Privacy Policy

Terms and Conditions of Personal Data Protection and Information on Personal Data Processing

Basic Provisions

The personal data controller, in accordance with Article 4, point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: „GDPR”), is GAPI Sp. z o.o. (limited liability company), NIP (Tax ID): PL7011068399, REGON: 520952732, with its registered office at: ul. Hoża 86/410, 00-682 Varšava, Poland, contact details: [email protected] (hereinafter referred to as the „controller”).

Sources and Categories of Processed Personal Data

  • Personal data that are necessary for the provision of services according to the concluded contract. We only process personal data that you provide to us yourself within the scope of pre-contractual negotiations and upon conclusion of the contract, either in writing or by phone. We do not process any special categories of personal data (so-called sensitive personal data). We primarily process the following personal data: name and surname, residential address, or business address (delivery address), e-mail address, and telephone number.

  • Personal data that you fill into forms available on the data controller's websites, for the purpose of sending commercial communications (name, surname, e-mail address) or submitting an inquiry or request related to the company's activities (name, surname, e-mail address, and telephone number).

  • Data obtained through cookies. If you have allowed the storage of cookies in your website or browser settings and agree to their use, the data controller obtains data about your visit, your preferences, and other activity on the website, for the purpose of improving the service offer. This data is primarily the IP address of the website visitor.

The controller processes personal data provided by the customer through forms available on the websites for the purpose of concluding a contract. This data includes, for example: name, surname, address, telephone number, and e-mail address. Legal Basis and Purpose of Personal Data Processing.

The legal basis for processing personal data is:

  • the performance of a contract between you and the controller in accordance with Article 6(1)(b) of the GDPR,

  • the legitimate interest of the controller in providing direct marketing (especially for sending commercial communications and newsletters) in accordance with Article 6(1)(f) of the GDPR,

  • your consent to processing for the purposes of providing direct marketing (especially for sending commercial communications and newsletters) in accordance with Article 6(1)(a) of the GDPR,

  • the fulfillment of the controller's legal obligations.

We process your personal data primarily for the purpose of:

  • Proper (flawless) provision of services according to the concluded contract;

And further, based on your consent, for the purpose of:

  • Sending commercial communications including service offers, content newsletters, and for customer communication (it is possible to unsubscribe from receiving commercial communications for free by clicking the "unsubscribe" button, which can be found at the end of every sent email message, or by sending an email to the address provided on the data controller's website);

  • Personalization and improvement of the quality and content of websites, internal analyses of customer demand, and advertising targeting. The data controller processes data about your website visit, viewed products, and other activity using cookies. Processing is only possible after you give your consent available on the cookie bar. Based on the collected data, the data controller obtains analyses and statistics about your behavior within the websites.

And further for the purpose of:

  • Fulfilling legal obligations stipulated by the legal regulations of the Czech Republic and the European Union or

  • If the processing of your personal data is necessary for the purposes of our legitimate interests or the legitimate interests of other persons; legitimate interests may include, for example, cases of protecting our rights and legal claims (enforcement of overdue payments, protection of the controller's rights and legal claims, direct marketing, etc.).

Data Retention Period

The controller retains personal data:

  • for the period necessary for the exercise of rights and obligations arising from the contractual relationship between you and the controller and the assertion of claims from these contractual relationships,

  • for the fulfillment of the controller's legal obligations,

  • until consent to the processing of personal data for marketing purposes is withdrawn, if personal data are processed based on consent.

After the expiry of the personal data retention period, the controller will erase the personal data.

TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?

  • Recipients of personal data (controller's subcontractors):

  • Recipients of personal data are persons providing marketing services.

We will provide your personal data to selected other persons only in justified cases and to the necessary extent, otherwise only with your prior consent. We will provide your personal data in this way to:

  • personal data processors, i.e., persons with whom we cooperate and whose services we use. We carefully select processors and establish cooperation only with those who provide sufficient guarantees for secure processing and are therefore able to ensure the protection of your rights. We oblige processors, among other things, to comply with instructions for proper processing of your personal data and to maintain confidentiality.

  • Persons authorized under other legal regulations (especially law enforcement authorities, auditors, tax authorities, etc.)

  • With your prior consent, your personal data may also be disclosed to other persons, published in connection with our marketing activities, or otherwise processed. We will only proceed with any further processing of personal data based on your explicit consent, provided for a specific purpose.

Personal data processing is carried out by the controller. The controller has the right to entrust the processing of personal data to a processor in the Czech Republic or Poland, who provides sufficient and credible guarantees regarding the technical and organizational security of the protection of the aforementioned personal data. The processing of the aforementioned personal data takes place in technically and physically secured electronic information systems.

Data Transfer for the Purpose of Publishing Reviews in Partner Stores

For the purpose of displaying customer reviews on products offered within the stores table4u.pl, table4u.cz, table4u.sk, woodive.store and other partner e-shops offering identical assortment (listed in the General Terms and Conditions), personal data may be transferred between individual stores operated by the controller and the company PROFORTI sp. z o.o., with its registered office at: ul. Adm. Józefa Unruga 46, 60-480 Poznań, Poland, entered in the commercial register under KRS number: 0000836835, NIP: 7831814973.

Data transfer occurs exclusively to the necessary extent, and only for the purpose of ensuring the display of verified and trustworthy reviews related to specific products in different versions of online stores. Such transferred data may include the content of the consumer review and the customer's name, if displayed with the review. The legal basis for this processing is the legitimate interest of the controller within the meaning of Article 6(1)(f) of the GDPR, consisting in ensuring transparent product information.

Data transfer takes place with maximum care and in accordance with applicable personal data protection regulations, including the GDPR. The controller applies appropriate technical and organizational measures to ensure the security and confidentiality of personal data.

Your Rights

In accordance with the regulation, you have the right to:

  • Access personal data;

  • Rectification of personal data;

  • Erasure of personal data (right to be forgotten);

  • Restriction of processing;

  • Data portability;

  • Object to processing, including profiling;

  • Withdraw consent to the processing of personal data, if processing is carried out on its basis;

  • Lodge a complaint with a supervisory authority.

CONTACT DETAILS OF THE SUPERVISORY AUTHORITY

In case of doubts about compliance with obligations related to personal data processing, a complaint can also be lodged with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, email: [email protected], website: https://www.uoou.cz.

Cookies

Our websites use so-called cookies for their operation.

What are cookies?

To improve user comfort for visitors and users of our websites and to ensure other tasks, we use cookie technology („cookies”). Cookies are miniature files that your browser stores on your computer when you access a website that uses this technology. Among other things, cookies allow the website operator to distinguish you from other visitors and users of its websites.

For more detailed information, please use your browser's help. If your browser allows the use of cookies, we will assume that you agree to the use of standard cookies by our server.

What types of Cookies exist?

Generally, Cookies, or temporary files stored in the browser, can be divided into two types. Those that are stored only for a short time and on the website or e-shop serve to facilitate its use (e.g., remembering items placed in the cart, visited products, closing pop-up windows, etc.). These temporary cookies allow information to be stored when moving from one web page to another, thus eliminating the need to re-enter certain data.

These cookies help to identify your computer when you revisit our websites. However, they do not allow us to identify you as a specific person.

Long-term cookie files allow us to better personalize our pages and offer you relevant content or advertising. The collected data is completely anonymous and we cannot link it to any other data.

For what purpose do we use Cookies?

Storing data about choices (or selections) made by visitors and users of websites, such as language or region selection, etc. („functional cookies”),

collecting information about how visitors and users of websites use the pages, such as which websites are visited most frequently. These cookies are primarily used to improve the functionality of future versions of websites („analytical cookies”),

advertising and marketing purposes; these cookies are primarily used to ensure a personal (or personalized) approach in the field of advertising and marketing, their primary use is for displaying relevant advertising („marketing cookies”). For this type of advertising, we use the services listed below, within which users are segmented based on common characteristics. This data cannot be linked to a specific person.

We want to offer you the best possible service, to understand what you need and what you are looking for.

For this reason, we transfer traffic data in a completely anonymized way to Google Analytics, Google Tag Manager, and Facebook Pixel.

For monitoring order quality and independent reviews, we transfer basic order data

How to deactivate or delete Cookies?

If you do not want to use cookies or wish to delete their content that websites have stored about your visits to various websites and portals, you can use the instructions for the most commonly used browsers below:

  1. Chrome: support.google.com

  2. Opera: help.opera.com

  3. Firefox: support.mozilla.org

  4. MSIE: windows.microsoft.com

  5. Safari: support.apple.com

  6. Edge: support.microsoft.com

Final Provisions

The controller declares that it has adopted all appropriate technical and organizational measures to secure personal data. The processing of personal data will be carried out according to the principles set out in applicable legal regulations, especially according to Articles 5, 6, 25, and 32 of the GDPR.

The controller declares that only persons authorized by it have access to personal data.