Privacy policy

The EU Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, referred to below as the GDPR, became applicable on 25 May 2018.

Data protection is a matter of trust, and our customers’ trust is very important to us.

With our registered office at ul. Kopalniana 18C, 43-225 Wola, we provide an appropriate level of security and lawful processing of all data, including personal data. This privacy statement explains which personal data is collected on our websites, how it is processed and whom to contact about these matters.

For further information, please contact us at remdruk@remdruk.pl.

Section 1 — General provisions

• This Privacy Policy sets out the rules for processing and protecting the personal data of users of remdruk.pl. It also describes the use of cookies.
• This Privacy Policy is provided for information.
• The controller of users’ personal data, within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ EU L 119, p. 1, referred to below as the GDPR, and the Polish Personal Data Protection Act of 10 May 2018 (Journal of Laws 2018, item 1000), is:

with its registered office at ul. Kopalniana 18C, 43-225 Wola, referred to below as the Controller.

• Users’ personal data is processed in accordance with personal data protection legislation and the Polish Act of 18 July 2002 on the Provision of Services by Electronic Means.
• The Controller makes every effort to protect the interests of individuals whose data is collected and, in particular, to ensure that processing is lawful. Personal data is collected for specified, lawful purposes and is not further processed in a manner incompatible with those purposes. The Controller retains the data in a form permitting identification of the individuals concerned for no longer than is necessary for the relevant processing purpose.
• The purpose of this Privacy Policy is to describe the Controller’s activities relating to personal data collected through the website.
• All data collected by the Controller is protected using reasonable technical and organisational measures and security procedures to prevent unauthorised access or use.
• The Controller has exclusive access to the data under the conditions set out in this Privacy Policy. Access to users’ personal data may also be entrusted to other entities, such as the website administrator, only to the extent necessary to provide the services correctly. External entities process entrusted data only under appropriate data processing agreements.

Section 2 — Collection, scope and purposes of personal data processing

• The Controller obtains information about users, among other means, through server logs collected by the hosting provider.
• Data recorded in server logs is not associated with specific individuals using the Controller’s website and is not used to identify website users.
• Server logs are used solely to assist in administering the website. Their contents are disclosed only to persons authorised to administer the server.
• The Controller may collect personal data from users who contact it through the website contact form, where that data is necessary to fulfil a request and respond to the user. Processing is based on Article 6(1)(b) GDPR: taking steps at the data subject’s request. After the correspondence ends, the legal basis for retaining it is the legitimate interest in archiving correspondence to demonstrate its course in the future, under Article 6(1)(f) GDPR. If the contact results in a contract, the data will be processed under Article 6(1)(b) GDPR.
• The Controller processes personal data necessary to provide the services available through the website and may use data collected and stored through the website for direct marketing of its own products or services; contacting users, particularly in connection with service provision, customer support and permitted marketing and advertising; and conducting research and analysis to improve the available services.
• The Controller may retain data collected and tracked through the website only for the purposes described above.
• The Controller may automatically obtain and record data sent to the server by users’ browsers or devices, including IP addresses, software and hardware parameters, pages viewed, mobile device identifiers and other information about devices and system use.
• Recipients of users’ personal data may include service providers supplying technical, IT and organisational solutions that enable the Controller to operate its business.
• Recipients may also include accounting, legal and advisory service providers, particularly an accounting firm, law firm or debt collection company. The Controller provides users’ data to a selected provider acting on its behalf only when and to the extent necessary for a processing purpose consistent with this Privacy Policy.

Section 3 — Cookies and usage data

• The Controller automatically collects information contained in cookies to obtain data about users’ use of the website. A cookie is a small piece of text sent by a website to a user’s browser and returned by the browser on subsequent visits. Cookies are mainly used to maintain sessions, for example by generating and returning a temporary identifier after login.
• The Controller uses session cookies, stored on the user’s device until the user logs out, closes the website or closes the browser, and persistent cookies, stored for the period specified in their parameters or until the user deletes them.
• The website uses essential cookies that enable access to its services, security cookies and performance cookies that collect information about how visitors use the website.
• Cookies are necessary to maintain a user’s session after leaving the website.
• Users may change cookie settings in their browser at any time, including blocking cookies.
• Users who do not want cookies to be used for the purposes described above may delete them manually at any time. Detailed instructions are available from the browser manufacturer’s website. Further information about cookies is available in each browser’s help menu. Examples of browsers supporting these cookies include Internet Explorer, Mozilla Firefox, Google Chrome and Opera.
• The Controller may allow third parties, such as advertising or analytics providers, to collect information directly on the website using these technologies. Data collected in this way is subject to those third parties’ privacy policies.

Section 4 — Rights and obligations of the Controller and users

• The Controller has the right and statutory obligation to provide some or all information relating to users to public authorities or third parties requesting it under applicable Polish law.
• The Controller does not entrust processing or disclose users’ personal data to unrelated entities without the consent of the persons concerned, except where the following circumstances apply: the Controller may use external providers to support the services it offers, but those providers are not authorised to independently use personal data processed on the Controller’s behalf, and all their activities are subject to this Privacy Policy.
• Users have the right to access their personal data collected by the Controller at any time. This includes verification, amendment, supplementation, erasure, restriction of processing, objection to processing, data portability and cessation of processing. Where consent has previously been given for a specific purpose, users may withdraw it. Users also have the right to lodge a complaint with a supervisory authority. These rights may be exercised without giving a reason.
• By accepting optional statements in forms, users may consent to additional purposes for processing their personal data.
• Voluntary consent to receive commercial information may be withdrawn at any time by an email request. Within 48 hours of receiving the withdrawal, the Controller removes the user’s data from the contact database used to send commercial information electronically.
• To exercise their rights, users may send a relevant request to the Controller’s registered office or by email at any time.
• Erasing personal data or ending its processing may prevent the Controller from providing services.
• Personal data collected for the purposes set out in this Privacy Policy will be retained for the period during which the Controller provides services and for periods arising from limitation periods for claims, consumer rights, tax legislation and other applicable laws.

Section 5 — Changes to this policy

• The Controller reserves the right to amend this Privacy Policy. New versions will be published on the website with an appropriate notice.
• Each amendment takes effect on the date it is announced by publication on the Controller’s website. Changes will be appropriately highlighted for one month after their introduction.

Workplace CCTV notice

REMDRUK Sp. z o.o. informs you that, to ensure employee safety and protect property, CCTV cameras record images in the following parts of the workplace:

• the building entrance;
• the entrance to the temporary hall;
• the yard surrounding the company building;
• the car park.

CCTV recordings are retained for two weeks from the recording date.

If CCTV footage constitutes evidence in proceedings conducted under the law, or the employer becomes aware that it may constitute such evidence, it will be retained until the proceedings are finally concluded.

Access to CCTV recordings is restricted to authorised employees and persons outside the relevant department who are involved in proceedings concerning employee or employer safety.

The controller of personal data collected through CCTV is:

The Controller may be contacted by email at remdruk@remdruk.pl or by post at ul. Kopalniana 18C, 43-225 Wola, Poland.

Privacy notice for invoicing

To fulfil the information obligation under Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ EU L 119 of 2016, p. 1, as amended, referred to below as the GDPR, we inform you that:

1. The controller of your personal data is REMDRUK Sp. z o.o., with its registered office at ul. Kopalniana 18C, Wola, Poland; email: remdruk@remdruk.pl; telephone: 785157126.
2. You may contact the Controller using the details above about personal data processing and exercising your rights under the GDPR.
3. Your personal data will be processed to issue a VAT invoice, in accordance with obligations under the Polish Value Added Tax Act, on the basis of Article 6(1)(c) GDPR.
4. Your data may be disclosed to entities authorised by law. It may also be disclosed to entities performing activities necessary for the stated processing purpose, including an accounting firm, an external IT company, an external payments and settlements provider, and postal operators.
5. Your personal data will be processed for five calendar years, counted from the year following the year in which the tax obligation arose.
6. You have the right to request access to and rectification of your personal data. You may also request erasure or restriction of processing, or object to processing, but only where further processing is not necessary for the Controller to fulfil a legal obligation and there are no other overriding legal grounds for processing.
7. You have the right to lodge a complaint about the Controller’s processing with the President of the Polish Personal Data Protection Office (UODO; uodo.gov.pl).
8. Providing data is voluntary, but necessary to issue an invoice.

Privacy notice for Facebook Page users

Under Articles 13 and 14 of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), we inform you that:

1. The controller of your personal data is REMDRUK Sp. z o.o., with its registered office at ul. Kopalniana 18C, 43-225 Wola, Poland; email: remdruk@remdruk.pl. You may use these details to contact the Controller about the processing of your data.
2. Your data is processed for communication and promotion through the Controller’s Facebook Page at https://www.facebook.com/Remdruk, particularly to respond to reactions, comments and private messages, and for statistical and advertising purposes using tools provided by Facebook.
3. Processing is based on the Controller’s legitimate interest in maintaining business communication, marketing its own products and maintaining its brand image.
4. Recipients of your personal data may include only entities entitled to receive it under the law. Your data is also shared with Meta Platforms Ireland Limited, as described below.
5. Your personal data is retained until you object or the processing purposes cease.
6. You have the right to request access to and rectification of your personal data. You may also request erasure or restriction of processing, or object to processing, but only where further processing is not necessary for the Controller to fulfil a legal obligation and there are no other overriding legal grounds for processing.
7. You have the right to lodge a complaint about the Controller’s processing with the President of the Polish Personal Data Protection Office (UODO; uodo.gov.pl).
8. Providing data is voluntary and occurs through use of the Controller’s Facebook Page.

Joint controllership with Meta Platforms Ireland Limited

1. The Controller and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers of your data under Article 26 GDPR for statistical and advertising processing.
2. Joint controllership covers aggregate data analysis used to display statistics about activity on the Controller’s Facebook Page.
3. Meta Platforms Ireland is responsible for having a legal basis for processing data for Page Insights, ensuring that data subjects can exercise their rights, reporting breaches to the supervisory authority and notifying affected data subjects, and providing appropriate technical and organisational measures to secure your data.
4. The Controller is responsible for having a legal basis for statistical processing and fulfilling the information obligations relating to its processing purposes.
5. Meta Platforms Ireland will make the essence of the Page Insights Addendum available to data subjects under Article 26(2) GDPR through the information about Page Insights accessible from all Pages.
6. The lead supervisory authority for joint processing is the Irish Data Protection Commission, without prejudice to Article 55(2) GDPR where applicable.
7. Details of the arrangements between the controllers are available at https://www.facebook.com/legal/terms/page_controller_addendum.
8. Meta Platforms Ireland’s rules for processing your personal data are available at https://www.facebook.com/privacy/explanation.