I. GENERAL PROVISIONS

1. This Privacy Policy sets out the rules for the processing and protection of personal data of the Website's Customers available at www.gomabox.com.pl

2. Terms not defined in this Privacy Policy have the meaning given to them in the Regulations of the Website.

3.Personal data means information about an identified or identifiable natural person, i.e. one who can be directly or indirectly identified, in particular on the basis of an identifier (feature) such as: name and surname, location data, identifier an Internet number, an identification number or one or more factors specific to the physical, mental, economic, physiological, genetic, cultural or social identity of a natural person.

4.Processing means an operation or set of operations performed on personal data or sets of personal data in a non-automated or automated manner, such as collecting, storing, recording, organizing, organizing, adapting or downloading, viewing, modifying, using, disclosing, sharing, adjusting or amalgamation, removal or destruction.

5. Customers' personal data are processed in accordance with applicable regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repeal Directive 95/46 / EC (general regulation on data protection, hereinafter: "GDPR") and the Act of May 10, 2018 on the protection of personal data.

6. In order to ensure the security of Customers' personal data, the administrator uses appropriate technical and organizational measures in the field of security of personal data processing.

II. DATA ADMINISTRATOR

1. Subject to point 2.2., The administrator of Customers' personal data is GoMa Mariusz Markut with its registered office in Stalowa Wola, ul. Kazimierza Mireckiego 13, 37-450 Stalowa Wola, entered into the Register of Central Business Register and Information No. 601/1999, REGON number: 690573141, NIP number: 865 001 04 15 (hereinafter "GoMa"). Contact with GoMa is possible in writing to the address indicated in the first sentence or via the e-mail address aneta@goma.com.pl

III. PURPOSE OF PROCESSING THE CUSTOMER'S PERSONAL DATA

1. Customers' personal data are or may be processed:

a / in order to conclude and perform a contract to which the Customer is a party, or to take action at the request of the Customer, before concluding the contract (Article 6 (1) (b) of the GDPR);

b / in order to settle the matter described by the Customer in the online form available on the Website - data processing by GoMa in this case is necessary for the conclusion and performance of the contract for the provision of electronic services (Article 6 (1) (b) of the GDPR), as well as is based on the legitimate interest of GoMa (Article 6 (1) (f) of the GDPR) consisting in supporting sales;

c / in order to provide services by electronic means in the field of providing Customers with the possibility of viewing, playing and reading information and materials provided on the Website by Customers - data processing by GoMa is in this case necessary for the performance of the contract to which the Customer is a party (Article 6 par 1 letter b of the GDPR);

d / for the purposes of implementing the legitimate interests of GoMa related to running the Website, including analyzing the Customer's use of the website www.gomabox.com.pl, ensuring the safety and reliability of services provided on the Website (Article 6 (1) (f) GDPR);

e / in order to implement the legitimate interests of GoMa, which may include, inter alia, establishing, investigating and defending claims, preventing crimes and conducting investigations related to them, business management and its further development, including risk management (Article 6 (1) (f) of the GDPR);

f / for the purposes of direct marketing of GoMa, including the selection of Goods and services to the needs of customers (including profiling) based on cookies and other similar technologies referred to in point 10 - data processing by GoMa takes place in this case based on legitimate interest of GoMa (Article 6 (1) (f) of the GDPR);

g) for GoMa marketing purposes, resulting from the consent given by the Customer (Article 6 (1) (a) of the GDPR);

g / in order to ensure compliance with the legal obligations imposed on GoMa (in particular those resulting from the provisions of the Accounting Act and tax regulations), when processing is necessary to fulfill the legal obligation incumbent on the administrator (Article 6 (1) (c) of the GDPR).

2. Providing personal data on the Website is voluntary, but it may be necessary for the performance of one or more services and for the purposes of personal data processing, as specified in point 3.1. above, which GoMa will not be able to implement in the absence of personal data.

3. The Customer's personal data, collected through direct contact between the Customer and the GoMa employee, including via the hotline or as part of contact with the Customer's supervisor, are used only to contact the Customer and provide information and advice to the Customer.

IV. SCOPE OF PROCESSING THE CUSTOMER'S PERSONAL DATA

1. The scope of the Customer's personal data processed by GoMa includes:

a / Customer data voluntarily provided by the Customer using the electronic forms available on the Website: name, surname, e-mail address, telephone number, company name;

b / Customer data obtained by GoMa in connection with the use of cookies and other similar technologies (see point 8);

2. Due to the fact that the services offered on the Website are dedicated to adults, the administrator does not knowingly process personal data of children using the services offered on the Website.

V. RIGHTS AND OBLIGATIONS OF THE CUSTOMER

1. If the processing of personal data takes place on the basis of the consent expressed by the Customer, such consent is voluntary and may be withdrawn at any time, without affecting the lawfulness of the processing that was carried out before the consent was withdrawn. The declaration of withdrawal of consent should be submitted via e-mail to the e-mail address GoMa aneta@goma.com.pl

2. The Customer has the right to access their data and rectify (correct) at any time.

3. The customer also has the following rights:

a / to delete your personal data;

b / to limit the processing of your personal data;

c / access to the content of your data as well as rectification (correction);

d / to receive a copy of your data or transfer it, provided that this right may not adversely affect the rights and freedoms of other people (including trade secrets or intellectual property rights) and will be implemented to the extent technically possible;

e / to object to the processing of your personal data when the processing is based on the legitimate interest of the data controller or a third party.

4. The administrator will exercise the rights of the customer, subject to the exceptions specified in the provisions of the GDPR.

6. In order to exercise the rights set out in points 5.1 and 5.2., Please send an e-mail to the administrator's address: goma@goma.com.pl

7. The customer is entitled to lodge a complaint with the supervisory body - the President of the Office for Personal Data Protection, if he believes that the data processing concerning him violates the provisions of the GDPR.

8. Any events that have or may affect the security of personal data on the Website (including the suspicion of sharing files containing viruses and other files of a similar nature or other than destructive mechanisms), the Customer is obliged to immediately report GoMa to the following address: aneta @ goma.com.pl

VI. PERIOD OF PROCESSING OF THE CUSTOMER'S PERSONAL DATA

1. The Administrator processes the Customer's personal data in the manner and for the period necessary to achieve the purposes for which the data was collected.

2. In the case of data processing:

a / in order to conclude and perform the contract (including the Sales Agreement) - the Customer's data will be processed for the duration and performance of the contract;

b / on the basis of the Client's consent - the Client's data will be processed until the consent is withdrawn;

c / in order to ensure compliance with the legal obligations imposed on GoMa - the Customer's data will be processed for the period required by law;

d / for the purposes of direct marketing of GoMa, including the selection of Goods and services to the needs of customers (profiling) - customer data will be processed until the customer submits an objection;

e / for the purposes of implementing other legitimate interests of the administrator - the data will be processed until the objection raised by the Customer is considered or the limitation period for claims has expired.

3. After the end of the processing period, the data is deleted or anonymized.

VII. ENTITIES TO WHICH CUSTOMERS 'PERSONAL DATA ARE SHARED

1. The Administrator provides clients' personal data if he has a legal basis for it, in particular when it is necessary to perform the services provided to clients.

2. Customers' personal data may also be made available at the request of public authorities or other entities authorized to such access on the basis of legal provisions, in particular when it is necessary to ensure the security of GoMa systems.

3. The recipients of Customers' personal data may be in particular:

3.1. entities whose services are used by the administrator to deliver Goods and services to customers, in particular:

3.2. at the courier upon receipt of the goods (cash on delivery).

a / entities providing services or providing the administrator with ICT systems;

b / entrepreneurs providing software delivery and maintenance services to operate the Website;

c / operators of payment systems;

d / entities providing postal and courier services;

e / law firms, consulting companies with which the administrator cooperates;

3.3 Trusted GoMa Marketing Partners:

a / Google LLC in connection with the use of Google Analytics;

VIII. COOKIES AND OTHER TECHNOLOGIES

1. In accordance with the practice of most websites, when using the Website, the Customer's personal data may be collected automatically in the Website's system logs, through cookies ("cookies"), the Google Analytics system.

2. Cookies are files saved on the Customer's end device, used to identify customers and provide the administrator with statistical information on customer traffic, customer activity and the way the Website is used. They allow, among others to adapt the content and services on the Website to the preferences of customers.

3.The Website uses session cookies, which are deleted after closing the web browser window, as well as permanent cookies, saved for a specified period (specified in the parameters of cookies or until they are deleted by the Customer) in end devices through which the Customer uses Service.

4. GoMa uses the following types of cookies:

a / necessary to use the services, e.g. used for services that require authentication;

b / to ensure safety;

c / enabling the collection of information on the manner of using the services;

d / enabling the preservation of the settings selected by the Customer and personalization of the Customer interface;

e / enabling the provision of content to Customers more tailored to their preferences and interests.

5. GoMa, in accordance with the law, processes data regarding the number (including IP) and type of the Customer's end device, as well as the time of the Customer's connection with the Website and other operational data regarding the Customer's activity on the Website, including his preferences. The data described is processed for technical purposes to adapt the Website to the needs of customers and to collect general statistical information on the functioning of the Website, as well as for the purpose of personalizing the content provided to the Customer.

6. The Customer may independently and at any time change the settings for cookies, specifying the conditions for their storage and access by cookies to the Customer's end device, using the web browser settings. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or to inform about each placement of cookies on the Customer's end device.

7. The customer may at any time delete cookies using the functions available in the web browser he uses. GoMa reserves, however, that this may limit some of the functionalities available on the Website.

8. GoMa also uses the Google Analytisc system, i.e. a web analytics system that gives insight into the movement of personal data and user location data, used to create statistics and reports on the functioning of the Website, as well as for the purpose of personalizing the content of displayed advertisements. Detailed rules for data processing by Google LLC and rules for opting out of cookies are available at: www.google.com/policies/privacy/partners/.

9. Customer activity on the Website, including his personal data, is recorded in system logs (log files used to store a chronological record containing information about events and activities related to the IT system used to provide services by GoMa). The information collected in the logs is processed primarily for purposes related to the provision of services. GoMa also processes them for technical and administrative purposes, for the purposes of ensuring the security of the IT system and managing this system, as well as for analytical and statistical purposes - in this respect, the legal basis for processing is the legitimate interest of the administrator (Article 6 (1) (f) GDPR).

IX. FINAL PROVISIONS

1. This Privacy Policy is reviewed on an ongoing basis and, if necessary, updated to reflect any changes in the manner of personal data processing. GoMa may also make changes as required by applicable laws or legal requirements. Information about the introduced changes will be posted on the website www.gomabox.com.pl.

2. The current version is available on the Website at www.gomabox.com.pl/polityka-prywatnosci

3. This Privacy Policy shall enter into force on February 20, 2021.