Please be informed that the administrator of personal data related to contacting the Sales Department, the Customer Service and the Complaint Department is “IMS SOFA” Sp. z o.o., with its registered office in Bydgoszcz (85-790) at Bydgoska Street number 50. Providing this personal data is voluntary, but required to contact the Sales Department, the Customer Service and the Complaint Department. Personal data provided by you will be processed in order to process your complaint and improve the quality of customer service. It may also be used to maintain or develop business relations. The data processed will not be transferred outside of the European Economic Area or to an international organization, nor will it be subject to automated decision making, including profiling. The data will be processed within 6 years after the call. You have the right to access your personal data, rectify it, delete (be forgotten) or limit its processing, as well as the right to object to their processing and the right to transfer the data. If the data is processed on the basis of granted consent – such consent may be withdrawn at any time without affecting the legality of the processing which has been effected on the basis of the consent prior to its withdrawal. You have the right to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

1. General information and definitions.
   • The administrator of the data collected via www.etap-sofa.pl is the company IMS SOFA Sp. z o. o., with registered office at ul. Bydgoska 50, 85-790 Bydgoszcz, REGON: 091281755, Tax Identification Number NIP: 5561012546, e-mail: imssofa@ims.li, tel.: +48 52 55 51 100
   • Cookies – means IT data, in particular small text files, saved and stored on devices through which the User uses the Service website.
   • Administrator’s Cookies – means Cookies posted by the Administrator related to the electronic provision of services by the Administrator via the Service.
   • External Cookies – means Cookies placed by the Administrator’s partners via the Service website.
   • Service – means a website that the Administrator runs in the domain http://etapsofa.itsalmost.live
   • Device – means an electronic device through which the User gains access to the Service.
   • User – means an entity for which electronic services may be provided in accordance with the law, or with which a contract for the provision of electronic services may be concluded.
2. Legal basis for User’s data processing
   1. Personal data collected by the Administrator are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repeal of the Directive 95/46/EC (hereinafter referred to as “RODO”) and the Act of 18 July 2002 on the provision of electronic services (i.e. Journal of Laws of 2017, item 1219, as amended).
   2. The Administrator processes only personal data that the User has provided in connection with the use of the Service. Users’ data processing takes place within the scope of:
      1. conclusion and performance of a sales contract, including the issue of a VAT invoice or bill and delivery of goods (scope of data: name, surname, address, delivery address, e-mail) – pursuant to art. 6 para 1 letter b RODO, i.e. due to the fact that the processing is necessary for the performance of the contract the Party of which it concerns,
      2. receivable collection (data scope: name, surname, address, delivery address, e-mail, other data necessary to prove the existence of a claim or defence of rights) – pursuant to art. 6 para 1 letter f of RODO, i.e. due to the fact that the processing is necessary for purposes resulting from legally justified interests carried out by the Administrator or by a third party,
      3. fulfilment of legal obligations incumbent on the Administrator in connection with running a business (scope of data: any data obtained from the User) – pursuant to art. 6 para 1 letter c of RODO, i.e. due to the fact that the processing is necessary to fulfil the legal obligation of the Administrator,
      4. conducting marketing and promotional activities (data scope: name, surname, address, e-mail address, telephone number) – on the basis of separate consent (Article 6 paragraph 1 letter a of RODO),
      5. sending commercial information by electronic means in accordance with art. 10 para. 2 of the Act on Electronic Services of July 18, 2002 (data scope: name, surname, address, delivery address, e-mail address, telephone number) – on the basis of separate consent.
   3. What kind of data is collected by The Service Administrator?
      1. The Service Administrator collects the following personal data via the contact form available in the Service:
         1. company name;
         2. name and surname;
         3. address;
         4. telephone number;
         5. e-mail address;
         6. other data to the extent necessary.
      2. In connection with filling out the contact form, the User receives the information referred to in art. 13 para. 1 and 2 of RODO and may consent to the collection and processing of personal data by the Administrator. Providing these data is voluntary, but necessary to contact the Administrator. You have the right to access your personal data and the right to correct them.
      3. Browsing the content of the Service does not require the provision of personal data other than automatically acquired information about the connection parameters.
      4. The Administrator does not process Users’ personal data using tools for automated decision making, including profiling.
   4. Time of personal data processing
      1. Personal data will be processed for a period of time:
         1. necessary for the fulfilment of contracts concluded via the Service, including after their fulfilment due to the possibility for the parties to exercise their rights under the contract, as well as for the possible claims – until the expiry of the claims;
         2. until the withdrawal of consent or filing a complaint to data processing – in the case of processing of personal data of the User on the basis of a separate consent;
      2. The Administrator stores User personal data also when it is necessary to fulfil his legal obligations, resolve disputes, enforce User’s obligations, maintain security, prevent fraud and abuse.
   5. User’s rights
      1. The Administrator shall ensure that the Users exercise the rights referred to in section 2 below. In order to exercise the rights, please send a relevant demand (relevant request) by e-mail to the following address: imssofa@ims.li or by post to the following address: ul. Bydgoska 50, 85-790 Bydgoszcz.
      2. The User has the right to:
         1. access to data content – in accordance with art. 15 of RODO,
         2. rectify / update of data – in accordance with art. 16 of RODO,
         3. data deletion – in accordance with art. 17 of RODO,
         4. limit data processing – in accordance with art. 18 of RODO,
         5. data transfer – in accordance with art. 20 of RODO,
         6. object to the processing of data – in accordance with art. 21 of RODO,
         7. withdraw the given consent at any time, whereby the withdrawal of consent does not affect the lawfulness of the processing, which was made on the basis of consent before its withdrawal – in accordance with art. 7 para. 3 of RODO,
         8. submit a complaint to the supervisory body, i.e. the President of the Office for Personal Data Protection – pursuant to art. 77 of RODO.
      3. The Administrator reviews the requests without delay, but not later than within one month of their receipt. However, if – due to the complex nature of the request or the number of requests – the Administrator will not be able to process the User’s request within the indicated time, he will inform the User about the intended extension and indicate the date of processing the request, no longer than 2 months.
      4. The Administrator informs, about rectification or deletion of personal data or limitation of processing, which he made according to the request of the User, each recipient who has been disclosed personal data, unless it proves impossible or would require disproportionate effort.
   6. Providing information
      In order to implement the contract, the Administrator may provide data collected from you to entities including: courier companies, on-line payment system operators. In such cases, the amount of data transferred is limited to the minimum required. In addition, the information provided by you may be made available to competent public authorities if required by applicable law. To recipients not indicated above, personal data being processed shall not be made available externally in a form that would allow any identification of Users, unless the User agreed to it.
   7. Technical measures and your obligations
      1. The Administrator shall make every effort to secure your data and protect them against the actions of third parties, and also supervises the security of the data throughout its possession in a manner that protects against unauthorized access, damage, distortion, destruction or loss of data.
      2. We use the necessary security for servers, connections and the Service. However, the actions taken by us may turn out to be insufficient if you do not observe the safety rules yourself. The preferred form of contact with the Administrator is filling out the contact form available on the Service website or sending an e-mail to the address: imssofa@ims.li
   8. Cookies
      1. Cookies used by the Administrator are safe for the User’s Device.
         In particular, it is not possible to get viruses or other unwanted software or malicious software into User Devices. These files allow to identify the software used by the User and adjust the Service individually for each User. Cookies usually contain the name of the domain from which they originate, their storage time on the Device and the assigned value.
      2. Types of cookies:
         1. Session cookies: they are stored on the User’s Device and remain there until the end of the session of a given browser. The saved information is then permanently removed from the Device’s memory. The mechanism of session cookies does not allow to download any personal data or any confidential information from the User’s Device;
         2. Permanent Cookies: they are stored on the User’s Device and remain there until they are deleted. Ending the session of a given browser or turning off the Device does not delete them from the User’s Device. The mechanism of permanent cookies does not allow the collection of any personal data or any confidential information from the User’s Device.
      3. The User has the ability to limit or disable access of cookies to his Device. If you use this option, the use of the Service will be possible, except of functions that, by their nature, require cookies.
   9. Purposes in which Cookies are used:
      1. The Administrator uses cookies for the following purposes:
         1. Service configuration;
         2. recognition of the Service User’s device and its location and properly displaying the website, customised to his individual needs;
         3. saving the history of visited pages in the Service in order to recommend content;
         4. user authentication in the Service and providing user session in the Service;
         5. correct configuration of selected functions of the Service, allowing in particular verification of the authenticity of the browser session;
         6. optimizing and increasing the efficiency of services provided by the Administrator;
         7. analysis and research, and audience audit.
   10. Changing the privacy and cookies policy
       1. The Administrator has the right to change this document, about which the User will be notified in a way that makes it possible to read the changes before they take effect, e.g. by posting relevant information on the main pages of the Service, and in case of significant changes, also by sending a notification to the e-mail address indicated by the User.
       2. In the case of User’s reservations to the introduced changes, he may request a deletion of the Account from the Service. Your continued use of the Service after the publication or sending of notice of changes to this document is considered as consent to the collection, use and disclosure of your personal data according to the updated content of the document.
       3. This document does not limit any rights of the User under generally applicable laws.

INFORMATION ABOUT THE ADMINISTRATOR OF PERSONAL DATA

1. The Administrator of your personal data is IMS SOFA Sp. z o. o. with registered office at ul. Bydgoska 50, 85-790 Bydgoszcz, REGON: 091281755, Tax Identification Number NIP : 5561012546, e-mail: imssofa@ims.li, tel.: +48 52 55 51 100;
2. Your personal data will be processed for the purpose:
   1. taking action before the conclusion of the contract and for the purpose of contract performance – legal basis art. 6 para. 1 letter b of RODO,
   2. fulfilment of legal obligations incumbent on the Administrator in connection with running a business – legal basis art. 6 para. 1 letter c of RODO,
   3. marketing and promotion, including direct marketing of products offered by the Administrator – legal basis art. 6 para. 1 letter a of RODO,
   4. recovery of receivables – legal basis art. 6 para. 1 letter f of RODO.
3. personal data will be transferred to the following categories of recipients:
   1. employees,
   2. co-workers,
   3. shipment providers,
   4. IT company;
4. Your personal data will be kept for the duration of the contract and after termination of the contract in order to fulfil the legal obligation of the Administrator, for a period of time compliant with applicable law, and in the event of legally justified purposes of the Administrator, including direct sales and marketing, until withdrawal of the consent by the Customer;
5. In relation to the processing of personal data by the Administrator, you have:
   1. the right to access the data content,
   2. the right to rectify the data,
   3. the right to delete the data,
   4. the right to limit data processing,
   5. the right to object to data processing,
   6. the right to transfer data,
   7. the right receive a copy of the data;
6. If it is found that the processing of personal data by the Administrator violates the provisions of RODO, you have the right to lodge a complaint to the supervisory body, i.e. the President of the Office for the Protection of Personal Data (https://uodo.gov.pl/).
7. Providing data is voluntary, however necessary in order to conclude and fulfil the contract.
8. You have the right to withdraw your consent to the processing of data by the Administrator at any time, without affecting the legality of the processing, which was made on the basis of a consent before its withdrawal.