Privacy policy

Controller’s Data

This Privacy Policy specifies the rules for the collection, processing and use of personal data obtained by the personal data controller – Colours Factory Spółka z ograniczoną odpowiedzialnością, with its registered office in Piła (64-920), ul. Wypoczynkowa 13, entered into the Register of Entrepreneurs kept by the District Court Poznań-Nowe Miasto and Wilda in Poznań, 9th Commercial Division of the National Court Register, under KRS number: 0000230794, NIP: 7642454686, REGON: 300011862, share capital of PLN 560,000.00, fully paid-up (hereinafter referred to as: Colours Factory).

This document was drawn up in order to fulfil the obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR).

What data do we collect and on what basis?

Colours Factory collects personal data in the following ways:

In the case of entities which contact us for the purpose of establishing cooperation, we collect full names of the counterparty’s representatives, their e-mail addresses, telephone numbers and job positions. If the counterparty is a natural person contacting Colours Factory directly, Article 6(1)(b) of the GDPR is the basis for processing – the processing of such data is necessary for the performance of the agreement, to which the counterparty is a party. However, if other representatives contact Colours Factory on behalf of the counterparty, the legal basis for processing is Article 6(1)(f) of the GDPR – in such a case the processing is necessary for the purposes of legally reasonable interest of Colours Factory, i.e. performance of the agreement.
Via a form available at https://www.coloursfactory.pl, for subscription to the Colours Factory newsletter. In such a case, we collect the full names of the counterparty’s representatives, their e-mail addresses, telephone numbers and job positions, and the legal basis for processing is Article 6(1)(a) of the GDPR – a person who subscribes to the newsletter agrees to the processing of such data for marketing purposes.
In recruitment process, where the following information is collected from candidates: first and last name, date of birth, telephone number, e-mail address, education, professional qualifications, and employment history. The legal basis for the processing is Article 6(1)(a) of the GDPR – the CVs sent must be accompanied by a clause allowing the processing of these data, and if the application is sent via the form on the website, https://www.coloursfactory.pl, the consent to the processing of data is given by ticking the required checkbox at the moment of sending the application for recruitment purposes.
Cookies automatically collect data concerning visits of our customers, while some of these files are necessary to use the portal for functional reasons – in such a case the basis for processing is Article 6(1)(e) of the GDPR, since the processing is necessary for using the website – some files are collected for statistical or advertising reasons – and in such a case the basis for processing is Article 6(1)(a) of the GDPR, i.e. the consent of the visitor.

Rights of data subjects

For data collected for the purposes of:

Establishing cooperation – provision of data is voluntary, however it is required for establishing cooperation and placing orders.
Marketing (newsletters) – provision of data and consent is voluntary, however without the consent, we will not be able to inform the counterparty about our new products or promotional campaigns.
Recruitment – provision of data and consent is voluntary, however without the consent, we will not be able to qualify the candidate for the recruitment process conducted by Colours Factory.
Cookies – providing data and giving consent is voluntary in the case of statistical, functional and marketing cookies, but without this consent it will not be possible to use all functionalities of the website, and in the case of cookies necessary for its operation, these data are collected automatically without the consent of the visitor.

A person who provides their data to Colours Factory has the right to access, rectify, erase the data, restrict their processing, as well as the right to object to the processing or request the cessation of processing and transferring of data, and also the right to withdraw consent for the processing of the data at any time or to lodge a complaint with the supervisory authority – President of the Personal Data Protection Office.

How do we use your data?

We use the personal data provided by the counterparty (or their representative) for the purposes of performing the sales agreement, i.e. processing of submitted orders. For the same purpose, the personal data provided may be transferred to subcontractors – printing houses, postal and courier service providers, sales system support providers and payment operators.

The processing of your data for marketing purposes will only take place if the counterparty (or their representative) agrees to such activities in the newsletter form. Based on this consent, we may provide the following information: introduction of new products by Colours Factory or information on promotional campaigns. These data may be transferred to third parties who, as subcontractors, provide marketing services for the Colours Factory portal. To clarify – such data will not be sold or transferred to third parties for the purposes of their own marketing campaigns, and will only be transferred to the entities that work with us and support us in our marketing activities.

The data collected for recruitment purposes will be processed only for recruitment purposes. We would like to inform you that the Colours Factory conducts recruitment processes not only for its own needs, but also for other companies belonging to its capital group (Drukomat.pl Sp. z o.o., Metro Sp. z o.o.). No data of the recruited person will be transferred to these entities.

The data will be stored for the following period:

collected for the purpose of cooperation – until the end of this cooperation,
collected for marketing purposes – until the withdrawal of consent to their processing for marketing purposes,
collected for recruitment purposes – up to three years from the end of the recruitment process.

Automatically collected data

A cookie is a character string, usually in the form of a short text file, which is saved on the endpoint device when you visit a website

Automatically collected data (cookies) may be used to personalise the content of our websites (including marketing content), analyse Customers’ behaviours and adjust functionalities. They are collected for anonymous statistical analyses connected with the visits to our website. We use the data contained in cookies to block multiple display of the same content to the user, to enhance personalisation of website content and to improve the efficiency of advertisements.

You can block the installation of cookies at any time or delete previous cookies using the relevant options of your web browser.

We use two types of cookies: temporary cookies which expire the moment the user logs out of the website or closes the browser, and persistent cookies which remain on the user’s device for the time as defined in the parameters or until they are deleted by the user.

By default, the software used to browse websites allows for supporting cookies on the endpoint device; however, the user can change the default settings and disable cookies. Detailed information on the support, disabling and deletion of cookies is available in the browser settings. Disabling cookies may affect the functionalities available on the website.

During the first visit to the drukomat.pl portal, the Customer is asked for their preferences regarding cookies, where they can read a specific list of particular cookies, their partners, storage time, and indicate which cookies they consent to. User preferences will then be saved in cookies, and any withdrawal or change of consents given should take place by removing cookies containing these consents from the browser.

You can see the list of cookies partners and the period of their storage using this link.

Data protection

We ensure full security when using our portal, with particular emphasis on the right to privacy. For this purpose, we collect only the necessary minimum of information needed for the indicated purposes. Sending information about your personal data that you provide on our websites takes place between our server and your computer using the SSL (Secure Socket Layer) protocol. Our system administrators regularly control and improve our security measures.

Data Protection Officer

We appoint a Data Protection Officer, whom you can contact in every case concerning personal data protection, also regarding the exercise of your rights related to personal data.

You can contact our personal data officer – Konrad Grudysz – at the e-mail address iod@coloursfactory.pl.