Privacy Policy

Privacy and Personal Data Processing Policy

1. General Provisions

This Privacy and Personal Data Processing Policy (the “Policy”) sets out the rules governing the processing and protection of personal data of users of the DEKEN website, which is owned and operated by TEQTUM EUROPE Sp. z o.o. (the “Company”).

Data Controller:
TEQTUM EUROPE Sp. z o.o.
KRS: 0000960373
NIP: 1133053409
Registered address: ul. Lubna 2-107, 00-460 Warsaw, Poland

The Company processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, or GDPR), as well as other applicable laws and regulations of the European Union and the Republic of Poland concerning the protection of personal data.

This Policy applies to all personal data obtained by the Company through the DEKEN website and in the course of interactions with users by email, telephone, WhatsApp, contact forms and other means of electronic communication.

The purpose of this Policy is to ensure that personal data is processed lawfully, fairly and transparently and that the rights and freedoms of data subjects are protected.

2. Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• Personal Data – any information relating directly or indirectly to an identified or identifiable natural person.
• Processing – any operation or set of operations performed on personal data, including collection, recording, organisation, storage, alteration, use, disclosure, restriction, erasure and destruction.
• Automated Processing – the processing of personal data by automated means.
• Data Subject – the natural person to whom the personal data relates.
• Data Controller (the Company) – TEQTUM EUROPE Sp. z o.o., which independently determines the purposes and means of processing personal data.
• Website – the DEKEN website available under the relevant domain name, including all of its pages, services and functionality.
• Cookies – small text files stored on a User’s device when the Website is visited and used in accordance with the Cookie Policy.
• User – any natural person who visits the Website or interacts with the Company by email, telephone, WhatsApp, social media, contact forms or other means of electronic communication.

3. Principal Rights and Obligations of the Company

The Company is entitled to:

• obtain personal data directly from data subjects;
• process personal data to the extent necessary to achieve the purposes set out in this Policy;
• engage third parties to process personal data in the cases and on the terms permitted by applicable law;
• otherwise use personal data where permitted by applicable law.

The Company shall:

• process personal data lawfully, fairly and transparently;
• implement appropriate organisational and technical measures to ensure the security of personal data;
• prevent unauthorised access to personal data;
• provide data subjects with information about the processing of their personal data where required by law;
• handle requests from data subjects in accordance with the procedure and within the time limits prescribed by applicable law;
• ensure that this Policy is freely accessible by publishing it on the Website.

4. Rights of Data Subjects

A data subject has the right to:

• obtain information about the processing of their personal data;
• obtain access to their personal data;
• request the rectification of inaccurate or incomplete personal data;
• request the erasure of personal data where provided for by applicable law;
• request restriction of the processing of personal data;
• object to the processing of personal data where provided for by applicable law;
• withdraw consent to the processing of personal data at any time where the processing is based on consent;
• receive their personal data in a structured, commonly used and machine-readable format where provided for by law;
• lodge a complaint with the competent data protection authority if they believe that their personal data is being processed in breach of applicable law.

5. Principles of Personal Data Processing

The Company processes personal data in accordance with the following principles:

• lawfulness, fairness and transparency;
• collection and processing only for specified, explicit and legitimate purposes;
• data minimisation;
• accuracy, currency and adequacy of personal data;
• storage limitation, so that personal data is retained only for as long as necessary to achieve the purposes of processing or as required by applicable law;
• confidentiality and security of personal data;
• implementation of appropriate organisational and technical safeguards against unlawful access, alteration, disclosure, destruction or loss.

6. Purposes of Personal Data Processing

6.1. The Company processes personal data for the following purposes:

• handling enquiries and requests submitted through the Website;
• providing information about products, services and terms of cooperation;
• preparing quotations and commercial proposals;
• processing requests for product samples, catalogues, technical documentation and other information materials;
• providing advice to Users on products and cooperation opportunities;
• entering into, performing and administering contracts;
• processing orders and arranging product deliveries;
• registering and processing applications for training programmes, seminars, presentations, exhibitions and other Company events;
• communicating with customers, prospective customers, dealers, distributors and other business partners;
• maintaining customer databases, handling enquiries and managing customer relationships through CRM systems and other Company information systems;
• sending notifications related to the handling of enquiries, performance of contracts or provision of services;
• sending informational, advertising and marketing materials, Company news, event invitations and other communications where the User has given the required consent or where another lawful basis applies under applicable law;
• analysing the use of the Website, improving customer service, and enhancing the Website and the services provided;
• complying with obligations imposed by applicable law.

6.2. The Company may process the following categories of personal data:

• first name and surname;
• company name;
• job title or position;
• email address;
• telephone number;
• country and city;
• information entered by the User in contact forms, applications and other forms available on the Website;
• the content of messages sent by the User;
• other information voluntarily provided by the User when interacting with the Company;
• technical data collected automatically when the Website is used, including IP address, device type, browser type, operating system information, details of pages visited, cookies and similar technologies.

6.3. The Company may communicate with Users through:

• email;
• telephone;
• WhatsApp;
• contact forms available on the Website;
• social media;
• other means of electronic communication.

6.4. The Company may perform the following operations on personal data:

• collection;
• recording;
• organisation;
• aggregation;
• storage;
• updating or alteration;
• use;
• disclosure or transfer where permitted by applicable law or necessary to achieve the purposes of processing;
• restriction of processing;
• anonymisation;
• erasure;
• destruction.

7. Legal Bases for Personal Data Processing

7.1. The Company processes personal data only where one or more lawful bases apply under applicable data protection law, including the GDPR.

7.2. Personal data may be processed on the following legal bases:

• the data subject’s consent;
• the necessity of processing for the performance of a contract or in order to take steps at the request of the data subject before entering into a contract;
• compliance with a legal obligation to which the Company is subject;
• the legitimate interests pursued by the Company or by a third party, provided that such interests are not overridden by the rights and freedoms of the data subject;
• any other legal basis permitted by applicable law.

7.3. Where processing is based on consent, the data subject may withdraw that consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out before the withdrawal.

8. Processing, Retention and Disclosure of Personal Data

8.1. The Company implements appropriate organisational and technical measures to ensure the security of personal data and to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

8.2. Access to personal data is granted only to those employees, representatives and authorised persons who require such access to perform their duties or provide services to the Company.

8.3. The Company may engage third parties to process personal data on its behalf (data processors), including providers of IT services, CRM systems, cloud services, hosting, analytics, marketing and other services, provided that applicable legal requirements are met and an appropriate level of data protection is ensured.

8.4. Personal data may be disclosed to public authorities, courts, law-enforcement bodies or other persons only where such disclosure is required or permitted by applicable law.

8.5. The Company retains personal data only for as long as necessary to achieve the purposes for which it is processed or to comply with applicable legal requirements.

8.6. Once the purposes of processing have been achieved, or where no lawful basis for further retention exists, personal data shall be erased, anonymised or destroyed in accordance with the Company’s internal procedures and applicable law.

9. International Transfers of Personal Data

9.1. In connection with its international business activities, the Company may transfer personal data across national borders.

9.2. Any such transfer shall be made only where a lawful basis exists and in compliance with the GDPR and other applicable data protection laws.

9.3. Where personal data is transferred to a country that has not been recognised by the European Commission as providing an adequate level of protection, the Company shall implement appropriate safeguards required by law, including the European Commission’s Standard Contractual Clauses, other legally recognised transfer mechanisms, or the data subject’s explicit consent where such consent is required and legally valid.

10. Confidentiality and Security of Personal Data

10.1. The Company treats the confidentiality and security of personal data as a key principle of its operations.

10.2. The Company implements appropriate organisational, administrative and technical measures to prevent unauthorised access, alteration, disclosure, restriction, destruction or other unlawful processing of personal data.

10.3. Such measures may include, in particular:

• restricting access to personal data;
• using safeguards for information systems;
• applying up-to-date information security methods;
• regularly reviewing and improving information security measures;
• providing staff training on personal data protection where appropriate.

10.4. Despite the security measures implemented by the Company, no transmission of information over the Internet can be guaranteed to be completely secure. Users are also responsible for taking reasonable steps to protect the devices and access credentials they use.

11. Final Provisions

11.1. The Company may amend this Policy at any time.

11.2. Any revised version of this Policy shall take effect upon its publication on the Website, unless a different effective date is stated in the revised version.

11.3. The current version of this Policy is published on the Website and is available for review at any time.

11.4. Questions concerning the processing of personal data or the exercise of data subject rights may be addressed to the Company at: sale@deken-pvc.com.

11.5. Any matters not expressly covered by this Policy shall be governed by Regulation (EU) 2016/679 (GDPR), the laws of the Republic of Poland and other applicable laws and regulations concerning the protection of personal data.