Privacy Policy

I. GENERAL INFORMATION

  1. This document sets out the privacy policy on the cezar.eu website (hereinafter referred to as the "Website") and is intended to inform you about how the Website uses your personal data, in respect of which we meet all the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR), the Personal Data Protection Act of 10 May 2018 and the Act of 18 July 2002 on the provision of electronic services.

  2. The data controller on the Website is Dariusz Bogdan Niewiński, running a business under the name CEZAR Przedsiębiorstwo Produkcyjne Dariusz Bogdan Niewiński (address: ul. Strefowa 2 19-300 Ełk), NIP 5420011579, REGON 050126950, e-mail address: cezar@cezar.eu and contact telephone number: +48 87 620 99 00. The data protection officer at CEZAR is Dr. Andrzej Marek Kisiel, e-mail: iodo@cezar.eu , or in writing to the following address: Przedsiębiorstwo Produkcyjne
    Dariusz Bogdan Niewiński, ul. Strefowa 2, 19-300 Ełk.

II. PERSONAL DATA – TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION


  1. The Administrator processes your personal data of the Website in the event of :

  1. use the Website for the purpose of providing services electronically in the scope of making the content collected on the Website available to you pursuant to Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject before concluding a contract)

  2. registering an Account on the Website in order to create an individual Customer Account and manage this Account pursuant to Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject before concluding a contract),

  3. placing an order on the Website in order to conclude a sales contract pursuant to Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject before concluding a contract),

  4. using the Contact Form service on the Website, in order to identify the sender and process the inquiry sent via the form provided pursuant to Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before concluding a contract), in the scope of data provided optionally, the legal basis for processing is consent (Article 6(1)(a) of the GDPR),

  5. taking part in competitions, promotional campaigns and loyalty programs (the legal basis for processing is consent - Article 6(1)(a) of the GDPR),

  6. using web push notifications (the legal basis for processing is consent - Article 6 paragraph 1 letter a of the GDPR),

  7. subscribing to the Newsletter for the purpose of sending commercial information electronically and via text message pursuant to Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller on the basis of consent obtained pursuant to other provisions),

  8. when processing is necessary to comply with a legal obligation incumbent on the Controller - Article 6(1)(c) of the GDPR,

  9. when processing is necessary for the purposes of the legitimate interests pursued by the Controller, consisting in taking care of the interests and good image of the Controller pursuant to Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party),

  10. when processing is necessary for the purposes of the legitimate interests pursued by the Controller, consisting in conducting analyses of User activity on the Website in order to improve the functionalities used pursuant to Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party).

  1. Type of personal data processed:

  1. When registering an Account on the Website and placing an Order on the Website, the Customer provides:

  • Name and surname,

  • Address and/or delivery address

  • Email address

  • Phone number

  • Other

When registering an Account on the Website, the Customer will receive a one-time access code to the email address provided, which will allow him to log in to the Account.

  1. In the case of subscribing to the Newsletter and in the case of using the Contact Form service on the Website, the Customer provides:

  • Name,

  • Email address.

  1. In the case of entrepreneurs, the above scope of data is extended to include the entrepreneur's company name and the Tax Identification Number.

  2. The provision of your personal data is entirely voluntary, with the proviso that failure to provide the data specified in the registration form on the Website or the order form on the Website will prevent you from registering and creating a Customer Account and placing an order, respectively.

  3. When using the Website, additional information may be downloaded, in particular the IP address assigned to your computer or the external IP address of your Internet provider, domain name, browser type, access time, and operating system type.


III. PERSONAL DATA STORAGE PERIOD


  1. If the basis for data processing is the performance of a contract, your personal data will be retained by the Controller for as long as necessary to perform the contract, and after that time for a period corresponding to the expiration of the archiving obligation arising from legal provisions, including the obligation to retain accounting documents, or the statute of limitations for any claims that may be brought by the Controller or against it. Unless otherwise provided by specific provisions, the limitation period is six years, and for claims for periodic benefits and claims related to business operations, it is three years.

  2. Where consent is the basis for data processing, your personal data will be stored by the Controller for the period necessary to use the service that involved the provision of the Client's personal data, until the consent is withdrawn, and after the consent is withdrawn, for a period corresponding to the expiration of the archiving obligation arising from legal provisions, including the obligation to retain accounting documents, or the statute of limitations for claims that the Controller may raise and that may be brought against it. Unless specific provisions provide otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business operations, it is three years.

  3. If the basis for data processing is the Controller's fulfillment of obligations specified in legal provisions, your personal data will be stored by the Controller until the Controller fulfills its obligations arising from legal provisions.

  4. If the basis for data processing is the legitimate interest of the Controller, your personal data will be stored by the Controller for the duration of such interest or until you effectively object to data processing.


IV. ENTITIES WITH WHOM THE CUSTOMER'S PERSONAL DATA WILL BE SHARED

The recipients of your personal data may be entities fulfilling and processing orders on behalf of the Administrator, including: shipping and accounting providers, goods suppliers, IT solution providers, payment processing companies, banks, marketing companies, warehousing providers, telecommunications providers, law firms, and authorized state authorities. Your personal data is not shared with other entities for commercial purposes.


V. CUSTOMER RIGHTS REGARDING PERSONAL DATA PROTECTION

1. You have the right to:

  1. request from the Administrator access to your personal data stored by the Administrator,

  2. request the Administrator to rectify your personal data stored by the Administrator if they are incorrect,

  3. request the Controller to immediately delete your personal data, provided that the conditions specified in Article 17 of the GDPR are met,

  4. request the Controller to limit the processing of your personal data, provided that the conditions specified in Article 18 of the GDPR are met,

  5. request the Controller to receive and transfer your personal data, provided that the conditions specified in Article 20 of the GDPR are met,

  6. object to the processing of your personal data, provided that the conditions set out in Article 21 of the GDPR are met,

  7. withdraw consent to the processing of your personal data at any time, if the personal data are processed on the basis of consent, without affecting the lawfulness of processing based on consent before its withdrawal,

  8. lodge a complaint against the Controller with the supervisory authority, i.e. the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, tel. 22 531 03 00.

2. You may exercise the rights indicated in paragraph 1 by submitting an appropriate declaration of intent to the Administrator:

  1. by post to the following address: Przedsiębiorstwo Produkcyjne Dariusz Bogdan Niewiński, ul. Strefowa 2, 19-300 Ełk

  2. via e-mail to the following address: iodo@cezar.eu

  1. The Administrator may use profiling on the Website for direct marketing purposes. Decisions made on this basis by the Administrator do not concern the conclusion or refusal to conclude a Sales Agreement or the ability to use Digital Services on the Website. The use of profiling on the Website may result in, for example, granting you a dedicated discount code, reminding you about unfinished purchases, sending you a Product suggestion that may suit your interests or preferences, or offering better terms compared to the standard offer of the Website. Despite profiling, you are free to decide whether you wish to use the discount or other better terms received in this way and make a purchase on the Website.

  2. Profiling on the Website involves the automatic analysis or prediction of your behavior on the Website, for example, by adding a specific Product to your cart, viewing a specific Product page on the Website, or analyzing your previous purchase history on the Website. Profiling requires the Administrator to have your personal data so that they can then send you, for example, a discount code.

  3. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar manner, unless the grounds set out in Article 22 of the GDPR are met.

  4. Your personal data will not be transferred to a third country.


VI. PERSONAL DATA BREACH

In the event of a personal data breach, the Controller shall, without undue delay and no later than 72 hours after becoming aware of the breach, notify the supervisory authority (the President of the Personal Data Protection Office), unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons. The Controller shall include an explanation of the reasons for the delay in reporting the breach to the supervisory authority after 72 hours. If the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the Controller shall notify the data subject of the breach without undue delay.


VII. COOKIES

  1. We use cookies on our Website. They are stored on the end device of the Website visitor, if the web browser allows it. Cookies typically contain the name of the domain from which they originate, their expiration date, and an individual, randomly selected identifying number. Information collected using cookies helps the Administrator tailor the products offered to your individual preferences and actual needs. They also enable the development of general statistics on visits to the products presented on the Website.

  2. Cookies used by the Website can be divided according to the following criteria:

    1. due to their supplier:

      1. own (created by the Administrator's Website),

      2. belonging to third parties/entities (other than the Administrator),

    2. due to their storage period on the device of the person visiting the Website:

      1. session (they are stored until you log out of the Website or close your web browser),

      2. persistent (they are stored for a specified period of time, defined by the parameters of each file, or until manually deleted),

    3. due to the purpose of their use:

      1. necessary (enable the proper functioning of the Website),

      2. functional (they enable the adjustment of the Website to the preferences of the website visitor),

      3. analytical and performance (collect information about how the Website is used),

      4. marketing, advertising and social media (collect information about the person visiting the Website in order to display personalized advertisements to that person and conduct other marketing activities, including on websites separate from the Website, such as social networking sites).

  3. The Administrator uses cookies to:

    1. identifying Users as logged in to the Website and showing that they are logged in (essential cookies),

    2. remembering Products added to the cart in order to place an Order (essential Cookies),

    3. remembering data from completed Order Forms, surveys or login details to the Website (necessary or functional Cookies),

    4. adapting the content of the Website to the individual preferences of the User (e.g. regarding colors, font size, page layout) and optimizing the use of the Website pages (functional cookies),

    5. keeping anonymous statistics showing how the Website is used (analytical cookies)

    6. remarketing and retargeting, i.e. research on the behaviour of visitors to the Website through anonymous analysis of their activities (e.g. repeated visits to specific pages, keywords) in order to create their profile and provide advertisements tailored to their expected interests, also when they visit other websites in the advertising network of Google Ireland Ltd. and Meta Platforms Ireland Ltd. (marketing, advertising and social media cookies)

  4. When you first visit our website, we ask you to consent to the use of optional cookies, i.e., those that are not essential for the website to function properly (by clicking the "..." box). You can also refuse to accept all optional cookies (by clicking the "..." box) or consent to the use of only specific types of cookies (by clicking the "..." box). Furthermore, you can specify the terms of use of cookies at any time using your browser settings. This means that you can partially restrict (e.g., temporarily) or completely disable the ability to save cookies. However, this may affect some of the functionality of the Website (for example, it may be impossible to complete the ordering process via the Order Form due to the Products not being saved in the shopping cart during subsequent steps of the ordering process).

  5. Your browser's cookie settings are important for consenting to the use of cookies on our website. Detailed information on changing cookie settings and deleting cookies in the most popular browsers is available in your browser's help section and on the following websites (just click the appropriate link):

    1. in Chrome

    2. in Firefox

    3. in Internet Explorer

    4. in the Opera browser

    5. in Safari browser

    6. in the Microsoft Edge browser

  6. The Administrator may use the Google Ads, Google Analytics, and Google Tag Manager services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on the Website, as well as the Meta Pixel service provided by Meta Platforms Ireland Limited. These services help the Administrator compile statistics and analyze traffic on the Website. The collected data is processed as part of these services to generate statistics that aid in the administration of the Website and the analysis of traffic on the Website. This data is aggregated. By using these services on the Website, the Administrator collects data such as the sources and means of acquiring visitors to the Website, their behavior on the Website, information about the devices and browsers they use to visit the website, IP address and domain, geographic data, demographic data (age, gender), and interests.


The privacy policy is constantly reviewed and updated as necessary.

This version of the privacy policy is effective from January 1, 2026.