PRIVACY POLICY

PRIVACY POLICY

The purpose of this Privacy Policy is to explain the principles on which Albedum Sp. z o.o., with its registered office in Opole (45-449), at ul. Wschodnia 17, KRS: 0000944186, NIP: 7543347585, REGON: 520954197, collects, uses, and protects Users’ personal data, as well as to present the rights they are entitled to in connection with the processing of their personal data by the company.

DATA CONTROLLER

The controller of Users’ personal data is Albedum Sp. z o.o., with its registered office in Opole (45-449), at ul. Wschodnia 17, KRS: 0000944186, NIP: 7543347585, REGON: 520954197.

Albedum Sp. z o.o., with due diligence and in proportion to the risk, selects and applies appropriate technical and organizational measures to ensure the protection of the processed data, including protection against unauthorized access, disclosure, loss, destruction, or unlawful modification, as well as against processing in violation of applicable legal provisions.

Albedum Sp. z o.o. maintains ongoing control over the data processing process and limits access to data to the greatest possible extent, granting appropriate authorizations only when necessary.

CONTACT WITH THE DATA CONTROLLER

If you have any questions regarding the processing of your personal data, please contact the Data Controller at:
Albedum Sp. z o.o., ul. Wschodnia 17, 45-449 Opole, Poland or by email at: gdpr@albedum.com.pl

SCOPE OF DATA COLLECTED

Albedum Sp. z o.o. collects only basic personal data of individuals.
The company collects only the data that is necessary.

PURPOSE OF PERSONAL DATA PROCESSING

Personal data is processed to ensure proper and efficient provision of services to Users by Albedum Sp. z o.o.

LEGAL BASIS FOR DATA PROCESSING

We inform you that Albedum Sp. z o.o., in the course of its operations, may collect and process personal data for the following purposes:

  1. for the conclusion and performance of a contract or to take action at the request of the data subject prior to entering into a contract (including creating a customer account and placing orders) – based on Art. 6(1)(b) of the GDPR,
  2. to fulfill the legal obligations incumbent on the data controller – based on Art. 6(1)(c) of the GDPR,
  3. for purposes arising from the legitimate interests pursued by the controller or a third party, in particular to establish, assert, or defend claims, to inform Users about changes to the privacy policy and cookie policy – based on Art. 6(1)(f) of the GDPR; also for analytical purposes involving the analysis of data collected automatically when using the website, including cookies (e.g. Google Analytics cookies) – based on Art. 6(1)(a) and (f) of the GDPR,
  4. to provide an answer via email or telephone to a question submitted through the contact form on the administrator’s website – based on Art. 6(1)(a) of the GDPR, i.e. based on the User’s consent,
  5. to send commercial information about its services and products by electronic means (email) or telephone – based on Art. 6(1)(a) of the GDPR, i.e. with the User’s consent to receive such information through the indicated communication channel, including newsletters.

Providing personal data is voluntary but required for the purposes described above. Failure to provide personal data may result in the inability to use all website features, conclude and perform a sales contract, receive a response via the contact form, or receive commercial information.

DATA RETENTION PERIOD

  1. Users’ personal data may be processed by Albedum Sp. z o.o. for the following periods:
  • for the purpose defined in (a) – until full completion of the sales agreement,
  • for the purpose defined in (b) – for the period required by tax law,
  • for the purpose defined in (c) – for the period resulting from the statute of limitations for claims,
  • for the purpose defined in (d) – for the time necessary to resolve the matter related to the contact form inquiry or until consent is withdrawn,
  • for the purpose defined in (e) – until marketing consent is withdrawn, and in the case of newsletters – until the service is discontinued or consent is withdrawn.
  1. After these periods, the data will be deleted.

USER RIGHTS

Users have the right to:

  1. withdraw consent for data processing at any time if the basis for processing is consent – withdrawal does not affect the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR),
  2. access their personal data (Art. 15(1) GDPR),
  3. receive a copy of their personal data (Art. 15(3) GDPR),
  4. rectify or update their personal data (Art. 16 GDPR),
  5. request deletion of their personal data – unless Albedum Sp. z o.o. is legally obliged to retain them or needs them to establish, assert, or defend claims (Art. 17 GDPR),
  6. restrict the processing of their personal data (Art. 18 GDPR),
  7. data portability – to receive data processed on the basis of a contract or consent in a structured, commonly used, machine-readable format (Art. 20 GDPR),
  8. lodge a complaint with the President of the Personal Data Protection Office (UODO) if they believe their data has been processed in violation of the GDPR.

If personal data is processed on the basis of a legitimate interest of Albedum Sp. z o.o., the User has the right to object to such processing (Art. 21 GDPR).

To exercise these rights, please contact Albedum Sp. z o.o. at gdpr@albedum.com.pl, by phone at +48 77 453 99 69, or by post at the company’s address.

DATA RECIPIENTS

Users’ data will be processed by authorized employees and collaborators of the company. Data recipients may include service subcontractors under service provision agreements, external IT and accounting service providers under data processing agreements. Additionally, data may be disclosed to public authorities or entities acting on behalf of such authorities as required by law.

ONLINE PLATFORMS

  1. The administrator may use services provided by Google, which maintains servers worldwide, meaning personal data may be processed outside the European Economic Area. Google applies security mechanisms as required by the GDPR.
  2. Detailed information on how Google processes personal data is available in Google’s privacy policy:
    https://policies.google.com/privacy?hl=en

PROFILING

Albedum Sp. z o.o. does not make decisions that produce legal effects for Users or significantly affect them based solely on automated processing, including profiling.

COOKIES

Cookies are IT data, particularly text files, stored on the user’s device by the administrator of the website available at gdpr@albedum.com.pl They:

  1. a) enable the use of services available through the website (e.g. authentication),
    b) enable the collection of information on how the website is used,
    c) allow the saving of user-selected settings and customization of the interface,
    d) deliver content (including advertising) more tailored to the user’s interests.

The website stores the following data for statistical purposes:

  1. a) device type,
    b) operating system,
    c) web browser type,
    d) screen resolution,
    e) IP address.

This data is used to optimize the website’s performance.

Most web browsers allow cookies by default. Users may change their cookie settings at any time, including to block automatic handling or to alert the user whenever cookies are being placed. Details on how to manage cookies are available in the settings of the web browser.

Instructions for modifying cookie settings may differ depending on the browser used. Help sections in each browser provide more information.

Please note that restricting or disabling cookies may affect the functionality of the website.

CHANGES TO THE PRIVACY POLICY

Albedum Sp. z o.o. reserves the right to amend this Privacy Policy if required by law, due to technological changes on the website, or to introduce higher standards than those required by law.

Date of last modification: 18-06-2025.