Privacy policy

You can contact us about any matter concerning the processing of personal data:

• by e-mail: allplus@allplus.com.pl
• by post: Allplus sp. z o.o., Przebieczany 600, 32-020 Wieliczka, Poland
• by phone: +48 12 391 70 91

ALLPLUS has not appointed a Data Protection Officer. Please direct enquiries about personal data to the contact details above.

We collect personal data only when you provide it yourself by completing one of the forms available on the site. The scope depends on the form:

Contact form

full name, e-mail address, the content of your message and — optionally — company name and phone number.

Rental quotation form

full name, company name, e-mail address, phone number and details of the equipment you are looking for (monthly print volume, format, device type, colour or mono printing, additional functions, interface).

Supplier partnership form

the contact person's name, company name, country, e-mail address and — optionally — website address and phone number, together with the product category and a description of your offer.

Purposes of processing and their legal bases:

Answering your enquiry and taking steps prior to entering into a contract

legal basis: processing necessary to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR).

Conducting ongoing correspondence, including matters not leading directly to a contract

legal basis: the controller's legitimate interest in handling enquiries addressed to it (Article 6(1)(f) GDPR).

Keeping statistics on site visits

legal basis: your consent given in the cookie consent banner (Article 6(1)(a) GDPR). Without that consent, analytics tools are never loaded.

Ensuring the security and correct operation of the site

legal basis: the controller's legitimate interest in maintaining the service in working order and secure, including protecting the forms against automated spam using Google reCAPTCHA (Article 6(1)(f) GDPR).

Establishing, pursuing or defending against claims

legal basis: the controller's legitimate interest (Article 6(1)(f) GDPR).

While you use the site, technical data may also be recorded automatically: IP address, browser type and version, operating system, time of access and the address of the page you arrived from.

Providing data is voluntary but necessary for us to answer your enquiry. If the fields marked as required are not completed, the form cannot be sent.

We do not take decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

Enquiries submitted through the forms

kept for one year from the end of correspondence on the matter, after which they are deleted.

Data needed to establish, pursue or defend against claims

kept until the limitation period for claims expires. Unless a specific provision states otherwise, the limitation period is six years, and three years for claims for periodic payments and claims connected with running a business.

Data processed on the basis of consent

processed until that consent is withdrawn.

Technical data in server logs

kept for the period resulting from the hosting service configuration, and no longer than is necessary to keep the service secure.

Personal data may be shared with service providers that ALLPLUS uses to run the website. Depending on the contractual arrangements, those entities either act solely on instructions from ALLPLUS (processors) or determine the purposes and means of processing themselves (separate controllers).

Processors

the hosting and e-mail service provider is ADMIN.NET.PL S.C. Tomasz Rzepka, Arkadiusz Nowara (the MyDevil.net service), ul. Bitwy pod Monte Cassino 5/198, 33-100 Tarnów, Poland, NIP 8733250257, REGON 122662465. Where justified, data may also be processed by entities providing accounting or legal services to us. These entities process data solely on instructions from ALLPLUS and only to the extent needed for the service provided.

Separate controllers

the provider of the Google Analytics tool (Google Ireland Limited), to which data is passed only if you have consented to statistics, and the provider of the Google reCAPTCHA form protection (Google Ireland Limited), which processes your IP address and information about how you use the site in order to tell a human from an automated program.

State authorities

where a justified request is made, data may be disclosed to authorised bodies, in particular the Police, the Public Prosecutor's Office or the President of the Personal Data Protection Office.

The service providers we use are based in Poland or in other countries of the European Economic Area. In the case of analytics tools, data may be transferred outside the EEA — this takes place under the mechanisms provided for in Chapter V of the GDPR, in particular the standard contractual clauses approved by the European Commission.

ALLPLUS does not sell or share personal data with third parties for marketing purposes.

The site saves small pieces of information in your browser that are necessary for it to work correctly and — once consent has been given — information used to keep statistics. We use cookies and browser local storage for this.

Essential

remembering your decision about consent to statistics and your chosen colour theme. The site would not work correctly without them, so they are saved regardless of consent.

Analytics

Google Analytics cookies, used to build aggregate statistics on visits and on how the site is used. They are loaded only after you have given consent. Your IP address is anonymised in the process.

Until consent is given, no analytics tools are loaded. You can withdraw your consent or change its scope at any time using the privacy settings available on the site. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.

You can also limit or disable the saving of cookies in your browser settings. The site will remain usable, apart from functions that by their nature require data to be stored in the browser.

The site contains links to other services, including the allplus.pl shop and our social media profiles. ALLPLUS is not responsible for the privacy practices in force on those services.

In connection with the processing of personal data you have the following rights:

Right of access (Article 15 GDPR)

you can find out whether we process your data and obtain a copy of it.

Right to rectification (Article 16 GDPR)

you can ask us to correct inaccurate data or complete data that is incomplete.

Right to erasure (Article 17 GDPR)

you can ask for your data to be deleted, among other things where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn the consent on which processing was based.

Right to restriction of processing (Article 18 GDPR)

you can ask us to suspend processing, for example while the accuracy of the data is being verified.

Right to data portability (Article 20 GDPR)

for data processed on the basis of consent or a contract, you can receive it in a structured, machine-readable format.

Right to object (Article 21 GDPR)

you can object at any time to processing based on our legitimate interest, on grounds relating to your particular situation.

Right to withdraw consent (Article 7(3) GDPR)

where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, contact us using the details given in § 1. We respond without undue delay and no later than one month from receiving your request.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland — if you consider that the processing of your data infringes the GDPR.

We apply technical and organisational measures appropriate to the risk involved in processing, in particular encrypted data transmission (HTTPS) and restricting access to data to those who need it to carry out their duties.

ALLPLUS never sends correspondence, including e-mail, asking for passwords or other authentication credentials.

This Privacy Policy may change, in particular where the law changes or where the range of functions available on the site changes. The current version is always published at this address together with the date of the last modification.

Please direct questions about this Privacy Policy to: allplus@allplus.com.pl