited), and information about devices used. ACTION uses this information to evaluate your preferences and interests. Through these actions, we can develop a dedicated product offer for you, and improve the quality of our website.
However, your data are not subject to automatic decision making. The actions of our systems will not have any legal effects on you, nor will they have a similarly significant effect on your situation.