Privacy policy

Privacy policy

I. Details of the Personal Data Controller

We would like to inform you that the administrator of your personal data is Noxan Sp. z o.o., with its registered office at ul. Mogileńska 19, 61-052 Poznań, entered into the National Court Register under the KRS number 0000283888 and using the NIP number 7811807303, hereinafter referred to as the "Company". Contact with the Company on the issue of personal data protection is possible at the e-mail address:info@noxan.pl.

II. Purposes and grounds for processing personal data

In order to provide services in accordance with the scope of our activities, the Company processes your personal data - for various purposes, but always in accordance with the law. Below you will find the specified purposes of processing your personal data together with the legal basis.

In order to conclude and perform the sales contract, we process personal data such as:

• name,
• e-mail address,
• telephone no,
• delivery address,
• company name and VAT number (if purchasing as an entrepreneur).

The legal basis for such processing is Article 6(1)(b) of the RODO, which allows personal data to be processed if it is necessary for the performance of a contract or for taking steps to enter into a contract.

In order to answer the questions transmitted via the contact address (info@noxan.pl) we process such personal data as:

• name (if given),
• e-mail address.

The legal basis for such processing is Article 6(1)(b) of the RODO, which allows personal data to be processed if it is necessary for the performance of a contract or for taking steps to enter into a contract.

In order to send email notifications, we process personal data such as:

• e-mail address.

The legal basis for such processing is Article 6(1)(a) of the RODO, which allows personal data to be processed if the person has previously given such consent; secondly, Article 6(1)(f) of the RODO, which allows personal data to be processed if, by doing so, the Personal Data Controller is pursuing its legitimate interest.

In order toadministration of the websitewe process such personal data as:

• IP address,
• server date and time,
• browser information,
• information about the operating system.

- This data is saved automatically in so-called server logs every time the website belonging to the Company is used. Administration of the website without the use of the server and without this automatic recording would not be possible. The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows personal data to be processed if, by doing so, the Personal Data Controller pursues its legitimate interest (in this case, the Company's interest is the administration of the website).

In order to comply with our obligations under tax law, such as keeping accounting records for 5 years, we process personal data such as:

• name,
• e-mail address,
• residential address,
• VAT number (if provided).

The legal basis for such processing is Article 6(1)(c) of the RODO, which allows the processing of personal data where such processing is necessary for the Data Controller to comply with its obligations under the law.

III. Cookies

1. The company on its website, like other entities, uses so-called cookies, i.e. short text information stored on your computer, phone, tablet or other device. They can be read by our system and also by systems belonging to other entities whose services we use (e.g. Facebook, Google).
2. Cookies perform a great many functions on the website, most often useful ones, which we will try to describe below (if the information is insufficient, please contact us):
   • essential - providing security- cookies are used to authenticate users and prevent unauthorised use of the customer panel. They therefore serve to protect the user's personal data from unauthorised access;
   • indispensable - impact on the processes and performance of the use of the website- cookies are used to ensure the smooth functioning of the website and to enable you to use the functions available on it, which is made possible, among other things, by remembering your settings between visits to the site. Cookies are therefore used to enable you to navigate the website and its individual pages efficiently;
   • essential - maintaining session status- if the customer logs in to their panel, cookies make it possible to maintain the session. This means that you do not have to re-enter your login and password each time you move to another sub-page, which promotes the comfort of the website;
   • statistical- cookies are used to analyse how visitors use the website (how many open the website, how long they stay on it, which content is of most interest, etc.). This allows the website to be continuously improved and adapted to users' preferences. We use Google's tools, such as Google Analytics, to track activity and generate statistics; in addition to reporting website usage statistics, the Google Analytics pixel can also be used, together with some of the cookies described above, to help display more relevant content to you on Google's services (e.g. Google Search) and across the web;
   • marketing- cookies are used to track users on websites. The aim is to display advertisements that are relevant and interesting to individual users and thus more valuable to third-party publishers and advertisers;
3. Importantly, many cookies are anonymised for us - without additional information, we are unable to identify your identity from them.
4. By default, your web browser allows the use of cookies on your device, so please give your consent to the use of cookies on your first visit. However, if you do not wish to use cookies when browsing the website, you can change the settings in your internet browser - block the automatic handling of cookies completely or request to be notified whenever cookies are placed on your device. You can change your settings at any time.
5. While we respect the autonomy of all those using the website, we feel obliged to warn you that disabling or restricting the use of cookies may cause quite serious difficulties in the use of the website, e.g. in the form of having to log in to every subpage, longer loading times, restrictions on the use of functionalities.

In the table below, we provide information on the function of the cookies we process and their validity period:

IV. Right of withdrawal of consent

1. If the processing of your personal data is based on consent, you may withdraw this consent at any time - at your own discretion.
2. If you would like to withdraw your consent to the processing of your personal data, to do so is sufficient:
   • send an e-mail directly to the Company atinfo@noxan.plor
   • remove the posted comment under the article.
3. If the processing of your personal data was carried out on the basis of consent, revocation of consent does not render the processing of your personal data until then unlawful. In other words, we have the right to process your personal data until you revoke your consent and revoking your consent does not affect the lawfulness of the previous processing.

V. Requirement to provide personal data

1. The provision of any personal data is voluntary and at your discretion. However, in some cases, the provision of certain personal data is necessary in order to meet your expectations for the use of the service.
2. In order to make any enquiries, it is necessary to provide your name and e-mail address - without this we are unable to respond to your enquiry.
3. In order to conclude a sales contract, it is necessary for you to provide your name, surname, delivery address, and e-mail address - without this, we are unable to take action to conclude a contract.
4. In order for you to be able to receive an invoice, it is necessary that you provide all the data required by tax law, i.e. your name or company name, your address or registered office address, your VAT number - without this we are not able to invoice you correctly.
5. In order to be able to contact you by telephone regarding the processing of your order, it is necessary for you to provide a telephone number - without this we are unable to make telephone contact.

VI. Automated decision-making and profiling

We kindly inform you that we do not carry out automated decision-making, including on the basis of profiling. The content of the enquiry that is sent via the contact form is not subject to evaluation by an IT system. The proposed price of the products is in no way the result of an assessment made by any IT system.

VII. Recipients of personal data

1. Like most entrepreneurs, we use the assistance of other entities in our business, which sometimes involves the transfer of personal data. Therefore, if necessary, we pass on your personal data to our cooperating accounting company, hosting company, shipping companies.
2. In addition to this, it may happen that, for example, on the basis of a relevant legal provision or a decision of a competent authority, we will also have to provide your personal data to other entities, whether public or private. Therefore, it is extremely difficult for us to predict who may make a request for your personal data. Nevertheless, for our part, we assure you that we analyse every request for personal data very carefully and very thoroughly, so as not to inadvertently pass on information to an unauthorised person.

VIII. Transfers of personal data to third countries

We kindly inform you that your personal data is not transferred outside the European Economic Area.

IX. Period of processing of personal data

1. In accordance with current legislation, we do not process your personal data "indefinitely", but for the period of time that is necessary to achieve the stated purpose. After this period, your personal data will be irreversibly deleted or destroyed.
2. Regarding the specific processing periods for personal data, we kindly inform you that we process personal data for a period of time:
   • 3 years or 10 years + 1 year - for personal data processed for the purpose of establishing, pursuing or defending claims (the length of the period depends on whether or not both parties are businesses);
   • 5 years - for personal data involving compliance with tax law obligations;
   • until the consent is withdrawn or the purpose of the processing is achieved, but for no longer than 5 years - for personal data processed on the basis of consent;
   • until such time as an objection is lodged successfully or the purpose of the processing is achieved, but for no longer than 5 years - with regard to personal data processed on the basis of a legitimate interest of the Personal Data Controller
   • until it becomes obsolete or is no longer relevant, but for a maximum of 3 years, with regard to personal data processed mainly for analytical purposes, the use of cookies and website administration.
3. We count the periods in years from the end of the year in which we started processing personal data in order to streamline the process of deletion or destruction of personal data. Counting the period separately for each event would involve significant organisational and technical difficulties, as well as a significant financial outlay, so establishing a single date for the erasure or destruction of personal data allows us to manage the process more efficiently. Of course, in the event that you exercise your right to be forgotten, such situations are dealt with on a case-by-case basis.
4. The additional year associated with the processing of personal data collected for the performance of a contract is dictated by the fact that, hypothetically, you may make a claim moments before the expiry of the limitation period, the demand may be served with a material delay or you may misstate the limitation period for your claim.

X. Entitlements of data subjects

1. We kindly inform you that you have the right to:
   • access to their personal data;
   • rectification of personal data;
   • deletion of personal data;
   • restrictions on the processing of personal data;
   • object to the processing of personal data;
   • portability of personal data.
2. We respect your rights under data protection legislation and strive to facilitate the exercise of these rights to the greatest extent possible.
3. We would like to point out that the rights listed are not absolute and therefore we may lawfully refuse you in certain situations. However, if we refuse to comply with a request, this is only after careful consideration and only if it is necessary to refuse the request.
4. Regarding your right to object, we explain that you have the right to object at any time to the processing of your personal data on the basis of the legitimate interests of the Personal Data Controller (these are listed in section III) in relation to your particular situation. However, you must bear in mind that, in accordance with the regulations, we may refuse to take your objection into account if we show that:
   • there are legitimate grounds for the processing which override your interests, rights and freedoms, or
   • there are grounds for the establishment, assertion or defence of claims.
5. Furthermore, you may object at any time to the processing of your personal data for marketing purposes. In such circumstances, we will cease processing for this purpose upon receipt of your objection.
6. You can exercise your rights by:
   • sending an e-mail directly to the Company atinfo@noxan.pl.

XI. Right to lodge a complaint

If you believe that your personal data is being processed in violation of applicable law, you may lodge a complaint with the President of the Data Protection Authority.

XII. Final provisions

1. To the extent not covered by this Privacy Policy, the data protection regulations apply.
2. You will be notified by email of any changes made to this Privacy Policy.
3. This Privacy Policy is effective as of 25 May 2018.