Privacy Policy

PRIVACY POLICY

Updated: 02.06.2025/XNUMX/XNUMX

1. PERSONAL DATA ADMINISTRATOR

The administrator of your personal data is Clima Polska Sp. z o. o with its registered office in Warsaw, al. Komisji Edukacji Narodowej 90/U-7, 02-777 Warsaw, KRS: 0000021891, REGON: 01219205900000, NIP: 5211288325.

You can contact us in person or by mail at the above-mentioned registered office address, as well as by email to:
E-MAIL: data protection@clima.com.pl.

2. PURPOSES AND BASES OF PROCESSING

If you contact us by email or via the contact form on our website, we process your personal data. in order to handle correspondence and answer a question or solve a reported problem, as well as for archival purposes and for the establishment, exercise or defense of legal claims. The basis for processing is Article 6(1)(f) of the GDPR, i.e. our legitimate interest in maintaining contact with customers and other persons sending correspondence, resolving reported problems and securing our legal interest.

If you contact us to receive a commercial offer from us at
e-mail, we process your personal data in order to send you the requested commercial offer regarding our goods or servicesBy placing an order, you consent to this type of communication electronically. We also process your data to establish, pursue, or defend legal claims. The legal basis for processing is Article 6(1)(b) of the GDPR, as part of taking steps at your request prior to entering into a contract, and Article 6(1)(f) of the GDPR, in connection with our legitimate interest in sending commercial offers upon request and safeguarding our legal interest.

We may process your personal data in order to send you direct marketing of our goods and services, if you express such a wish. The basis for processing in this case is Article 6(1)(a) of the GDPR, i.e. your consent to receive such materials.

If you interact with us through our social media profiles, we may process your personal data, including the data you share on your public profile, as well as information resulting from your activity on our profiles. The basis for processing is Article 6(1)(f) of the GDPR, i.e., our legitimate interest in promoting our brand online and communicating with you.

If you are a user of our website, we process your personal data as part of the use of cookiesDepending on the choices you make when first accessing our website, we will process your personal data:

1. only to ensure the proper functioning of the website and its security, by using necessary cookies – if you do not consent to the use of other cookies. In this case, the basis for processing your personal data is Article 6(1)(f) of the GDPR, i.e. our legitimate interest in ensuring the proper functioning of the website and its security;
2. to customize the page to your preferences – if you consent to our use of preference cookies. In this case, the basis for processing your data is your consent (Article 6, paragraph 1, letter a of the GDPR), which you can withdraw at any time by changing your cookie settings;
3. for analytics purposes, including determining what interests you on our website, what device you are using, and how much time you spend on the website – if you consent to our use of analytical cookies. In this case, the basis for processing your data is your consent (Article 6, paragraph 1, letter a of the GDPR), which you can withdraw at any time by changing your cookie settings;
4. for marketing purposes, including remarketing of our products – if you consent to our use of marketing cookies. In this case, the basis for processing your data is your consent (Article 6, paragraph 1, letter a of the GDPR), which you can withdraw at any time by changing your cookie settings.

Detailed information about cookies is included in section 7 of this Policy.

3. DATA STORAGE PERIOD

Depending on the purpose of processing, we will store your personal data:

1. until the statute of limitations for claims expires – in the case of correspondence,
2. for a period of 12 months from the expiry date of the offer, and if you accept it – until the limitation period for claims expires,
3. for the duration of the consent given – in the case of direct marketing,
4. for the duration of the processing purpose – in the case of running social media,
5. according to the lifespans of the cookies used indicated in point 7 of the Policy.
6. RECIPIENTS OF YOUR DATA

The recipients of your personal data are entities that provide us with services that require data processing, such as telecommunications operators. We may also entrust your data to entities with whom we cooperate, such as office software providers, hosting providers, accounting firms, external IT services, and cookie providers. We may also transfer your data to authorized public authorities.

5. YOUR RIGHTS

You have the right to access your data. You can also request rectification, deletion, restriction of processing, and data portability. You also have the right to object to our processing of your personal data based on our legitimate interest. To exercise these rights, please contact us as indicated in Section 1 of the Policy.

With respect to data we process based on your consent, you have the right to withdraw such consent at any time. This will not affect the lawfulness of processing your data before your withdrawal.

Regardless of the above-mentioned rights, you may file a complaint with the President of the Personal Data Protection Office if you believe that we are processing your personal data unlawfully.

6. SOCIAL MEDIA

When managing our Facebook and Instagram profiles, we use the social media service provider Meta Platforms Ireland Limited, which is a separate personal data controller and independently determines the rules for processing user data for these media platforms. The same applies to the profiles we maintain on YouTube, X (formerly Twitter), and Pinterest. This means that your data may be processed both by us for the purposes indicated in Section 2 of the Policy, and by platform providers, who may use your data for their own purposes, such as profiling, behavioral advertising, analytics, or content personalization – this is subject to your acceptance of the terms and conditions of their service or other services.

The scope and method of data processing by the platform operator are defined in the terms and conditions and privacy policies, which describe in detail what data is collected, for what purposes it is used, and what rights you have regarding its processing. We recommend that you review the privacy policy:

• Meta Platforms Ireland Limited (Facebook and Instagram), available at: https://www.meta.com/pl/legal/privacy-policy/;
• Google Ireland Limited (YouTube), available at: http://policies.google.com/privacy;
• X Internet Unlimited Company (X, formerly Twitter), available at: https://x.com/pl/privacy;
• Pinterest Europe Ltd (Pinterest), available at: https://policy.pinterest.com/pl/privacy-policy.