Privacy policy

> This is an unofficial English translation. The Polish version is legally binding.

Privacy policy of the drukarniapromedia.pl website

We care about your privacy and want you to feel comfortable while using our services. Below we present the most important information about the rules for processing your personal data and about the cookies used by our website. This information has been prepared taking into account the GDPR, i.e. the General Data Protection Regulation.

Controller of personal data

The controllers of personal data are entrepreneurs entered in the Central Registration and Information on Business:

• Krystian Miazek, NIP 726-265-63-66, REGON 472304830, trading under the name Krystian Miazek wspólnik PROMEDIA.PL SC - partner in a civil-law partnership

• Małgorzata Miazek-Roróg, NIP 834-166-04-86, REGON 472304830, trading under the name Małgorzata Anna Miazek-Roróg wspólnik spółki cywilnej PROMEDIA.PL - partner in a civil-law partnership

conducting business as a civil-law partnership under the name „PROMEDIA.PL” S.C., with its registered office at ul. Gdańska 91, 90-613 Łódź, NIP 7272466816, REGON 472304830.

Personal data and privacy

If you intend to place an order and use our services, you will be asked to provide us with your personal data. Your data are processed by us for the purposes indicated below, connected with the operation of the website and the provision of the services offered on it.

Purpose of processing

Depending on what you decide, this may be:

• Provision of the services offered on the website

• Fulfilment of your orders

• Direct marketing of the services offered, other than the newsletter

• Sending the newsletter

Basis of processing

• The sales contract or steps taken at your request prior to entering into it (Art. 6(1)(b) GDPR)

• A legal obligation incumbent on us, e.g. related to accounting (Art. 6(1)(c) GDPR)

• Your consent given on the website (Art. 6(1)(a) GDPR)

• The contract for the provision of services or steps taken at your request prior to entering into it (Art. 6(1)(b) GDPR)

• Our legitimate interest consisting in processing data for the purpose of establishing, pursuing or defending possible claims (Art. 6(1)(f) GDPR)

• Our legitimate interest consisting in carrying out direct marketing (Art. 6(1)(f) GDPR)

• Our legitimate interest consisting in processing data for analytical and statistical purposes (Art. 6(1)(f) GDPR)

• Our legitimate interest consisting in surveying customer satisfaction (Art. 6(1)(f) GDPR)

Provision of data

Providing data is voluntary, but in some cases it may be necessary in order to conclude a contract.

Consequences of not providing data

Depending on the purpose for which the data are provided:

• no possibility of using the services of the website

• no possibility of making purchases on the website

• no possibility of receiving information about promotions or special offers

Possibility of withdrawing consent

You may withdraw your consent at any time. Processing of data up to the moment you withdraw your consent remains lawful.

Processing period

We will process your data only for the period during which we have a legal basis for doing so, that is, until the moment when:

• the legal obligation requiring us to process your data ceases to apply

• the possibility of establishing, pursuing or defending possible claims connected with the contract concluded by the parties ceases

• you withdraw your consent to the processing of data, if it was the basis for it

• your objection to the processing of your personal data is accepted - where the basis for processing your data was the legitimate interest of the controller or where the data were processed for the purpose of direct marketing

• depending on which of these applies in a given case and which occurs latest.

Other people's data that you entrust to us (guest lists)

When using the creator of occasional printed products you may pass us the data of third parties - first names, surnames and, for envelopes, also the postal addresses of your guests - as well as photographs. These are data of people who have not contacted us themselves and have not placed an order with us, which is why we treat them with particular care.

• Why we hold them. Solely in order to print your order. We do not use them for anything else: we send no correspondence to those addresses, we do not add them to any newsletter, we do not pass them on and we do not share them with anyone beyond printing your order.

• How they are protected. In the record of a placed order, guest lists, addresses and the content of the design are stored in encrypted form - they do not appear in the order file in plain text. Backup copies contain those files in the same, encrypted form. Separately, for the duration of the design work, we keep your working project in the creator; that record is not encrypted and remains on our server for up to 400 days from the last change, after which it is deleted. These data are accessed solely by our production team and only to the extent needed to print the order.

• How long we keep them. We delete them after 12 months - counting from the last change of the order status, that is, usually from its completion. Guest lists, addresses and photographs then disappear automatically. Orders in progress (paid, in production) wait until they are completed. What remains is the order itself as a sales document: number, items, amounts, as well as your data as the buyer and the delivery address, because accounting regulations require this of us. The content of the design itself also remains (for example the couple's first names and the date), without guest lists and without addresses.

• Your part in this. By passing us a guest list you declare that you have a basis for sharing those data with us. If any of those people contacts us about their data, we will forward that request to you - it is you who knows where the data came from.

If you would like us to delete a guest list earlier than after 12 months - write to info@promedia.pl and we will do it right away.

Data security

When processing your personal data we apply organisational and technical measures compliant with the relevant provisions of law, including encryption of the connection by means of an SSL certificate.

Your rights

You have the right to request:

• access to your personal data,

• their rectification,

• their erasure,

• restriction of processing,

• transfer of the data to another controller,

And also:

• to object at any time to the processing of your data:
• on grounds relating to your particular situation - to the processing of personal data concerning you based on Art. 6(1)(f) GDPR (i.e. on legitimate interests pursued by the controller),

• if personal data are processed for the purposes of direct marketing, to the extent that the processing is related to such direct marketing.

Contact us if you wish to exercise your rights.

If you consider that your data are being processed unlawfully, you may lodge a complaint with the supervisory authority.

Cookies

Our website, like most websites, uses so-called cookies. These files:

• are saved in the memory of your device (computer, telephone, etc.)

• enable you, among other things, to use all the functions of the website

• do not cause changes to the settings of your device

Using the appropriate options of your browser, you may at any time:

• delete cookies

• block the use of cookies in the future

On this website cookies are used for the purpose of:

• remembering information about your session

• statistics

• marketing

• providing the functions of the website

To find out how to manage cookies, including how to disable their support in your browser, you can use your browser's help file. You will find the relevant guidance on the following pages, depending on which browser you use:

• Firefox

• Chrome

• Safari

• Microsoft Edge

Analytics and marketing tools

We use the following tools for traffic analysis and marketing (marketing cookies require your consent in the banner):

With analytics consent:

• Google Analytics 4 (GA4) - traffic analysis, conversion measurement. IP anonymisation enabled. TTL: 14 months (the GA4 default limit). The service is provided by Google Ireland Limited.

• Chateo - live chat. It remembers the state of your conversation and recognises you on your next visit, and shows our staff the pages you view and the contents of your basket (after you place an order, also its number and value). Without consent the chat is not loaded at all. The service is provided by Chateo (app.chateo.pl).

With marketing consent:

• Google Ads (conversion measurement) - measures how our Google ads perform. After you place an order we pass Google only its number and value, never your name, surname, e-mail address or phone number. Your choice is passed to Google through Consent Mode: without marketing consent the Google Ads tag is not loaded, the conversion is not sent and no advertising cookies are stored. The service is provided by Google Ireland Limited.

• OpenAI Ads (measurement pixel) - measures how our advertising performs. It records a page view, adding a product to the basket and placing an order together with its value and number. We do not pass your name, surname or e-mail address to it. With that consent we also store a random identifier in your browser (the dp_oai_id cookie, up to 13 months) and pass OpenAI its hash together with the order's delivery country, so that the order can be linked to an ad. When you withdraw consent the identifier is deleted. The pixel itself may read an e-mail address or phone number typed into a form and send OpenAI only its hash (an encrypted form), never the address or number itself. Without marketing consent the pixel is not loaded at all. The service is provided by OpenAI.

Purpose: marketing, remarketing, traffic analysis and site optimisation. You may withdraw your consent at any time through the cookie banner or your browser settings.

External services / data recipients

We use the services of external entities to which your data may be transferred. Below is a list of the possible recipients of your data:

• the supplier of the software needed to operate the website

• the entity carrying out the delivery of the goods

• the payment provider

• the accounting office

• the hosting provider

• the supplier of software facilitating the running of the business (e.g. accounting software)

• the entity providing us with technical support

• the entity providing marketing services

• the entity providing statistical services

• the relevant public authorities to the extent that the Controller is obliged to make the data available to them

Contacting the Controller

Would you like to exercise your rights regarding personal data? Or perhaps you simply want to ask about something connected with our Privacy Policy?

Write to the e-mail address: info@promedia.pl