Privacy Policy


This Privacy Policy defines the methods of protecting the personal data of Users (i.e., persons using the website, including Buyers as defined below) who access the website at www.kat-recykling.pl, hereinafter referred to as the "Website".
By using the Website, you accept this Privacy Policy. If you do not accept this Privacy Policy, you will not be able to use the Website, including its pages and the ability to place Orders.
The administrator of Users' personal data is Kat-Recykling Sp z o.o., located at Witoszów Dolny 52 L, 58-100 Świdnica, Poland, NIP: 8842758411, REGON: 362804620, hereinafter referred to as the "Seller". The Seller owns the Website and sells Goods through it under the terms set out in the Terms and Conditions, without the simultaneous physical presence of the parties, using telecommunications networks.

Security and Personal Data Protection
The Seller declares that it processes Users' personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter referred to as "GDPR"). The Seller implements appropriate technical and organizational measures to ensure that data processing complies with GDPR, considering the nature, scope, context, and purposes of processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons.

Scope of Data Collection
The Seller collects Users' personal data as specified in the Terms and Conditions, including:
  1. Account Creation: To create an account on the Website, Users must provide their first name, last name, email address, and set a password. The email address also serves as the login.
  2. Placing an Order: To place an Order, the Customer must provide their first name, last name, email address, delivery address, and phone number to facilitate order processing and communication.
  3. Automatically Collected Data: The Website may collect technical data such as IP address, device type, operating system, browser type, and usage data (e.g., visited pages, time spent) for analytical and performance optimization purposes.

Purpose of Data Collection
Users' personal data is processed for the following purposes:
  1. To conclude and perform an agreement for electronic services (e.g., account management).
  2. To conclude and perform a sales contract, including complaint handling.
  3. To maintain accounting records in compliance with legal obligations (e.g., tax documentation).
  4. To respond to inquiries sent via the contact form.
  5. To send marketing content regarding the Seller, if the User has consented to receive such content.
  6. To handle notifications or requests related to data protection.
  7. For statistical and analytical purposes (e.g., service improvements, satisfaction surveys), based on the Seller's legitimate interest in improving the Website and adapting it to Users' needs.

Providing personal data is voluntary but necessary to conclude agreements for electronic services or sales. Failure to provide such data will prevent the use of these services or making purchases. For marketing purposes, providing data is optional, and failure to provide it will prevent receiving marketing content.

Data Sharing
The Seller may share personal data with the following third parties:
  1. Service Providers: Hosting providers, IT support, and payment processors to facilitate Website functionality and order processing.
  2. Delivery Partners: Courier or postal services to fulfill Orders.
  3. Analytics Providers: Third-party tools (e.g., Google Analytics) to analyze user behavior and improve the Website (data is anonymized when possible).
  4. Legal Authorities: If required by law or to protect the Seller’s rights.
  5. The Seller ensures that third-party recipients comply with applicable data protection regulations and process data solely for specified purposes.

Legal Basis for Data Processing
The legal bases for processing Users' personal data are:
  1. Contractual Necessity (Art. 6(1)(b) GDPR): To conclude and perform agreements for electronic services or sales, including complaint handling.
  2. Legal Obligation (Art. 6(1)(c) GDPR): To fulfill accounting and tax obligations under Polish law (e.g., Tax Ordinance Act of August 29, 1997, Accounting Act of September 29, 1994).
  3. Legitimate Interest (Art. 6(1)(f) GDPR): To handle inquiries, conduct internal analysis, and send marketing content (when consented to).
  4. Consent (Art. 6(1)(a) GDPR): For optional marketing communications where applicable.
    Personal data will not be used for automated decision-making, including profiling, unless explicitly stated otherwise.

Personal Data Retention Periods
  1. Electronic Services: Data processed for account management is stored as long as the User uses the services, then retained until the expiration of civil law claims.
  2. Sales Contracts: Data related to sales, complaints, and accounting is stored until the expiration of tax and civil law limitation periods (typically 5-10 years under Polish law).
  3. Inquiries: Data from contact form inquiries is stored for the time necessary to provide a response.
  4. Marketing: Data for marketing purposes is stored until consent is withdrawn and then retained only to defend against claims within statutory limitation periods.
  5. Data Protection Requests: Data related to such requests is stored until the expiration of limitation periods for claims under data protection laws.

Users' Rights
Users have the following rights concerning their personal data:
  1. Access: Request access to their data.
  2. Correction: Correct inaccurate or incomplete data.
  3. Deletion: Request deletion of their data (subject to legal exceptions).
  4. Restriction: Restrict processing under certain conditions.
  5. Data Portability: Receive their data in a structured format or transfer it to another administrator.
  6. Objection: Object to processing based on legitimate interests (e.g., marketing or analytics).
  7. Withdraw Consent: Revoke consent at any time (e.g., for marketing) without affecting prior lawful processing.
  8. File a Complaint: Submit a complaint to the Polish Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
Users can exercise these rights by contacting the Seller via the "Contact" section. Marketing consent can be withdrawn by clicking the unsubscribe link in marketing emails.

Last Updated: March 4, 2025
powrót