1. This Privacy Policy sets out the rules for the processing of personal data obtained in connection with the operations of Full Maszyny Budowlane Sp. z o.o., including via the Website / Sales Platform available at www.full.com.pl (hereinafter collectively referred to as the “Website”).
  2. The Controller of personal data processed within the Website is Full Maszyny Budowlane Sp. z o.o., with its registered office at ul. Bruszewska 20, 03-046 Warsaw, Poland. Registration details of the Controller: District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, KRS No.: 0000060232, NIP (Tax ID): 5242320024, REGON (Statistical No.): 016156920. Contact email for data protection matters: full@full.com.pl.
  3. Personal data processed by Full Maszyny Budowlane Sp. z o.o. is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).
  4. Full Maszyny Budowlane Sp. z o.o. takes particular care to protect the privacy of Users of the Website.

§ 1. Type of Data Processed, Purposes and Legal Basis

  1. Full Maszyny Budowlane Sp. z o.o. collects information concerning natural persons, natural persons conducting business or professional activity on their own behalf, and natural persons representing legal entities or organisational units without legal personality, which are granted legal capacity under the law, hereinafter collectively referred to as “Users.”
  2. Users’ personal data is collected in the following cases:
    a) Registration of an account on the Website, for the purpose of creating an individual account and managing it.
    Legal basis: necessity for the performance of the Account service agreement (Art. 6(1)(b) GDPR).
    b) Placing an order via the Website (online, by telephone, by email, or in person), for the purpose of executing the sales agreement for Products.
    Legal basis: necessity for the performance of the sales agreement (Art. 6(1)(b) GDPR).
    c) Subscription to the newsletter (if the service is available), for the purpose of performing the agreement for the provision of an electronic service consisting of delivering the Seller’s marketing information.
    Legal basis: consent of the data subject (Art. 6(1)(a) GDPR).
    d) Using the contact form or other forms of contact (telephone, email) within the Website for the purpose of handling a request or inquiry submitted by the User (e.g. product inquiry, request for quotation, service-related contact).
    Legal basis:
    – necessity to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) in the case of inquiries related to offers or contract conclusion;
    – legitimate interest of the Seller (Art. 6(1)(f) GDPR) consisting of communication and handling of requests not directly related to a contract.
  3. When placing an order or registering an account on the Website, the User provides the following data:
    a) for Consumers: first name, last name, address details (street, house/flat number, postal code, city, country), phone number, email address;
    b) for Entrepreneurs: company name, registered office/business address, VAT ID number (NIP), Statistical Number (REGON), name and surname of the contact person, phone number, email address.
    Providing this data is voluntary but necessary to create a Customer Account or to place and fulfil an Order.
  4. In the case of a purchase made for another natural person or entity, the data of that person/entity may also be provided to the extent necessary to fulfil the Order (e.g. shipping details, contact person for receipt of the machine).
    Legal basis: necessity for the performance of the contract (Art. 6(1)(b) GDPR) and legitimate interest of the Seller (Art. 6(1)(f) GDPR) in ensuring proper delivery and contact with the recipient.
  5. For the Newsletter service (if available), the User provides only their email address.
    Providing the email address is voluntary but necessary for Newsletter subscription.
  6. When using the contact form or contacting via email/phone (if available within the Website), the User provides the data necessary to establish contact and process the inquiry, typically: first name, last name (or company), email address, phone number, and the content of the inquiry.
    Providing this data is voluntary but necessary to receive a reply.
  7. When using the Website, additional information may be collected, in particular: the IP address assigned to the User’s device, the external IP address of the Internet provider, domain name, browser type, access time, operating system type, and navigation data, including information about links clicked and other actions taken on the Website.
    Legal basis: legitimate interest of the Seller (Art. 6(1)(f) GDPR) consisting of ensuring the proper functioning of the Website, compiling visit statistics, improving the Website’s functionality, and ensuring IT security.
  8. For the purpose of establishing, pursuing, and enforcing claims, as well as defending against claims, certain personal data provided by the User in the course of using the Website’s functionalities may be processed, such as: first name, last name (or company), contact details, data concerning the use of services, and other data necessary to prove the existence of a claim. Legal basis: legitimate interest of the Seller (Art. 6(1)(f) GDPR).

§ 2 Who personal data is shared or entrusted with, and how long it is stored

  1. The User’s personal data may be transferred to service providers used by the Seller in the course of conducting business and handling the sale of Products. Depending on contractual arrangements and circumstances, the service providers to whom personal data is transferred either act under the Seller’s instructions regarding the purposes and methods of processing such data (processors) or independently determine the purposes and methods of processing (controllers).
    1. Processors:
      The Seller uses service providers who process personal data solely on the Seller’s instructions. These include, among others, providers of accounting services, IT services, CRM systems, website traffic analytics systems, marketing campaign performance analytics systems, as well as entities providing courier or specialised transport services, and entities providing servicing or repair services (acting on behalf of the Seller, e.g. under warranty).
  2. Data processing location:
    The service providers to whom personal data is transferred are primarily located in Poland and other countries within the European Economic Area (EEA). If data is transferred outside the EEA, the Seller ensures that appropriate safeguards required by the GDPR are applied, such as standard contractual clauses.
  3. Period of personal data storage:
    Personal data of Users is stored as follows:
    1. If the basis for processing is consent – data is processed for as long as the consent is not withdrawn, and after withdrawal for a period corresponding to the limitation period for claims that may be raised by the Seller or against the Seller (in principle, 6 years for general claims, 3 years for claims related to business activity).
    2. If the basis for processing is the performance of a contract (e.g. Sales Agreement, Account service agreement) – data is processed for as long as it is necessary to perform the contract, and thereafter for a period corresponding to the limitation period for claims (in principle, 6 years, 3 years for claims related to business activity). Data contained in accounting and tax documents is stored for the period required by law (in principle, 5 years from the end of the calendar year in which the tax payment deadline expired).
    3. Data processed on the basis of the Seller’s legitimate interest – data is processed for as long as this interest exists, and after it ceases, for a period corresponding to the limitation period for claims, or until the User effectively objects to such processing.
  4. Navigation data may be used to provide Users with better service, for statistical analysis, to adapt the Website to Users’ preferences, and for Website administration purposes.
  5. If a request is made, the Seller provides personal data to authorised state authorities, in particular organisational units of the Prosecutor’s Office, Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications, where required by law.

§ 3 Mechanizm cookies, adres IP

  1. The Website uses small files called cookies. These are stored on the end device of a person visiting the Website, provided that the web browser allows it. Cookies typically contain the domain name from which they originate, their “expiry time,” and a unique, randomly generated identifier for that file. Information collected via cookies helps tailor the Seller’s offer to the individual preferences and actual needs of Users visiting the Website and is also used to develop general statistics on how the Website is used.
  2. The Seller uses two types of cookies:
    1. Session cookies – stored in the User’s device memory until the end of a given browser session or the device is switched off. The stored information is then permanently deleted from the device’s memory.
    2. Persistent cookies – stored in the User’s end device memory and remain there until deleted or expired.
  3. The Seller uses first-party cookies for the purpose of:
    1. Authenticating the User in the Website and maintaining the User’s session (if applicable to the Customer Account), ensuring that the User does not have to re-enter their login and password on each subpage;
    2. Analysis, research, and auditing of Website viewership, in particular to create anonymous statistics that help understand how Users use the Website, which enables improving its structure and content;
    3. Adjusting the Website’s content to the User’s preferences and optimising the use of the Website.
  4. The Seller uses third-party cookies for the purpose of:
    1. Collecting general and anonymous statistical data via analytical tools such as Google Analytics – third-party cookies administrator: Google Inc., USA;
    2. Displaying maps on the Website via Google Maps – third-party cookies administrator: Google Inc., USA;\
    3. Displaying multimedia content on the Website from YouTube or Vimeo – third-party cookies administrator: Google Ireland Ltd., Ireland, for YouTube; Vimeo, LLC, USA, for Vimeo.
  5. The cookie mechanism is safe for the devices of Website Users. In particular, it is not possible for viruses or other unwanted software to penetrate Users’ devices in this way. Users can manage cookies themselves in their browser settings. Restricting or disabling cookies on the User’s device may affect certain functionalities of the Website. Detailed information about the possibilities and methods of managing cookies is available in the software settings (web browser).
  6. The Seller may collect Users’ IP addresses. An IP address is used to diagnose technical problems related to the server, create statistical analyses (e.g., to determine the region of visits), for security purposes, and to administer the Website.
  7. The Website may contain links to other websites. The Seller is not responsible for the privacy practices of those websites.

§ 4 Rights of Data Subjects

  1. Right to withdraw consent – legal basis: Article 7(3) GDPR.
    1. The User has the right to withdraw their consent to the processing of personal data at any time, where the processing is based on such consent.
    2. Withdrawal of consent takes effect from the moment it is withdrawn and does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
    3. Withdrawal of consent may prevent further use of services or functionalities which, by law, can only be provided on the basis of consent.
  2. Right to object to data processing – legal basis: Article 21 GDPR.
    1. The User has the right to object, at any time and on grounds relating to their particular situation, to the processing of their personal data, including profiling, where the Seller processes their data based on a legitimate interest (Article 6(1)(f) GDPR), e.g., for the purposes of direct marketing, compiling Website usage statistics, or establishing and pursuing claims.
    2. If the User’s objection is found to be justified and the Seller has no other legal basis for processing, the personal data in respect of which the objection has been raised will be deleted.
  3. Right to erasure (“right to be forgotten”) – legal basis: Article 17 GDPR.
    1. The User has the right to request the deletion of all or some of their personal data if: the data is no longer necessary for the purposes for which it was collected; the User has withdrawn consent (where it was the legal basis for processing); the User has lodged a valid objection to the processing; the data is being processed unlawfully; the data must be deleted to comply with a legal obligation; or the data was collected in connection with the provision of information society services.
    2. Despite a request for deletion, the Seller may retain certain personal data to the extent necessary for establishing, pursuing, or defending legal claims, or to comply with a legal obligation.
  4. Right of access – legal basis: Article 15 GDPR.
    1. The User has the right to obtain confirmation as to whether or not their personal data is being processed by the Seller, and, if so, to access the data and receive information about: the purposes of processing; categories of data; recipients; retention periods; rights available to them; the source of the data; automated decision-making (including profiling); and safeguards in place for transfers of data outside the EEA.
    2. The User has the right to obtain a copy of the processed data.
  5. Right to rectification – legal basis: Article 16 GDPR.
    1. The User has the right to request the immediate rectification of inaccurate personal data and to have incomplete data completed.
    2. The User has the right to receive their personal data in a structured, commonly used, machine-readable format and to transmit those data to another controller, if the processing is based on consent or on a contract and is carried out by automated means. The User may also request that the Seller transmit the data directly to another controller, where technically feasible.
  6. To exercise the above rights, the User should contact the Seller in writing at the registered office address or electronically at: full@full.com.pl.
  7. The Seller shall review requests regarding the rights of data subjects and respond within one month from receipt of the request. In justified cases (complex nature of the request or a large number of requests), this period may be extended by a further two months, in which case the User will be informed within one month of receipt of the request.
  8. The User has the right to lodge a complaint with a supervisory authority, namely the President of the Personal Data Protection Office (address: ul. Stawki 2, 00-193 Warsaw, Poland), if they believe that the processing of their personal data violates the provisions of the GDPR.

§ 5 Security Management – Password

  1. The Seller ensures a secure and encrypted connection (e.g., SSL) during the transmission of personal data and when logging in to the Customer Account on the Website.
  2. If the Website allows for the creation of a Customer Account and a User who holds such an account loses their access password, the Website provides the option to generate a new password. The password recovery procedure is described in detail on the Website (e.g., via the “Forgot your password” link). Access passwords for Customer Accounts are stored in encrypted form.
  3. The Seller never sends any correspondence, including electronic messages, requesting login credentials, and in particular the access password to the Customer Account.

§ 6 Changes to the Privacy Policy

  1. The Privacy Policy may be amended. The Seller will inform Users of any changes by publishing the new version of the Privacy Policy on the Website and, in the case of registered Users, by sending information about the changes to the e-mail address associated with the Customer Account, in advance.
  2. Questions regarding the Privacy Policy should be directed to the following e-mail address: full@full.com.pl, or in writing to the Seller’s registered office address.

Effective date of the Privacy Policy: 20.05.2025