Privacy Policy

1. personal data controller.

The administrator of the personal data is Fabryka Mebli TOM-POL Tomasz Wróbel sp.k. headquartered in Opatów at Szpot nr 1A, 63-645 Opatów; KRS: 0001038188, NIP: 6192057630, REGON: 524616221.

The Administrator can be contacted:

• In person at its headquarters;
• by sending a letter to the following address: Fabryka Mebli TOM-POL Tomasz Wróbel sp.k., Szpot 1A Street, 63-645 Opatów;
• By sending an email to: rodo@meble-tompol.pl

2. objectives i legal basis for processing Customer data.

Purposes of data processing	Legal grounds for data processing
(a) preparation of an offer and determination of the terms and conditions of the contract	The legal basis is to take action at the customer’s request before concluding a contract (Article 6(1)(b) RODO1).
(b) verification of the Customer’s credibility and assessment of the risk of transactions	The legal basis is the Administrator’s legitimate interest (Article 6(1)(f) RODO), which is to assess the credibility of the Client and reduce the risk of doing business.
(c) performance of the contract and contacting on related matters	The legal basis is the performance of the contract concluded with the customer (Article 6(1)(b) of the RODO).
d) processing and fulfillment of possible complaints	The legal basis is the performance of the contract concluded with the Customer (Article 6(1)(b) RODO).
e) fulfillment of tax and accounting obligations (including maintenance and storage of accounting and tax records)	The legal basis is a legal obligation under tax and accounting regulations2 (Article 6(1)(c) RODO).
(f) to establish, assert and defend against potential claims that may be related to the conclusion or performance of a contract or complaint	The legal basis is the legitimate interest of the Administrator (Article 6(1)(f) of the RODO), which is to assert and protect one’s rights, as well as to verify reported claims.
(g) marketing its own products and promotion, which involves sending customers information about promotions and offers, as well as sending greeting cards	The legal basis is the Administrator’s legitimate interest (Article 6(1)(f) of the RODO), which is direct marketing of its own products and seeking to increase their sales, as well as maintaining good business relations with Customers. However, based on Article 398(1) of the Electronic Communications Law3,offers and other commercial information will be transmitted by telephone or e-mail only if prior consent has been given.
(h) archiving documents and information to document the circumstances surrounding the contract	The legal basis is the Administrator’s legitimate interest (Article 6(1)(f) of the RODO), which is the need to store documents and information in order to prove matters relating to the conclusion and performance of the contract, if necessary.

3. is it mandatory to provide data?

Provision of personal data is voluntary, but necessary to fulfill the purposes indicated above, in particular to conclude and fulfill the contract.

Providing the necessary identification data is a prerequisite for placing an order and concluding a contract, as well as for filing a possible complaint.

4 Planned data retention period.

Personal data will be kept for the duration of the performance of the contract, as well as the statute of limitations for claims that may be related to the contract, or the processing of complaints (the statute of limitations is established by the Civil Code⁾⁴.

On the other hand, if a contract is not concluded, the data will be stored for 3 months from the last contact regarding the contract or offer.

In addition, accounting and tax records will be kept for up to 5 years counted from the end of the year in which the tax due date has passed (i.e., about 6 years counted from the issuance of the document⁾⁵.

Data will be used for marketing purposes for the period of cooperation or until you object.

In terms of verifying the credibility of the customer, the data will be stored for 3 months.

5 Data recipients.

The Administrator transfers the Customers’ data to the following recipients:

• shippers and carriers delivering orders to the Customer;
• entities operating the information system;
• Home.pl S.A., based in Szczecin, Poland, as an e-mail provider;
• to banks and payment operators in connection with making payments and settlements with the customer;
• entities providing courier and postal services in connection with the handling of correspondence;
• insurers in the event of damage to the goods in transit;
• law firms in the event of the need to assert or defend against claims;
• entities providing debt collection services and business information bureaus in connection with the investigation of claims;
• auditor, consulting or auditing service providers;
• to tax offices and other public authorities in connection with the performance of legal obligations.

6. Rights you have in connection with data processing:

a) The right to access your data (Article 15 RODO)	You can receive detailed information on data processing and your rights, access your data, and receive a copy of your data (the first copy is free of charge).
(b) Right to rectification of data (Article 16 of RODO)	If you believe your data is inaccurate or incomplete, you may request that it be corrected or completed.
(c) Right to erasure (Article 17 of the RODO)	You may request erasure of your data if you believe that it is being processed unjustifiably (i.e., the data is no longer necessary, it is being processed unlawfully, the law requires it to be erased, you have filed an objection, or you have withdrawn your consent and there is no basis for processing the data). However, your data will not be deleted if, for example, its processing is necessary to comply with a legal obligation or to establish, assert or defend against claims.
(d) The right to restrict processing (Article 18 of the RODO).	In the case of restriction of processing, the data will only be stored and will not be used without your consent, unless it is necessary to establish, assert or defend against claims, or in other situations where the RODO allows it. You have the right to restrict processing in cases where: – you believe the data is incorrect; – the processing is unlawful, but you do not want it deleted; – the Administrator no longer needs the data, but you need it to assert or establish claims or defend against them; – you have lodged an objection.
(e) The right to data portability (Article 20 RODO)	You have the right to receive data processed under a contract (i.e., under Article 6(1)(b) of the RODO) in a standard electronic format and either send it to another data controller or indicate to whom you wish to transfer it directly (provided that this is technically possible). The right to portability covers data you have transferred, but does not apply to data processed exclusively in paper form.
f) right to object (Article 21 RODO)	Objection on grounds of special situation – You may object at any time to the processing of your personal data if it is based on a legitimate interest (i.e. Article 6(1)(f) RODO). In your objection, you should describe the particular situation that you believe justifies the filing of the objection. After filing an objection, the Administrator will stop processing the data to the extent of the objection, unless the reasons for processing the data are more important than the circumstances indicated in the objection, or the data are necessary to establish, assert or defend against claims. Objection to marketing activities – if the data is used for marketing purposes, the objection does not need to be justified, and once submitted, your data will not be used for these purposes.

7. The right to file a complaint with the supervisory authority.

If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority. In Poland, this is the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw, www.uodo.gov.pl).

8 Source and categories of data processed.

The Administrator receives data directly from Customers, from persons acting on behalf of Customers who place an order or contact them in connection with a contract (e.g. Employees or Customer Representatives), and obtains data from CEIDG or REGON.

The Administrator processes the Customers’ identification and contact data, as well as the data necessary for the execution of the contract and the issuance of accounting documents (including name, company, address, VAT ID, REGON, bank account number, information regarding the ordered goods or services and the terms of the contract, signature and contact data such as telephone number, mailing address, e-mail address).

In terms of assessing the credibility of the Client, the Administrator also processes data on the payment of liabilities, which it obtains from business information bureaus, business intelligence agencies and other public registers.

Laws cited:
^1Regulation(EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
² In particular, the provisions of the Value Added Tax Law of March 11, 2004, the Tax Ordinance Law of August 29, 1993, the Corporate Income Tax Law of February 15, 1992, and the Accounting Law of September 29, 1994.
³ Law of July 12, 2024 Electronic Communications Law.
⁴ General statutes of limitations and how they are calculated are set forth, among others, in Articles 118 – 125 of the Civil Code of April 23, 1964.
⁵ The time limits for storing tax records are set by Article 86 §1 and Article 70 of the Tax Ordinance Act of August 29, 1993. According to the regulations, documents must be kept for at least 5 years counted from the end of the year in which the tax payment deadline passed. On the other hand, specific time limits for the storage of accounting records are set by Article 74 of the Accounting Law of September 29, 1994.

Fabryka Mebli TOM-POL Tomasz Wróbel sp.k. based in Opatów, 1A Szpot Street, 63-645 Opatów, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań – Nowe Miasto and Wilda in Poznań, IX Economic Department of the National Court Register under the KRS number 0001038188; NIP: 6192057630; REGON: 524616221.