Privacy Policy

I. Introduction

This Privacy Policy sets out the principles governing the processing of the personal data of users of the website www.argo.info.pl (the "Service"; alternative addresses: www.argosteelline.pl and www.argosteelline.com). We exercise the utmost care to protect the interests of data subjects, ensuring that personal data are processed in accordance with the applicable laws, in particular the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("RODO").

Personal data are processed lawfully, fairly and transparently, and only to the extent necessary to achieve the specified purposes. We implement appropriate technical and organisational measures to protect the personal data we process, taking into account the risks involved and the categories of data requiring protection.

The purpose of this Privacy Policy is to provide information on the scope, purposes and legal bases for the processing of personal data, as well as on the rights of data subjects.

II. Data Controller

The purpose of this Privacy Policy is to provide information on the scope, purposes and legal bases for the processing of personal data, as well as on the rights of data subjects.

III. Contact

You may contact the Administrator:

– electronically by e-mail at: biuro@agro.info.pl

– by traditional mail sent to: AGRO Sp. z o.o., ul. Tokarska 21, 20-210 Lublin.

IV. Scope of Data Processing

In connection with your use of the Service, we collect data to the extent necessary to achieve the specified purposes.

When you use the contact form, we collect your telephone number, e-mail address, and the content of your enquiry/message.

The product configuration form allows you to save your preferences, such as your preferred window layout, product type, dimensions, and similar settings. The form does not collect any data that would enable your identity to be established. Your selections are stored temporarily, solely for the duration of your use of the Service, by means of cookies (Session ID). This enables the Service to operate in accordance with your selected settings. Once the session has ended, i.e. when you close your browser or after 3 hours of inactivity, these data can no longer be associated with you (for details regarding data retention periods, please see Section XI).

When you browse our Service, we collect information stored in cookies and system logs, including information about your IP address.

V. Cookies

The Service uses only strictly necessary cookies:

– sessionid – used to store data entered in the product configuration form and for administrative login;

– csrftoken – used to ensure the security of the Service.

VI. Purposes and Legal Bases for Data Processing

Your personal data are processed for the following purposes:

a) Handling enquiries submitted via the contact form – for the purpose of responding to your questions and corresponding with you (Article 6(1)(b) and (f) of RODO). The contact form is not intended for submitting complaints or placing orders;

b) Ensuring the security and proper functioning of the Service – including the detection of abuse and protection against unauthorised access (Article 6(1)(f) of RODO);

c) Compliance with legal obligations – in connection with fulfilling obligations arising under applicable law, in particular obligations under tax legislation and accounting regulations (Article 6(1)(c) of RODO);

d) Establishing, pursuing or defending legal claims – where justified, your personal data are processed for the purpose of establishing, pursuing or defending legal claims (Article 6(1)(f) of RODO).

VII. Sources of Personal Data

We obtain personal data exclusively and directly from you.

Your data are provided when you use the functionalities of the Service, in particular by completing and submitting the contact form.

XI. Product Configuration Form

The product configuration form is intended solely for selecting and combining product parameters in accordance with your preferences. Based on your selections, a PDF document containing the specification of the selected product is generated.

The form does not provide a quotation or the price of the product, and the generated document does not constitute an offer within the meaning of the applicable legal provisions, is not binding, and does not produce any legal effects.

The data entered into the form and the generated document do not constitute a decision based solely on automated processing, including profiling, within the meaning of Article 22 of RODO, and do not produce legal effects concerning the user or similarly significantly affect the user.

X. Data Recipients

Your personal data may be disclosed and transferred to third parties, in particular to the e-mail service provider and the hosting provider.

XI. Data Retention Period

Your data are retained for the following periods:

a) Session data associated with the user by means of a session cookie expire when the browser is closed or after 3 hours of inactivity. Configuration data may be retained in the Administrator's IT system for a limited period (no later than the end of the relevant calendar week); however, once the session has expired, such data can no longer be associated with a specific user.

b) Security logs containing the user's IP address, maintained for the purpose of ensuring the security of the Service, are retained for 3 months and are then automatically deleted.

c) Personal data submitted via the contact form for the purpose of handling enquiries/messages are retained for 3 months from the date of the last contact.

d) Until the withdrawal of the consent given or the submission of an effective objection to the processing of personal data, where such data are processed on the basis of the Administrator's legitimate interests.

XII. User Rights

In connection with the processing of your personal data, you are entitled to the following rights:

a) Right of access to personal data (Article 15 of RODO)

You have the right to obtain confirmation from the Administrator as to whether your personal data are being processed and, where that is the case, the right to:

access your personal data;

obtain information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients of the data, the planned retention period or the criteria used to determine that period, the rights available to you under RODO, your right to lodge a complaint with the Prezes Urzędu Ochrony Danych Osobowych, the source of the data, the existence of automated decision-making, including profiling, and the safeguards applied where the data are transferred outside the European Union;

obtain a copy of your personal data.

b) Right to rectification (Article 16 of RODO)*

If your personal data are inaccurate, you have the right to request that the Administrator rectify or complete your personal data without undue delay. Requests for rectification or completion of personal data may be sent to the following e-mail address: EMAIL ADDRESS.

c) Right to erasure ("right to be forgotten") (Article 17 of RODO)*

You have the right to request the erasure of your personal data where:

your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

you have withdrawn the specific consent on which the processing of your personal data was based;

your personal data have been processed unlawfully;

you have objected to the processing pursuant to Article 21(1) of RODO and there are no overriding legitimate grounds for the processing, or you have objected to the processing pursuant to Article 21(2) of RODO.

The Administrator has the right to retain personal data despite a request for erasure where this is necessary for the establishment, exercise or defence of legal claims. You will be informed if this applies.

d) Right to restriction of processing (Article 18 of RODO)*

You have the right to request the restriction of the processing of your personal data in the following circumstances:

where you contest the accuracy of your personal data, for a period enabling the Administrator to verify their accuracy;

where the processing is unlawful and you oppose the erasure of your personal data;

where the Administrator no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims;

where you have objected to the processing pursuant to Article 21(1) of RODO, pending verification of whether the legitimate grounds of the Administrator override the grounds of your objection.

*The Administrator will notify you of any rectification, erasure or restriction of processing of your personal data (Article 19 of RODO).

e) Right to data portability (Article 20 of RODO)

You have the right to receive your personal data from the Administrator in a structured, commonly used and machine-readable format and to transmit those data to another controller.

You also have the right to request that the Administrator transmit your personal data directly to another controller, where technically feasible.

f) Right to object (Article 21 of RODO)

You have the right to object at any time to the processing of your personal data, including profiling, where such processing is based on:

a) the performance of a task carried out in the public interest or the legitimate interests pursued by the Administrator or by a third party;

b) direct marketing purposes.

g) Right not to be subject to automated decision-making (Article 22 of RODO) (please see Section IX)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

h) Right to withdraw consent at any time (Article 7(3) of RODO)

Where you have given separate consent to the processing of your personal data for a specific purpose, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

i) Right to lodge a complaint with a supervisory authority (Article 77 of RODO)

If you suspect any irregularities in the processing of your personal data, you have the right to lodge a complaint with a supervisory authority. The current supervisory authority responsible for personal data protection is the Prezes Urzędu Ochrony Danych Osobowych

XIII. Transfers of Data Outside of EEA

The Administrator does not transfer personal data outside the European Economic Area (EEA).

XIV. Security of Personal Data

The Administrator makes every effort to ensure the highest level of security for the processed personal data. The technical and organisational measures applied by the Administrator comply with the requirements of RODO to protect personal data against accidental or unlawful destruction, loss, alteration, as well as unauthorised disclosure or access.

To secure data transmitted via the Service, measures such as encrypted connections (HTTPS) and a CSRF token mechanism are used. In addition, the Administrator ensures that access to personal data is granted only to authorised personnel.

XV. Changes of the Privacy Policy

This Privacy Policy may be updated. You will be informed of any changes via the Service (in the “Privacy Policy” section).