Privacy Policy

  1. General Provisions
    • This Privacy Policy is addressed to the Users of the website published and operated at: https://sacher-cnc.com/pl/ (hereinafter: the Website).
    • The Policy sets out the rules for the collection and processing of personal data obtained by the Controller when the Website is used.
    • This Policy also applies to the Controller's processing of personal data of persons who follow the Controller's profile on social media and on YouTube.
  2. Personal Data Controller

The personal data controller is SACHER Sp. z o.o., with its registered office in Bolesławiec, ul. Ekonomiczna 6, NIP (tax ID):     6121871116, KRS: 0000850080, hereinafter referred to as the "Controller". The Controller's other contact details are: e-mail: biuro@sacher-cnc.com, tel.: 75 734 65 70.

  1. Legal Basis for Processing Personal Data
  • Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR).
  • The legal basis for the Controller's processing of your personal data may be:
    1. your consent to the processing of data (Art. 6(1)(a) GDPR);
    2. the necessity of performing contracts concluded by you with the Controller, as well as taking steps prior to entering into such contracts at your request (Art. 6(1)(b) GDPR);
    3. the processing is necessary for compliance with a legal obligation to which the Controller is subject (Art. 6(1)(c) GDPR),
  • Providing your personal data on the basis of points a–c above is voluntary; however, refusing to provide it will make it impossible for you to use the Website and the services provided by the Controller.
  • Your personal data may be processed in connection with the Controller's legitimate interest, in order to protect and pursue claims and for the direct marketing of services provided by the Controller (Art. 6(1)(f) GDPR).
  1. Purposes and Scope of Personal Data Processing
  • The personal data you provide will be processed:
    1. to enable you to use the Website,
    2. for the purpose and to the extent necessary in connection with concluding and performing a contract (e.g. submitting an enquiry about the services provided),
    3. to comply with a legal obligation to which the Controller is subject (arising, for example, from accounting and tax regulations),
    4. for purposes arising from the legitimate interests pursued by the Controller (i.e. protecting and pursuing claims, marketing of its own products 
      and services),
  • In connection with the above purposes of data processing, the Controller may process the following personal data: first and last name, company name, 
    identification numbers such as tax ID (NIP), e-mail address, telephone number, and other data arising from your profile on the social media platform through which you contact the Controller. The Controller will also process data such as cookies and IP address.
  1. Disclosure of Personal Data
  • Your personal data will be disclosed to competent public authorities or third parties if such an obligation arises from generally applicable law.
  • In order to properly provide its services, the Controller may disclose your personal data to entities that support the Controller 
    in the proper provision of the service, e.g. hosting providers.
  • The Controller processes personal data obtained directly from you (the data subjects).
  1. Data Protection
  • The Controller is obliged to protect your data collected when you use the Website in accordance with applicable regulations and with the highest standards of data security and protection.
  • The Controller ensures the security of personal data through appropriate technical and organisational measures implemented to prevent unlawful processing of data and its accidental loss, destruction or damage. The Controller takes all possible measures to ensure that personal data is:
    1. accurate and processed lawfully,
    2. obtained only for specified purposes and not further processed in a manner incompatible with those purposes,
    3. adequate, relevant and not excessive,
    4. accurate and up to date,
    5. not kept longer than necessary,
    6. processed in accordance with the rights of the data subjects, including the right to restrict disclosure,
    7. stored securely,
    8. not transferred without adequate protection.
  • Personal data sets are protected against access by third parties. 
    Only persons authorised by the Controller, trained in personal data protection and obliged to keep your personal data confidential are permitted to process your personal data.
  • Personal data collected for the purpose of concluding or performing a contract and complying with a legal obligation by the Controller is stored for the period necessary to: (1) protect or pursue any claims arising from the contract, (2) perform the contract (e.g. handling complaints), (3) comply with a legal obligation imposed on the Controller (arising, for example, from accounting 
    and tax regulations). Personal data processed for marketing purposes and other purposes than those listed above will be processed until the consent previously given for such processing is withdrawn or an objection is lodged.
  1. Rights
  • You are entitled to request from the Controller access to your personal data, its rectification, erasure or restriction of processing, to object to processing, and the right to data portability. You have the right to withdraw your previously given consent to the processing of personal data at any time.
  • You have the right to obtain the following information from the Controller:
    1. about the purpose, scope and manner of processing your personal data,
    2. since when your data has been processed,
    3. about the source from which your data originates,
    4. about the recipients or categories of recipients to whom the data is disclosed.
  • In addition, at your request the Controller will supplement, update and rectify your personal data, and will suspend (temporarily or permanently) its processing or delete it if the data proves to be incomplete, outdated, inaccurate or was collected in violation of the law, or is no longer necessary for the purpose for which it was collected.
  • Moreover, where the Controller processes your data for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing, 
    including profiling, to the extent that the processing is related to such direct marketing. To exercise the rights referred to 
    in this paragraph, you must submit an appropriate request to the Controller at the e-mail address indicated in paragraph 2.
  • You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data infringes applicable regulations.
 8. Cookies
  • The Controller declares that it uses "cookies".
  • Cookies are information sent by the server and stored on your device (e.g. the hard drive of your computer or the memory of your phone).
  • Data obtained through cookies does not allow you to be identified, but enables the Controller to determine whether a given device was used to visit the Website (which is not the same as information about who visited the Website) and what preferences the user had at the time (what interested them most on the Website).
  • The Controller uses its own cookies for the purposes of:
    1. ensuring the proper functioning of the Website,
    2. statistics,
    3. adapting the Website to your preferences.
  • The Controller may place both persistent 
    and temporary files on your device.
  • Temporary files are usually deleted when the browser is closed, whereas 
    persistent files are not deleted when the browser is closed.
  • Temporary files are used to identify the User as logged in.
  • Persistent files are files that provide certain functions not only during a given session but for the entire period they are stored on the device. Persistent files are used, for example, to: collect information on how the Website is used, including data on the subpages visited by the User and possible errors, or to check the effectiveness of the Website's advertising.
  • For the purpose of advertising the Website and the services it provides, the Controller uses online marketing and advertising tools. These tools may use cookies placed on your device.
  • At any time you may delete the cookies left by the Website 
    from your device in accordance with the instructions of your web browser's manufacturer.
  • It is also possible to block cookies' access to your device by configuring your browser accordingly; however, the Website may then not function properly.
  • The Controller uses a server that automatically records in the server logs, for the purpose of analysing the operation of the IT system, 
    information about the device you use to connect to the Website, i.e. the type of device and browser 
    you use, your computer's IP address, the date and time of access, a text description of the event and the event classification.
  • Access to the log files is limited to persons authorised to administer the IT system. Log files may be used to prepare statistics 
    on the assessment of traffic in the application and the occurrence of errors, which do not allow you to be identified.
  1. Final Provisions

In the future it may be necessary to update the rules set out in this Privacy Policy. In such a case the Controller will inform you of any change to the content of this Policy. The updated rules will be available on the Website.