Privacy Policy

Article 1. General provisions
This document constitutes an information clause in accordance with Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”) for persons (Customers) using the services of a Data Controller.
 
The controller of personal data within the meaning of Article 4(4) of the GDPR is Fabryka Armatur JAFAR S.A. with its registered office at the address: ul. Kadyiego 12, 38-200 Jasło, Poland, entered into the register of entrepreneurs of the National Court Register by the District Court for the city of Rzeszów, 12th Commercial Division of the National Court Register under the number 0000112602, NIP [Taxpayer Identification Number]: 685-00-10-620, REGON [National Business Registry Number]: 370195988; e-mail address: jafar@jafar.com.pl.
 
Pursuant to Article 32(1) of the GDPR, the controller shall observe the principle of personal data protection and shall apply appropriate technical and organisational measures to prevent accidental or unlawful destruction, loss, modification, unauthorised disclosure or unauthorised access to personal data processed in the course of its business.
 
The provision of personal data by the customer is voluntary. However, it is also a prerequisite for entering into an agreement concerning services or products offered by the controller. The customer is obliged to provide personal data, whereas failure to provide data results in the impossibility to benefit from the controller’s offer.
 
Article 2. Purpose and grounds for processing personal data
The controller processes personal data for the following purposes:
- execution and performance of sales contracts concerning products offered by the data controller,
- provision of services available on the data controller’s website (e.g. newsletter) via electronic means
- transmission of marketing information concerning the products or services offered by the data controller;
- provision of answers to questions addressed to the data controller via the contact form available on its website.
 
 
The grounds for the personal data processing are as follows:
Article 6(1)(b) of the GDPR for the purposes referred to in Clause 1(a) to (b);
Article 6(1)(a) and (f) of the GDPR for the purposes referred to in Clause 1(c) to (d).
 
Article 3. Data recipients. Transfer of data to third countries
The recipients of personal data processed by the controller may include entities acting as intermediaries in deliveries or entities that perform deliveries to persons purchasing the controller's products. The personal data will not be transferred to countries outside the European Economic Area.
 
Article 4. Period and scope of personal data storage
The data controller shall store personal data for the term of the agreement, the performance of which is related to the processing of data, but in the event of termination of the agreement, not longer than:
 
- for a period of time during which the data subject may exercise the rights under the controller's warranty or guarantee for defects in the sold item, unless a longer storage period is required by applicable law;
- for a period of 5 years in the case of personal data contained in settlement documents (invoices) in accordance with the Accounting Act;
- until the consent to the processing of personal data is withdrawn.
 
The controller collects and processes personal data provided in the contact form such as: name, surname, e-mail address, province.
 
Article 5. Data subject’s rights
Any person whose personal data are processed by the controller shall have the right of access to the content of his or her personal data, the right to rectify the personal data, erase the personal data (”the right to be forgotten”), the right to restrict the processing, the right to transfer personal data, the right to object to the processing and the right to withdraw his or her consent to the processing at any time.
Any person who considers that his or her personal data are processed by the controller in violation of the provisions of the GDPR has the right to file a complaint with the President of the Personal Data Protection Office.
 
Article 6. Profiling
The personal data obtained by the data controller shall not be processed automatically – including in the form of profiling.
 
 Article 7. Cookies
Our website (www.jafar.com.pl) uses cookies. These are small text files sent by a web server and stored by the browser software on the user’s computer. When the browser reconnects to a page, the website recognises the type of device from which the user establishes a connection. The parameters allow to read the information contained therein only to the server that created it. Cookies make it easier to use previously visited websites. The rules for processing data collected by cookies are specified in the Cookies Policy document. The cookies technology does not collect, process or collect personal data.
For detailed information on Cookies, please refer to the Cookies Policy document.
 
Article 8. How to obtain more information?
 
If you have questions about this Privacy Policy, your personal data or data protection on this website, please contact our data protection officer. Before we fulfil your request, we may require confirmation of your identity. We respond to such requests as quickly as reasonably possible. Please do not send sensitive personal data by e-mail.
 
In order to contact our data protection officer, please send an e-mail to: iodo@jafar.com.pl
or call: 13 44 290 41