Privacy Policy

Yes, this is the moment when we need to say out loud what we do with data. Since May 25, 2018, the GDPR (EU Regulation 2016/679) has been in force, and because of this, it is no longer possible to pretend that the issue does not exist. So here it is, in black and white.

I. General provisions

The administrator of your personal data is MAXUS sp. z o.o. with its registered office in Krakow, ul. Brogi 2, 31-431 Krakow, entered in the National Court Register kept by the District Court for Krakow Śródmieście in Krakow, 11th Commercial Division, under KRS number 0000261333, NIP 6772273741, REGON 120289430.
Phone: +48 604 113 077, +48 604 114 958
E-mail: kontakt@uzbrojeni.pl
Hereinafter, we will simply refer to them as: Administrator.

Where do we get the data from? Most often from you. Or from someone acting on your behalf, an employee, a representative, it varies. We collect it, for example, when you place an order, send an inquiry, register an account on the website, conclude a contract, or do something for which the data is simply necessary.

Sometimes we also take data from public sources, such as ordinary ones available to everyone, such as the KRS or CEIDG search engines. Not from outer space.

II. Why and on what basis do we process data

a) When you want a contract or we are discussing it

If you contact us to arrange something, get an offer, or discuss terms and conditions, we process your data in order to perform these pre-contractual activities at your request. Basis: Article 6(1)(b) of the GDPR.

We keep this data for as long as it is necessary to deal with the matter. If there is no contract, we delete the data after this period. However, if a contract is concluded, we continue to process the data for the performance of the contract and then until the expiry of any claims, because sometimes it is necessary to defend ourselves or pursue something. Basis: Article 6(1)(b) and (f) of the GDPR.

b) When the contract is already in place

Then we process the data, because without it the contract is dead.

We do this:

- to conclude and perform the contract (contact regarding performance, payment confirmation, etc.). Basis: Article 6(1)(b) of the
GDPR - to fulfill legal obligations, e.g., tax, civil, VAT invoices, complaints, information obligations. Basis: Article 6(1)(c) of the GDPR
- for archiving and evidence purposes, just in case something needs to be proven. Basis: Article 6(1)(f) of the GDPR (our interest: archiving of documentation)
- to establish, pursue, or defend claims. Basis: Article 6(1)(f
) of the GDPR - for direct marketing of our own products and services. Basis: Article 6(1)(f) of the GDPR

How long? We keep data related to the contract until it is performed, and then for the period of limitation of claims. We keep
data for legal obligations until they are fulfilled. We keep
data for archiving and marketing until this interest ceases to make sense or until you object. Whichever comes first.

c) Account on the website

If you use an account on the website operated by the Administrator, we process your data because you want your account to work and to be able to place and fulfill orders. Basis: Article 6(1)(a) of the GDPR.

We keep the data until you withdraw your consent or delete your account. And if you conclude a contract through your account, the logic of the contract applies: for the performance and limitation of claims, pursuant to Article 6(1)(b) and (f) of the GDPR.

d) Newsletter and commercial information

If you give your consent, we process your data to send you commercial information about goods, services, promotions, and offers, as well as a newsletter. Basis: Article 6(1)(a) and (f) of the GDPR (consent plus our direct marketing interest).

We keep it until you withdraw your consent, object, or until our interest ceases to make sense. Consent may be withdrawn at any time.

e) Casual telephone contact outside the contract

If you call us about a matter that is not related to the performance of the contract, we process your data in order to handle your request or question. Basis: Article 6(1)(f) of the GDPR (our interest: handling inquiries).

And yes, in the event of a dispute, we may also process it to defend ourselves or pursue claims. We keep this data for as long as necessary to deal with the matter, and then for the limitation period of any claims.

f) Email and traditional mail, outside of the contract

Same as for phone calls. If you send us an email or letter regarding a matter not related to the performance of the contract, we process the data in order to respond and handle the matter. Basis: Article 6(1)(f) of the GDPR.

Furthermore, as a standard, the investigation or defense of claims also comes into play on the same basis. Storage: first, as long as necessary for the case, then possibly until the statute of limitations expires.

III. Do you have to provide your data?

Sometimes yes, sometimes no, and there is no point in pretending that you always have complete freedom.

- If the data is necessary for the conclusion and performance of a contract, there will be no contract without it. Providing it is supposedly voluntary, but practically necessary.
- If you ask us to take action before the contract, the data is voluntary, but without it we will not be able to do what you ask.
- If required by law (e.g., taxes), we may request data, and then providing it is mandatory.
- If you ask us something and want an answer, your contact details are voluntary, but without them we will not be able to reply.
- If you want a newsletter or commercial information, the data is voluntary, but without it we will not send you anything.
- If you want to create an account, the data is voluntary, but without it the account cannot be created.

IV. Who we may share your data with

We may transfer data to entities we use for processing, e.g., law firms, IT companies, e-mail providers, postal and courier operators, and entities handling online payments.

We will also share data if it is necessary due to a legal obligation. No big deal, just an obligation.

V. Transfer of data to third countries

We use the services of providers, e.g., hosting, IT systems, electronic payments. As a result, your data may be transferred to external entities, including outside the EEA, if such a provider operates there. If this happens, we take measures to ensure that the data is secure. Yes, this is vague. But it is also true.

VI. Your rights

You have rights under the law. And no, this is not just for show.

a) the right to access your data and receive a copy

b) the right to rectify data if it is incorrect

c) the right to delete data
If you believe that there are no grounds for us to process it, you can request its deletion.

d) the right to restrict processing
You may want us to only store your data or do the minimum with it, e.g., if you believe it is incorrect, that we are processing it without a basis, or if you do not want it deleted because you need the data for claims. Or for the duration of an objection.

e) right to object to data
processing - marketing objection: you can object to direct marketing, and we will then stop
  - objection due to a specific situation: when we process data on the basis of a legitimate interest for purposes other than marketing, you can object and describe your situation. We will stop unless we can demonstrate that we have overriding grounds or that the data is needed for claims

f) right to data portability
You can obtain your data in a structured, machine-readable format (e.g., csv) if you have provided it on the basis of a contract or consent. You can also request that it be sent to another entity.

g) right to lodge a complaint with a supervisory
authority If you believe that we are processing your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office.

h) the right to withdraw consent You can
withdraw your consent at any time. Withdrawal does not affect the legality of what we did before withdrawal.

If you wish to exercise these rights, please contact:

MAXUS BARTŁOMIEJ HELBIN, KATARZYNA HELBIN sp. z o.o.
ul. Brogi 2, 31-431 Kraków
  KRS: 0000261333, NIP: 6772273741, REGON: 120289430
e-mail: kontakt@uzbrojeni.pl
tel.: +48 604 113 077, +48 604 114 958

6. Automated decision-making

We do not make automated decisions about you, except for those resulting from cookies. Details can be found in the Cookies Policy tab. You are not subject to profiling.