Privacy policy

Privacy Policy – DRAMIŃSKI S.A.

Data Controller
The controller of personal data of Customers/Users of the online store is DRAMIŃSKI S.A., ul. Wiktora Steffena 21, 11-036 Sząbruk, NIP (Tax ID): 7393855706, REGON: 281418440, tel. +48 89 675 26 00, e-mail: biuro@draminski.pl

Data Protection Officer

The Data Protection Officer is Michał Minurski. Contact with the DPO: iod@draminski.pl

Purposes, legal bases and storage period of personal data
Personal data are processed for the following purposes:
– conclusion and performance of a contract (Art. 6(1)(b) GDPR),
– compliance with legal obligations of the Controller (Art. 6(1)(c) GDPR),
– marketing of own services (Art. 6(1)(f) GDPR),
– based on consent (Art. 6(1)(a) GDPR) – e.g. cookies, geolocation.

Storage period:
– until the end of use of the online store,
– for the duration of the contract and until the limitation period for claims expires,
– for the period required by accounting and tax regulations (up to 5 years),
– until withdrawal of consent (for data processed on its basis).

Providing data is voluntary but necessary to conclude and perform the contract. Failure to provide data may result in the inability to provide the service.

Rights of the data subject
Everyone has the right to:
– access their data (Art. 15 GDPR),
– rectify data (Art. 16 GDPR),
– erase data (Art. 17 GDPR),
– restrict processing (Art. 18 GDPR),
– data portability (Art. 20 GDPR),
– object to processing (Art. 21 GDPR),
– withdraw consent at any time (Art. 7(3) GDPR),
– lodge a complaint with the President of the Personal Data Protection Office (PUODO).

Data recipients
Personal data may be transferred to entities processing data under data processing agreements (e.g. IT, hosting, marketing service providers). Data are not transferred to third countries outside the EEA, except when using tools such as Google or Meta – in such cases, standard contractual clauses are applied.

Information on cookies and similar technologies
The online store uses:
– technical cookies (do not require consent),
– analytical and marketing cookies (require consent, Art. 6(1)(a) GDPR).

Consent is given via browser settings or by clicking a button in the cookie message. The user has the right to withdraw consent at any time.

Information on profiling
The Controller may use profiling for marketing purposes based on legitimate interest (Art. 6(1)(f) GDPR). The user has the right to object to the processing of data for profiling purposes.

Changes to the privacy policy
The privacy policy may be updated periodically to comply with applicable laws and reflect the actual data processing carried out by the Controller.

Date of update: 2025-06-16
Data Controller: DRAMIŃSKI S.A.