Privacy Policy

version effective from 20/08/2025

WHAT IS THIS PRIVACY POLICY?

We would like to present details of how we process your personal data to give you full transparency and comfort when using our website.

As an online‑first company, we know how important the protection of your personal data is. We therefore take special care to protect your privacy and the information you share with us.

We carefully select and apply appropriate technical (in particular software) and organisational measures to ensure the protection of the personal data we process. Our website uses encrypted data transmission (SSL), which secures your identifying data.

In this Privacy Policy you will find the most important information about how we process your personal data. Please take a moment to read it — it won’t take more than a few minutes.

WHO ARE THE JOINT CONTROLLERS OF WWW.AKMEL.MIELEC.PL?

The joint controllers of the website are:

  • Justyna Żak, conducting business under the name AKMEL Justyna Żak, entered in the Central Registration and Information on Business, registered office: Wola Mielecka 369c, 39‑300 Wola Mielecka, NIP (Tax ID) 8172008753, REGON 180266149, BDO 000608798,
  • Andrzej Kiciński, conducting business under the name Firma Produkcyjno‑Handlowa “AKMEL” Kiciński Andrzej, entered in the Central Registration and Information on Business, registered office: Wola Mielecka 369c, 39‑300 Wola Mielecka, NIP 8171227016, REGON 831310390, BDO 000345267,
  • AKMEL AGREGATY PRĄDOTWÓRCZE sp. z o.o., registered office: Wola Mielecka 369C, 39‑300 Wola Mielecka, entered in the Register of Entrepreneurs kept by the District Court in Rzeszów, 12th Commercial Division of the National Court Register, KRS 0000367508, NIP 8172150273, REGON 18062339400000, BDO 000605380, share capital: PLN 880,000.00 (i.e. “we”/“us”).

PERSONAL DATA

What legal act governs the processing of your personal data?

We collect and process your personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation — “GDPR”). Where the GDPR does not regulate an issue, the processing is governed by the Polish Personal Data Protection Act of 10 May 2018.

Who is the joint controller of your personal data?

The joint controllers of the website are the entities listed above (AKMEL Justyna Żak; Firma Produkcyjno‑Handlowa “AKMEL” Kiciński Andrzej; AKMEL AGREGATY PRĄDOTWÓRCZE sp. z o.o.).

For matters concerning your personal data you can contact us via:

  • e‑mail: [email protected]
  • post: Wola Mielecka 369c, 39‑300 Mielec
  • phone: +48 570 400 088

HOW WE PROCESS THE PERSONAL DATA YOU PROVIDE TO US

What personal data do we process and for what purposes?

We provide many different services on our website. We therefore process different categories of personal data for different purposes and under different legal bases. Below you will find a clear, purpose‑by‑purpose list.

PURPOSE: conclusion and performance of a contract

PERSONAL DATA: first name, last name, correspondence address, Tax ID (NIP), e‑mail address, phone number

LEGAL BASIS: GDPR Art. 6(1)(b) — processing necessary to take steps at your request prior to entering into a contract and to perform a contract to which you are a party

RETENTION: until expiry of limitation periods for claims arising from the contract

PURPOSE: account creation and maintenance

PERSONAL DATA: first name, last name, e‑mail address, phone number, correspondence address

LEGAL BASIS: GDPR Art. 6(1)(b)

RETENTION: until expiry of limitation periods for claims arising from the contract

PURPOSE: contact form

PERSONAL DATA: first name, last name, e‑mail address, phone number, NIP, company name

LEGAL BASIS: GDPR Art. 6(1)(f) — our legitimate interest in maintaining continuity of communication and enabling contact with us regarding our business

RETENTION: until you object to the processing

PURPOSE: newsletter

PERSONAL DATA: e‑mail address, first name, last name

LEGAL BASIS: GDPR Art. 6(1)(a) — your consent

RETENTION: until you withdraw your consent

PURPOSE: “ask about product” form

PERSONAL DATA: e‑mail address

LEGAL BASIS: GDPR Art. 6(1)(f) — our legitimate interest in maintaining communication continuity about our business

RETENTION: until you object to the processing

PURPOSE: “notify about availability” form

PERSONAL DATA: e‑mail address

LEGAL BASIS: GDPR Art. 6(1)(f) — our legitimate interest in maintaining communication continuity about our business

RETENTION: until you object to the processing

PURPOSE: organisation of contests

PERSONAL DATA: first name, last name, e‑mail address, phone number

LEGAL BASIS: GDPR Art. 6(1)(a) — your consent

RETENTION: until you withdraw your consent

PURPOSE: analysis of traffic on the online store

PERSONAL DATA: IP address, browser data

LEGAL BASIS: GDPR Art. 6(1)(f) — our legitimate interest in analysing traffic on the website

RETENTION: until you object to the processing

PURPOSE: direct marketing of our goods and services, including remarketing

PERSONAL DATA: browser data, first name, IP address

LEGAL BASIS: GDPR Art. 6(1)(f) — our legitimate interest in direct marketing of our services, including remarketing

RETENTION: until you object to the processing

PURPOSE: establishment, exercise and defence of claims before courts and public authorities

PERSONAL DATA: first name, last name, residential address, PESEL/Personal ID No., NIP, REGON, e‑mail address, phone number, IP number, bank account number, payment card number

LEGAL BASIS: GDPR Art. 6(1)(f) — our legitimate interest in establishing, pursuing and defending claims

RETENTION: until the expiry of the limitation periods for claims

PURPOSE: fulfilment of legal obligations (especially tax and accounting)

PERSONAL DATA: first name, last name, company name, PESEL, NIP or REGON, e‑mail address, phone number, correspondence address, payment card number

LEGAL BASIS: GDPR Art. 6(1)(c) — compliance with a legal obligation to which we are subject

RETENTION: until the expiry of legal retention obligations applicable to the Joint Controllers

Voluntariness of providing personal data

Providing the required personal data is voluntary but necessary for us to provide services to you (e.g. to send the newsletter or to set up an account).

Recipients of personal data

The current list of entities to which we disclose your personal data is available here.

Automated decision‑making (including profiling)

We do not make decisions about you in an automated way and we do not use profiling.

Will we transfer your personal data outside the EEA or to an international organisation?

To use Google tools, your personal data may be transferred to the United States, where Google LLC’s servers are located. Google LLC participates in the EU‑U.S. Data Privacy Framework, which ensures an adequate level of data protection under EU law (Commission Implementing Decision (EU) 2023/1795 of 10 July 2023).

To use Facebook tools, your personal data may be transferred to the United States, where Meta Platforms Inc.’s servers are located. Meta Platforms Inc. participates in the EU‑U.S. Data Privacy Framework, ensuring an adequate level of protection under EU law (Commission Implementing Decision (EU) 2023/1795 of 10 July 2023).

To use Hotjar analytics, your personal data may be transferred to the United States. According to Hotjar’s privacy policy, Hotjar has implemented appropriate safeguards and requires its providers and partners to do the same. More information: https://www.hotjar.com/legal/policies/privacy/.

HOW WE PROCESS PERSONAL DATA WE RECEIVE FROM OTHER CONTROLLERS (E.G. FACEBOOK)

Our online store enables:

  • logging in to your store account via your Facebook profile,
  • logging in to your store account via your Google account.

In such cases, we receive your personal data not directly from you but from Facebook or Google. To give you full control over your data, below we set out how we process this data.

Categories of relevant personal data

We process the following categories of data:

  • identification data (i.e. the data you have published in your Facebook or Google profile, in particular: first name, last name, nickname, e‑mail address and image).

Source of the personal data

Your personal data comes from:

  • Facebook — controller: Meta Platforms Ireland Limited,
  • Google — controller: Google Ireland Ltd.

Purposes and legal bases of processing

PURPOSE: logging in to the store account via Facebook

PERSONAL DATA: first name, last name, image

LEGAL BASIS: GDPR Art. 6(1)(f) — our legitimate interest in enabling you to log into the store via your Facebook profile

RETENTION: until the store account is deleted

PURPOSE: logging in to the store account via Google

PERSONAL DATA: first name, last name, image

LEGAL BASIS: GDPR Art. 6(1)(f) — our legitimate interest in enabling you to log into the store via your Google account

RETENTION: until the store account is deleted

WHAT RIGHTS DO YOU HAVE UNDER THE GDPR?

Under the GDPR you have the right to:

  • request access to your personal data;
  • request rectification of your personal data;
  • request erasure of your personal data;
  • request restriction of processing;
  • object to processing;
  • request data portability.

Upon receiving any of the above requests, we will, without undue delay and in any event within one month of receipt of the request, inform you of the action taken.

Where necessary (due to the complexity or number of requests), we may extend the one‑month period by a further two months. In every case we will inform you within one month of receipt of the request about any extension and the reasons for the delay.

Right of access (Art. 15 GDPR)

You have the right to know whether we process your personal data. If we do, you have the right to:

  • access your data;
  • obtain information about the purposes of processing, the categories of data, the recipients or categories of recipients, the envisaged retention period or the criteria used to determine that period, your rights under the GDPR, the right to lodge a complaint with the supervisory authority, the source of the data, automated decision‑making (including profiling) and the safeguards applied for transfers outside the EU;
  • receive a copy of your personal data.

If you wish to exercise your right of access, please contact: [email protected].


Right to rectification (Art. 16 GDPR)

If your personal data is inaccurate, you have the right to obtain its rectification. You also have the right to have incomplete personal data completed. To exercise this right, contact: [email protected].

Right to erasure (“right to be forgotten”, Art. 17 GDPR)

You have the right to obtain erasure of your personal data where, for example:

  • the data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
  • you withdraw the consent on which the processing is based;
  • the data has been unlawfully processed;
  • you object to the processing for direct marketing purposes (including profiling) to the extent that the processing is related to such direct marketing;
  • you object to processing necessary for the performance of a task carried out in the public interest or based on our legitimate interests.

Despite an erasure request, we may continue processing where necessary for the establishment, exercise or defence of legal claims — you will be informed accordingly.

To exercise this right, contact: [email protected].

Right to restriction of processing (Art. 18 GDPR)

You have the right to obtain restriction of processing where:

  • you contest the accuracy of the data — for a period enabling us to verify the accuracy;
  • the processing is unlawful and you oppose the erasure and request restriction instead;
  • we no longer need the data for the purposes of processing, but you need it for the establishment, exercise or defence of claims;
  • you have objected to processing — pending the verification whether our legitimate grounds override yours.

To exercise this right, contact: [email protected].

Right to object (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in relation to:

  • processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the controller or by a third party;
  • processing for direct marketing purposes.

To exercise this right, contact: [email protected].

Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data from us in a structured, commonly used, machine‑readable format, and to transmit that data to another controller.

By default we will provide your data in CSV format. If you prefer another format, indicate this in your request — where possible, we will accommodate your preference.

You may also request that we transmit your data directly to another controller where technically feasible.

To exercise this right, contact: [email protected].

Can you withdraw consent?

You may withdraw your consent to the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To withdraw consent, contact: [email protected].

If you wish to withdraw consent for the “Newsletter” service, you may unsubscribe here.

Complaint to the supervisory authority

If you believe that the processing of your personal data infringes data‑protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

In Poland, the supervisory authority under the GDPR is the President of the Personal Data Protection Office (PUODO), which replaced GIODO on 25 May 2018. More information is available on the PUODO website.


COOKIES

General information

When browsing the Online Store website, “cookies” are used — small text files saved on your end device in connection with your use of the Online Store. They are used to ensure the correct operation of the Online Store pages.

Cookies make it possible to identify the software you use and to tailor the Online Store individually to your needs.

Cookies usually contain the domain name they come from, their storage time on the device and a unique value.

Security

The cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to get onto your device via cookies.

Types of cookies

We use two types of cookies:

  • session cookies — stored on your device until the browser session ends; afterwards the information is permanently removed from your device’s memory;
  • persistent cookies — stored on your device until deleted; ending the browser session or switching off the device does not remove them.

Purposes

We also use third‑party cookies for the following purposes:

  • configuring the Online Store;
  • creating statistics (Google Analytics; Google Ireland Ltd. — privacy policy: https://policies.google.com/privacy?fg=1);
  • using Google Signals to combine visit information from this Store with information from logged‑in Google accounts for ad personalisation (Google privacy policy: https://policies.google.com/privacy?fg=1);
  • creating statistics and measuring content performance (Hotjar — privacy policy: https://www.hotjar.com/legal/policies/privacy/);
  • collecting information about user behaviour (Meta Pixel — privacy policy: https://www.facebook.com/help/cookies/);
  • building customer profiles to display tailored materials in ad networks (Google Ads — privacy policy: https://policies.google.com/privacy?fg=1);
  • displaying reviews from Opineo.pl (privacy policy/cookies: http://www.opineo.pl/i/informacje-o-ciastkach);
  • displaying and collecting reviews from Ceneo.pl (cookies policy: http://info.ceneo.pl/polityka_plikow_cookies);
  • promoting the Online Store via YouTube (Google Ireland Ltd. — privacy policy: https://policies.google.com/privacy?hl=pl&gl=pl);
  • promoting the Online Store via Facebook (Facebook Ireland Ltd. — privacy policy: https://pl-pl.facebook.com/privacy/explanation).

To learn the rules for the use of cookies, please refer to the privacy policies of the companies indicated above.

Cookies may be used by advertising networks, in particular Google, to display ads tailored to your preferences; to this end, information about how you navigate the web or the time you spend on the website may be stored.

To view and edit information about your preferences collected by Google’s advertising network, use: https://www.google.com/ads/preferences/.

By using your browser settings or the appropriate service configuration, you can change cookie settings at any time — in particular to block the automatic handling of cookies or to be notified each time cookies are placed on your device. Detailed information on the possibilities and methods of handling cookies is available in your browser settings.