Privacy policy

Privacy policy

This Privacy Policy specifies the methods of protecting the personal data of Users (i.e. people using the website, including Ordering Parties defined below) using the website available at the electronic address www.catalistapp.com, hereinafter referred to as the "application".

Lack of acceptance of this Privacy Policy is tantamount to the inability to use the Application website, including placing Orders.

The administrator of Users' personal data is MB INVEST Marcin Biczysko with its registered office in Witoszów Dolny 52 L, 58-100 Świdnica, with NIP number: 884251 9764 REGON: 020580789, the owner of the Application, which sells Goods through it and on the terms specified in the Regulations without the simultaneous presence of the parties. , using a telecommunications network, hereinafter referred to as the "Seller".

Security and protection of personal data
The Seller declares that it processes Users' personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/ 46/EC (General Data Protection Regulation, hereinafter GDPR). In particular, the Seller - taking into account the nature, scope, context and purposes of personal data processing and the risk of violating the rights and freedoms of natural persons with varying probability and severity of threat - implements appropriate technical and organizational measures to ensure that the processing takes place in accordance with the GDPR and to be able to demonstrate this .

Scope of data collection
The Seller collects data of Users, in particular those who place Orders ("Orderers"), in the manner specified in the Regulations. In order to create an account in the Application, the User should provide the data necessary to use the Account service, i.e. name, surname, e-mail address and set a password for the account. The e-mail address provided by the User is also a login to the Application website. In order to place an Order, the Ordering Party should provide data ensuring the possibility of its execution and enabling contact with the Ordering Party, i.e. name and surname, e-mail address, delivery address, as well as telephone number.

Purpose of data collection

The User's personal data are processed for the purpose of:
concluding and performing a contract for the provision of electronic services - if the User uses such services,
conclusion and performance of the sales contract, including for the purpose of considering possible complaints,
in the event of purchasing Goods, personal data is also collected in accounting documentation and will therefore be processed for the purpose of keeping the Seller's accounting,
responding to inquiries submitted via the contact form,
if the User expresses his/her willingness to receive marketing content regarding the Seller, the User's personal data is also processed for the purpose of sending him/her such content,
considering a request regarding personal data.
for statistical purposes for the Administrator's internal needs, including sending customer satisfaction surveys - in this case, the basis for processing will be the Administrator's legitimate interest in collecting information enabling business development and adapting services to the needs of Application Users.


Providing personal data is voluntary, but it is a condition for concluding a contract for the provision of electronic services, as well as a sales contract. The consequence of not providing personal data for these purposes by the User is the inability of the Seller to provide services and the inability to conclude and perform the sales contract.

In terms of sending marketing content at the User's request, providing personal data is voluntary, but failure to provide it will result in the inability to send this content.

The User's personal data will not be used to make automated decisions, including profiling.

Legal basis for personal data processing

The legal basis for processing the personal data of Users is as follows:

1) Necessity of processing for the conclusion and performance of a contract for the provision of electronic services – when the User uses such services,
2) Necessity of processing for the conclusion and performance of a sales contract, including the consideration of any complaints,
3) In the case of purchasing Goods – necessity to fulfill the legal obligation incumbent on the Seller, consisting of accounting. This obligation arises from the generally applicable provisions of law, in particular from the Act of August 29, 1997, the Tax Ordinance, the Act of September 29, 1994, on accounting, and the Act of March 11, 2004, on goods and services tax,
4) Necessity of processing data to achieve purposes resulting from the legitimate interests pursued by the Seller, involving handling correspondence and responding to inquiries,
5) In the event that the User expresses a desire to receive marketing content regarding the Seller – necessity of processing data to achieve purposes resulting from the legitimate interests pursued by the Seller, i.e., to carry out marketing activities concerning the Seller,
6) Fulfillment of a legal obligation consisting of the necessity to consider a report concerning the protection of personal data.

Data retention periods for personal data

1) Personal data processed for the purpose of concluding and performing a contract for the provision of electronic services – are stored for the duration of the User's use of these services in accordance with the Regulations. After discontinuing the use of services, the User's personal data, including: first name, last name, email address, will be stored until the expiration of the periods of limitation for civil law claims.

2) Personal data processed for the purpose of concluding and performing a sales contract, including the consideration of any complaints, as well as for the Seller's accounting purposes – are stored until the expiration of the periods specified by relevant legal provisions, i.e., until the expiration of the limitation period for tax obligations, which may be extended in appropriate cases by the limitation period for civil law claims.

3) Personal data processed for the purpose of responding to inquiries submitted through the contact form – are stored for the period necessary to process the inquiry.

4) Personal data processed for the purpose of sending marketing content – from the moment of receiving a request to stop sending marketing content, the data is stored only for the purpose of defending against any claims related to this sending for the period specified by legal provisions regarding the limitation of claims.

5) Personal data processed for the purpose of considering a report concerning personal data – are stored until the expiration of the limitation period for claims related to the exercise of rights by individuals under the provisions of personal data protection laws.

User Rights

The User has the right to decide to what extent their personal data will be used. In particular, the User can withdraw consent for receiving marketing content related to the Seller at any time. The withdrawal of this consent does not affect the legality of sending such content, which was carried out based on the consent before its withdrawal. Consent can be withdrawn by clicking on the appropriate link included in the sent marketing communications.

Furthermore, the User is entitled to:

1) Request access to their personal data, their correction, deletion, or restriction of processing, as well as the right to data portability.
2) In cases where the User's personal data is processed to pursue the legitimate interests of the Seller (including situations where the User expresses a desire to receive marketing content related to the Seller) – the right to object to the processing of their personal data at any time.
3) Withdraw consent for the processing of personal data at any time if the processing of the User's personal data is based on consent. The withdrawal of consent does not affect the lawfulness of processing carried out based on that consent before its withdrawal.
4) Lodge a complaint with the President of the Office for Personal Data Protection, whose registered office is located in Warsaw at Stawki 2, 00-193 Warsaw.
Any changes and other requests regarding their personal data can be made by submitting a relevant application to the contact details indicated in the "Contact Us" section of this Privacy Policy.

Cookie Mechanism

The application uses small files called cookies, which are stored by the server on the computer of the person visiting the website. A cookie typically contains the domain name from which it originates, its "expiration period," and an individually, randomly chosen number identifying that file.

The cookie mechanism is entirely safe for computers; viruses cannot penetrate users' computers through this method. Nevertheless, users can limit or disable access to cookie files on their computers. If this option is used, navigation on the application's pages will generally still be possible but may result in limitations on the use of certain features.

The administrator may process data contained in cookie files when visitors use the website for the purpose of:

1) Identifying the User as logged in and informing them that they are logged in.
2) Remembering products added to the cart to place an order.
3) Remembering data from completed forms used for ordering or logging into the application.
4) Customizing the content of the application's pages to the individual preferences and actual needs of the service recipient (e.g., regarding colors and font size, page layout).
5) Providing personalized content and ads, offering social features, and analyzing traffic on our site.
6) Conducting anonymous statistics showing how the application's site is used.

Available web browsers usually allow the storage of "cookie" files on the User's end device by default.

The User can change cookie file settings at any time. These settings can be changed, in particular, to block the automatic handling of "cookie" files in the web browser settings or to inform about their placement on the User's end device each time on the website. Detailed information on the possibilities and ways of handling "cookie" files are available in the internet browser settings. Failure to change "cookie" settings means that they will be placed on the User's end device, and thus the Administrator will be able to store information on the User's end device and access this information.

IP Address

The Seller reserves the right to collect IP addresses of visitors to the Application's website, which may be helpful in diagnosing technical issues with the server, creating statistical analyses (e.g., determining regions with the most visits). Additionally, they may be useful in administering and improving the Application.

Analytical and marketing tools used by us and our trusted partners

Your personal data on our website may be processed by our technological and advertising partners, including but not limited to:

1) Ringier Axel Springer Polska sp. z o.o. with headquarters in Warsaw (02-672), ul. Domaniewska 49, registered in the National Court Register kept by the District Court for the capital city of Warsaw, 13th Economic Department of the National Court Register, under the KRS number 0000420780, with a share capital of PLN 106,000, NIP: 5272677009, REGON: 146127300. The privacy policy of the mentioned partner, containing information about the details of data processing and your rights, can be found at https://polityka-prywatnosci.onet.pl/.

2) Your data in the above scope will be processed based on your consent, among other things, to ensure the correctness and attractiveness of the presented advertisements for products and services or to make proper settlements for the publication of these advertisements. Your data will be processed using cookie technology and similar methods, and the link above will provide information on how to manage this technology, including blocking and deleting cookies. If you do not want the above partner to process your data collected on our sites to ensure the correctness and attractiveness of the advertisements for products and services presented to you, you can withdraw your consent by clicking on the link: https://polityka-prywatnosci.onet.pl/ (at the bottom of the page, you will find a link to the tool allowing you to make changes).

3) Wirtualna Polska Holding S.A. with headquarters at ul. Żwirki i Wigury 16, 02-092 Warsaw, a company entered into the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, XIV Economic Department of the National Court Register, under the KRS number: 0000407130 | REGON: 016366823 | NIP: 5213111513. The privacy policy of the mentioned partner, containing information about the details of data processing and your rights, can be found at https://holding.wp.pl/poufnosc.

Remember that also other entities (including Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter Facebook, and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter Google ) may use cookies and similar technologies to collect or receive information from the Website or Application and other places on the Internet and use it to provide advertising measurement and targeting services. By managing your cookie settings, you can decide whether you consent to the collection and use of information for ad targeting.

Google Analytics
The website uses Google Analytics, which is an online tool for analyzing website statistics and web analytics that gives insight into the website's data traffic, provided by Google. We use this tool to create statistics for the purpose of adapting the content of our websites to Users' preferences and their continuous optimization. You can prevent the installation of cookies by setting your browser accordingly. You can also prevent Google from collecting data collected through cookies and relating to the use of the Website by installing an add-on in your browser that blocks the embedding of Google Analytics scripts, available here https://tools.google.com/dlpage/gaoptout. More information about Google Analytics can be found here https://support.google.com/analytics/answer/6004245. Due to the use of Google Analytics, personal data obtained in connection with the use of the website may be transferred outside the European Economic Area. In such a case, the transfer of personal data is based on standard contractual clauses concluded by the Administrator with the tool provider. We encourage you to read the content of the agreement regarding the processing of personal data https://business.safety.google/adsprocessorterms/, including the content of standard contractual clauses https://business.safety.google/adsprocessorterms/sccs/ which are its element. Information about how Google uses data collected when you use its partners' websites and applications is available at https://policies.google.com/technologies/partner-sites.

Google Analytics advertising features (DoubleClick)
In addition to Google Analytics (see above), DoubleClick advertising functions are active on this website. Therefore, additional data is collected via the Google cookie that goes beyond the standard Google Analytics implementation. For this purpose, in addition to Google Analytics cookies, our website uses cookies from external companies. DoubleClick's goal is to display relevant advertisements to you, both ours and those of third-party companies. Your browser is assigned an identifier (ID), which acts as a kind of nickname, so that we can see which ads your browser has displayed and which ads the user has clicked on. The use of DoubleClick cookies allows us to display advertising relevant to previous visits to both our and other websites. The information generated by the cookies is transferred to a server in the USA for evaluation and stored there by Google. This data will be transferred to external companies only on the basis of statutory provisions or as part of data processing related to a specific order. Under no circumstances will Google combine your data with other data held by Google. You can refuse the use of cookies and configure your browser accordingly. However, please note that in this case you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by cookies and your use of the website by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following address. You can also deactivate DoubleClick cookies on the Digital Advertising Alliance website at https://support.google.com/ads/answer/7395996. In addition, the above information about "Google Analytics" also applies to Analytics advertising functions. Detailed information about DoubleClick can be found at:
https://policies.google.com/technologies/ads

Google Ads
It is a tool that allows you to measure the effectiveness of advertising campaigns, including the analysis of collected data. Google Ads allows us to display our ads to people who have visited the Website in the past. Information on data processing by Google in the field of Google Ads is available here https://policies.google.com/technologies/ads.

Facebook business tools
In connection with the use of Facebook business tools, we and Facebook perform functions

Access to third party data

Only authorized employees or subcontractors of the Seller and entities providing services to the Seller (i.e. accounting, IT and technical support services, as well as archiving and destruction of documents) have direct access to personal data collected by the Seller, and they must have access to the data in order to perform their duties.

If you choose the registration/login option via an external website (Facebook), the User provides the external website only with information about the use of the Seller's Application.

Entities delivering the ordered Goods also have access to the personal data of the Ordering Party - to the extent necessary to perform this delivery, as well as entities with the help of which the Ordering Party makes payments for the Goods - to the extent that the Ordering Party provides them with this data.

Users' personal data may be made available to entities authorized to receive them under applicable law, in particular to the competent judicial authorities.

If voluntary consent is given, the User's personal data in the form of an e-mail address will be processed by Grupa Allegro sp. z o.o. based in Poznań (60 – 166) at ul. Grunwaldzka 182, which is a separate personal data administrator, in order to examine opinions on the level of satisfaction with the transaction.

Disclaimer

This Privacy Policy does not cover any information regarding services or goods of entities other than the Seller, which were posted on the Application pages commercially, as a guest, on a reciprocal basis or not intended to achieve a commercial effect.

The Seller is not responsible for the actions or omissions of the Ordering Party, as a result of which the Seller processes the personal data provided by them in the manner specified in this Privacy Policy.

Contact Us

Please send any additional questions related to the Privacy Policy to catalist.app@kat-recykling.pl
In matters related to the protection of personal data, the Seller can be contacted via:
e-mail - by sending a message to: catalist.app@kat-recykling.pl
by phone - by calling: +48
by post - by sending correspondence to the following address: Witoszów Dolny 52 L, 58-100 Świdnica