INTRODUCTION
By visiting www.duon.pl, you entrust us with your personal data, which we process for specific purposes, but always with great care to guarantee your privacy protection.
This document serves as an aid in understanding how we (your data Controller) collect and manage your personal data. It contains information on what data we collect, how we use it, why we need it and how it can benefit you.
The information specified in this document is significant to your privacy protection, and it results from personal data protection provisions, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27th 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”)
We encourage you to read the following information.
BASIC PRINCIPLES AND OUR PRIVACY COMMITMENT
(Information to help you understand definitions used in this document)
| What is personal data and what does processing mean? | |
| Personal data | any information relating directly and indirectly to you |
| Processing | means any operations performed on personal data from its collection to erasure |
| When does this privacy policy apply? | |
| This Privacy Policy applies to all cases in which we are the Controller and process your personal data. This applies to cases in which we process personal data obtained directly from the data subject, as well as from other sources. | |
| How do we protect your personal data? | |
| We make our best efforts to protect your personal data from misuse, interference, loss, unauthorized access, modification or disclosure. We have implemented a number of security measures to help protect your personal data. For example:
· we use SSL encryption, · we control our methods of collecting, storing and processing information, including physical security measures to protect against unauthorized access to the system, · the access to your personal data is limited and each employee is bound by the contract to maintain strict confidentiality, and in the event of failure to comply with these obligations, they may be liable together with termination of cooperation. |
|
| What are cookies? | |
| Cookies, web cookies, HTTP cookies are small text files that are saved on your computer when you visit a website so that information can be saved between visits, such as your login credentials or language preferences (e.g. on the hard drive of a computer, laptop or smartphone memory card – depending on the device used). More information on Cookies here. | |
WHO IS THE COTROLLER OF YOUR DATA?
The Controller of your persona data collected via www.duon.pl are:
- DUON Dystrybucja Sp. z o.o. ul. Batorowska 15, Wysogotowo, 62-081 Przeźmierowo
- DUON Logistyka Sp. z o.o. ul. Krotoszyńska 146, 63-430 Odolanów
which are further collectively referred to as DUON
For questions regarding our data protection and privacy practices, this Privacy Policy or our website, please e-mail at duon@duon.pl
We have appointed a Data Protection Officer to ensure that we continuously process your personal data in an open, accurate and legal manner. You can contact our Data Protection Officer at odo@gge.com.pl
WHAT PERSONAL DATA DO WE COLLECT?
| Type of data | Scope of data | Categories of individuals |
| Contact details | name, surname, e-mail address, mobile no, home address, customer no, contract number | customers / potential customers |
| Correspondence data | personal data that result from correspondence and / or conversations | customers / potential customers |
| Commercial data | data that results from business negotiations | potential customers |
| Login data | your ID, e-mail address, username, password | partners |
| Employment data | data resulting from the complex application such as education, experience, interests, photograph | job candidates |
| Data resulting from submitted applications | data resulting from applications submitted for the exercise of rights under the provisions on the protection of personal data | data subjects |
| Visit history data | date and duration of the session, location and type of device, and IP address | users of the website www.duon.pl |
| Data on preference settings | data on privacy preferences settings (cookies) and content display | users of the website www.duon.pl |
| Data on preference settings | data from social profiles – more information about the processing of this personal data is available on the social media privacy policy – here | social media users |
WHAT IS THE LEGAL BASIS AND THE PURPOSE OF PROCESSING?
Our website limits the collection and use of personal data to the minimum necessary for the purposes listed below. These purposes result from the services we render or from our internal needs or legal provisions.
| Purpose of processing | Data categories | Legal basis |
| answering the submitted question, complaints | Contact details
Correspondence data |
legitimate interests pursued by the controller and obligation arising from legal provisions regarding the consideration of complaints |
| presenting the offer and conducting business talks | Contact details
Correspondence data Commercial data |
prior to entering into a contract |
| confirmation of the identity of persons contacting us by phone, electronic means or otherwise | Contact details
Correspondence data |
legitimate interests pursued by the controller |
| offering personalized products, ensuring communication between the parties in the established business relationship | Login data
Contact details Correspondence data |
legitimate interests pursued by the controller |
| recruitment | Contact details
Employment data |
legal obligation and data subject consent |
| exercising the rights of data subjects | Contact details
Data resulting from submitted applications |
legal obligation and legitimate interests pursued by the controller |
| analysing statistics of website visits, including analysing demographic data of website visitors | Data on the history of visits based on cookies | consent |
| meeting and assessing the interests, desires and changing needs of our clients to improve our website, our products and services, and develop new products and services | Data on the history of visits based on cookies
Social media data |
consent |
| direct marketing | Data on the history of visits based on cookies
Social media data Contact details Commercial data |
legitimate interests pursued by the controller |
| We may also process personal data for the purpose of pursuing claims arising from relationships or for the purpose of maintaining evidence of fulfilling the Controller’s obligations, which may constitute an evidence in defence of a claim based on the legitimate interest pursued by the Controller.
We may also process personal data in the in connection with relationships arising from contracts or other legal obligations. |
||
When collecting and using personal data for purposes other than those indicated above, we will inform you about it before collecting it, or at the time of collecting it.
In the event of data processing based on consent, we will ask you for such consent. Giving consent is voluntary, and if you give it, you have the right to withdraw it at any time.
DO WE PROCESS YOUR DATA AUTOMATICALLY?
Information that we collect in connection with the use of our services provided in electronic form will be processed in an automated manner (including profiling in order to predict your behaviour on our website and products that may be of interest to you), however, it will not have any legal effects on the natural person or similarly significantly affect his/her situation.
WHO CAN WE SHARE YOUR PERSONAL DATA WITH?
We do not share personal data with companies, organizations or third parties unless one of the following circumstances occurs:
- sharing data applies to related companies within the Capital Group to which the Controller belongs. As at the date of this Privacy Policy the Capital Group consists of:
- ……………………..
- ……………………..
- disclosure of data follows the request of the data subject,
- disclosure of data results from legal provisions in connection with:
- meeting the requirements of applicable law, regulations, legal processes or final demands of state institutions,
- enforcing the applicable terms of use (website regulations www.duon.pl), including investigating potential violations,
- detecting and preventing fraud as well as resolving other fraud, security and technical issues,
- protection of the Controller’s property or security rights, users of www.duon.pl website and other persons in a manner required or permitted by law.
- data sharing results from outsourcing of services to third parties, e.g.:
- providing IT services,
- providing IT infrastructure maintenance services,
- providing marketing services.
We do not transfer data to third parties based in countries outside the European Economic Area (EEA) or international organizations.
HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?
Our goal is to protect you against the negative consequences of processing your personal data. In order to do that, we have tried to limit the period for which your personal data collected via our website will be stored.
| Purpose of processing | Period for which the personal data will be processed |
| answering the submitted question, complaints | for 5 years from the end of the purpose of processing |
| presenting the offer and conducting business talks | for 3 years from the end of the purpose of processing |
| offering personalized products, ensuring communication between the parties in the established business relationship | for 3 years after the end of the contract |
| recruitment | for 6 months from the end of the recruitment process |
| exercising the rights of data subjects | for 5 years from the end of the purpose of processing |
| analysing statistics of website visits, including analysing demographic data of website visitors | data will be processed until the consent is withdrawn or the purpose of processing ends |
| meeting and assessing the interests, desires and changing needs of our clients to improve our website, our products and services, and develop new products and services | data will be processed until the consent is withdrawn or the purpose of processing ends |
| direct marketing | data will be processed until the execution of the right to object to the processing of personal data |
| investigation or defence against claims | data will be processed for the period of limitation of claims (up to 3 years) or until the purpose of processing ends |
| performance of a contract | for 3 years after the end of the contract |
| compliance with legal obligations | for the period indicated in the given legal basis |
WHAT ARE YOUR RIGHTS
| Purpose of processing | Applicable rights |
| answering the submitted question, complaints | · right of access by the data subject
· right to rectification · right to object to processing based on point (f) of Article 6(1), including profiling, and in the event of a positive consideration of the objection also the right to erasure (‘right to be forgotten’) · right to restriction of processing · right to data portability · right to lodge a complaint with a supervisory authority |
| presenting the offer and conducting business talks | · right of access by the data subject
· right to rectification · right to restriction of processing · right to lodge a complaint with a supervisory authority |
| offering personalized products, ensuring communication between the parties in the established business relationship | · right of access by the data subject
· right to rectification · right to object to processing based on point (f) of Article 6(1), including profiling, and in the event of a positive consideration of the objection also the right to erasure (‘right to be forgotten’) · right to restriction of processing · right to data portability · right to lodge a complaint with a supervisory authority |
| recruitment | · right to withdraw your consent at any time
· right of access by the data subject · right to rectification · right to restriction of processing · right to data portability · right to lodge a complaint with a supervisory authority |
| exercising the rights of data subjects | · right of access by the data subject
· right to rectification · right to restriction of processing · right to lodge a complaint with a supervisory authority · right to object to processing based on point (f) of Article 6(1), including profiling, and in the event of a positive consideration of the objection also the right to erasure (‘right to be forgotten’) |
| analysing statistics of website visits, including analysing demographic data of website visitors | · right to withdraw your consent at any time
· right of access by the data subject · right to rectification · right to object to processing based on point (f) of Article 6(1), including profiling, and in the event of a positive consideration of the objection also the right to erasure (‘right to be forgotten’)right to be forgotten · right to restriction of processing · right to data portability · right to lodge a complaint with a supervisory authority |
| meeting and assessing the interests, desires and changing needs of our clients to improve our website, our products and services, and develop new products and services | · right to withdraw your consent at any time
· right of access by the data subject · right to rectification · right to object to processing based on point (f) of Article 6(1), including profiling, and in the event of a positive consideration of the objection also the right to erasure (‘right to be forgotten’)right to be forgotten · right to restriction of processing · right to data portability · right to lodge a complaint with a supervisory authority |
| direct marketing | · right of access by the data subject
· right to rectification · right to object to processing based on point (f) of Article 6(1), including profiling, and in the event of a positive consideration of the objection also the right to erasure (‘right to be forgotten’)right to be forgotten · right to restriction of processing · right to lodge a complaint with a supervisory authority |
| investigation or defence against claims | · right of access by the data subject
· right to rectification · right to object to processing based on point (f) of Article 6(1), including profiling, and in the event of a positive consideration of the objection also the right to erasure (‘right to be forgotten’)right to be forgotten · right to restriction of processing · right to lodge a complaint with a supervisory authority |
| performance of a contract | · right of access by the data subject
· right to rectification · right to restriction of processing · right to lodge a complaint with a supervisory authority |
| compliance with legal obligations | · right of access by the data subject
· right to rectification · right to restriction of processing · right to lodge a complaint with a supervisory authority |
| More information about your rights here | |
HOW CAN YOU EXERCISE YOUR RIGHTS?
You can exercise your rights at any time by submitting an application form. Before doing so, we encourage you to read the information about the procedure here.
Forms of submitting applications:
- email to odo@gge.com.pl
- via contact page https://duon.pl/wnioski-dotyczace-danych-osobowych/
- a letter with the note “Personal Data Protection” to the following address: DUON Dystrybucja Sp. z o. o. ul. Batorowska 15, Wysogotowo, 62-081 Przeźmierowo
You also have the right to raise a complaint to a supervisory authority. All necessary information can be found on the supervisory authority website at www.uodo.gov.pl
WHAT TO DO IF YOU WANT TO COMPLAIN OR HAVE ADDITIONAL QUESTIONS?
Any questions, reservations or doubts regarding the content of this Privacy Policy or the way in which we process your personal data, as well as complaints regarding these issues (although we hope that you will not need to submit such complaints), please direct to the e-mail address odo@gge.com.pl.
All complaints will be processed and you will received a response as soon as possible.
DO WE USE COOKIES OR OTHER TECHNOLOGIES IN THE PROCESSING OF PERSONAL DATA?
We may also collect personal data about you through the use of cookies and other technologies. This may occur when you visit our website www.duon.pl and may include the following information:
- information about your browser and operating system;
- information about your device;
- the IP address of the device you are using;
- web pages you visit;
- links that you click while interactive with our services.
We collect this data only if we obtain your consent. You have the right to withdraw your consent at any time.
For more information about the cookies we use and how to manage your privacy settings, see cookies policy – here
FINAL PROVISIONS
We may make changes to this Privacy Policy from time to time. Your rights arising from this document will never get limited without your explicit consent. Any changes we make will become effective when we post a modified version of the policy. If the changes we make are significant, we will provide a more prominent notice (for some services, including sending the appropriate e-mail notification). We also keep the previous versions of this Privacy Policy in the archive to allow you to read them whenever is needed.
Hyperlink: https://duon.pl/en/zasady-skladania-wnioskow-dotyczycacych-danych-osobowych-2/