Privacy Policy
Privacy Policy at Xene Distribution
- Preliminary information
This Privacy Policy describes the general principles of personal data processing that we apply in connection with our business activities and the website www.xene-distribution.com. - Administrator
The administrator of the website www.xene-distribution.com and the personal data administrator is Xene P.S.A. based in Warsaw at Puławska 145B, 02-715 Warsaw, entered into the register of entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, XIII Commercial Division of the National Court Register under the number KRS: 0000947844, having NIP number: 5213953577 and REGON: 521058418. For matters related to personal data protection, please contact us at: [email protected]. - Personal data processing process
We process personal data in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)(OJ EU L 2016, No. 119, p. 1), hereinafter: GDPR, the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018, item 1000, as amended), hereinafter: PDPA, as well as other normative acts of national and European Union law. In the interest of transparency of the personal data processing process, and respecting the informational autonomy of the persons whose data we process, applying to the content of Art. 13 para. 1 and 2 of the GDPR, below we provide information on processing according to the following order:- Purposes and legal basis for the processing of personal data;
- Period of storage of personal data;
- Recipients of personal data;
- Transfer of personal data outside the European Economic Area (EEA);
- Rights related to the processing of personal data;
- Consequences of not providing personal data.
- Purposes and legal basis for the processing of personal data
People whose data we process
Legal basis for processing*
Purposes of processing
When you send a request or contact us using the contact details provided on the site or directly with our employees
· Our legitimate interest
You provide us with your data so that we can respond to your request, and also – if necessary – take other actions in accordance with your request, including presenting you with our offer of cooperation.
When you place an order or we establish cooperation
· Actions aimed at concluding and performing the contract
· Our legitimate interest
We need your personal data to take actions aimed at concluding or performing the contract (e.g., fulfilling the placed order), of which you are a party, or of which the company you represent is a party. We may also use your personal data to conduct survey research and use the information obtained in this way to improve the quality of our services.
When we conduct marketing activities
· Your consent
· Our legitimate interest
We may use your email address or phone number to conduct direct marketing activities of our products and services.
*Legal basis for processing:
· Your consent – Art. 6 para. 1 lit. a GDPR
· Actions aimed at concluding and performing a contract – Art. 6 para. 1 lit. b GDPR
· Our legitimate interest – Art. 6 para. 1 lit. f GDPR - Period of storage of personal data
We store your personal data for the period necessary to achieve the purposes for which they were collected, in particular until we provide you with exhaustive answers or take actions in accordance with your request, receive an objection to our marketing activities, and in the case of concluding a contract, e.g., placing an order – for the period resulting from legal regulations, in particular accounting and tax law. After this time, we may continue to process your personal data in order to pursue potential claims or defend against them. - Recipients of personal data
We pass on the personal data provided to us to entities with whom we cooperate on an ongoing basis, and whose services we use in conducting our business activities: providers of IT services and resources, including our email and website, marketing agencies, auditors, banks or law firms. - Transfer of personal data outside the European Economic Area (EEA)
In our daily work, we use the Google Workspace application and the tools included in it to increase our productivity. Since some of the servers used by the application are located outside the EEA, we transfer your data to so-called third countries. We inform you that we secure your data using standard data protection clauses approved by the European Commission. You can obtain more information about the safeguards applied by contacting us at the contact details provided above. - Rights related to the processing of personal data
In connection with the processing of personal data, the persons whose data we process have the following rights:Right
Legal basis for processing
Your consent (Art. 6 para. 1 lit. a GDPR)
Actions aimed at concluding and performing a contract (Art. 6 para. 1 lit. b GDPR)
Our legitimate interest (Art. 6 para. 1 lit. f GDPR)
Right to withdraw consent
YES
NO
NO
Right to access the content of your personal data
YES
YES
YES
Right to rectify, delete or limit the processing of personal data
YES
YES
YES
Right to transfer personal data
YES
YES
NO
Right to object to the processing of personal data
NO
NO
YES
Right to lodge a complaint with the President of the Office for Personal Data Protection
YES
YES
YES
You can exercise the right to withdraw consent at any time. However, withdrawal of consent does not affect the legality of the processing that we will carry out on the basis of consent before its withdrawal.
To exercise the above rights, we invite you to contact us at the contact details provided below in point IV.
- Consequences of not providing personal data
Legal basis for processing
Consequences of not providing personal data
Your consent (Art. 6 para. 1 lit. a GDPR)
Providing data is voluntary, but necessary to achieve the purposes of processing; failure to provide data prevents the achievement of these goals.
Actions aimed at concluding and performing a contract (Art. 6 para. 1 lit. b GDPR)
Providing data is voluntary, but necessary to conclude a contract; failure to provide data prevents its conclusion.
Our legitimate interest (Art. 6 para. 1 lit. f GDPR)
Providing data is voluntary, but necessary to achieve the purposes of processing; failure to provide data prevents the achievement of these goals.
- Final provisions
The provisions of this Privacy Policy may be subject to change. New privacy protection rules will be published on the website along with the date from which they come into effect. In the scope not regulated by this Privacy Policy, the provisions of the GDPR, PDPA, and the Act of April 23, 1964 – Civil Code (consolidated text Journal of Laws of 2017, item 459, as amended) apply. All questions and doubts regarding this Privacy Policy are best directed to the address: [email protected], by phone at +48 607 241 659 or by mail to the address of our headquarters. The statement under the questionnaire The administrator of your personal data is Xene P.S.A. We process your data to respond to your request and present you with our offer of cooperation. The legal basis for processing your data is the realization of our legitimate interests. You are entitled in particular to the right of access to the content of your data, the right to delete them, the right to object and the right to lodge a complaint with the supervisory authority. More information about personal data processing can be found under the link: Privacy Policy.