Privacy policy

Privacy Policy: rules on the collection and processing of Personal Data by the Controller

I. Definitions:

1. Controller/Organiser: DOKO Sp. z o.o., entered in the Register of Entrepreneurs by the District Court in Toruń, 7th Commercial Division of the National Court Register, under KRS number 0000346050, with its place of business and address for service at ul. Lidzbarska 2, 87-300 Brodnica, Poland, NIP 874-175-15-60, REGON 340702457, email address: info@doko.pl, telephone number: 566970148.
2. Personal Data: information allowing Users to be identified by one or more specific factors determining the physical, physiological, genetic, economic or social identity of a natural person, including their home address, device IP address, location data, online identifier and information collected via cookies and other similar technologies.
3. The Controller’s website, the Website: the website made available by the Controller at www.doko.pl and at addresses redirecting from it, as well as any address supplementing or continuing it and any address replacing it. The Website presents information about the Controller, its current commercial range, current promotions and similar content. The Website offers no registration and no user accounts. Contact with the Controller is made through the contact form, by telephone or by email.
4. User: a natural person using the Website. The Website requires no registration and no account, so every visitor is a User, whether or not they have used the contact form.
5. GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
6. Inquiry: a message sent by a User through the contact form or the request for quotation form available on the Website. The Website provides visitors with no accounts and no login area.
7. Policy: this Privacy Policy.

II. The controller of Users' personal data, that is, who collects and processes Users' Personal Data:

The controller of the personal data (hereinafter the „Controller”) of Users using the Website is:

DOKO Sp. z o.o., entered in the Register of Entrepreneurs by the District Court in Toruń, 7th Commercial Division of the National Court Register, under KRS number 0000346050, with its place of business and address for service at ul. Lidzbarska 2, 87-300 Brodnica, Poland, NIP 874-175-15-60, REGON 340702457.

Email address: info@doko.pl, telephone number: 566970148.

The Controller attaches particular importance to protecting the data provided by Website Users. Data provided by Users is protected and secured by the Controller against access by unauthorised persons.

The Website is publicly available to all interested parties.

Using the Website requires no registration. A User provides their data only when they voluntarily complete the contact form or the request for quotation form.

III. Use of the Website and personal data collected by the Controller: what personal data of Users is collected and processed, and for what purpose?

The Service has no registration. Users provide personal data voluntarily by filling in the contact form or the quote request form. The scope of that data is: first and last name, e-mail address, optionally a phone number, the subject and the content of the message. The address of the page the message was sent from is stored with it, and for a quote request also the list of products the User added. The record that consent was given is stored as well, because the Controller must be able to demonstrate that it was given.

The Controller collects and processes a User’s personal data from the moment that User sends a message through a form. Simply browsing the Website requires no personal data.

Beyond the data given in the form, the Controller processes the IP address and other technical identifiers. This data also covers information gathered through cookies or other similar technologies.

Your activity on the Website, including your Personal Data, is also recorded in system logs.

Forms on the Website are protected by Cloudflare Turnstile, which guards against spam and automated submissions. For this purpose Cloudflare, Inc. processes the IP address and technical information about the User’s browser.

Information collected in the logs is processed primarily for purposes connected with the provision of services, that is, in order to:

• keeping the Service running and displaying its content correctly,
• diagnosing errors and maintaining the Service technically. The Service uses no analytics or statistics tools such as Google Analytics and does not measure User traffic,
• detect abuse, and identify and counter threats to the stability and correct operation of the Website and ensure the security of Website Users,
• receive, consider and handle any complaints or questions from Users,
• answering the inquiry sent through the form, including preparing a commercial quote and checking product availability.

Legal bases for processing:

• Article 6(1)(a) GDPR (consent) for the data entered in the form. Ticking the consent box is required to send the message, and consent may be withdrawn at any time,
• Article 6(1)(b) GDPR (steps taken prior to entering into a contract), where the enquiry concerns an offer, a price or product availability,
• Article 6(1)(f) GDPR (legitimate interests of the Controller) for server logs, protecting the forms against spam and for establishing, exercising and defending claims.

Providing the data is voluntary but necessary for the Controller to answer the enquiry. Without a name, an e-mail address and the message content the form cannot be submitted, and without that data there is no way to prepare a reply or an offer.

The data is not used for automated decision-making or for profiling within the meaning of Article 22 GDPR. No decision concerning a User is taken automatically.

Users have the right to access their data and to have it updated free of charge at any time.

The collected data set is protected, that is, treated as a separate database and stored in a logically separated security zone providing appropriate protection for the database.

IV. Disclosure of Users’ personal data: who may request access to this data, and when?

Personal data is shared only where this is necessary for the Service to work or to answer an enquiry, and only to the extent required. The recipients may be:

• the provider maintaining the IT infrastructure and the server that runs the Service and holds the enquiry database,
• Microsoft, as the provider of the Microsoft 365 mail service through which the notification about a new enquiry is sent,
• Cloudflare, Inc., as regards the IP address and technical browser information, in connection with protecting the forms with the Turnstile service,
• a manufacturer or supplier of goods, only where answering the enquiry requires checking product availability or preparing an offer, and only to the extent necessary to provide that answer.

It should be stressed that the Controller may be obliged to provide information gathered in connection with the Website to authorised bodies on the basis of lawful requests, to the extent arising from the request.

Users’ data is processed in a manner consistent with the scope of the consent granted and with the requirements of the law, in particular the GDPR.

Apart from what follows from the use of the services listed above, the Controller does not transfer personal data outside the European Economic Area. Cloudflare, Inc. and Microsoft operate infrastructure that covers third countries, including the United States, so a transfer to a third country may occur. Any such transfer takes place on the basis of the mechanisms provided for in Chapter V GDPR, in particular standard contractual clauses approved by the European Commission or an adequacy decision.

V. What are cookies?

The Service uses cookies, that is small text files stored on the User's device, together with the browser's local storage. They are written and read by the Controller and serve only purposes necessary for the Service to work: remembering the chosen language version, keeping the quote request list, remembering that a notice has been dismissed and maintaining the session after signing in to the content panel. A full list, including names and retention times, is set out in the Cookie Policy.

Software for browsing websites (a web browser) usually allows cookies to be stored on the User's end device by default. Website Users may change these settings. A web browser allows cookies to be deleted. Automatic blocking of cookies is also possible. Detailed information on this can be found in the help or documentation of the web browser.

The Service uses no ad networks, no analytics tools and no profiling. We display no advertising, measure no traffic and pass on no information about how a User moves around the Service.

Disabling cookies is possible, but it may make using websites more difficult and in extreme cases impossible.

VI. What information about User activity on the Website is stored by the logs of the server hosting the Website?

Information about User behaviour is logged automatically at the server layer of the IT system used by the Website. Digital data is used solely for the purpose of administering the Website and ensuring the most efficient possible handling of the hosting services provided.

The resources viewed are identified by URLs. In addition, the following may be recorded: the time the request arrived, the time the response was sent, the client station name (identification carried out via the HTTP protocol), information about errors that occurred during the HTTP transaction, the URL of the page previously visited by the User (referer link) where the User reached the Website via a link, information about the User's browser and the IP address.

The data is not associated with specific individuals browsing the pages and is used solely for the purpose of server administration.

VII. User rights

The User has the following rights:

1. to access the content of the data and to request its rectification,
2. to erasure of the Data,
3. to restriction of processing,
4. the right to data portability,
5. the right to object to the processing of data, and also
6. the right to lodge a complaint with a supervisory authority, which in Poland is the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

If you provided your data through a form and consented to its processing, you may withdraw that consent in whole or in part at any time by sending a message to info@doko.pl. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

VIII. Period of personal data processing

Users' Personal Data will be processed:

• for the purpose of handling complaints from Website Users or considering claims relating to the use of the Website, but no longer than the period in which complaints or claims may be raised, or no longer than until disputes are concluded, complaints handled or claims satisfied,
• until the inquiry has been answered and the related commercial correspondence concluded, and thereafter for the limitation period of any claims.

This is necessary in order to answer Users’ inquiries and for the correct operation of the Website.

If you withdraw your consent to the processing of your personal data, that processing will end.

In that case the data will be deleted or anonymised, except that the name, e-mail address, content of the correspondence and the record of consent may be processed until the limitation period for claims connected with the enquiry expires, in order to establish, exercise or defend such claims.

If the User browses the Service without sending an enquiry, the Controller processes their data for as long as cookies and browser local storage entries remain on the User's device: the quote request list, the record that the cookie notice was dismissed and the record of dismissed event announcements.

IX. Contacting the Controller. Changes to the Privacy Policy

If you have any questions or doubts, please contact us by email at info@doko.pl.

For updating or deleting personal data, please contact us at info@doko.pl or by phone: 566970148.

This Policy applies from the day it is published in the Service. If it changes, the Controller publishes the new version on this page and updates the date shown at the top of the document. The Service has no newsletter and no user accounts, so there is no list of addresses to which a notification of a change could be sent. Checking the date on this page is the only way to establish whether the document has changed.