Privacy Policy

General information

This document specifies the rights and principles related to the processing of personal data on the website owned by Action S.A. available at https://www.action.pl (Serwis).

Basic rights and obligations relating to personal data protection are contained in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as: GDPR) and the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018.1000, as amended).
To the extent not provided for under this Privacy Policy, the GDPR and the above-mentioned Personal Data Protection Act shall apply.

Data Controller

The controller of your personal data is ACTION S. A., based in Zamienie, ul. Dawidowska 10, 05-500 Piaseczno.

Contact details of the Data Protection Officer

In the case of any doubts or inquiries regarding the safety of processing of your personal data, you may contact our Data Protection Officer by e-mail iod@action.pl or by post: Data Protection Officer Action S.A., Zamienie, ul. Dawidowska 10, 05-500 Piaseczno.

What data do we collect?

We collect data from HTTP inquiries sent to our servers. These include IP address, http requests and responses, and transmission technical data.

If you have used the contact form on our website, contact details are also collected: your first and last name, and e-mail address.

Information on the data collected in cookies can be found at www.action.pl/en/cookies

Who do we share your personal data with?

Your data may be transferred to entities belonging to the ACTION Capital Group and entities cooperating with it solely for the purpose for which we use them, and also entities cooperating with us, i.e. providing legal support, consulting and audit services, implementing marketing campaigns for us, providing ICT services to us and entities and bodies responsible for combating fraud and abuse.

Purpose and legal basis for the processing of your personal data

We process your personal data as it is necessary to ensure sales, use of our website and ability to respond to your inquiries. The following is a summary of all of the purposes for which we process your personal data:

• providing services by electronic means as part of the use of the action.pl Website;
• ensuring resolution of technical problems;
• handling requests and enquiries you address to us (e.g. through a contact form, Skype, GG and other communication channels of your choice);
• providing you with marketing and information materials, placing trade offers and undertaking promotional activities now or in the future (direct marketing) – if you have given your consent to sending the above information.

We also process your personal data for the purposes set out below, based on the legitimate interest of ACTION, which is:

• monitoring your activity and the activity of other users, including, e.g. keyword search, placement of offers and management of your activity on the Website;
• optimising website functions based on the content you are viewing.

Period of storing your personal data

We store your personal data for the time necessary to:

• respond to inquiries, requests and complaints sent;
• prevent fraud;
• develop statistical and archiving analyses.

If you consent, we will store your personal data until you withdraw the consent. For the organisation of loyalty programmes, competitions and promotional activities in which you may take part, we will process your data for the duration and settlement period of prize giving.

Do you have to provide your personal data to us?

We require you to provide your personal data on the contact form, as this is necessary to answer and possibly send the ordered materials.

If required by law, we may require you to provide other data which are necessary, e.g. for accounting or tax reasons. Providing your data is voluntary, but refusal to provide them may make it impossible to achieve the goal.

What are your rights with respect to ACTION S.A. regarding the data processed?

We inform you that at any time, you have the right to:

1. demand access to your Personal Data;
2. immediately rectify any of your Personal Data which is incorrect, and complete any of your Personal Data which is incomplete;
3. immediately erase your Personal Data;
4. restrict the processing if:
   1. you question the accuracy of the Personal Data;
   2. the processing is unlawful, but you object to the erasure of your Personal Data;
   3. the Data Controller no longer needs your Personal Data for the purposes of processing, but you need it to investigate, enforce or defend legal claims;
   4. you have objected to processing – until the moment of determination of whether the grounds of the Controller take precedence over the grounds of the objection;
5. object to the processing of your Personal Data on the basis of Article 6(1)(f) of the GDPR, in particular to the processing of Personal Data for the needs of direct marketing;
6. f. data portability, including to:
   1. receive (in a structured, commonly used, machine-readable format) data, which you have provided to the Controller and to transfer it to another controller;
   2. request that the data are sent by the Controller directly to another controller, if technically possible;
   3. provided that the processing of your data is automated and provided that the processing takes place pursuant to Article 6(1)(b) of the GDPR;
7. g. lodge a complaint with the President of the Personal Data Protection Office, if you consider that the processing of your Personal Data is in breach of the provisions of the GDPR or the Polish Act of 10 May 2018 on the protection of Personal Data.

Send the respective request to: iod@action.pl

In what situations can you object to the processing of your personal data?

You have the right to object to the profiling of your activities for direct marketing at any time, and where the processing of your personal data is based on a legitimate interest or for statistical purposes and the objection is justified by a particular situation you are in.

In order to exercise the above rights, please contact the controller or the Data Protection Officer (contact details above).

Do we process your personal data automatically (including through profiling) in a manner affecting your rights?

Your personal data may be processed by automated means; however, they will not be used for the purpose of automated decision-making (including in the form of profiling) in such a way that a decision can be taken which is based solely on automated processing of your personal data which produces legal effects or in a similar manner that significantly affects your interests.