The owner and administrator of the website www.swissporTON.com (hereinafter referred to as the Website) is CREATON Polska Sp. z o.o., with its registered office in Olkusz, address: 32-300 Olkusz, Wspólna Street 6, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for Kraków-Śródmieście in Kraków, XIIth Commercial Division, under KRS number 0000114321, with share capital of PLN 135,900,000.00, Tax Identification Number (NIP) 852-20-97-221, and BDO registry number 000003656 (hereinafter referred to as the Data Controller).
This document also explains why, as the Data Controller, we collect and process personal data, on what legal basis, how the personal data provided by the User to the Data Controller is processed, and what personal data we use during the User's visit to the Website.
By using the Website, you accept the principles set out in the Privacy Policy.
Our Company places particular importance on protecting the privacy of Website Users and the security of processing their personal data, as well as personal data we have collected and processed through means other than the Website.
We make every effort to ensure that the use and storage of personal data is in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the GDPR) and other applicable provisions of Polish law.
1. Security measures and confidentiality
1. The Controller has implemented technical and organizational measures in accordance with standard industry practices to ensure an adequate level of security for the personal data being processed.
2. The Controller uses technical and organizational security measures to protect Users' personal data against destruction, loss, modification, or unauthorized disclosure and access.
3. Communication between Users' computers and the Website server is encrypted using the SSL (Secure Socket Layer) protocol during personal data transmission, and the databases are protected against unauthorized access.
4. However, it should be noted that security requires effort on the part of all parties involved. The Controller therefore encourages Users to participate in these activities by taking appropriate security measures, including the use of strong passwords and maintaining the confidentiality of all Usernames and passwords (where applicable).
2. Information regarding personal data
1. Administrator and contact details.
The controller of the personal data you provide to us is CREATON Polska sp. z o. o., with its registered office in Olkusz (32-300), at ul. Wspólna 6.
For all matters related to personal data, you can contact us by email: [email protected].
2. Rights of the person to whom personal data relates.
Every person whose data we hold has the following rights:
- the right to access their personal data, meaning the right to obtain confirmation as to whether the Controller is processing the data and information regarding such processing;
- the right to rectify the data if the data we process is incorrect or incomplete;
- the right to request erasure of the data, if this is legally justified;
- the right to request restriction of data processing, if this is legally justified;
- the right to data portability, meaning the right to receive the personal data provided to us and to transmit it to another controller, if this is legally justified;
- the right to object to data processing based on the Controller's legitimate interest or to processing for direct marketing purposes;
- the right to lodge a complaint with a supervisory authority (in Poland, this is the President of the Personal Data Protection Office) if the User believes that we are processing their data in violation of the law;
- the right to withdraw consent at any time if the data processing is based on consent, which, however, does not affect the lawfulness of processing based on consent before its withdrawal.
The Controller may request that any person wishing to exercise their rights provide documents confirming their identity in order to verify their eligibility.
To exercise these rights, please contact the following email address: [email protected] or in writing to the Controller's registered office.
3. What data we process, on what basis and for what purpose.
Below we indicate the most common purposes and bases for our processing of personal data:
1) via the Website:
- Personal data (e.g., name and surname, postal address, telephone number, email address) are collected only if you provide this data to us and consent to its processing (e.g., by completing a contact form or guarantee form). This data will be processed only for the purpose for which you have consented. Information marked with "*" must be provided to enable the Controller to fulfill the purposes for which the data was provided. Personal data is collected directly from the User and includes: name and surname, home or work address, personal or work email address, personal or work mobile phone number or other telephone number, message, or other personal data or contact information that the User wishes to provide to us;
- Through cookies, to improve the use of the Website and analyze its use – more information on which is available below in section IV. Cookie Policy.
2) via social media, i.e. Facebook, Twitter, Instagram, YouTube:
- Personal data is collected only if you provide this data to us and consent to its processing for the purpose of the activity, e.g., a contest or promotion. The following information may be collected: name and surname, date of birth or age, citizenship, home or work address, personal or business email address, personal or business mobile phone number or other telephone number, activity, position, title, message, or other personal data or contact information provided to the Administrator by the User. The Administrator may also ask the User for comments, suggestions, or other information related to the Administrator's social media platform, products, brands, or company. The Administrator may require other specific types of information in connection with contests, promotions, or other marketing activities, including sending text, video, or audio content.
3) as part of our business activities, we also process data in accordance with Article 6(1)(b) and (c) of the GDPR:
- in relation to entities with which we cooperate or intend to cooperate in order to take steps prior to entering into a contract at the request of the data subject or for the performance of a contract to which the data subject is a party;
- to comply with a legal obligation incumbent on the Controller (e.g., tax and accounting obligations).
4) on the basis of the legitimate interest of the Controller pursuant to Article 6 paragraph 1 letter f) of the GDPR, we also process personal data for the purpose of:
- marketing our own products or services,
- organizing competitions and other promotional and marketing campaigns,
- conducting training courses as part of the Training Academy,
- pursuing or defending against claims;
- analyzing the quality of the services we provide.
We hereby inform you that our direct marketing may be conducted using electronic means of communication (e.g., SMS, MMS, email) and telecommunications terminal devices (e.g., telephone, tablet).
Sending Users emails or other marketing information regarding selected brands, affiliates, and/or partners of the Controller with whom the Controller conducts joint promotions or programs, and in which the User may be interested via email/text messages, is conducted subject to the User having provided the Controller with their express prior consent to such action, if required by applicable law.
The Controller may not use the User's personal data for new purposes not provided for in this Policy, except where appropriate statutory authorizations apply. In any case, before using personal data for other purposes, the Controller is obligated to inform the User of such changes in this Policy or otherwise. In the case of actions based on the User's consent, the Controller will not process the User's personal data for new purposes without first obtaining the User's consent.
4. Direct marketing.
The Controller will not use the User's personal data for direct marketing purposes without the User's prior express consent, except where permitted by applicable law.
At any time, the User may decide not to receive a given category of commercial or promotional information from the Controller. The User may, free of charge and without having to provide justification, opt out of any direct marketing campaigns they choose and object to the further processing of their personal data for such purposes by sending an email to the Controller at [email protected], specifying "opt-out" in the subject line of the User's email. The User may also use the opt-out procedure included in promotional emails received from the Controller by clicking on the appropriate link contained in the email.
Please note that opting out of receiving promotional emails from the Controller will not prevent the User from receiving information related to any agreement the User has entered into with the Controller.
5. Categories of data recipients, i.e. entities processing personal data on behalf of the Controller and transferring data to third countries.
The Controller will not share Users' personal data with third parties and will not publicly disclose personal data unless such transfer is based on the User's specific consent, necessary for the performance of a contract concluded between the User and the Controller, or if such transfer of personal data is otherwise permitted or required by law or by order of an administrative or judicial authority.
In connection with our business activities, the data entrusted to us, depending on the purpose of entrustment, may be transferred by us to the following groups of entities cooperating with us:
- business partners, who are distributors of our products;
- roofing companies or other contractors who carry out work on our behalf as part of the complaints being processed;
- postal operators, couriers, carriers, forwarding and transport companies;
- entities providing us with technical services (e.g., developing and maintaining IT systems, websites, software);
- marketing companies that create advertising materials for us and deliver them to our customers or those interested in receiving samples of our products,
- marketing companies that support us in promoting our products;
- telecommunications companies, debt collection agencies, banks, and business information offices,
- customer opinion research companies,
- companies that archive documents for us.
The Controller does not transfer personal data outside the European Economic Area. If the Controller needs to transfer personal data to processors or third parties located outside the European Economic Area in countries not recognized by the European Commission as ensuring an adequate level of personal data protection, the Controller will ensure that appropriate measures are implemented in accordance with applicable national and European data protection laws. You can obtain a copy of these safeguards or information regarding where such copies have been made available by sending us an email to: [email protected]
6. Period of storage of personal data.
In fulfilling our information obligations related to the collection and processing of personal data, we will endeavor to inform you of the period for which we intend to store the data you entrust us with. The Controller will store your personal data only for as long as necessary to achieve the purposes described above or as required by law, taking into account the following criteria:
1) Personal data processed for the purpose of concluding or performing a contract and fulfilling the Controller's legal obligation will be stored for the duration of the contract, and after its expiry for the period necessary for:
- post-sales service (e.g., handling complaints);
- pursuing or defending against potential claims;
- fulfilling our legal obligations (e.g., tax or accounting);
2) data of individuals who completed the warranty form or submitted a complaint, for the duration of the warranty period, and after its expiry for the period necessary for:
- pursuing or defending against potential claims;
- fulfilling our legal obligations (e.g., tax or accounting);
3) personal data processed for the purposes of direct marketing of own products based on a legitimate interest will be processed until the data subject objects;
4) personal data processed on the basis of separate consent will be stored until such consent is withdrawn.
7. Special personal data.
The Administrator will not collect or process special categories of personal data relating to the User. Special categories of personal data include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or other similar beliefs, trade union membership, genetic data, biometric data enabling the unique identification of an individual, information about health, sex life, or sexual orientation.
Cookie Policy
Cookies are small text files placed on a user's computer or other device by websites the user visits. They are widely used to improve the performance or operation of websites, as well as to provide information to the owners of the website.
1. General information about the cookies used
Our Website uses cookies to store your language preferences, to analyze your use of the Website within Google Analytics, and to activate social interaction features with supported external social media sites. When you first visit our Website, the home page will display privacy information and appropriate cookie consent terms via a "cookie banner."
If you continue to actively use the Website and do not actively object to the use of cookies, you consent to the use of cookies, and this consent will be stored in your browser so that this information does not have to be repeated on every page of our Website. If you do not consent in your browser (e.g., if you have deleted your cookies), the "cookie banner" with data protection information will reappear the next time you visit the Website. The Administrator may install and use certain technically necessary cookies, which do not require your prior consent. The Administrator may also use session cookies, which are automatically deleted at the end of the User's session and which also do not require the User's prior consent. Other cookies (such as cookies that improve navigation by recording certain data so the User does not have to re-enter such data each time they connect and customize the Site's content to the User's preferences) may be installed and used based on the User's consent. Below, we provide all the relevant information about the cookies used by the Site:
We use cookies to:
a) adapting the website content to the User's preferences and optimizing its use - these files allow for the recognition of the User's device and the appropriate display of the website, tailored to the individual needs of the User;
b) creating statistics that help understand how Users use the Website, which allows for the improvement of the Website's structure and content;
c) measuring User traffic on the Website using Google Analytics.
We use the following basic types of cookies on the Website:
a) Marketing cookies – these are used by advertising agencies to display advertisements tailored to your interests;
b) Functional cookies – these allow us to analyze how the Website is used to improve its performance and functionality;
c) Required cookies – these are necessary to provide the basic functionality of the Website;
d) Social media cookies – these allow you to connect to social media sites and share content from our Website on them.
As part of the Website, we use the web analytics mechanisms of Google Inc. ("Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA"): Google Analytics, Google Double Click, and Google Tag Manager. Google Analytics, Google Double Click, and Google Tag Manager use cookies to analyze how websites are used. Information collected by cookies is transferred to Google servers located in the USA and archived.
The Website also uses plugins for the social networking sites Facebook, Instagram, YouTube, and LinkedIn. Plugins for individual websites are marked with their logos. Clicking on a plugin for a given website directly connects you to our profile on that website's server. Depending on the solutions used by the website, it may then obtain information that you visited the Website from your IP address. If you visit the Website while logged in, the website will record information about your visit, and even if you are not logged in, it may be able to obtain information about your IP address. To learn more about the solutions used by a specific website, please read the privacy policies of Google, Facebook, Instagram, YouTube and LinkedIn.
2. Additional information about specific cookies
Google Analytics: The Website uses Google Analytics, a web analytics service provided by Google Inc. (Google). Google Analytics uses cookies to enable the Data Controller to analyze how Users use the Website.
Because the Data Controller has activated the anonymization of transmitted IP addresses, Google truncates/anonymizes the last octet of the IP address within the EEA before such transmission. The full IP address is only transmitted and truncated by Google servers in the USA in exceptional cases. Google uses this information to evaluate User usage of the Website, compile reports on Website activity for the Data Controller, and provide other services related to Website activity and internet usage for the Data Controller. Google is obligated not to associate the User's IP address with other data held by Google. More information regarding terms of use and data protection can be found at http://www.google.com/analytics/terms/gb.html. Please note that within the Website, the Google Analytics code is supplemented by an "anonymized IP address" to ensure an anonymous collection of IP addresses (so-called IP masking).
3. How to prevent cookies from being saved
You can prevent cookies from being stored by adjusting your browser settings. Most web browsers allow you to control most cookies through your browser settings. For more information on how to prevent cookies, visit http://www.allaboutcookies.org.
If you do not accept cookies, some features of the Website may not function properly, and some features of the Website may not be available to you.
4. How to delete/deactivate cookies
In order to delete/deactivate all cookies stored on the User's computer, most web browsers allow the User to completely disable the use of cookies or delete cookies stored by specific domains/websites. More information on this topic is available on the User's browser help page:
- Chrome: https://support.google.com/chrome/answer/95647?hl=en
- Internet Explorer: http://windows.microsoft.com/en-US/internet-explorer/delete-manage-cookies#ie=ie-11-win-7
- Firefox: http://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Safari: https://support.apple.com/kb/PH21411?viewlocale=en_US&locale=en_US
- Safari for iOS: https://support.apple.com/en-us/HT201265
- Opera: http://www.opera.com/help/tutorials/security/cookies
In particular, you can prevent Google from collecting and using data (cookies and URLs) IP) for every website you visit by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en-GB.
5. Sharing on social media
For data protection reasons, the Data Controller has deliberately chosen not to use direct social network plugins on its Website. Instead, the Data Controller uses an alternative technical solution that allows the User to decide whether and when to transmit data to social network operators. Therefore, when the User visits the Website, data is never automatically transmitted to the social network. Only when the User actively clicks the appropriate button will the User's web browser connect to the social network's servers. i.e., clicking on a given element and then clicking on the social network icon constitutes the User's consent to the User's browser connecting to the social network's servers and sending usage data to that social network operator, regardless of whether the User is a subscriber to that social network.
The Data Controller has no influence on the nature or scope of the data that social networks may subsequently collect. Information on the purpose and scope of data collection, the further processing and use of data by social networks, and the User's data protection rights and appropriate configuration settings can be found in the relevant social network privacy guidelines.
4. Use of the Site by Children
The Website is not intended for or directed at children under the age of 16. The Administrator does not knowingly collect any information from such individuals. If you believe that your child has provided the Administrator with personal data, please contact the Administrator at: [email protected]
5. Links to external websites/redirects/referrals
In some areas of the Website, the Administrator may provide links/redirects/pointers to external websites that are not subject to the provisions of this Privacy Policy. These links are provided for the User's convenience; however, please note that the Administrator has no control over third parties and their websites. External websites will be subject to separate policies for the protection of personal data collected from the User when the User uses them. If the User chooses to use the links and redirects provided on the Website, the Administrator encourages the User to carefully read the privacy notices on the website in question before using it and providing any personally identifiable information.
6. Copyright
- The Website provides access to copyrighted materials, including documents, trademarks, and other works, in particular texts, photographs, graphics, sounds, and audio and video materials (hereinafter referred to as the Works). The selection and arrangement of the content presented on the Website constitutes an independent subject of protection under the Act of 4 February 1994 on Copyright and Related Rights.
- Due to the copyright nature of the content posted on the Website and the Website itself, referred to in point 1 above, Website Users are obligated to respect the intellectual property rights of both the authors of their Works and the Administrator, who is the owner of these rights.
- No part of the Website (including, but not limited to, texts, documents, files, graphic layouts, graphics, and other materials) may be reproduced or distributed in any form or by any means (electronic or mechanical) without the prior written consent of the Administrator.
- Violation of the terms referred to in paragraph 3 constitutes a criminal offense under the Copyright and Related Rights Act, and entitles the owner and/or author of the Works to pursue claims for damages.
- Infringement of intellectual property rights by the User may also result in legal liability under the Act on Combating Unfair Competition, the provisions of the Civil Code, or the provisions of the Press Law.
7. Changes to the Privacy Policy
The Website Administrator reserves the right to change the provisions of the Privacy Policy if the need to make changes results directly from changes in legal regulations or changes in the Administrator's technical, legal, or organizational situation. Users will be informed of changes to the Policy by posting information about them on the website www.creaton.pl. Any changes to the Policy become effective on the date indicated by the Administrator, but no sooner than 7 days after their publication as described in the preceding sentence. Users should periodically review the latest version of the Policy, as continued use of the Website by the User after the publication of changes constitutes acceptance of those changes.
8. Contact
Any questions or concerns regarding the use of the Website or the information contained in the Privacy Policy can be submitted to the following email address: [email protected], and regarding personal data, to the following email address: [email protected].
Thank you for visiting our Website and familiarizing yourself with its operating principles!