Privacy Policy

Privacy Policy

The personal data administrator responsible for their processing is:
Ambient Sp z o. o.
Berzyna 83B/1.3
Wolsztyn 64-200 ​​
Poland
info@keeklampsystem.pl

Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information on how we handle your data.

1. Access data and hosting

Our websites can be visited without providing any personal data. For each website call-up, the server automatically saves only so-called server logs, e.g. the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting Internet service provider (so-called access logs) and documents the page call-up. This data is analyzed exclusively for the purpose of ensuring the proper functioning of our website and improving our offer. This serves to protect our legitimate interest in the optimal, correct presentation of our websites and offers pursuant to Art. 6, paragraph 1, letter f of the GDPR.

Hosting

All access data will be deleted no later than thirty days after the end of your visit to our website.

The services for hosting and displaying the website are partly provided on our behalf by our service providers as part of a data processing contract. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis for cooperation with them, please contact us. You will find our contact details in the section "Our contact details and your rights".

2. Collection and processing of data for the purposes of contract execution and contact

2.1 Data processing for the purposes of contract execution

We process the personal data you voluntarily provide when placing an order in order to perform the contract (including inquiries regarding the handling of claims for warranty for defects or guarantees and the obligation to provide information on necessary updates). The legal basis in this respect is Article 6, paragraph 1, letter b of the GDPR. Mandatory fields are marked as such because they concern data that are necessary to perform the order and without their provision we are unable to perform it. What data is collected results directly from the forms into which the data is entered.

Further information on the processing of your data, in particular the transfer of data to our service providers for the purpose of order processing, payment and shipping, can be found in the following sections of this privacy policy. After the contract has been fulfilled, the processing of your data will be restricted and after the retention periods required under tax regulations and the Accounting Act have elapsed, the data will be deleted (Article 6 paragraph 1 letter c GDPR), unless you expressly consent (Article 6 paragraph 1 letter a GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy in such a case.

Merchandise management system

We also use an external goods management system to process orders and execute the contract. Our service providers provide us with services in this regard under a data processing agreement. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You will find their contact details in the section "Our contact details and your rights".

2.2 Customer account

If, in accordance with Art. 6 sec. 1 lit. a GDPR, you give your consent to set up a customer account, we will process your personal data required for this purpose. They will also be used for future orders on our website. Your customer account can be deleted at any time. To do this, send a message to our contact address indicated in the section "Our contact details and your rights" or use the appropriate function in the customer account settings. After deletion of your customer account, the processing of your data will be restricted and after the retention periods specified in tax regulations and the Accounting Act have elapsed, the data will be deleted (Art. 6 sec. 1 lit. c GDPR), unless you expressly consent (Art. 6 sec. 1 lit. a GDPR) to the further use of this data or, in accordance with applicable law, we reserve the right to continue using the data for other purposes, about which we inform you in this privacy policy.

2.3 Data processing for contact purposes

As part of customer communication, we process personal data in order to process your enquiries (Article 6, paragraph 1, letter b of the GDPR). You provide us with this data voluntarily when contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such because they concern data that is necessary to process the enquiry. The data collected results directly from the forms into which the data is entered. After your enquiry has been fully processed, your data will be deleted, unless you expressly consent (Article 6, paragraph 1, letter a of the GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy.

Live Chat Tool Zendesk

When you use the Zendesk Live Chat Tool to contact us, the data you voluntarily provide (name, email address, message content) will be processed by us in order to respond to your inquiry. This serves to implement our legitimate interests (Article 6, paragraph 1, letter f of the GDPR) in ensuring an effective possibility of contacting us. The live chat tool is a service provided to us by an external service provider - Zendesk, Inc., 1019 Market Street, San Francisco, CA 94103, USA, which ensures its functionality. Our cooperation is based on standard data protection clauses adopted by the European Commission.

3. Data processing for the purpose of delivery

In order to execute the contract (Article 6, paragraph 1, letter b of the GDPR), we transfer your data to the shipping company selected by you during the ordering process, which was commissioned to deliver the ordered products.

4. Data processing for the purpose of payment execution

In order to process payments in our online store, we cooperate with external service providers handling electronic online payments and transfer your data to the payment service company you selected during the ordering process. The above serves to perform the contract (Article 6, paragraph 1, letter b of the GDPR).

Data processing for the purpose of preventing abuse and optimizing payments

In some cases, we may provide our service providers with additional information that they may use together with the information required to process payments. These service providers then act on our behalf as processors and provide us with services to prevent abuse and optimize payment processes (e.g. invoicing, analysis of rejected payments, accounting support). In accordance with Article 6 (1) (f) of the GDPR, this serves our legitimate interests in protection against abuse and fraud and in the effective management of payments.

5. Marketing channels: e-mail

If you subscribe to our newsletter, we will use the data you provide to us on the basis of your consent (Article 6, Section 1, Letter a of the GDPR) to regularly send you our newsletter by electronic means.

You can unsubscribe from the newsletter at any time. To do this, send a message to our contact address indicated in the section "Our contact details and your rights" or use the unsubscribe link provided in the newsletter. After unsubscribing from the newsletter recipient list, we will delete your e-mail address, unless you expressly consent (Article 6, paragraph 1, letter a of the GDPR) to the further use of this data for other purposes or, in accordance with applicable law, we reserve the right to continue using the data, about which we inform you in this privacy policy.

5.1 Sending a newsletter

5.2 Sending an invitation to leave a purchase review

If you have given your consent during or after placing your order (Article 6, paragraph 1, letter a of the GDPR), we will use your e-mail address to send you an electronic invitation to evaluate a purchase made in our shop. The evaluation/rating is issued via the evaluation system we use. You can withdraw your consent at any time by sending a message with information about the withdrawal of consent to our contact address specified in the section "Our contact details and your rights". Alternatively, you can also use the unsubscribe link included in the message with the invitation to submit an opinion.

The invitations to post reviews are sent by our service provider Trusted Shops GmbH Subbelrather Str. 15C, 50823 Cologne, Germany (Trusted Shops). As part of sending the invitations, we receive status information from Trusted Shops (e.g. whether the invitation to post a review has been sent and whether it has reached the recipient). This is done in accordance with Art. 6 para. 1 lit. f GDPR in order to fulfil our legitimate interest in receiving information about invitations to post reviews in order to be able to carry out optimisations on this basis if necessary, as well as in order to fulfil Trusted Shops' legitimate interest in being able to offer this service.

We and Trusted Shops are jointly responsible for sending invitations to post reviews and for collecting and displaying information about reviews and ratings or statuses.

As part of this joint responsibility between us and Trusted Shops, if you have any questions about the protection of your data or wish to assert your rights, please contact Trusted Shops. The contact details can be found on this page . There you will also find further information on data protection at Trusted Shopsj. Regardless, you can always contact us directly. If necessary, your inquiry will be forwarded to Trusted Shops, which is jointly responsible for data processing.

6. Cookies and similar technologies

General information

In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools, including so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser when you next visit the website (so-called persistent cookies).

Privacy protection for end devices
When using our online offer, we use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website. In this respect, the storage of information on the user's end device or access to information already stored on his end device does not require the user's consent.

For functions that are not strictly necessary, storing information on the user's end device or accessing information already stored on the user's end device requires the user's consent. Please note that in the absence of consent, some functions or elements of the website may not be fully available. Any consent granted by the user remains valid until the consent is withdrawn, the settings are configured or the relevant settings on the end device are reset.

Any further processing of data using cookies and other technologies

We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. the shopping cart function). These technologies process data such as your IP address, time of visit to the website, information about your device and browser, as well as information about the use of our website (e.g. the contents of the shopping cart). This serves, in accordance with Art. 6 para. 1 letter f GDPR, to pursue our legitimate interest in the optimal presentation of our offer.

In addition, we also use technological tools to comply with legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the relevant legal bases for data processing, can be found in the following sections of this privacy policy.

In the help menu of your web browser you will find explanations on how to change cookie settings. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Where you have given us your consent to use certain technological tools (Article 6, paragraph 1, letter a of the GDPR), you may withdraw your consent at any time. To withdraw your consent, please contact us using the contact address provided in the section "Our contact details and your rights".

7. Use of cookies and similar technological tools

If you have given your consent (Article 6, paragraph 1, letter a of the GDPR), we use the cookies and other similar technological tools of external service providers listed below on our website. Once the purpose of processing has been achieved and the use of the given technological tool has ended, the data collected as part of the use of these tools will be deleted. You may withdraw your consent at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the websites of the individual service providers. If you have any questions about our service providers and the basis for our cooperation with them, please contact us. You will find their contact details in the section "Our contact details and your rights".

7.1 Use of Google services

We use the technology tools of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") indicated below. The information automatically collected by Google technologies regarding your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. If your IP address is processed as part of the use of Google technology tools, your address is shortened by the activated IP anonymization before being stored on Google servers. Only in exceptional cases will the full IP address be transferred to a Google server and shortened there. Unless otherwise specified for the individual Google technologies described in this privacy policy, data processing takes place on the basis of a joint data controller agreement with Google pursuant to Art. 26 of the GDPR. Further information on data processing by Google can be found in the privacy policy on the Google website .

Google Analytics

For the purpose of analyzing the use of our website, we use Google Analytics, a web analytics tool from Google that automatically processes your data for this purpose (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and creates pseudonymous user profiles based on them. Cookies may be used for this purpose. Your IP address is generally not combined with other data collected by Google. Data processing within the Google Analytics service is based on a data processing agreement concluded with Google.

Google Ads

With the help of Google Ads, we promote our website in search results and on third-party websites. For this purpose, when you visit our website, a Google remarketing cookie is automatically saved on your device, which enables the display of interest-based advertising based on the websites you visit, processing your data (IP address, time of visit to the website, information about your device and browser, as well as information about your use of our website) using a pseudonymous identifier (ID). Further data processing only takes place if you have activated the option of personalizing ads in your Google account settings. In this case - if you are logged into Google while visiting our website, Google will use your data together with the data collected within Google Analytics to create and define so-called target group lists for cross-device remarketing purposes.

YouTube Video Plugin

In order to integrate third-party content using the YouTube video plug-in, the following data is processed by Google when playing the video: IP address, time of visit, information about the user's device and browser.

7.2 Use of Facebook services

Facebook Pixel

We use the Facebook Pixel tool provided by Facebook Ireland Ltd , 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The scope of the Facebook Pixel functionalities we use is indicated below. Facebook Pixel automatically collects and stores data (your IP address, time of visit, information about your device and browser, as well as information about your use of our website, e.g. visit to the website or registration for the newsletter). Pseudonymous user profiles are then created based on this data.
For this purpose, when you visit our website, the Facebook Pixel stores a cookie on your device that enables automatic recognition of your browser using a pseudonymised cookie ID when you visit other websites. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of the website, in particular for the purpose of personalising advertising. The information automatically collected by Facebook technologies regarding your use of our website is usually transferred to a server of Facebook, Inc. 1601 Willow Road, Menlo Park, California 94025, USA and stored there. The European Commission has not issued an adequacy decision for the USA. To the extent that data transfer to the USA is our responsibility, our cooperation is based on the standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in the Facebook privacy policy .

Facebook Ads (ad management)

Facebook Ads allows us to advertise our website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular for the decision to display a given advertisement to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of a joint data controller agreement in accordance with Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. This does not include the subsequent processing of data by Facebook Ireland.

Based on statistics generated using the Facebook Pixel tool regarding the activity of users visiting our websites, we use the Facebook Custom Audience function to broadcast advertisements to the appropriate group of recipients, while defining the profile/characteristics of the given target group.

Based on the pseudonymous Cookie ID stored by Facebook Pixel and the information collected about user activities on our website, we create personalised advertising via the Facebook Pixel Remarketing function.

For the purposes of web analytics and optimisation of our offer – using the Facebook Pixel Conversions function, we analyse the activity of users who visit our website via advertisements displayed as part of the Facebook Ads service. Data processing by Facebook takes place on the basis of a concluded data processing agreement.

7.3 Other service providers for analytical and marketing tools

Using Hotjar for web analytics purposes

For the purpose of analyzing the use of our website, the web analytics tool Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta ("Hotjar") automatically collects and stores data when visiting our website (your IP address, time of visit, information about your device and browser, as well as information about your use of our website), based on which pseudonymized user profiles are created. Cookies may be used for this purpose. Without separate, express consent, pseudonymized user profiles are not combined with the personal data of the entity to which the pseudonym was assigned. Data processing in connection with the services provided by Hotjar takes place within the framework of a concluded data processing agreement.

Using Pinterest Tag for web analytics and advertising purposes

For the purposes of web analytics and advertising on the Pinterest platform and on third-party websites - via technology from Pinterest Europe Ltd. , Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"), when visiting our website, data is automatically collected and stored (your IP address, time of visit, information about your device and browser, as well as information about your use of our website), based on which pseudonymous user profiles are created. Cookies will be used for this purpose, which, based on the information collected and the websites you visit, then enable the display of interest-based advertising.

Pinterest combines the information collected with other data from your Pinterest account and uses it to compile reports on user activity on the website and to provide other services related to website use. We have no influence on the processing of data by Pinterest and only receive statistics generated by the Pinterest Tag. This allows us to measure the behavior of users who visit our website via an ad placed on Pinterest. The information automatically collected by Pinterest is usually transferred to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107 in the USA and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing is carried out in accordance with Art. 26 GDPR on the basis of joint agreements between the joint controllers.

Using AWIN for Marketing Purposes

Through our advertising partner AWIN AG , Eichhornstraße 3, 10785 Berlin, Germany ("AWIN"), we offer advertising space to third parties. These advertisements are displayed in various places on this website. AWIN can use cookies to track the order process and in particular to check whether you clicked on an advertisement placed on our website and then ordered a product. For this purpose, AWIN collects and processes data (your IP address, time of visit, information about your device and browser, as well as information about your use of our website). We have no influence on the processing of this data by AWIN.

Data processing is carried out in accordance with Article 26 of the GDPR on the basis of joint arrangements concluded between the joint controllers.

8. Integration with Trusted Shops Trustbadge and other widgets

In order to present the Trusted Shops services (the quality mark and customer reviews collected using the Trusted Shops review system) and the Trusted Shops offer available to buyers after placing an order, Trusted Shops widgets are integrated into our website.

The above serves, in accordance with Article 6 paragraph 1 letter f of the GDPR, to implement our legitimate interest in the optimal marketing of our offer by enabling safe online shopping. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (hereinafter referred to as Trusted Shops), with which we are jointly responsible for the protection of jointly controlled data in accordance with Article 26 of the GDPR. We hereby inform you of the essential content of the joint arrangements of the joint controllers (Article 26 paragraph 2 of the GDPR). If you have any questions about the processing of your data jointly controlled by us and Trusted Shops GmbH or to assert your rights, please contact Trusted Shops. You will find the contact details in the Trusted Shops privacy policy, available here . Further information on data processing and protection by Trusted Shops is available here . Notwithstanding the above, you can always send an inquiry to us using the contact details provided in this privacy policy under "Our contact details and your rights". If necessary, your inquiry or request may be forwarded to the other joint controller (Trusted Shops) for processing and response.

8.1 Data processing as part of the integration of Trustbadge and other widgets

The Trustbadge is provided as part of a joint controllership by the American content provider CDN (Content Delivery Network). An appropriate level of data protection is ensured by standard data protection clauses and additional contractual agreements. Further information on data protection by Trusted Shops GmbH can be found here . When the Trustbadge is called up, the web server automatically saves a so-called log file (server logs), which also contains your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. The IP address is anonymized immediately after collection so that the saved data cannot be assigned to a specific person. The anonymized data is used in particular for statistical and error analysis purposes.

8.2. Data processing after placing an order

After you have placed an order in the shop, your e-mail address, encrypted using a one-way cryptological function, will be transferred to Trusted Shops GmbH. The legal basis for processing is Article 6 paragraph 1 point 1 letter f of the GDPR. This is done to check whether you are already registered in the Trusted Shops GmbH system and is necessary for the overriding legitimate interests of both us and Trusted Shops in being able to provide buyer protection in connection with a specific order and in providing transaction evaluation services. If you are already registered for the use of Trusted Shops services, then in this case further processing of the data takes place in accordance with the contract concluded between you and Trusted Shops. Persons who have not registered will have the opportunity to register for the first time. Further processing of the data after registration also depends on the type of contract concluded by you with Trusted Shops GmbH. If you do not register to use Trusted Shops services, all data transmitted will be automatically deleted by Trusted Shops GmbH and it will not be possible to associate it with a specific person.

Trusted Shops uses external service providers for hosting, monitoring and logging. This serves to ensure the trouble-free operation of the systems, the legal basis for this is Article 6 paragraph 1 letter f of the GDPR. Data processing may take place in third countries (USA and Israel). In the case of the USA, an adequate level of data protection is ensured by the contractual reservation of the validity of standard data protection clauses and further contractual measures, and in the case of Israel by the existence of an adequacy decision.

9. Social media

Our activity on social media: Facebook, Instagram, Pinterest

If you have given the social networking site consent in this regard (Article 6, paragraph 1, letter a GDPR), your data will be automatically collected and stored when you visit our account/profile on the aforementioned social networking sites for the purposes of web analytics and marketing. Pseudonymous user profiles are created based on this data. They can be used, for example, to place so-called personalized advertisements within and outside social networking sites that are likely to match your interests. Cookies are usually used for this purpose.
Detailed information on the processing and use of your data by individual social media portals, as well as information on your rights and the possibility of configuring privacy settings, as well as contact details for submitting inquiries are described in the privacy policies of the individual social media portals linked below. If you need help in this regard, you can also contact us.

Facebook (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The automatically processed information about your activities and use of our fan page on Facebook (by Meta) is usually transferred to a server of Meta Platforms Ireland, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and saved there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing within the framework of visiting the fan page on Facebook (by Meta) takes place in accordance with Art. 26 GDPR on the basis of joint agreements between the joint controllers, which are available here . Further information on the processing of your personal data within the framework of visiting the fan page on Facebook (information on the page statistics function) is available here .

Instagram (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The automatically processed information about your activities and use of our Instagram fan page account is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and saved there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing within the framework of visiting the fan page account on Instagram (by Meta) takes place in accordance with Art. 26 GDPR on the basis of joint agreements between the joint controllers. Further information on the processing of your personal data within the framework of visiting the fan page on Facebook (information on the page statistics function) can be found here .

Pinterest is a social network provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The automatically processed information about your activities and use of our Pinterest profile is usually transferred to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107 in the USA and stored there.

With respect to the USA, the European Commission has not issued a decision establishing an adequate level of data protection.

10. Our contact details and your rights

10.1 Your rights

Persons whose data is processed have the following rights:

• in accordance with Article 15 of the GDPR: the right to obtain information about data processing within the scope specified in that article;
• in accordance with Article 16 of the GDPR: the right to rectify your inaccurate or incomplete personal data;
• in accordance with Article 17 of the GDPR: the so-called "right to be forgotten", i.e. the right to delete your personal data stored by us, provided that their further processing is not necessary:
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest;
  • to establish, pursue or defend legal claims;
• in accordance with Article 18 of the GDPR: the right to restrict the processing of personal data, provided that:
  • the accuracy of this personal data is disputed by you;
  • the processing is unlawful and you oppose their deletion;
  • we no longer need the personal data but you require it to establish, pursue or defend legal claims;
  • you have objected to the processing of your data pursuant to Article 21;
• in accordance with Article 20 of the GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller;
• in accordance with Article 77 of the GDPR: the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office "UODO").

10.2 Contact Us

If you have any questions regarding the collection, processing and use of your personal data, or if you wish to request information, rectification, restriction of processing or deletion of data, or to revoke consent or object to the use of certain data, please contact the data controller indicated at the beginning of this privacy policy directly.