Privacy Policy

I General provisions

1. This Privacy Policy sets out how we collect, process and store the personal data necessary for the provision of services electronically through the website in the domain www.melkens.com (hereinafter: the “Service”).
2. Personal data shall be processed in accordance with Regulation (EU) 2016/679 EU of the European Parliament and of the Council of 27 April 2016. (hereinafter: “RODO”).
3. The administrator of your personal data, within the meaning of the RODO, is Melkens Sp.z.o.o., based in Wrocław (52-315), at Kobierzycka 19F, NIP: 899-292-37-39 (hereinafter: “Administrator“). In matters concerning data protection, the 

II Purposes and legal basis of data processing

1. The Administrator processes personal data necessary for the provision and development of the services offered and available through the Website and its various functionalities.
2. Personal data will be processed for the following purposes:
   1. account registration, verification of the User’s identity and implementation of the agreement on the provision of services by electronic means in accordance with the Act of 18 July 2002 on the provision of services by electronic means, including in particular by ensuring the possibility of using the User’s account – on the basis of acceptance of the terms and conditions of the Regulations (Article 6(1)(b) RODO);
   2. communicating with the User in order to provide him/her with the necessary information and to build positive and reliable relations with him/her, which constitutes the Administrator’s legitimate interest (Article 6(1)(f) RODO);
   3. to promote the Administrator’s own products and/or services and those of its Partners through the sending of marketing information by e-mail (newsletter), insofar as the User has consented to receive such notifications by e-mail (Article 6(1)(a) RODO);
   4. to provide access to information on industry news directly related to the Administrator’s business, insofar as the User has consented to receive such notifications by e-mail (Article 6(1)(a) RODO),
   5. for analytical and statistical purposes on the basis of the Administrator’s legitimate interest consisting in conducting verification of Users’ activities and their preferences for optimisation of the services and products as well as the applied functionalities of the Service (Article 6(1)(f) RODO);
   6. the possible establishment, investigation or defence of claims on the basis of the Administrator’s legitimate interest in protecting its rights (Article 6(1)(f) RODO).
3. In each of the above-mentioned cases (paragraph 2), the provision of data is voluntary

III Transfer of personal data

1. The data may be transferred to entities processing them on our behalf on the basis of contracts concluded with the Administrator, but only for the purpose and to the extent necessary for the aforementioned purposes, including:
   1. entities related to the Administrator
   2. entities cooperating with the Administrator,
   3. subcontractors, in particular entities supplying and operating selected IT systems and solutions,
   4. entities handling online payments
   5. entities providing courier and postal services,
   6. law firms.
2. We only transfer your data to entities located within the European Economic Area and thus subject to strict EU data protection regulations, or which are bound by an appropriate security standard. Personal data processed by the Administrator, will not be transferred outside the European Economic Area or to international organisations.

IV Period of retention of personal data

1. We will only process your personal data for the period necessary to fulfil the purpose for which they are stored or for as long as we are legally required to do so, in particular until the statute of limitations for possible claims or the expiry of our legal archiving obligations, including those concerning the retention of accounting documents.
2. Data processed on the basis of consent will be processed until the withdrawal of the consent given, with the proviso that the withdrawal of such consent shall not affect the compatibility of the processing carried out prior to such withdrawal.

V Rights of data subjects

1. Right of access to your data
   You have the right to obtain information regarding the personal data we hold about you, including a copy of that data.
2. Right of rectification
   You have the right to request the rectification of your personal data that is inaccurate. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by providing an additional statement.
3. Right to erasure
   You have the right to request the erasure of your personal data held by us in the following cases:
   1. your personal data is no longer necessary for the purposes for which it was collected,
   2. you have withdrawn the consent on which the processing is based and there is no other legal basis for the processing,
   3. you have objected to the processing and there are no overriding legitimate grounds for the processing or the objection relates to the processing for direct marketing purposes,
   4. the personal data have been unlawfully processed,
   5. the personal data must be erased in order to comply with a legal obligation under Union or national law,
   6. the personal data were collected in connection with the offering of information society services as referred to in Article 8(1) of the RODO.
4. Right to data portability
5. Right to restrict data processing
   You have the right to request that the processing of your personal data be restricted, in the following cases:
   1. you contest the accuracy of your personal data – for a period of time allowing us to check the accuracy of the data,
   2. the processing is unlawful and you object to the erasure of your personal data, requesting instead that the use of your personal data be restricted,
   3. we no longer need the personal data for the purposes of the processing, but you need the data to establish, assert or defend your claims,
   4. you have lodged an objection under Article 21(1) to the processing – until it is determined whether the legitimate grounds on the part of the controller override the grounds for the objection.
6. Right to object to processing
   If your personal data is processed on the basis of a legitimate interest of the controller, you have the right to object at any time to the processing, in accordance with Article 21 of the RODO.
7. Right to withdraw consent
   You have the right to withdraw the consent you have given for the processing of your personal data at any time. The withdrawal of your consent to processing will not affect the lawfulness of the processing carried out before the withdrawal.

VI. Changes to the Privacy Policy

1. The Administrator reserves the right to make changes to this Privacy Policy while ensuring that the Users’ rights under this document shall not be restricted.
2. Any changes to the Privacy Policy shall be communicated to the User by means of a notice available on the Website.