Privacy Policy
Automatically Collected Data:
During your visit to the site, data regarding your visit is automatically collected, such as your IP address, domain name, browser type, operating system type, etc. - this data does not allow for the clear identification of your person.
Where do we get your data from?
We received it from you when you created an account on our site, as well as when you placed and fulfilled orders. We store your personal data for the duration of the contract made with you, and also for a maximum of 10 years after its termination.
Data Collected When You Contact Us:
When you contact us to carry out specific actions (e.g., to file a complaint) via the website, phone, or email, we will require you to provide your personal data again to confirm your identity and to enable us to contact you back. This concerns the same personal data previously provided. Again, providing this data is not mandatory, but it is necessary to carry out the action or obtain the information you are interested in.The administrator of your personal data is: MAKSPOL Andrzej Maksym. You can contact us regarding your personal data via email at: biuro@makspol-drapaki.pl
Use of Data: The personal data you provided and consented to be processed (name and surname, email address, phone number) will be processed only to the extent and for the purpose covered by that consent or for purposes permitted by law.
Automatically collected data may be used to analyze user behavior on the sites or to gather demographic data about our users.
Data collected during correspondence between you and MAKSPOL Andrzej Maksym will be used solely to provide a correct, complete, and efficient response to your inquiry.
Your personal data is processed in accordance with the provisions of the data protection regulation (GDPR).
You can withdraw your consent to the processing of personal data at any time, with a request to cease the processing of personal data, in accordance with Article 32, paragraph 1, item 6 of the Personal Data Protection Act.
Users have the right to access and modify their personal data at any time, as well as to request the immediate deletion of their data from the Administrator (“right to be forgotten”).
You have the right to file a complaint with the supervisory authority dealing with personal data protection, which is the President of the Personal Data Protection Office.
How will we contact you?
If you sent us a message by filling out the contact form, we may contact you by phone or email to provide a response to your inquiry.
Data controller:The controller of your personal data is MAKSPOL Andrzej Maksym, Miechowa 29, 46-220 Byczyna, NIP 751-122-68-84, e-mail: biuro@makspol-drapaki.pl, tel. +48 695 916 422. You can contact us at this e-mail address in all matters concerning your personal data.
Cookies and consent:The shop uses cookies (small files stored in your browser) and similar technologies. Necessary cookies are required for the shop to work: they remember your cart, your login, the selected language and your choice in the cookie banner (cookie "hlx_consent", 12 months). The cookies of the payment provider Stripe on the checkout page and the spam protection of the forms by Cloudflare Turnstile (described below) are also necessary. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in a working and secure shop (Art. 6(1)(f) GDPR); under the Polish Electronic Communications Law no consent is required for these cookies.
Statistics (Google Analytics) and the "AI Assistant" chat are only activated after you have given your consent in the cookie banner shown on your first visit (Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the "Cookie settings" link at the bottom of every page; the withdrawal does not affect the lawfulness of processing before it. You can also block or delete cookies in your browser settings – some functions of the shop (e.g. cart, login) may then not work.
Payments – Stripe and bank transfer:Online payments (BLIK, payment card) are processed by the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland ("Stripe"). If you choose online payment, we transfer the data required for the payment to Stripe (e.g. name, e-mail address, order number and amount); you enter your card details or BLIK code directly on the Stripe payment page – they never reach our server. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).
To prevent fraud and to process payments securely, the checkout page loads a script from Stripe, which sets the necessary cookies "__stripe_mid" (1 year) and "__stripe_sid" (30 minutes) and processes device and usage data (e.g. IP address, browser information). The legal basis is our legitimate interest in secure payment processing and fraud prevention (Art. 6(1)(f) GDPR). Stripe may also process data in the USA on the basis of the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission. More information: https://stripe.com/privacy
If you pay by bank transfer, we receive the transfer data (e.g. name, account number, amount, reference) from our bank and use it only to settle your order (Art. 6(1)(b) and (c) GDPR).
Spam protection – Cloudflare Turnstile:To protect our forms (contact form, registration, login, password reset and ordering without an account) against automated submissions and abuse, we use Cloudflare Turnstile of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare"). On the pages with these forms, technical information such as your IP address and browser and device data is transferred to Cloudflare to check whether the form is filled in by a human; according to Cloudflare, this data is not used for advertising or tracking. The legal basis is our legitimate interest in protecting our forms against abuse (Art. 6(1)(f) GDPR). Data may be transferred to the USA; Cloudflare, Inc. is certified under the EU-US Data Privacy Framework. More information: https://www.cloudflare.com/privacypolicy/ and https://www.cloudflare.com/turnstile-privacy-policy/
Google Analytics:With your consent (Art. 6(1)(a) GDPR) we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), loaded via Google Tag Manager. Google Analytics sets cookies on your device (e.g. "_ga", "_ga_…", up to 2 years) and creates pseudonymous statistics on the use of the shop, e.g. pages visited, visit duration, traffic source, device and browser, approximate location. Google Analytics 4 does not store IP addresses. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Data is deleted after the retention period set in Google Analytics (at most 14 months).
Google Tag Manager and Google Analytics are only loaded after you have consented to the "Statistics" category in the cookie banner. You can withdraw your consent at any time via the "Cookie settings" link at the bottom of every page. More information: https://policies.google.com/privacy
"AI Assistant" chat:With your consent (Art. 6(1)(a) GDPR) we show the "AI Assistant" chat window, in which an AI-based assistant helps you choose a product. The service is provided for us by a WeNet group company – WeNet Group S.A. (KRS 0000681163) or WeNet Sp. z o.o. (KRS 0000116894), as set out in our agreement – ul. Postępu 14, 02-676 Warsaw, Poland, the operator of wenetasystent.ai, acting as a processor on our behalf (Art. 28 GDPR). The chat window is loaded from the provider's server; the chat contents, your e-mail address if you enter it, and technical information (e.g. IP address, browser and device data, address of the page viewed) are transferred to the provider, who also collects usage statistics of the chat window. To answer, the operator uses providers of artificial intelligence technology (e.g. OpenAI, Google, Anthropic), so data may be transferred outside the European Economic Area, in particular to the USA, on the basis of the standard contractual clauses of the European Commission or the EU-US Data Privacy Framework. More information: https://wenetasystent.ai/polityka-prywatnosci. Do not enter data in the chat that you do not want to share with us, or special categories of data (e.g. health data). The chat is only loaded after you have consented to the "AI Assistant chat" category in the cookie banner; you can withdraw your consent at any time via the "Cookie settings" link at the bottom of every page.