Privacy Policy
Privacy policy for customers of the website https://patonwelders.com
I. Data of the Personal Data Administrator
We kindly inform you that the administrator of your personal data is MasterWeld Sp. z o.o., 35-105 Rzeszów, NIP: 813 375 25 15, hereinafter referred to as the “Company”. Contact with the Company on the protection of personal data is possible at the e-mail address: registration@patonwelders.com
II. Purposes and grounds for processing personal data
In order to provide services according to your business profile, the Company processes your personal data – for various purposes, but always in accordance with the law. Below you will find the listed purposes of the processing of your personal data together with the legal basis.
In order to make a valuation of the service and to provide the service, we process personal data such as:
• name and surname or company name, if any
• delivery adress,
• e-mail adress,
• NIP numer in case of entrepreneur,
• order number,
• date of registration.
The legal basis for such processing is Article 6(1)(b) of the RODO, which allows personal data to be processed if they are necessary for the performance of a contract or for taking steps to conclude a contract;
In order to process complaints, we process personal data such as:
• name and surname or company name, if any,
• e-mail adress,
• order number,
• address of residence, if any – if there is a refund,
• bank account number, if any – if a refund is made.
The legal basis for such processing is Article 6(1)(b) of the RODO, which allows personal data to be processed if they are necessary for the performance of a contract or for taking steps to conclude a contract;
In order to send e-mail notifications about messages in the customer’s panel, we process personal data such as:
• e-mail adress,
• order number.
The legal basis for such data processing is Article 6(1)(f) RODO, which allows personal data to be processed if the Administrator of Personal Data pursues his legitimate interest in this way (in this case, the interest of the Company is to inform the customer about activities related to the implementation of the service in order to increase the comfort of using the service);
For the purpose of telephone contact in matters related to the provision of services, we process personal data such as:
• telephone number,
• order number.
— if you are interested in the form of telephone contact (we do not require the mandatory provision of a telephone number). The legal basis for such processing is Article 6(1)(a) of the RODO, which allows personal data to be processed on the basis of a freely given consent;
In order to issue an invoice and meet other obligations under tax law, such as keeping accounting records for 5 years, we process personal data such as:
• name and surname or company name, if any,
• company,
• address of residence or registered office,
• NIP number,
• order number.
The legal basis for such processing is Article 6(1)(c) of the RODO, which allows for the processing of personal data if such processing is necessary for the fulfilment of the controller’s legal obligations;
In order to store unpaid requests, we process personal data such as:
• name and surname or company name, if any,
• e-mail adress,
• order number.
— It may happen that you decide to use the service after some time after receiving the valuation. The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows personal data processing, if in this way the Administrator of Personal Data pursues his legitimate interest (in this case, the interest of the Company is to enable the conclusion of a contract for a specified period of time without the need to repeat the valuation);
In order to measure satisfaction with the services offered, we process personal data such as:
• e-mail adress,
• order number.
The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows personal data processing, if in this way the Administrator of Personal Data pursues his legitimate interest (in this case, the interest of the Company is to learn the opinions of customers on the services provided, to adapt them to the needs and expectations of the interested parties);
In order to create records and records related to the RODO, including, for example, the register of customers who have objected in accordance with the RODO, we process personal data such as:
• name and surname,
• e-mail adress,
RODO regulations impose certain documentation obligations on us to demonstrate compliance and accountability, so if you object, for example, to the processing of your personal data for marketing purposes, we need to know who we do not directly market because we do not want you to.
The legal basis for such processing is, firstly, Article 6(1)(c) of the RODO, which allows the processing of personal data if such processing is necessary for the fulfilment of the controller’s legal obligations; secondly, Article 6(1)(f) of the RODO, which allows the processing of personal data if this way the controller pursues a legitimate interest (in this case, the interest of the Company is to have knowledge about persons who exercise their rights under the RODO);
For the purpose of establishing, investigating or defending against claims, we process personal data such as:
• name and surname or company name, if any,
• adress of residence (if given),
• NIP number (if given),
• e-mail adress,
• IP adress,
• order number.
The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows personal data to be processed if the Administrator of Personal Data pursues his legitimate interest (in this case, the interest of the Company is the possession of personal data that will allow to establish, pursue or defend against claims, including those of customers and third parties);
For archival and evidential purposes, we process personal data such as:
• name and surname (if given),
• e-mail adress,
• order number.
— for the purpose of safeguarding information that may be used to establish facts of legal significance. The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows personal data processing if in this way the Administrator of Personal Data pursues its legitimate interest (in this case, the interest of the Company is to have personal data that will allow to prove certain facts related to the provision of services, e.g. if a state authority so requests);
For analytical purposes, i.e. to study and analyse the Company’s website activity, we process personal data such as:
• the date and time of the visit to the website,
• type of operating system,
• approximate location,
• the type of web browser used to access the website,
• time spent on the website,
• the subpages visited,
• sub-page where the contact form has been completed.
The legal basis for such data processing is Article 6(1)(f) of the Family Data Protection Act, which allows personal data to be processed if the Administrator of Personal Data pursues his legitimate interest (in this case, the Company’s interest is to know the activity of customers on the website);
In order to use cookies on our website, we process such text information. The legal basis for such processing is Article 6(1)(a) of the RODO, which allows personal data to be processed on the basis of voluntary consent (the first time you visit the website, you will be asked for your consent to the use of cookies);
In order to administer the website, we process personal data such as:
• IP adress,
• date and time of the server,
• information about your web browser,
• information on the operating system.
— these data are automatically stored in the so-called server logs, each time a website belonging to the Company is used. Administration of the website without the use of the server and without this automatic recording would not be possible. The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows personal data to be processed if the Administrator of Personal Data thus pursues his legitimate interest (in this case, the interest of the Company is the administration of the website);
CHILDREN’S PRIVACY
The services offered by us are not intended for children under 16 years of age. For these reasons, please note that if we become aware that we are processing personal data of children under 16 without the consent of a legal guardian, we will take appropriate steps to delete such data as soon as possible.
We will not knowingly process the personal data of children under 16 without the valid consent of their legal guardians.
III. Cookies
1. On its website, like other companies, the Company uses cookies, i.e. short text information stored on a computer, telephone, tablet or other user device. They may be read by our system as well as by systems belonging to other entities whose services we use (e.g. Facebook, Google).
2. Cookies perform a lot of functions on the website, most often useful, which we will try to describe below (if the information is insufficient, please contact us):
• ensuring security – cookies are used to authenticate users and prevent unauthorized use of the customer panel. They are therefore used to protect the user’s personal data against unauthorized access;
• influence on the processes and efficiency of the use of the website – cookies are used to make the website work smoothly and to enable the use of the functions available on the website, which is possible, inter alia, by remembering settings between visits to the website. Thanks to them, it is possible to efficiently navigate the website and individual subpages;
• session status – cookies often store information about how visitors use the website, e.g. which pages they view most often. They also enable the identification of errors displayed on some subpages. Cookies used to record the so-called “session status” help to improve services and increase the comfort of browsing;
• maintaining the status of the session – if the customer logs in to his panel, the cookies allow you to maintain the session. This means that after switching to a different subpage, you do not have to enter your login and password again each time, which is conducive to the comfort of using the website;
• Creating statistics – Cookies are used to analyze how users use the website (how many visitors visit the website, how long they stay on the website, which content is of most interest, etc.). In this way, the website can be continuously improved and its operation can be adapted to the users’ preferences. We use Google’s tracking and tracing tools, such as Google Analytics, to help us track your activity and compile statistics; in addition to reporting on website usage statistics, Google Analytics may also use Google Pixel Analytics, along with some of the cookies described above, to help you view more relevant content on Google services (such as Google Search) and across the web;
• using social functions – on the website we have a so-called Facebook pixel, which allows you to like our fanpage on this site when using the site. However, for this to happen, we must use cookies provided by Facebook.
3. By default, your Internet browser allows the use of cookies in your device, so during your first visit we ask you to consent to the use of cookies. However, if you do not wish to use cookies when browsing the website, you can change the settings in your web browser – completely block automatic handling of cookies or require notification of each time cookies are placed in the device. The settings can be changed at any time.
4. While respecting the autonomy of all persons using the website, we feel obliged to warn you that disabling or restricting the use of cookies may cause quite serious difficulties in using the website, e.g. the need to log in to each subpage, longer loading time of the website, limitations in using the functionality, limitations in liking the Facebook page, etc.
IV. Right of withdrawal of consent
1. If the processing of your personal data is based on your consent, you may revoke your consent at any time at your own discretion.
2. If you would like to withdraw your consent to the processing of your personal data, for this purpose you will only need to:
• send an e-mail directly to the Company at registration@patonwelder.uk or
• click on the link in the e-mail attached at the end of the message or
• delete a comment under an article, or
• delete the posted opinion on services. 3. If your personal data have been processed on the basis of your consent, the withdrawal of your consent does not make the processing of your personal data illegal until then. In other words, until such time as your consent is withdrawn, we have the right to process your personal data and its revocation does not affect the lawfulness of the existing processing.
V. Requirement to provide personal data
1. The provision of any personal data is voluntary and is at your discretion. However, in some cases, the provision of certain personal data is necessary to meet your expectations regarding the use of the following services.
2. In order to commission the service, it is necessary to provide your name and e-mail address – without it we are unable to conclude and perform the contract.
3. In order for you to receive an invoice for services, it is necessary to provide all the data required by tax law, i.e. name and surname or company name, address of residence or registered office, VAT number – without this we are not able to properly issue an invoice.
4. In order to be able to contact you by phone in matters related to the implementation of the service, it is necessary to provide your telephone number – without this we are unable to make contact by phone.
5. If you wish to receive SMS notifications about messages in the customer panel, it is necessary to provide a phone number – without this we are unable to send messages.
6. In order for you to receive rebates for future services, you must provide us with your name and e-mail address – without this we are unable to send you discount codes.
VI. Automated decision making and profiling
Please be advised that we do not make automated decisions, including those based on profiling. The content of the inquiry, which is sent via the contact form, is not subject to evaluation by the computer system. The proposed price of the service is in no way the result of an assessment made by any information system.
VII. Recipients of personal data
1. Like most entrepreneurs, in our business we use the assistance of other entities, which often involves the need to transfer personal data. Therefore, if necessary, we transfer your personal data to lawyers cooperating with us who provide services, companies handling fast payments, accounting company, hosting company, company responsible for sending SMS messages, as well as insurance company (if there is a need to repair the damage).
2. In addition, it may happen that, for example, on the basis of the applicable law or the decision of the competent authority, we will have to pass on your personal data to other entities, whether public or private. Therefore, it is extremely difficult for us to predict who may request personal data. However, for our part, we assure you that we analyse every case of a request to disclose personal data very carefully and very thoroughly, so as not to inadvertently pass on the information to an unauthorized person.
VIII. Transfer of personal data to third countries
1. Like most entrepreneurs, we use various popular services and technologies offered by entities such as Facebook, Microsoft and Google. These companies are established outside the European Union and are therefore treated as third countries under the RODO rules.
2. RODO imposes certain restrictions on the transfer of personal data to third countries because, since European rules do not apply in principle, the protection of personal data of EU citizens may unfortunately be insufficient. Therefore, every controller of personal data is obliged to determine the legal basis for such a transfer.
3. For our part, we assure you that when using our services and technology, we transfer personal data only to U.S. entities and only to those that have joined the Privacy Shield Program, pursuant to the European Commission’s Implementing Decision of 12 July 2016. – Further information can be found on the European Commission’s website at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_pl Entities that have joined the Privacy Shield Program warrant that they will comply with the high standards of personal data protection in the European Union, and that the use of their services and technologies in processing personal information is lawful.
4. We will provide you at any time with further clarification regarding the transfer of your personal data, in particular if you are concerned about this issue.
5. You have the right at any time to obtain a copy of the personal data transferred to a third country.
IX. Period of processing of personal data
1. According to the applicable legal regulations, we do not process your personal data “indefinitely”, but for the time necessary to achieve the set goal. After this period, your personal data will be irretrievably deleted or destroyed.
2. In the event that we do not need to carry out operations on your personal data other than storage (e.g. if we store the contents of the order for the purpose of defending against claims), we shall additionally secure these data by pseudonymisation until they are permanently deleted or destroyed. Pseudonymisation consists in the encryption of personal data or the collection of personal data in such a way that they cannot be read without an additional key and therefore such information becomes completely useless for an unauthorised person.
3. We kindly inform you that we process your personal data for a period of time with regard to the individual processing periods of your personal data:
• the duration of the contract – with regard to personal data processed for the purpose of concluding and performing the contract;
• 3 years or 10 years + 1 year – with regard to personal data processed for the purpose of establishing, pursuing or defending claims (the length of the period depends on whether both parties are entrepreneurs or not);
• 6 months – in relation to personal data collected during the valuation of the service, and at the same time there was no immediate conclusion of the contract;
• 5 years – in relation to personal data related to the fulfilment of tax law obligations;
• until consent is withdrawn or the purpose of the processing is achieved, but not more than for a period of 5 years – with regard to personal data processed on the basis of consent;
• until the effective objection is raised or the purpose of the processing is achieved, however, not longer than for 5 years – with regard to personal data processed on the basis of a legitimate interest of the Personal Data Administrator or for marketing purposes;
• until obsolete or obsolete, but not longer than for 3 years – with regard to personal data processed mainly for analytical purposes, the use of cookies and website administration.
4. Periods in years count from the end of the year in which we began processing personal data to improve the process of deletion or destruction of personal data. Separate counting of the deadline for each concluded contract would involve significant organizational and technical difficulties, as well as a significant financial outlay, so the establishment of a single date for deleting or destroying personal data allows us to manage this process more efficiently. Of course, if you exercise your right to forget such situations are considered individually. 5. An additional year related to the processing of personal data collected for the purposes of contract performance is dictated by the fact that you may hypothetically submit a claim just before the expiry of the statute of limitations, the claim may be delivered with a significant delay or you may erroneously determine the statute of limitations for your claim.
X. Rights of data subjects
1. We kindly inform you that you have the right to:
• access to their personal data;
• rectification of personal data;
• deletion of personal data;
• restrictions on the processing of personal data;
• objection to the processing of personal data;
• the transfer of personal data.
2. We respect your rights under data protection laws and we try to facilitate their implementation as much as possible.
3. We would like to point out that the above mentioned rights are not absolute and therefore in some situations we may legally deny you the right to exercise them. However, if we refuse to grant the claim, it is only after careful analysis and only if the refusal to grant the claim is necessary.
4. As regards the right to object, we explain that you have the right at any time to object to the processing of personal data on the basis of the legitimate interest of the Personal Data Controller (listed under point III) in relation to your particular situation. However, you must remember that under the law, we may refuse to accept an objection if we can demonstrate that:
• there are legitimate grounds for processing which take precedence over your interests, rights and freedoms, or
• there are grounds for establishing, pursuing or defending claims.
5. In addition, you may object at any time to the processing of your personal data for marketing purposes. In such a case, upon receipt of the objection, we will cease processing for this purpose.
6. You can exercise your rights by:
• sending an e-mail directly to the Company to the address registration@patonwelders.com or
• clicking on a link in the e-mail attached to the end of the message or
• independent change of data in the customer’s panel, in the “Data information” tab.
XI. Right to bring an action
If you believe that your personal data is being processed in violation of the applicable law, you may file a complaint with the President of the Office for the Protection of Personal Data.
XII. Final provisions
1. In the scope not regulated by this Privacy Policy, the following regulations apply in the scope of personal data protection.
2. You will be notified of any changes to this Privacy Policy by e-mail.
3. This Privacy Policy is effective as of 25 May 2018.