I. General Provisions

1. The privacy policy outlines how personal data necessary for the provision of electronic services through the www.pm-recycling.pl website (hereinafter referred to as the "Service") is collected, processed, and stored.
2. The Service collects only the personal data necessary for the provision and development of the services offered within it.
3. Personal data collected through the Service is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR), as well as the Act on Personal Data Protection of 10 May 2018.

II. Data Controller

The data controller for personal data collected through the Service is PM RECYCLING S.C., located at Rzeplin, Led Avenue 13, 55-020 Żórawina, Tax Identification Number (NIP): 896-160-92-84, National Official Business Register Number (REGON): 520772645, email address: biuro@malinowski-recycling.pl (hereinafter referred to as the "Controller").

III. Purpose of Collecting Personal Data

1. Personal data is used for the following purposes:
   • Registration of the user's account and identity verification.
   • Allowing users to log into the Service.
   • Fulfilling agreements related to services and e-services.
   • Communication with the user (live chat, contact form, etc.).
   • Sending newsletters (with the user's consent).
   • Managing the comment system.
   • Providing social services.
   • Promoting the Controller's offerings.
   • Marketing, remarketing, and affiliate activities.
   • Personalizing the Service for users.
   • Conducting analytical and statistical activities.
   • Debt collection.
   • Establishing and pursuing claims or defending against them.
2. Providing data is voluntary but necessary for entering into an agreement or using other functionalities of the Service.

IV. Type of Processed Personal Data

The Controller may process the User's personal data, including name, date of birth, residential address, email address, phone number, and Tax Identification Number (NIP).

V. Period of Personal Data Processing

User's personal data will be processed for the following periods:

• When the basis for data processing is the execution of a contract, until the expiration of claims after its completion.
• When the basis for data processing is consent, until its withdrawal, and after consent withdrawal until the expiration of claims.

In both cases, the limitation period is 6 years, and for claims related to periodic services and business activities, it is 3 years (unless a specific provision states otherwise).

VI. Disclosure of Personal Data

1. User's personal data may be disclosed to entities affiliated with the Controller, its subcontractors, and entities cooperating with the Controller, such as companies handling e-payments, courier/postal services companies, and law firms.
2. User's personal data will not be transferred outside the European Economic Area (EEA).

VII. User Rights

1. Service users have the right to: access their personal data, rectify it, delete it, limit processing, transfer it, object to processing, and withdraw consent at any time (with no impact on the lawfulness of processing based on consent before its withdrawal).
2. To exercise these rights, users should send a request to the following address: biuro@malinowski-recycling.pl.
3. The Controller will respond to or refuse such requests immediately, but no later than within one month from receiving the request.
4. Users have the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing infringes upon their rights and freedoms (GDPR).

VIII. Cookies

1. The Service collects information using cookies—session, persistent, and third-party cookies.
2. Collecting cookies helps ensure the proper provision of services on the Service and serves statistical purposes.
3. Users can determine the extent of cookie access to their device in their browser settings.

IX. Automated Decision-Making and Profiling

1. User data may not be processed in an automated manner that could result in any decisions concerning them.
2. User data may be profiled to tailor content and personalize offerings upon their consent.

X. Final Provisions

1. The Controller has the right to make changes to the privacy policy without limiting user rights.
2. Information about such changes will be provided in the form of a notification available on the Service.
3. Matters not regulated by this privacy policy are governed by GDPR and Polish law.