Privacy Policy

§1. General Information

This Privacy Policy sets out the principles for processing and protecting personal data of users of the Dimakt website available at dimakt.pl (hereinafter: the “Service”).
The Service processes data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and other applicable laws.

§2. Data Controller

The data controller is “DIMAKT” Spółka z ograniczoną odpowiedzialnością (Limited Liability Company), registered at A. Hryniewickiego 10 / Building 25, 81-340 Gdynia, Poland.
Tax ID (NIP): 5833002008, KRS: 0000284009, REGON: 220455405.
You can contact the Controller by email: office@dimakt.pl or by mail: A. Hryniewickiego 10 / Building 25, 81-340 Gdynia, Poland.

§3. Legal Basis for Data Processing

• Providing services, performing contracts or fulfilling orders – Art. 6(1)(b) GDPR
• Handling contact inquiries – Art. 6(1)(f) or Art. 6(1)(a) GDPR
• Fulfilling legal obligations – Art. 6(1)(c) GDPR
• Marketing of own products/services – Art. 6(1)(f) or Art. 6(1)(a) GDPR
• Traffic analysis and statistics – Art. 6(1)(f) GDPR or user consent

§4. Scope of Processed Data

The collected data may include: name and surname, email address, phone number, mailing address, IP address, technical data of the device and browser, cookie data, and any other data voluntarily provided by the user.

§5. Purpose and Data Retention Period

• Providing services and fulfilling orders – for the duration of the contract plus the legally required retention period
• Contact inquiries – until the inquiry is resolved plus the period necessary for potential claims
• Data processed based on consent – until consent is withdrawn

§6. Data Recipients

Data may be shared with hosting providers, IT service providers, accountants, marketing companies, or public authorities, only to the extent necessary to achieve the processing purposes. Data will not be sold to third parties for marketing purposes without the user’s consent.

§7. User Rights

• Access to data and copies thereof
• Rectification of data
• Erasure of data (“right to be forgotten”)
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent at any time
• Lodging a complaint with the Polish Data Protection Authority (PUODO)

§8. Cookies

The Service uses cookies and similar technologies to ensure proper functioning, statistical analysis, and—if consent is given—marketing activities. Users may manage cookies through browser settings or via a consent tool (cookie banner).

§9. Data Transfers Outside the EEA

If data is transferred outside the European Economic Area, appropriate safeguards are applied, such as European Commission adequacy decisions, standard contractual clauses, or the user’s consent.

§10. Data Security

The Controller applies technical and organizational measures to protect data, including encryption (HTTPS), access controls, backups, and procedures in the event of security breaches.

§11. Profiling

The Controller does not use profiling that produces legal effects concerning the user unless the user has explicitly consented.

§12. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. The current version is published on this page.

§13. Final Provisions

Matters not regulated in this policy are subject to applicable Polish and EU law.