Privacy policy

PRIVACY POLICY OF THE WEBSITE

WWW.TIMTRUCK.COM

  1. Personal Data Administrator
    The administrator of personal data of the website operating at www.timtruck.com, hereinafter referred to as Izotermy Tim Sp. z o.o., with its registered office at:
    ul. Krzyżowa 2C, 41-909 Bytom, Poland, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court Katowice-Wschód in Katowice, 8th Commercial Division of the National Court Register, under KRS number 0000476193, NIP 4980207567, REGON 240407046.

  2. Data protection principles
    Respecting your rights as data subjects (individuals whose personal data is processed) and complying with applicable law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR), the Act on the Protection of Personal Data, and other applicable data protection laws, we undertake to ensure the security and confidentiality of personal data obtained from you.

All our employees have been properly trained in data protection, and our company, as the Data Controller, has implemented appropriate technical and organizational measures to ensure the highest level of data protection.

We have established internal procedures and data protection policies compliant with the GDPR, ensuring lawful, fair, and transparent data processing, as well as enforceability of all rights granted to you as data subjects.
If necessary, we cooperate with the supervisory authority in the Republic of Poland – the President of the Personal Data Protection Office (PUODO).

  1. Contact regarding personal data
    Any inquiries, requests, or complaints related to the processing of personal data by our company (the Data Controller), hereinafter referred to as “Notifications”, should be sent:

  • by e-mail to: rodo@grupapietrzak.pl, or

  • in writing to the address of the Data Controller: ul. Krzyżowa 2C, 41-909 Bytom.

The Notification should clearly indicate:
a) the data of the person(s) to whom the Notification relates,
b) the event which is the reason for the Notification,
c) your requests and the legal basis for them,
d) the expected method of resolving the matter.

  1. Personal data collected
    Our website collects the following personal data:
    a) First and last name – required to use our services and for contact purposes,
    b) Phone number – used to contact you in case of unforeseen situations and to provide the best possible solution,
    c) E-mail address – used for service confirmations, order-related communication, and, if you are subscribed to our newsletter, for periodic commercial information,
    d) Tax Identification Number (NIP) – collected from business clients or individuals requesting an invoice,
    e) IP address – collected for technical purposes and statistical analyses, including general demographic data (e.g., region of connection).

  2. Necessity of providing data
    Providing the data listed above is necessary in the following cases:
    • to use the services available on our website via the provided online form (without account registration),
    • to register voluntarily in our database – allowing us to facilitate future service use,
    • to subscribe to our newsletter – if you wish to receive updates on events and commercial offers; subscription is voluntary and can be canceled at any time.

  3. Cookies
    Our website uses cookies to adapt its functionality to your individual needs.
    By allowing cookies, the data and information you enter may be stored, enabling easier access and use of the site during future visits without the need to re-enter them.
    Owners of other websites will not have access to these data and information.
    If you do not agree to the personalization of the website, you can disable cookies in your browser settings.

  4. User rights and choices
    Each user of our website has the option to decide whether and to what extent they wish to use our services and provide information about themselves, as defined by this Privacy Policy.

  5. Purpose and scope of data processing
    Your personal data are processed by our company as the Data Controller for the purpose of performing services offered through the website.
    In accordance with the principle of data minimization, we process only those categories of personal data that are necessary to achieve these purposes.

  6. Data retention period
    We process personal data for the period necessary to achieve the purposes specified above.
    Data may be retained for a longer period if such an obligation or authorization arises from applicable law, or if the provided service is of a continuous nature (e.g., newsletter subscription).

  7. Source of data
    The source of the personal data processed by the Data Controller is the data subjects themselves.

  8. Transfer of data to third countries
    Your personal data are not transferred to a third country within the meaning of the GDPR.

  9. Sharing of personal data
    We do not share any personal data with third parties without the explicit consent of the data subject.
    Without such consent, data may only be disclosed to public authorities (e.g., tax authorities, law enforcement agencies, or other entities legally authorized under applicable law).

  10. Data processing by third parties (processors)
    Personal data may be entrusted for processing to entities acting on behalf of our company as the Data Processor.
    In such cases, TIM TRUCK concludes a data processing agreement with the processor.
    The processor processes the entrusted personal data only for the purposes, scope, and duration specified in that agreement.
    Without such entrustment, we would not be able to provide our services.

  11. As the Data Controller, TIM TRUCK entrusts personal data for processing to entities that:
    a) provide hosting services for the website,
    b) provide other services necessary for the day-to-day operation of the website.

  12. Profiling
    Personal data are not subject to profiling by the Data Controller.

  13. Rights of data subjects under the GDPR
    According to the provisions of the GDPR, every individual whose personal data are processed has the right to:

  14. g) Object to processing – as per Article 21 GDPR. You have the right to object to data processing carried out for legitimate purposes, especially for direct marketing (e.g., newsletter).

    h) Not be subject to profiling or automated decisions – as per Article 22 GDPR. No automated decisions or profiling are performed on our website unless you explicitly consent to it.

    i) Lodge a complaint – as per Article 77 GDPR, with the President of the Personal Data Protection Office (PUODO), if you believe that the processing of your personal data violates applicable law.

  15. Limitations of the right to erasure (“right to be forgotten”)
    According to the GDPR, you do not have the right to erasure if:
    a) the processing of your personal data is necessary for exercising the right to freedom of expression and information (e.g., if you have published your data on a blog or in comments),
    b) the processing is necessary for compliance with a legal obligation to which TIM TRUCK is subject (e.g., tax obligations),
    c) the processing is necessary for the establishment, exercise, or defense of legal claims.

  16. Exercising your rights
    If you wish to exercise any of your rights mentioned above, please use the appropriate functions available in the website interface that allow you to delete your account and data stored in our system, or send an e-mail to: rodo@grupapietrzak.pl.

  17. Security breaches
    Each identified case of a data security breach is documented.
    If a situation specified by the GDPR or the Personal Data Protection Act occurs, affected individuals and, if applicable, the supervisory authority (PUODO) will be notified about the breach.

  18. Interpretation
    All capitalized terms used in this Privacy Policy shall have the meanings assigned to them in the Terms and Conditions of our website, unless otherwise stated in this document.

  19. Applicable law
    For all matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply.
    In the event of any inconsistency between this Privacy Policy and applicable legal provisions, the latter shall prevail.

  20. a) Be informed – as per Article 12 GDPR. The Controller must provide information about data processing, including contact details, processing purposes and legal basis, data recipients (if applicable), and data retention periods.

    b) Access their data – as per Article 15 GDPR. You have the right to access and obtain a copy of your personal data. The first copy is free of charge; subsequent copies may incur a reasonable administrative fee corresponding to preparation costs.

    c) Rectify or update data – as per Article 16 GDPR. If your personal data have changed or are incorrect, please notify us so we can keep them accurate and up to date.

    d) Request erasure ("right to be forgotten") – as per Article 17 GDPR. You have the right to request the deletion of your personal data, in particular when:
    • the purpose for which the data were collected has been achieved (e.g., a contract has been completed),
    • processing is based solely on consent, which has been withdrawn,
    • you have objected to processing and there are no overriding legal grounds,
    • the data were processed unlawfully,
    • deletion is required by law,
    • the data relate to a minor and were collected in connection with online services.

    e) Restrict processing – as per Article 18 GDPR, e.g., when:
    • you contest the accuracy of your data,
    • you believe your data are being processed unlawfully but do not wish for them to be deleted,
    • you have objected to processing and verification is pending,
    • the data are required for legal claims.

    f) Data portability – as per Article 20 GDPR. You have the right to receive your personal data in a structured, machine-readable format and to transmit those data to another controller, if technically feasible and if processing was based on consent or contract.