Privacy Policy of INFOMEX Sp. z o.o.

INFOMEX Sp. z o.o., located in Żywiec (34-300), at 19B Wesoła Street, registered in the entrepreneurs' register of the National Court Register maintained by the District Court in Bielsko–Biała, 8th Commercial Division of the National Court Register under number 0000114797, having VAT number NIP: 5532235835 and REGON: 070810718.

This Privacy Policy describes the method of collecting, processing, and using personal data of users visiting the website https://infomex.pl. INFOMEX Sp. z o.o. processes personal data in accordance with applicable law, in particular the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 (GDPR).

1. Personal Data Administrator

The personal data administrator (hereinafter: the Administrator) is INFOMEX Sp. z o.o. located in Żywiec (34-300), 19B Wesoła Street, registered in the entrepreneurs' register under number 0000114797. Contact with the Administrator is possible via email: rodo@infomex.pl or by phone: +48 33 475 11 11.

2. Purposes and legal basis for data processing

User personal data is processed for the following purposes and legal bases:

• to establish contact, respond to inquiries, prepare an offer - Article 6(1)(b) of GDPR;

• to conduct email correspondence in relation to messages sent to addresses provided on the website - Article 6(1)(f) of GDPR;

• to send newsletters and commercial information - Article 6(1)(a) of GDPR (based on consent);

• to pursue the Administrator's legitimate interests, such as direct marketing and statistical analysis - Article 6(1)(f) of GDPR.

3. Cookies

The website https://infomex.pl uses cookies to ensure proper operation, content personalization, traffic analysis, and service customization to user needs. The user can change the cookie settings in their web browser at any time. Cookies are used in accordance with Article 173 of the Telecommunications Act. Analytical tools, including Google Analytics 4, may be used on the site.

4. Right to withdraw consent

If data processing is based on consent, the user has the right to withdraw it at any time by sending an email to: rodo@infomex.pl. Withdrawal of consent does not affect the legality of processing carried out before its withdrawal.

5. Voluntary provision of data

The provision of personal data is voluntary, but in some cases, it may be necessary to process an inquiry or provide electronic services.

6. Automated decision-making

The Administrator does not make decisions in an automated manner, including profiling users.

7. Recipients of personal data

Personal data may only be disclosed to entities authorized to cooperate with the Administrator under appropriate data processing agreements, including IT service, hosting, and analytical system providers.

8. Data transfer outside the EEA

The Administrator does not transfer personal data to countries outside the European Economic Area (EEA).

9. Data retention period

Personal data is stored for the period necessary to achieve the purpose for which it was collected or until consent is withdrawn if processing is based on it. Data used for marketing purposes will be stored until the user raises an objection.

10. Rights of data subjects

The user has the right to access their personal data, rectify it, erase it, restrict processing, data portability, and object to personal data processing.

11. Right to lodge a complaint

If it is believed that personal data processing violates GDPR provisions, the user has the right to lodge a complaint with the President of the Personal Data Protection Office.

12. Data security

The Administrator processes personal data in accordance with applicable law and has implemented technical and organizational measures to ensure its protection, including transmission encryption (HTTPS) and access control. These actions comply with the principles set out in ISO 9001:2015 and ISO/IEC 27001:2022 standards.

13. Final provisions

The provisions of personal data protection law apply wherever this Privacy Policy does not regulate the matter. The Privacy Policy was updated on January 1, 2025, and is effective from that date.