Privacy and cookie policy
How personal data is processed and protected on the SerianGroup website, and which cookies it uses.
General provisions
This Privacy Policy sets out how the personal data of people who use the SerianGroup website (the “Website”) is processed and protected, and how cookies are used.
The Website is an information and catalogue website that presents the company’s product range. It does not sell online – it offers no user accounts, shopping basket or online payments. The company can be contacted through the contact form, by email and by phone.
The Controller makes every effort to ensure that personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”) and applicable Polish law.
Data controller
The controller of personal data is:
For any matter concerning the processing of personal data or the exercise of your rights, you can contact the Controller by email at office@seriangroup.com
Purposes and legal bases of processing
Personal data is processed for the following purposes and on the following legal bases:
To reply to an enquiry sent through the contact form – on the basis of the Controller’s legitimate interest in communicating with people interested in its products (Article 6(1)(f) GDPR).
To correspond, handle enquiries and take steps before a possible contract is concluded – because this is necessary to take steps at the data subject’s request, and on the basis of the Controller’s legitimate interest (Article 6(1)(b) and (f) GDPR).
To analyse how the Website is used and to improve it – on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR).
To keep the Website secure and working properly, and to administer it – on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR).
To run social media profiles and communicate with users of those platforms – on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR).
Recipients of personal data
Personal data may be shared with entities that support the Controller in running the Website and its day-to-day business, only to the extent necessary for the purposes above. Recipients may include, in particular:
- the hosting provider whose servers host the Website,
- providers of analytics tools (including Google Analytics),
- providers of IT and technical support services,
- providers of the social media platforms on which the Controller has profiles.
These entities process data under data processing agreements concluded with the Controller or under their own terms and privacy policies.
Transfers outside the EEA
Because the Website uses tools provided by entities outside the European Economic Area (EEA) – in particular Google Analytics – personal data may be transferred to third countries, including the United States.
Such transfers are subject to the appropriate safeguards required by the GDPR, including standard contractual clauses approved by the European Commission or other permitted mechanisms that ensure an adequate level of data protection.
How long data is processed
Personal data is processed for as long as necessary for the purposes for which it was collected:
- data from the contact form and correspondence – for as long as needed to handle the enquiry, and then until any claims become time-barred,
- data processed on the basis of legitimate interest – until an effective objection is raised or the purpose of processing ends,
- data collected for analytics and statistics – for the period set by the individual tools and cookies.
Rights of data subjects
Every data subject has the following rights:
- the right of access to their data and to receive a copy of it (Article 15 GDPR),
- the right to rectification (correction) of their data (Article 16 GDPR),
- the right to erasure (Article 17 GDPR),
- the right to restriction of processing (Article 18 GDPR),
- the right to data portability (Article 20 GDPR),
- the right to object to processing (Article 21 GDPR).
To exercise these rights, please contact us by email at office@seriangroup.com
Data subjects also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw) – if they consider that the processing of their data infringes the GDPR.
Google Analytics
The Website uses Google Analytics, an analytics tool provided by Google Ireland Limited. It uses cookies to analyse how users use the Website.
The information generated by cookies about the use of the Website (including an anonymised IP address) is aggregated and statistical, and is used only to improve the Website. Users can block Google Analytics by installing the relevant browser add-on or by disabling analytics cookies.
Server logs
Using the Website involves information being sent automatically to the server and recorded in server logs. The data collected may include, in particular:
- the device’s IP address,
- the browser and operating system type,
- the date and time of access to the Website,
- the address of the referring page,
- information about errors that occurred while processing the request.
Data recorded in server logs is used only for technical purposes and to keep the Website secure, and is not linked to data about specific individuals.
Data security
The Controller uses appropriate technical and organisational measures to protect the personal data it processes, suited to the risks and to the categories of data concerned. In particular, it protects data against disclosure to unauthorised persons, loss, damage or destruction.
Data transmitted on the Website is protected by an encryption protocol (SSL/TLS).
Changes to this Privacy Policy
The Controller reserves the right to amend this Privacy Policy, in particular as the Website develops, technology changes or the law changes.
The current version of the Privacy Policy is always published on the Website together with the date from which it applies.