PRIVACY POLICY OF THE WEBSITE
palbox.com.pl
The protection of Users’ privacy is of particular importance to PPHU "PALBOX" SPÓŁKA JAWNA - ŁUKASZ KURDYK. For this reason, Users of the palbox.com.pl Website are guaranteed high standards of privacy protection. PPHU "PALBOX" SPÓŁKA JAWNA - ŁUKASZ KURDYK, as the Data Controller, ensures the security of the data provided by Users.
The Controller’s objective is also to properly inform Users about their rights and obligations related to the processing of personal data, particularly in light of the provisions on personal data protection set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”). Therefore, taking care to protect the privacy of Website Users, in this document the Controller informs Users about the legal basis for the processing of personal data provided by Users in connection with their use of the palbox.com.pl Website (hereinafter referred to as the “Website”), the methods of collecting, processing, and protecting personal data, as well as Users’ rights.
A User is any natural person whose data is concerned and who uses the palbox.com.pl website or electronic services available through the Website.
The Controller of the personal data provided by the User within the palbox.com.pl Website is PPHU "PALBOX" SPÓŁKA JAWNA - ŁUKASZ KURDYK, Zbiersk-Cukrownia 38, 62-830 Zbiersk, NIP 6180047790 (hereinafter referred to as the “Controller”).
USER
The use of the palbox.com.pl Website by the User means that the User accepts that the Controller collects and uses personal data in accordance with this Privacy Policy.
The User’s personal data is processed depending on the purpose:
- based on consent (Article 6(1)(a) GDPR),
- for the purpose of taking steps prior to entering into a contract or performing a contract (Article 6(1)(b) GDPR).
If this Privacy Policy is amended and the User continues to use the Website, this shall be deemed acceptance of the current terms of the Privacy Policy. The User has the right to withdraw previously granted consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
PERSONAL DATA PROCESSED BY THE CONTROLLER
Method of Obtaining Personal Data
The Controller obtains personal data directly from the User through the Website, via the functionalities and communication tools available therein and by sending messages to the Controller through such tools.
Providing personal data by the User is voluntary.
Types of Personal Data Processed
Through the Website, the Controller collects the following personal data concerning the User:
- first and last name;
- email address;
- telephone number;
- message content;
- message subject;
- technical data and information regarding the User’s behaviour on the Website (e.g., IP address, device data, manner of interaction with the Website), including data processed within security mechanisms (e.g., reCAPTCHA).
PURPOSES OF PROCESSING PERSONAL DATA
The manner in which the Controller processes data concerning the User depends on how the User uses the Website and its available functionalities. The Controller processes the User’s personal data for the following purposes:
Communication with the User
The Controller uses the User’s personal data to communicate with the User in a personalised manner. The information communicated to the User concerns offered products or services, personal data security, network updates, reminders, as well as suggested offers of the Controller or its partners. Communication with the User also concerns customer service. Personal data is used to assist the User, resolve technical issues, and respond to complaints or claims.
Presenting Commercial Offers to the User by Electronic Means
The purpose of using the User’s personal data provided through the functionalities and communication tools available on the Website is to conduct marketing communications by the Controller within its business activities, in particular the presentation of commercial offers to the User by electronic means.
Presenting Commercial Offers to the User via Telephone Contact
The purpose of using the User’s personal data provided through the functionalities and communication tools available on the Website is to conduct marketing communications by the Controller within its business activities, in particular by presenting commercial offers to the User through telephone contact.
Enabling the User to Submit Comments or Opinions
The Controller uses the User’s personal data to enable the User to comment on or express opinions regarding the activities, services, or products of the Controller or entities cooperating with the Controller.
The Controller may also process personal data obtained through the Website for the following purposes:
- for the purpose of concluding and performing any contract between the User and the Controller and servicing the User as the Controller’s customer, pursuant to Article 6(1)(b) GDPR;
- for the purpose of conducting financial settlements with the User who is a customer of the Controller in connection with the performance of any contract concluded between the parties, as well as the possible pursuit of claims against the User who is a customer within the Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR, and the fulfilment of the Controller’s legal obligations towards tax authorities pursuant to separate provisions in accordance with Article 6(1)(c) GDPR;
- for the implementation of the Controller’s marketing activities within the Controller’s legitimate interest within the meaning of Article 6(1)(f) GDPR, as well as in accordance with declarations of intent concerning marketing communications made to the Controller. Consents granted regarding marketing communications (e.g., consent to receive commercial information electronically or telephone contact for direct marketing purposes) may be withdrawn at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal;
- for the fulfilment of the Controller’s legal obligations towards the User specified in the GDPR, within the meaning of Article 6(1)(c) GDPR.
The Controller may process the User’s personal data to ensure the security of the Website, including detecting and preventing automated activities (bots), abuse, and attacks. For this purpose, tools such as Google reCAPTCHA are used, which analyse the User’s behaviour on the Website (e.g., browsing patterns, interaction time, IP address).
The legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR).
DISCLOSURE OF PERSONAL DATA
The User’s personal data is not transferred by the Controller to third parties.
USER RIGHTS
User Rights
At every stage of the processing of their data, the User is guaranteed a number of rights enabling access to their data, verification of the correctness of data processing, correction of data, as well as the right to object to processing, request deletion of data, restriction of processing, or data portability.
If the User wishes to exercise their rights as a data subject, they may contact the Controller using the following contact details:
PPHU "PALBOX" SPÓŁKA JAWNA - ŁUKASZ KURDYK
Zbiersk-Cukrownia 38, 62-830 Zbiersk
Right to Lodge a Complaint with a Supervisory Authority
A User whose personal data is processed by the Controller has the right to lodge a complaint with the supervisory authority competent in matters of personal data protection (the President of the Personal Data Protection Office).
COOKIES
The Controller informs that during the use of the Website, code fragments known as “cookies” are stored on the User’s end device. These are text files corresponding to HTTP requests directed to the Controller’s server. Cookies are installed by every browser through which the User visits the Website. Cookies are used on the Website for the purpose of:
- maintaining the technical correctness and continuity of the session between the Website server and the User’s end device;
- optimising the User’s use of the Website’s web pages and adapting their display on the User’s end device;
- ensuring the security of the Website;
- collecting statistics regarding visits to Website pages to support the improvement of their structure and content;
- displaying content tailored to the User’s preferences on the User’s end device.
Detailed information regarding the cookies used by the Controller and their management is available in the Cookies Policy.
OTHER IMPORTANT INFORMATION
Personal Data Security Protection
The Controller implements appropriate measures aimed at ensuring the security of the User’s personal data. Safe use of the Website is ensured by systems and procedures protecting against access to and disclosure of data to unauthorised persons. Furthermore, the systems and processes used by the Controller are regularly monitored in order to detect potential threats. Personal data obtained by the Controller is stored in computer systems to which access is strictly limited.
Retention of Personal Data
The period for which Users’ personal data is stored depends on the purposes for which the Controller processes the data.
The Controller retains personal data for the period necessary to achieve the specified purposes, namely:
- for the duration of the Controller’s business operations.
In each of the above cases, after the necessary processing period has expired, the data may only be processed for the purpose of pursuing claims arising from the relationship between the parties until such claims are finally resolved through legal proceedings.
Changes to the Privacy Policy
In order to update the information contained in this Privacy Policy and ensure its compliance with applicable laws, this Privacy Policy may be amended. In the event of changes to the content of the Privacy Policy, the update date indicated at the end of the text will be changed. To obtain information on how personal data is protected, the Controller recommends that Users regularly review the provisions of the Privacy Policy.
Contact Information
To obtain any information regarding this Privacy Policy, the User may contact the Data Controller:
PPHU "PALBOX" SPÓŁKA JAWNA - ŁUKASZ KURDYK
Zbiersk-Cukrownia 38, 62-830 Zbiersk
using the following contact details:
Additionally, it is also possible to contact the Controller by post at:
Zbiersk-Cukrownia 38, 62-830 Zbiersk
The last update of this document took place on 30 September 2026.