This Personal Data Processing and Privacy Policy (hereinafter referred to as the "Policy") applies to all user information obtained by Aklima Polska Sp. z o.o. (hereinafter referred to as the "Company") during the use of our services and website.
Company Details:
- Full Name: Aklima Polska Sp. z o.o.
- Registered Address: ul. Postępu 15, 02-676 Warsaw, Poland
- Registration: Sąd Rejonowy dla m.st. Warszawy, XIII Wydział Gospodarczy KRS
- KRS Number: 0000978391
- NIP: 9512544995
- Email: daneosobowe@aklimapolska.pl
Acceptance of the Policy
By using our services and website, you accept and agree to the terms of this Privacy Policy. If you do not agree with the terms of this Policy, you must immediately cease using our services.
Legal Basis for Personal Data Processing
The processing of personal data is carried out in accordance with:
- EU Regulation 2016/679 (GDPR) of the European Parliament and the Council dated April 27, 2016
- Polish Personal Data Protection Act (Ustawa o ochronie danych osobowych)
- Internal procedures of Aklima Polska Sp. z o.o.
- Other applicable Polish and EU legislation
Aklima Polska Sp. z o.o. does not verify the accuracy of the personal data provided by users nor their legal capacity. However, Aklima Polska Sp. z o.o. assumes that the user has provided valid personal data. The user is solely responsible for ensuring that the personal data provided is accurate and kept up to date.
Definitions of Terms Used in This Policy
- Personal Data: Any information related directly or indirectly to an identified or identifiable natural person
- Data Controller: Aklima Polska Sp. z o.o. as the entity determining the purposes and means of processing personal data
- Data Processor: Third-party service providers who process data on behalf of Aklima Polska Sp. z o.o.
- Data Processing: Any action performed on personal data, including collection, recording, storage, modification, use, transfer, deletion, or destruction
Categories of Personal Data We Collect
Aklima Polska Sp. z o.o. may collect and process the following categories of personal data:
- Identity Data: Name, surname, date of birth, gender
- Contact Data: Email address, phone number, postal address
- Technical Data: IP address, browser type, device information, cookies
- Usage Data: Information about how you use our services
- Transaction Data: Payment information, purchase history
- Marketing Data: Your preferences for marketing communications
Purposes and Legal Basis for Processing
Aklima Polska Sp. z o.o. processes personal data for the following purposes:
- Service Provision (Legal basis: Contract performance - Art. 6(1)(b) GDPR)
- Processing orders and providing services
- Customer support and communication
- Account management
- Legal Compliance (Legal basis: Legal obligation - Art. 6(1)(c) GDPR)
- Accounting and tax obligations
- Regulatory compliance
- Legitimate Interests (Legal basis: Legitimate interest - Art. 6(1)(f) GDPR)
- Business analytics and service improvement
- Fraud prevention and security
- Direct marketing (with opt-out option)
- Consent (Legal basis: Consent - Art. 6(1)(a) GDPR)
- Newsletter subscriptions
- Marketing communications
- Cookies (non-essential)
Data Sharing with Third Parties and Service Providers
Aklima Polska Sp. z o.o. may share your personal data with third-party service providers for the following purposes:
Automation and Processing Services:
- CRM Systems: Customer relationship management and communication automation
- Email Marketing Platforms: Automated marketing campaigns and newsletters
- Analytics Services: Website and service usage analysis (Google Analytics, etc.)
- Customer Support Tools: Help desk and chat automation
- Inventory Management: Stock and order processing automation
- Accounting Software: Financial data processing and reporting
Essential Service Providers:
- Payment Processors: For secure payment processing
- Shipping Companies: For order delivery
- Cloud Storage Providers: For data backup and storage
- IT Support Services: Technical maintenance and support
- Legal and Professional Services: When required by law or business needs
Data Transfer Safeguards:
All third-party processors are required to:
- Sign Data Processing Agreements (DPA) compliant with GDPR
- Implement appropriate technical and organizational security measures
- Process data only for specified purposes
- Not transfer data to unauthorized parties
- Delete or return data upon contract termination
International Data Transfers:
When data is transferred outside the EU/EEA, Aklima Polska Sp. z o.o. ensures adequate protection through:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules (BCRs)
- Other approved transfer mechanisms
Your Rights as a Data Subject
In accordance with GDPR, you have the following rights:
- Right of Access (Art. 15) - Request information about your personal data
- Right to Rectification (Art. 16) - Correct inaccurate personal data
- Right to Erasure (Art. 17) - Request deletion of your personal data
- Right to Restrict Processing (Art. 18) - Limit how we use your data
- Right to Data Portability (Art. 20) - Receive your data in a structured format
- Right to Object (Art. 21) - Object to processing based on legitimate interests
- Right to Withdraw Consent - For consent-based processing
- Right not to be subject to Automated Decision-Making (Art. 22)
To exercise these rights, please contact us at: daneosobowe@aklimapolska.pl
Data Retention Periods
Aklima Polska Sp. z o.o. retains personal data only as long as necessary for the purposes outlined in this Policy:
- Customer Data: 6 years after contract termination (tax law requirements)
- Marketing Data: Until consent is withdrawn
- Website Analytics: 26 months
- Support Communications: 3 years
- Legal Claims: As required by limitation periods
Security Measures
Aklima Polska Sp. z o.o. implements appropriate technical and organizational measures to protect personal data:
- Technical Measures: Encryption, access controls, secure servers, regular security updates
- Organizational Measures: Staff training, confidentiality agreements, incident response procedures
- Regular Audits: Security assessments and compliance reviews
Cookies and Tracking Technologies
Our website uses cookies for:
- Essential Cookies: Website functionality (no consent required)
- Analytics Cookies: Usage statistics (consent required)
- Marketing Cookies: Personalized advertising (consent required)
You can manage cookie preferences through your browser settings or our cookie consent tool.
Data Breach Notification
In case of a personal data breach, Aklima Polska Sp. z o.o. will:
- Notify the supervisory authority within 72 hours (if required)
- Inform affected individuals if there is high risk to their rights and freedoms
- Document all breaches and remedial actions taken
Contact Information and Complaints
Data Controller Contact: Aklima Polska Sp. z o.o. ul. Postępu 15, 02-676 Warsaw, Poland KRS: 0000978391, NIP: 9512544995 Email: daneosobowe@aklimapolska.pl
Policy Updates
Aklima Polska Sp. z o.o. reserves the right to update this Privacy Policy. Significant changes will be communicated via:
- Email notification to registered users
- Website announcement
- Updated policy publication date
Last Updated: August 27, 2025