privacy
policy

PLUM sp. z o.o. based in Ignatki, 19 Wspólna St., Ignatki, 16-001 Kleosin (hereinafter referred to as Plum sp. z o.o. or ADO (personal data controller).

You may contact Plum sp. z o.o.:

• by e-mail: plum@plum.pl
• by phone: 0048 85 749 70 00
• by mail: 19 Wspólna St., Ignatki, 16-001 Kleosin

PLUM sp. z o.o. collects and processes personal data to the extent necessary to fulfill the purpose for which they were collected.

Depending on the purpose and legal basis for the collection and processing of personal data, PLUM sp. z o.o. may collect and process the following data, among others:

• basic identification data, including, but not limited to: first name, last name, company name, VAT ID, REGON,
• contact data, including, but not limited to: address, telephone number, e-mail address,
• other data necessary for the purposes for which they were collected.

The privacy policy distinguishes the following groups of people whose data is processed by ADO:

• Customers
• Potential clients
• Contractors/suppliers
• Potential Contractors/Suppliers
• Persons whose data is processed in connection with a warranty, complaint or service repair order,
• Representatives of customers/contractors
• Users of accounts created at www.plum.pl or www.plummac.com2
• Persons contacting ADO, including those using contact forms
• Persons towards whom marketing activities are undertaken

In addition, the cookie policy sets out the rules for collecting and using information about Users of the websites operated by ADO recorded in cookies and system logs.

1. Information intended for customers:

If you are bound by a contract with PLUM sp. z o.o. under which PLUM sp. z o.o. provides certain services/sells or delivers goods to you, PLUM sp. z o.o. processes your data for the purpose, on the legal basis and for the period indicated below.

• Conclusion and execution of a contract concluded with ADO or taking action prior to its conclusion at your request. Period of storage/processing of personal data is the period of negotiation and, if an agreement is concluded, the duration of the agreement. Legal basis for processing personal data is Article 6(1)(b) RODO
• Fulfillment by ADO of obligations stipulated by law, in particular tax and accounting regulations. Period of storage/processing of personal data is the period required by the relevant legislation for the retention of accounting and tax records. Legal basis for processing personal data is Article 6(1)(c) RODO in conjunction with other specific provisions.
• Pursuing claims and defending against claims related to conducted business activities, which constitutes a legitimate interest of the data controller. Period of storage/processing of personal data is investigating and defending against claims related to business activities, which is ADO’s legitimate interest.  Legal basis for processing personal data is Article 6(1)(b) RODO
• Direct marketing activities of its own products and services, which is a legitimate interest of ADO. Period of storage/processing of personal data until the termination of cooperation with you or until you lodge an effective objection to the processing of your data for the indicated purpose, whichever occurs first. Legal basis for processing personal data is Article 6(1)(b) RODO

2. Information intended for potential customers

If you are interested in ADO’s offerings or ADO presents its offerings to you then ADO processes your data for the purpose, on the legal basis and for the period indicated below.

• Presentation of ADO’s offerings, including customized offers, which is also a legitimate interest of ADO. Period of storage/processing of personal data is the period necessary for correspondence/conversations related to the offer, but no longer than until the withdrawal of consent (in the case of data processing based on consent) or the expression of an effective objection (in the case of data processing based on legitimate interest). Legal basis for processing personal data is Consent to data processing -Article 6(1)(a) RODO and ADO’s legitimate interest – Article 6(1)(f) RODO
• Pursuing and defending against claims arising from business activities, which constitutes a legitimate interest of data processing by ADO. Period of storage/processing of personal data is the period of limitation of claims under the law. Legal basis for processing personal data is Article 6(1)(b) RODO

3. Information intended for Contractors/Suppliers

If:

• you have a contract with ADO under which you provide certain services to ADO or sell/deliver certain goods to ADO,
• you take actions prior to the conclusion of the contract,

then ADO will process your data for the purpose, on the legal basis and for the period indicated below.

• Entering into and fulfilling a contract for the provision of services or sale/supply of goods or taking action prior to ordering the provision of services or sale/supply of goods. Period of storage/processing of personal data is contract period. Legal basis for processing personal data is Article 6(1)(b) RODO
• Fulfillment by ADO of obligations stipulated by law, in particular tax and accounting regulations. Period of storage/processing of personal data is the period required by the relevant legislation for the retention of accounting and tax records. Legal basis for processing personal data is Article 6(1)(c) of the RODO in connection with other specific provisions
• Investigating and defending against claims related to business activities, which is ADO’s legitimate interest. Period of storage/processing of personal data is the period of limitation of claims prescribed by law. Legal basis for processing personal data is Article 6(1)(b) RODO
• Storage for possible future use of your offer, which is a legitimate interest of ADO. Period of storage/processing of personal data is until the purpose has been fulfilled or until you lodge an effective objection to the processing of the data for the indicated purpose, whichever occurs first, but no longer than the period of data retention for the other purposes indicated above. Legal basis for processing personal data is Article 6(1)(b) RODO

4. Information intended for potential Contractors/Suppliers

If you present your offer to ADO then ADO processes your data for the purpose, on the legal basis and for the period indicated below.

• Presentation of the offer/acquaintance with the offer by the ADO. Period of storage/processing of personal data is the period necessary for correspondence/conversations related to the offer presented to the ADO, but no longer than until the withdrawal of consent (in the case of data processing on the basis of consent) or the expression of an effective objection (in the case of data processing on the basis of a legitimate interest). Legal basis for processing personal data is Article 6(1)(b) RODO
• Fulfillment of ADO’s legitimate interest in asserting and defending against claims related to its business activities. Period of storage/processing of personal data is othe period necessary for the investigation of claims and defense against claims, taking into account the limitation periods specified in generally applicable laws -for the investigation of claims and defense against possible claims. Legal basis for processing personal data is Article 6(1)(b) RODO

5. Information intended for persons whose data are processed in connection with the ordering of warranty, complaint or service repairs

If ADO:

• Processes a warranty, claim or service repair order on your behalf
• Processes a warranty, claim or service repair order for the entity on whose behalf or for whose benefit you are acting
• Considers an order for warranty, complaint or service repair for the benefit of an entity performing activities or services on your behalf related to the necessity of processing your data by ADO

then ADO will process your data for the purpose, on the legal basis and for the period indicated below.

• Consideration and execution of a warranty, complaint or service repair order, which is also a legitimate interest of ADO. Period of storage/processing of personal data is the period of consideration and execution of a warranty or service repair order if the data is processed on the basis of Article 6 (1) (f)RODO) no longer than until an effective objection is filed. Legal basis for processing personal data is Article 6(1)(b) RODO (applies to persons whose data are processed under a contract with ADO), and/or Article 6(1)(f) RODO (applies to persons acting on behalf of the requesting entity or persons for whom the requesting entity performs maintenance activities)
• Fulfillment by ADO of obligations stipulated by law, in particular tax and accounting regulations. Period of storage/processing of personal data is the period required by the relevant legislation for the retention of accounting and tax records. Legal basis for processing personal data is Article 6(1)(c) RODO in connection with other special provisions
• Pursuing and defending against claims arising from business activities, which constitutes a legitimate interest of data processing by ADO. Period of storage/processing of personal data is the period of limitation of claims under the law. Legal basis for processing personal data is Article 6(1)(b) RODO
• Records of phone calls regarding defects to facilitate remote assistance to customers, based on information about previous repairs. Period of storage/processing of personal data is othe period necessary to fulfill the purpose for which the personal data were collected, no longer than until you successfully object to the processing of the data. Legal basis for processing personal data is Article 6(1)(b) RODO
• Direct marketing activities of its own products and services, which is a legitimate interest of ADO. Period of storage/processing of personal data is duntil the termination of the cooperation with the data subject or until the filing of an effective objection to the processing for the indicated purpose, whichever event occurs first. Legal basis for processing personal data is Article 6(1)(b) RODO

6. Information intended for representatives of clients/contractors/potential clients or contractors/subcontractors submitting orders

If you are a representative of a client/contractor/potential client or a contractor/entity submitting an order, e.g. you act as a contact person or a person authorized to perform certain actions on behalf of the aforementioned entities, including actions resulting from a contract entered into by the client/contractor with ADO then ADO processes your data for the purpose, on the legal basis and for the period indicated below.

The bidding stage

• Presentation by ADO of its offer to the entity on behalf of or for which you are acting, or learning about the offer of the entity on behalf of or for which you are acting, which is also a legitimate interest of ADO. Period of storage/processing of personal data is the period necessary for correspondence/conversations related to the offer, but no longer than until the withdrawal of consent (in the case of data processing on the basis of consent) or the expression of an effective objection (in the case of data processing on the basis of legitimate interest). Legal basis for processing personal data is Article 6(1)(b) RODO

Contract stage

• Performance of a contract concluded by ADO with an entity on whose behalf or for whose benefit you are acting, or taking action prior to its conclusion at the request of the aforementioned entity, which constitutes a legitimate interest of ADO or the entity on whose behalf you are acting. Period of storage/processing of personal data is the duration of the contract for which you are acting on behalf of or for the benefit of an entity that has a contract with ADO. Legal basis for processing personal data is Article 6(1)(b) RODO
• Fulfillment by ADO of obligations stipulated by law, in particular tax and accounting regulations. Period of storage/processing of personal data is the period required by the relevant legislation for the retention of accounting and tax records. Legal basis for processing personal data is Article 6(1)(c) of the RODO in connection with other specific provisions
• Pursuing and defending against claims arising from business activities, which constitutes a legitimate interest of data processing by ADO. Period of storage/processing of personal data is the period of limitation of claims under the law. Legal basis for processing personal data is Article 6(1)(b) RODO
• Direct marketing activities of its own products and services, which is a legitimate interest of ADO. Period of storage/processing of personal data is until the termination of the cooperation with the data subject or until the filing of an effective objection to the processing for the indicated purpose, whichever event occurs first. Legal basis for processing personal data is Article 6(1)(b) RODO

7. Information intended for Users of accounts established on www.plum.pl and www.plummac.com

If you are an Account User then ADO processes your personal data for the purpose, on the legal basis and for the period indicated below.

• Implementation of the account maintenance agreement concluded with ADO. Period of storage/processing of personal data is contract term. Legal basis for processing personal data is Article 6(1)(b) RODO
• Pursuing and defending against claims arising from business activities, which constitutes a legitimate interest of data processing by ADO. Period of storage/processing of personal data is the period of limitation of claims under the law. Legal basis for processing personal data is Article 6(1)(b) RODO

8. Information intended for those who contact ADO by phone, email or contact forms available on ADO’s websites

If you contact ADO or persons acting on ADO’s behalf by telephone, email or contact forms available on ADO’s websites then ADO processes your data for the purpose, on the legal basis and for the period indicated below.

• Contact in connection with an inquiry/request made by phone, email or contact form. eriod of storage/processing of personal data is the period necessary to conduct correspondence/conversations related to the inquiry/request, but no longer than until the filing of an effective objection to the processing of data for this purpose (in the case of processing of personal data on the basis of Article 6(1)(f) RODO) or the period necessary to perform activities related to the execution of a contract or to a request prior to the conclusion of a contract (in the case of data processing on the basis of Article 6(1)(b) RODO)
• Pursuing and defending against claims arising from business activities, which constitutes a legitimate interest of data processing by ADO. Period of storage/processing of personal data is the period necessary to assert and defend against claims, taking into account the limitation periods specified in generally applicable laws. Legal basis for processing personal data is Article 6(1)(b) RODO

9. Individuals to whom marketing efforts are made

If you are a person for whom ADO undertakes marketing activities then ADO processes your data for the purpose, on the legal basis and for the period indicated below.

• Conducting marketing activities related to the activities of PLUM sp. z o.o., including establishing business relations, sending offers, information about goods, services, promotions, including offers, information tailored to the needs of the recipient – within the framework of ADO’s legitimate interest, which is the marketing of products and services, or your consent expressed. Period of storage/processing of personal data is the period necessary to achieve the purpose, but no longer than until your objection to the processing of your personal data for this purpose, or if you have given marketing consent – until you withdraw the consent you have given. Legal basis for processing personal data is a Article 6(1)(b) RODO and/or Article 6(1)(a) RODO, Article 10(2) Law on Providing Electronic Services, Article 172 Telecommunications Law
• Profiling (creation of preference profiles) aimed at tailoring the services offered by ADO to your needs, which is a legitimate interest of ADO. Period of storage/processing of personal data is the period necessary to achieve the purpose, but no longer than until you object to the processing of your personal data for that purpose. Legal basis for processing personal data is Article 6(1)(b) RODO)

In most cases, ADO obtains your personal data directly from you. In certain situations, ADO may obtain your data:

• from the entity on whose behalf or for whose benefit you are acting (this applies in particular to employees/co-workers of ADO’s contractors/customers); the data provided are most often name, surname, official position, e-mail address, telephone number,
• from the entity from which you purchased the device with integrated PLUM products or which provides maintenance services to you – the data provided are: name, surname, address, telephone number, email,
• from publicly available sources (e.g., from websites); in such cases, ADO collects and processes personal data in the form of first name, last name, company name, telephone number, e-mail address, official position

• Customers/potential customers

Your provision of data is voluntary, but it is necessary for ADO to present an offer and to conclude and perform a contract. Refusal to provide your data may result in ADO’s inability to present you with an offer and to conclude and execute an agreement.

• Contractors/Potential Contractors

Provision of your data is voluntary, but is necessary to present ADO with offers and to conclude and execute a contract. Refusal to provide your data may result in ADO’s inability to familiarize you with the offer and to conclude and execute the agreement.

• Persons whose data is processed in connection with the order of warranty, complaint, service repairs

If you provide data directly to ADO their provision is voluntary, but necessary to process the order, refusal to provide them (if necessary) will result in the inability to process the order

• Representatives of the contractor/customer/potential customer or contractor

If you provide personal data directly to ADO, the provision of such data is voluntary, but necessary for ADO to present an offer, for ADO to become acquainted with the offer, for ADO 10 to perform a contract for the entity on whose behalf you are acting. If you do not provide data, the implementation of these activities will be impossible or difficult.

• Users of accounts

Providing your data is voluntary, however, it is necessary to establish an account and use its functionality. Failure to provide data will result in the inability to conclude an account agreement.

• Persons contacting ADO by phone, email or contact form

Provision of your data necessary to answer and respond to your application/questions is a condition for obtaining a response. Failure to provide data will result in the inability to respond to your application/question.

• Individuals to whom marketing efforts are made

Provision of your data is voluntary, but necessary to present you with commercial and marketing information regarding ADO’s activities. Refusal to provide data will result in the inability of ADO to provide you with commercial and marketing information.

Your personal data may be accessed by:

• ADO employees/co-workers authorized to process your personal data at the direction of ADO
• entities entrusted by ADO with the processing of personal data, including:
• providers of technical and organizational services (in particular, providers of ICT services, postal and courier service providers);
• providers of legal advisory and financial services, including in the case of asserting and defending against claims related to PLUM sp. z o.o.’s business activities;
• other entities/persons/authorities to the extent and in accordance with the rules of law

with the proviso that the transfer/sharing of your data with the aforementioned entities shall be carried out in accordance with the applicable laws and with full compliance with the rules related to their security.

PLUM sp. z o.o. does not intend to transfer your data to countries outside the European Economic Area (countries other than the European Union and Iceland, Norway and Liechtenstein)/international organizations.

In connection with the processing of personal data by PLUM sp. z o.o., you are entitled to:

• The right to access your personal data (Article 15 RODO);
• The right to rectify your personal data (Article 16 RODO);
• The right to request erasure in the cases specified in Article 17(1), subject to the exceptions specified in the provision of Article 17(3) of the RODO;
• The right to request restriction of data processing in cases specified in Article 18 RODO;
• the right to data portability in the cases specified in the provisions of Article 20 RODO.

If you wish to exercise any of these rights – PLUM sp. z o.o. allows you to contact us:

• via email: plum@plum.pl
• by mail: ul. Wspólna 19, Ignatki, 16-001 Kleosin

In addition, you also have the right to lodge a complaint with the supervisory authority in charge of personal data protection in case PLUM sp. z o.o. violates data protection regulations in the processing of your personal data.

If the ADO processes your personal data on the basis of consent, you have the right to withdraw your consent at any time without affecting the validity of the processing that was carried out on the basis of consent before its withdrawal.

You may withdraw your consent, among other things:

• via email: plum@plum.pl
• at the registered office of PLUM sp. z o.o. , i.e. Wspólna 19, Ignatki, 16-001 Kleosin or by mail to the indicated address

No automated decisions (decisions without human involvement) will be made with respect to your personal data, including your data will not be subject to automated profiling.

In addition, PLUM sp. z o.o. informs you that, for reasons related to your particular situation, you have the right to object to the processing of your personal data, including profiling, where the basis for data processing by the ADO is:

• the necessity of the processing for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1)(e) RODO)
• legitimate legal interest of the ADO (Article 6(1)(f) RODO)

Once an objection has been lodged, PLUM sp. z o.o. will not be allowed to process personal data on the aforementioned grounds for processing, unless it demonstrates the existence of valid legitimate grounds for processing overriding the interests, rights and freedoms of the data subject, or grounds for establishing, asserting and defending claims.

If PLUM sp. z o.o. processes your data for direct marketing purposes, you have the right to object to the processing of your data by PLUM sp. z o.o. for direct marketing purposes.

PLUM sp. z o.o. uses appropriate technical and organizational measures to keep your personal data safe, including protecting your personal data from unauthorized access, loss or destruction. In order to ensure the security of your personal data, PLUM sp. z o.o. has implemented appropriate personal, organizational, technical (IT) and physical security measures.

1.The Cookie Policy applies to websites owned by PLUM sp. z o.o. with its registered office in Ignatki (hereinafter referred to as the Administrator).

2.The Cookie Policy defines the principles of collecting and using information about website Users recorded in cookies and system logs.

1.The Website uses cookies, i.e. IT data, in particular text files, which are generated automatically by the Website User’s web browser and saved and stored on the Website User’s terminal device (e.g. computer, tablet, smartphone). Cookies usually contain the name of the website from which they come, the time they are stored on the end device and a unique number. The use of cookies on the website is not intended to identify Users. Cookies can be read by the Administrator’s IT system (own cookies) or IT systems of third parties providing analytical services to the Administrator (third-party cookies).

2.The Administrator uses the following cookies:

Necessary cookies – always active

Cookies that allow you to navigate the website and use its functions. Essential cookies are installed on the Users’ device by the Administrator. The legal basis for the processing of personal data in connection with the use of essential cookies is the Administrator’s legitimate interest (Article 6(1)(f) RODO) in ensuring the highest quality of the websites operated. Without the necessary cookies, the User is unable to navigate the website and use its functions.

3. Analytical and performance cookies (at the User’s choice): Cookies used to create analysis and statistics related to the way Users use the website, which allows improving its structure and content. Analytical and performance cookies may be installed on the User’s device by the Administrator or its partners. In order to create statistics, the Google Analytics tool is used, which involves the use of cookies from Google LLC. More information is available at: https://support.google.com/analytics/answer/6004245 The User has the possibility to block Google Analytics cookies, among others, by installing a browser add-on located at: https://tools.google.com/dlpage/gaoptout?hl=pl The processing of personal data of Website Users in connection with the use of analytical and performance cookies depends on the User’s consent to the use of such cookies. The User may give or withdraw consent through the tool available on the website for consent and management of cookies.

The legal basis for processing personal data in connection with the use of analytical and performance cookies is the Administrator’s legitimate interest (Article 6(1)(f) RIODO) in ensuring the highest quality of the websites operated.

4. The Administrator uses the following cookies:

• Sesion files – temporary files stored on the User’s end device until the User logs out, leaves the website or turns off the software (web browser).
• Permanent – stored on the User’s end device for the time specified in the parameters of cookies or until they are deleted by the User.

5. The handling of cookies (the conditions for storing or accessing them) can be changed by the Website User, including withdrawal of expressed consents by making appropriate changes in the settings of the software installed in the final device used by the Website User (changes in the settings of the Internet browser). In the settings of the web browser, the settings can be changed by blocking the automatic handling of cookies or receiving information about each placement of cookies on the web site User’s device. The website user can delete cookies placed on his/her terminal device at any time using the options available in his/her web browser. The options for managing and deleting cookies vary depending on the browser used.

You can find ways to configure the settings for cookies in each browser at the following addresses:

Google Chrome – https://support.google.com/chrome/answer/95647?hl=pl

Mozilla FireFox – https://support.mozilla.org/pl/kb/usuwanie-ciasteczek-i-danych-stron- firefox?redirectlocale=pl&redirectslug=usuwanie-ciasteczek

Safari – https://support.apple.com/pl-pl/guide/safari/sfri11471/mac

Opera – https://help.opera.com/pl/latest/web-preferences/#cookies

Microsoft Edge – https://support.microsoft.com/pl-pl/windows/usuwanie-plik%C3%B3w-cookie-i-zarz %C4%85dzanie-nimi-168dab11-0753-043d-7c16-ede5947fc64d5.

6. When the User uses the website, queries are sent to the server on which the website is stored. Individual queries are recorded in server logs. The logs contain the following information: time of visit, IP address, URL, browser. The information collected in the logs is processed primarily for purposes related to the operation of the website, including technical, administrative, IT system security, and analytical and statistical purposes. The legal basis for the Administrator’s processing of personal data is the Administrator’s legitimate interest (Article 6(1)(f) of the RODO). The information contained in the system logs is stored for the period necessary to achieve the purpose, but no longer than until the User submits an effective objection.

7. The data may be accessed by the Administrator’s employees/co-workers authorized to process personal data at the Administrator’s direction, entities providing technical services to the Administrator and providing web analytics tools.

8. In connection with the processing of data on the basis of the legitimate interest of the Administrator, the User has the right to object to the processing of his/her data. Other rights related to the processing of personal data are specified in the Privacy Policy.