§1 General provisions
1. This Privacy Policy sets out the rules governing the processing and protection of personal data of individuals using the website available at www.nadaj.ambroexpress.pl (hereinafter: ‘the Website’).
2. The website’s Privacy Policy is for information purposes only, which means that it does not impose any obligations on Users or Customers of the website. The Privacy Policy primarily sets out the rules governing the processing of personal data by the Controller on the website, including the legal basis, purposes and duration of such processing, as well as the rights of data subjects.
3. The Website is used to place orders for parcel delivery services provided by Ambro Express.
4. The Controller takes particular care to protect the interests of data subjects and ensures that personal data is processed in accordance with applicable legislation, in particular: the Act of 10 May 2018 on the protection of personal data and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as the ‘GDPR’.
§2 Data Controller
1. The controller of the personal data of persons using the Website is:
AMBRO EXPRESS sp. z o.o. sp. k., ul. Przemysłowa 18, 62-731 Przykona, KRS: 0000635536, hereinafter referred to as the “Controller”.
2. The Controller is responsible for processing the personal data of Website users in accordance with applicable legislation, in particular Regulation (EU) (EU) 2016/679 of 27 April 2016 (GDPR) and the Act of 10 May 2018 on the protection of personal data. The Controller carries out operations involving the processing of personal data of individuals using the Website and takes measures to ensure the security of such data and the compliance of the processing
with applicable law.
3. The Controller implements appropriate technical and organisational measures to ensure the protection of the personal data being processed, in particular to safeguard the data against unauthorised access, loss, destruction or unauthorised modification.
4. In all matters relating to the processing of personal data, including in particular to obtain information regarding data processing or to exercise the rights of data subjects, you may contact the Controller by email at the address provided on the Ambro Express website.
§3 Processing of personal data
1. For any matters relating to the processing of personal data by the Controller, please contact the designated email address provided on the Ambro Express website.
2. The Controller shall take the necessary measures to protect the personal data being processed; in particular, it shall ensure appropriate technical and organisational measures to safeguard the personal data provided, in particular, measures preventing access to such data by third parties or its processing in breach of the law, and preventing the loss, damage or destruction of the data.
3. In connection with the use of the website and the placing of transport orders, the Controller may process, in particular, the following personal data: first name and surname, company name, email address, telephone number, sender’s and recipient’s addresses, invoicing details, including address and tax identification number (NIP), bank account number, details relating to the transport order, in particular information on the collection and delivery locations of the consignment, its weight, dimensions or nature, details concerning the provision of the transport service and order history, details concerning payments and settlements for the service, data contained in correspondence with the Controller, including complaint reports, as well as technical data relating to the use of the website, in particular the IP address and information on the date and time of use of the website.
4. Personal data is processed for the purpose of:
- The performance of a service/order, i.e. pursuant to Article 6(1)(b) of the GDPR, according to which processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract. Personal data will be processed for the duration of the order/service and for the time necessary following its completion.
- Customer satisfaction surveys conducted as part of the process of monitoring and maintaining the high quality of Ambro Express’s services, to which the Customer consents each time they use the service.
- To process complaints pursuant to Article 6(1)(c) of the GDPR, under which processing is necessary for compliance with a legal obligation to which the Controller is subject. Personal data will be processed for the duration of the fulfilment of the legal obligation and any subsequent period during which the services offered by the Controller are used.
- Pursuing claims pursuant to Article 6(1)(f) of the GDPR, i.e. the Controller’s legitimate interest, which is to pursue our claims
and defend our rights, as well as Article 9(2)(f) of the GDPR, i.e. processing is necessary for the establishment of legal claims. Personal data will be processed for the duration of the pursuit of such claims. - To fulfil tax obligations pursuant to Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation to which the Controller is subject) in conjunction with Article 74(2) of the Accounting Act. Personal data will be processed for the period necessary to fulfil the tax obligation. We process all data processed for accounting and tax purposes for a period of 5 years from the end of the calendar year in which the tax obligation arose.
- Where consent has been obtained – for marketing purposes pursuant to Article 6(1)(a) of the GDPR (the data subject) has consented to the processing of their personal data for one or more specified purposes. The data will be processed for the duration of the marketing campaign.
5. Individuals who provide their personal data have the right to request from the Controller:
- access to their personal data,
- rectification of their personal data,
- the erasure of their personal data (a request for erasure will result in the immediate removal of personal data from our database),
- restriction of the processing of their personal data,
- to lodge a complaint with the supervisory authority,
- data portability,
- withdraw consent to the processing of personal data at any time. Withdrawal of consent will not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal; however, it will prevent us from providing our services,
- object to the processing of personal data – where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller, and, where the processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, including in the case of profiling. The Controller may no longer process such personal data unless it demonstrates the existence of valid, legitimate grounds for processing which override the interests, rights and freedoms of the data subject, or grounds for establishing, exercising or defending legal claims.
6. To exercise the above rights, please contact the Controller by email at the address provided on the Ambro Express website.
7. The personal data provided may only be disclosed:
- To the relevant state authorities upon their request and in accordance with applicable legislation.
- To third parties cooperating with us for the purpose and to the extent necessary to provide the service. The Controller is responsible for the consequences of the actions of third parties (in particular drivers, couriers and fitters) with whom it cooperates and to whom it entrusts the performance of the contract in whole or in part.
8. Personal data provided to AMBRO EXPRESS is not subject to automated decision-making, including profiling.
9. The provision of personal data is voluntary, but without it, it will not be possible to provide the service.