Privacy Policy of Cosma S.A. Website.

This privacy policy defines the rules of processing and protection of personal data of users of the Cosma S.A. Website available at: www.cosma.pl (hereinafter referred to as the "Site"). We make every effort to protect your privacy and ensure the security of the personal data we process. By using the Site, you consent to the processing of your personal data in accordance with this privacy policy. If you do not agree with any of the following provisions, please stop using our Site immediately.

1. personal data controller:    
The administrator of your personal data is Cosma Joint Stock Company with its registered office at the address, 1 p. Plac Europejski St. 40, 00-844 Warsaw, entered in the Register of Entrepreneurs of the National Court Register by the District Court for Kraków Śródmieście in Kraków, XI Economic Department of the National Court Register under KRS number 0000559284, NIP: 9522137211, REGON: 36159749 (hereinafter: "Administrator").

 2 Types of personal data processed:

When using the Site, the Administrator may collect and process the following personal data of users:   
       - Name,     
       - Email address,         
       - Phone number,   
       - Company/organization details.

3 Purpose and basis of personal data processing:  
a. Processing of personal data shall be carried out in accordance with applicable laws, 
in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data (hereinafter: "RODO").

b. We process your personal information for:

1. Provision of services by electronic means in terms of providing users with access to content posted on the Site, ensuring proper functioning of the Site and provision of services offered by Cosma Joint Stock Company (legal basis for processing - necessity of processing to perform the agreement - Article 6(1)(b) RODO);
2. To respond to your inquiries and requests (legal basis for processing - the necessity of processing to fulfill a legal obligation of the Administrator - Article 6(1)(c) of the DPA);
3. possible establishment and assertion of claims or defense against claims (legal basis for processing - processing is necessary for the purposes of legitimate interests pursued by the Administrator - Article 6(1)(f) RODO);
4. researching users' preferences, analyzing and improving the Site, aimed at improving the quality and relevance of the functionalities used and services provided (legal basis for processing - processing is necessary for the purposes of the legitimate interests pursued by the Administrator - Article 6(1)(f) RODO).
5. to send marketing and advertising information, if you have given your consent (legal basis for processing - consent - Article 6(1)(a) RODO).            

4 Sharing personal data:

In the course of its business, Cosma S.A. may share your personal data with third parties, such as technical service providers, marketing service providers, etc., only to the extent necessary to fulfill the purposes of processing specified in Section 3. 

The Administrator has the right, as well as a statutory obligation, to provide selected or all information concerning users to public authorities or third parties who submit such a request for information under the applicable provisions of Polish law.

5 Data protection:

Cosma Joint Stock Company takes appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, alteration or disclosure. We also ensure that all third parties with whom we share your personal information are obligated to maintain its confidentiality and security.      

6 Period of storage of personal data:  

Cosma Joint Stock Company retains your personal data for the period of time necessary to fulfill the purposes of processing set forth in Section 3, unless a longer retention period is required by law or you have consented to a longer retention period.      

7 Your rights:            

1. You have the right to be informed about the processing of your personal data, to obtain a copy of your data, to access your personal data, to rectify it, to delete it, to restrict its processing, and to transfer it to another data controller.
2. You have the right to object to the processing of personal data on the basis of the legitimate interest of the Administrator (e.g. for analytical or statistical purposes). An objection in this regard should contain a justification and is subject to review by the Administrator.
3. You have the right to object to the processing of data for direct marketing purposes without having to justify such objection.
4. You have the right to withdraw your consent to the processing of personal data at any time, if the processing is based on your consent. Your consent to the processing of personal data may be withdrawn by you at any time, which does not affect the lawfulness of previous data processing, i.e. that carried out after your consent up to the moment of withdrawal.       
5. You have the right to lodge a complaint with the President of the Data Protection Authority in charge of personal data protection if you believe that the processing of your personal data violates the law.

8. Profiling

1. Personal information: name, company name, e-mail address, address and telephone number, upon voluntary consent of the User, are also collected and processed for statistical and marketing purposes ("Profiling").
2. With the help of data profiling tools, the Administrator is able to assess personal factors concerning a specific user and, in particular, analyze or predict aspects of personal preferences, interests or behavior.
3. Profiling is done to provide individual users with personalized and tailored offers and content, such as through dynamic content on the website, through email marketing or through direct sales.
4. Profiling of the user's personal data is carried out on the basis of the user's previously expressed voluntary consent.
5. Each user has the right to withdraw consent to the processing of his/her personal data involving Profiling, as well as the right to object to Profiling by contacting the Administrator.

9 Cookies

1. The administrator may use cookies (so-called "cookies") and similar technologies to improve the quality of services provided and to tailor content and advertising to users' preferences.
2. Data collected through cookies on the Site is processed in accordance with the provisions of this Cosma Joint Stock Company privacy policy.
3. For other information regarding cookies, please refer to the cookie policy, which is available on the Site.

10 Contact:     

You can contact us regarding the processing of your personal data and the exercise of your rights using the contact information provided on the Site:

email address: info@cosma.pl

contact phone: +48 22 164 78 91.

11. privacy policy changes:      

Cosma Joint Stock Company reserves the right to make changes to this privacy policy. The current version of the privacy policy will always be available on the Site.

To the extent not covered by this Privacy Policy, the provisions of the Data Protection Act of May 10, 2018 and the RODO shall apply.            

This privacy policy is effective as of 3.07.2023