Privacy Policy

I. GENERAL INFORMATION

  1. This document sets out the privacy policy of the cezar.eu website (hereinafter the “Website”) and is intended to inform you about how the Website uses your personal data, in compliance with all the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), the Act of 10 May 2018 on the Protection of Personal Data, and the Act of 18 July 2002 on Providing Services by Electronic Means.

  2. The data controller in the Website is Dariusz Bogdan Niewiński, conducting business under the name CEZAR Przedsiębiorstwo Produkcyjne Dariusz Bogdan Niewiński (address: ul. Strefowa 2, 19-300 Ełk), NIP 5420011579, REGON 050126950, email address: cezar@cezar.eu, and contact telephone number: +48 87 620 99 00. The data protection officer at the CEZAR enterprise is Dr. Andrzej Marek Kisiel, email: iodo@cezar.eu, or in writing to the address: Przedsiębiorstwo Produkcyjne
    Dariusz Bogdan Niewiński, ul. Strefowa 2, 19-300 Ełk.

II. PERSONAL DATA – TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION


  1. The controller processes your personal data on the Website in the event of:

  1. using the Website, for the purpose of providing electronic services in the field of making content collected on the Website available to you pursuant to Art. 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to the conclusion of the contract),

  2. registering an Account on the Website, for the purpose of creating an individual Customer Account and managing this Account pursuant to Art. 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to the conclusion of the contract),

  3. placing an order on the Website, for the purpose of concluding a sales contract pursuant to Art. 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to the conclusion of the contract),

  4. using the Contact Form service on the Website, for the purpose of identifying the sender and handling the inquiry sent via the provided form pursuant to Art. 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to the conclusion of the contract), in the case of optionally provided data, the legal basis for processing is consent (Art. 6(1)(a) of the GDPR),

  5. participating in competitions, promotional campaigns, and the loyalty program (the legal basis for processing is consent - Art. 6(1)(a) of the GDPR),

  6. using web push notifications (the legal basis for processing is consent - Art. 6(1)(a) of the GDPR),

  7. signing up for the Newsletter for the purpose of receiving commercial information electronically and via SMS pursuant to Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the controller's legitimate interests pursued by other means),

  8. when processing is necessary for compliance with a legal obligation to which the controller is subject - Art. 6(1)(c) of the GDPR,

  9. when processing is necessary for the controller's legitimate interests consisting of safeguarding the controller's interests and reputation pursuant to Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the controller's legitimate interests pursued by other means),

  10. when processing is necessary for the controller's legitimate interests consisting of analyzing User activity on the Website in order to improve the functionalities used pursuant to Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the controller's legitimate interests pursued by other means).

  1. Type of personal data processed:

  1. When registering an Account and placing an Order on the Website, the Customer provides:

  • First name and surname,

  • Address and/or delivery address

  • Email address

  • Telephone number

  • Other

When registering an Account on the Website, the Customer will receive a one-time access code at the provided email address, allowing them to log in to the Account.

  1. When signing up for the Newsletter and using the Contact Form service on the Website, the Customer provides:

  • First name,

  • Email address.

  1. In the case of entrepreneurs, the above scope of data is expanded to include the entrepreneur's company name and NIP.

  2. The provision of your personal data is entirely voluntary, provided that failure to provide the data specified in the Website registration form or the Website order form will prevent you from registering and creating a Customer Account and placing an order, respectively.

  3. While using the Website, additional information may be collected, in particular the IP address assigned to your computer or the external IP address of your Internet Service Provider, domain name, browser type, access time, and operating system type.


III. PERSONAL DATA RETENTION PERIOD


  1. If the legal basis for processing is the performance of a contract, your personal data will be retained by the controller for as long as is necessary to perform the contract, and thereafter for the period corresponding to the expiration of the statutory archiving obligation, including the obligation to retain accounting documents or the statute of limitations for any claims that the controller may bring or against which claims may be brought. Unless otherwise provided by special provisions, the limitation period is six years, and for claims for periodic payments and claims related to the conduct of business, it is three years.

  2. If the legal basis for processing is consent, your personal data will be retained by the controller for the period necessary to use the service in the course of which the Customer's personal data was made available, until consent is withdrawn, and thereafter for the period corresponding to the expiration of the statutory archiving obligation, including the obligation to retain accounting documents or the statute of limitations for any claims that the controller may bring or against which claims may be brought. Unless otherwise provided by special provisions, the limitation period is six years, and for claims for periodic payments and claims related to the conduct of business, it is three years.

  3. If the legal basis for processing is the controller's compliance with legal obligations, your personal data will be retained by the controller until it has fulfilled its legal obligations.

  4. If the legal basis for processing is the controller's legitimate interests, your personal data will be retained by the controller for the duration of such interests or until you submit a valid objection to the processing of the data.


IV. ENTITIES TO WHICH THE CUSTOMER'S PERSONAL DATA MAY BE DISCLOSED

Recipients of your personal data may be entities that process orders on behalf of the controller and provide related services, including: shipping and accounting service providers, goods suppliers, IT solution providers, payment processing companies, banks, marketing service providers, warehouse service providers, telecommunications service providers, law firms, and authorized state authorities. Your personal data is not disclosed to other entities for commercial purposes.


V. CUSTOMER RIGHTS UNDER DATA PROTECTION

1. You have the right to:

  1. request access to your personal data stored by the controller,

  2. request the controller to rectify your personal data stored by the controller if it is incorrect,

  3. request the controller to erase your personal data without undue delay, provided that the grounds specified in Art. 17 of the GDPR are met,

  4. request the controller to restrict the processing of your personal data, provided that the grounds specified in Art. 18 of the GDPR are met,

  5. request to receive and transfer your personal data, provided that the grounds specified in Art. 20 of the GDPR are met,

  6. object to the processing of your personal data, provided that the grounds specified in Art. 21 of the GDPR are met,

  7. withdraw consent to the processing of your personal data at any time if the data is processed on the basis of consent, without affecting the lawfulness of the processing carried out before the withdrawal of consent,

  8. lodge a complaint against the controller with the supervisory authority, i.e., the President of the Office for Personal Data Protection (PUODO), ul. Stawki 2, 00-193 Warsaw, tel. 22 531 03 00.

2. You may exercise the rights specified in paragraph 1 by submitting the appropriate declaration of intent to the controller:

  1. by post to: Przedsiębiorstwo Produkcyjne Dariusz Bogdan Niewiński, ul. Strefowa 2, 19-300 Ełk

  2. by email to: iodo@cezar.eu

  1. The controller may use profiling on the Website for direct marketing purposes, provided that the decisions made by the controller based on profiling do not concern the conclusion or refusal to conclude a Sales Contract or the ability to use Digital Services on the Website. The use of profiling on the Website may result, for example, in you being offered a dedicated discount code, being reminded of unfinished purchases, being sent a Product proposal that may match your interests or preferences, or being offered better terms than the Website's standard offer. Despite profiling, you freely decide whether you wish to use the discount or other better terms received in this way and make a purchase on the Website.

  2. Profiling on the Website involves the automatic analysis or prediction of your behavior on the Website, for example by adding a specific Product to the cart, viewing the page of a specific Product on the Website, or analyzing your previous purchase history on the Website. Profiling requires the controller to have your personal data so that it can subsequently send you, for example, a discount code.

  3. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning that person or similarly significantly affects that person, unless the grounds specified in Art. 22 of the GDPR apply.

  4. Your personal data will not be transferred to a third country.


VI. PERSONAL DATA BREACH

In the event of a personal data breach, the controller shall notify the supervisory authority – (the President of the Office for Personal Data Protection) – without undue delay and, where feasible, not later than 72 hours after becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons. When notifying the supervisory authority after the 72-hour period, the controller shall provide reasons for the delay. If the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall communicate the breach to the data subject without undue delay.


VII. COOKIES 

  1. We use cookies on our Website. They are stored on the end-user device of the person visiting the Website, provided that the web browser allows this. Cookies usually contain the name of the domain from which they originate, their "expiration time", and a unique, randomly selected identifier. The information collected using cookies helps the controller tailor the products offered to your individual preferences and actual needs. It also makes it possible to develop general statistics on visits to the products presented on the Website.

  2. Cookies used by the Website can be divided according to the following criteria:

    1. by their provider:

      1. first-party (created by the controller's Website),

      2. third-party (belonging to persons/entities other than the controller),

    2. by their retention period on the device of the person visiting the Website:

      1. session (retained until you log out of the Website or close the web browser),

      2. persistent (retained for a specified period defined by the parameters of each cookie or until manually deleted),

    3. by their purpose:

      1. strictly necessary (enabling the Website to function properly),

      2. functional (enabling the Website to be tailored to the preferences of the person visiting the Website),

      3. analytical and performance (collecting information about how the Website is used),

      4. marketing, advertising, and social media (collecting information about the person visiting the Website to display personalized ads and conduct other marketing activities, including on websites other than the Website, such as social media platforms).

  3. The controller uses cookies for:

    1. identifying Users as logged in to the Website and showing that they are logged in (strictly necessary cookies),

    2. remembering Products added to the cart for placing an Order (strictly necessary cookies),

    3. remembering data from completed Order Forms, surveys, or Website login data (strictly necessary or functional cookies),

    4. customizing the content of the Website to the User's individual preferences (e.g. regarding colors, font size, page layout) and optimizing the use of the Website's pages (functional cookies),

    5. keeping anonymous statistics showing how the Website's pages are used (analytical cookies)

    6. remarketing and retargeting, i.e. studying the behavior of visitors to the Website through an anonymous analysis of their actions (e.g. repeated visits to specific pages, keywords) in order to create their profile and deliver ads tailored to their predicted interests, also when they visit other websites in the Google Ireland Ltd. and Meta Platforms Ireland Ltd. advertising network (marketing, advertising and social media cookies)

  4. On your first visit to our Website, we ask you to consent to the use of optional cookies, i.e. those that are not necessary for the proper functioning of the website (by clicking the "..." field). It is also possible to refuse consent to the use of all optional cookies (by clicking the field: "...") or to consent to the use of only specific types of cookies (by clicking the "..." field). Furthermore, you can specify the terms of use of Cookies at any time using your own browser settings. This means that you can partially restrict (e.g. temporarily) or completely disable the ability to save Cookies – in the latter case, however, this may affect some functionalities of the Website (it may become impossible, among other things, to complete the Order path through the Order Form due to Products not being remembered in the cart during the subsequent steps of placing the Order).

  5. Browser settings regarding Cookies are important from the perspective of consent to the use of Cookies by our Website. Detailed information on changing cookie settings and deleting them yourself in the most popular web browsers is available in the browser's help section and on the pages below (simply click the relevant link):

    1. in the Chrome browser

    2. in the Firefox browser

    3. in the Internet Explorer browser

    4. in the Opera browser

    5. in the Safari browser

    6. in the Microsoft Edge browser

  6. The Administrator may use Google Ads, Google Analytics, Google Tag Manager services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and the Meta Pixel service provided by Meta Platforms Ireland Limited on the Website. These services help the Administrator keep statistics and analyze traffic on the Website. The collected data is processed within the framework of the above services to generate statistics useful for administering the Website and analyzing traffic on the Website. This data is aggregated in nature. Using the above services on the Website, the Administrator collects data such as sources and mediums of acquiring visitors to the Website as well as how they behave on the Website's pages, information about devices and browsers from which they visit the page, IP and domain, geographic and demographic data (age, gender) and interests.

VIII. REVIEWS IN THE ONLINE STORE 

1.1.The Online Store Customer has the option to voluntarily and free of charge post a review regarding purchases made in the Online Store. The subject of the review may also be an assessment, photo or review of the product purchased in the Online Store.
1.2. After purchases are made in the Online Store, the Seller transfers the data necessary to create an email invitation to the company handling the survey process.The sending of surveys and the process of collecting reviews in forms is fully handled by TrustMate SA with its registered office at Bartoszowicka 3, 51-641 Wrocław. TrustMate SA sends an email message to the Customer requesting a review and a link to an online form allowing it to be posted – the online form allows answering the Seller's questions regarding purchases, assessing them, adding your own description regarding the review, and adding a photo of the purchased product. In the event that a review is not posted after receiving the first invitation to post a review, TrustMate may resend the invitation.
1.3.A review may only be posted by a Customer who has made purchases in the Seller's Online Store.
1.4.Reviews posted by the Customer are published by the Seller in the Online Store and on the TrustMate.io profile.
1.5.Posting a review may not be used by the Customer for unlawful activities, in particular for activities constituting an act of unfair competition against the Seller, or activities violating the personal rights, intellectual property rights, or other rights of the Seller or third parties.
1.6.A review may only be posted for products actually purchased in the Seller's Online Store. It is prohibited to enter into fictitious/sham sales agreements for the purpose of posting a review. The author of the review may not be the Seller themselves or their employees, regardless of the basis of employment.
1.7.A posted review may be removed at any time by its author.

The privacy policy is continuously verified and updated as necessary.

This version of the privacy policy is effective from 01.01.2026.