Cosma S.A. Website Privacy Policy.
This privacy policy sets out the rules for processing and protecting the personal data of users of the Cosma S.A. Website, available at: www.cosma.pl (hereinafter referred to as the „Site”). We make every effort to protect your privacy and ensure the security of your personal data. By using this Site, you agree to the processing of personal data in accordance with this privacy policy. If you do not agree with any of the provisions below, please stop using our Site immediately.
1. Data controller:
The administrator of your personal data is Cosma Spółka Akcyjna, with its registered office at Plac Europejski 1, 4th floor, 00-844 Warsaw, entered into the Register of Entrepreneurs of the National Court Register by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the National Court Register, under KRS number 0000559284, NIP: 9522137211, REGON: 36159749 (hereinafter: the „Administrator”).
2. Types of personal data processed:
When using the Website, the Administrator may collect and process the following user personal data:
Full name,
– Email address,
– Phone number,
– Company/Organization Details.
3. Purpose and grounds for personal data processing:
Processing of personal data is carried out in accordance with applicable legal regulations,
in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the „GDPR”).
b. We process your personal data for the purpose of:
- provision of electronic services in the scope of making content posted on the Website available to users, ensuring the proper functioning of the Website and providing services offered by Cosma Spółka Akcyjna (legal basis for processing – necessity of processing for the performance of a contract – Article 6(1)(b) GDPR);
- responding to your inquiries and requests (legal basis for processing – processing is necessary for compliance with a legal obligation incumbent upon the Controller – Article 6(1)(c) GDPR);
- potential establishment and pursuit of claims or defense against claims (legal basis for processing – processing is necessary for the purposes of the legitimate interests pursued by the Controller – Art. 6(1)(f) GDPR);
- User preference research, analysis, and website improvements, aimed at enhancing the quality and relevance of implemented functionalities and provided services (legal basis for processing – processing is necessary for the purposes of legitimate interests pursued by the Administrator – Article 6(1)(f) GDPR).
- sending marketing and advertising information, if you have consented to this (legal basis for processing - consent - Article 6(1)(a) GDPR).
4. Sharing of personal data:
In the course of its business, Cosma S.A. may share your personal data with third parties, such as technical service providers, marketing service providers, etc., only to the extent necessary to fulfill the processing purposes specified in point 3.
The administrator has the right, as well as the statutory obligation, to transfer selected or all user information to public authorities or third parties who submit such a request for information based on applicable Polish law.
5. Personal Data Protection:
Cosma Joint-Stock Company takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. We also ensure that all third parties to whom we share your personal data are obligated to maintain its confidentiality and security.
6. Personal data retention period:
Cosma Joint-Stock Company stores your personal data for the period necessary to fulfill the processing purposes specified in point 3, unless legal regulations require a longer storage period or you have consented to a longer data retention period.
7. Your rights:
- You have the right to be informed about the processing of personal data, to obtain a copy of your data, to access your personal data, to rectify it, to erase it, to restrict its processing, and to data portability to another data controller.
- You have the right to object to the processing of personal data based on the Administrator's legitimate interest (e.g., for analytical or statistical purposes). An objection in this regard must include a justification and is subject to the Administrator's assessment.
- You have the right to object to the processing of your data for direct marketing purposes without having to provide any justification.
- You have the right to withdraw your consent to the processing of personal data at any time if the processing is based on your consent. Consent to the processing of personal data can be withdrawn by the user at any time, without affecting the lawfulness of the processing carried out based on consent before its withdrawal.
- You have the right to lodge a complaint with the President of the Personal Data Protection Office, who is responsible for personal data protection, if you believe that the processing of your personal data violates legal regulations.
8. Profiling
- Personal data full name, company name, email address, address and phone number, after the User's voluntary consent, are also collected and processed for statistical and marketing purposes („Profiling”).
- Using personal profiling tools, the Administrator is able to assess personal factors concerning a specific user, and in particular to analyze or predict aspects relating to personal preferences, interests, or behaviors.
- Profiling is carried out in order to provide individual users with personalized and tailored offers and content, including through dynamic website content, email marketing, or direct sales.
- User personal data profiling is performed based on the user's prior voluntary consent.
- Each user has the right to withdraw consent for the processing of their personal data related to Profiling, as well as the right to object to Profiling by contacting the Administrator.
9. Cookies
- The Administrator may use cookies and similar technologies to improve the quality of services provided and to tailor content and advertisements to user preferences.
- Data collected using cookies on the Website is processed in accordance with the provisions of this privacy policy of Cosma Joint Stock Company.
- Further information regarding cookies can be found in the cookie policy, which is available on the Website.
10. Contact:
In matters concerning the processing of personal data and the exercise of your rights, you can contact us using the contact details provided on the Website:
email addressinfo@cosma.pl
phone contact: +48 22 164 78 91.
11. Zmiany w polityce prywatności:
Cosma Spółka Akcyjna zastrzega sobie prawo do wprowadzania zmian w niniejszej polityce prywatności. Aktualna wersja polityki prywatności zawsze będzie dostępna na Stronie.
W zakresie nieuregulowanym niniejszą Polityką Prywatności obowiązują przepisy ustawy z dnia 10 maja 2018 r. o ochronie danych osobowych oraz RODO.
Niniejsza polityka prywatności obowiązuje od 3.07.2023
