Privacy Policy PERFECT CUBE

The data controller responsible for processing your personal data is:
Perfect Sp. z o.o. ul. Kraszewskiego 1,
65-419 Zielona Góra Poland
kontakt@perfectcube.pl ,
Phone: +48 535 235 133.

Thank you for your interest in our website. The protection of your privacy is very important to us. Below you will find detailed information on how we handle your data.

1. Access data and hosting
Our websites can be visited without providing personal data. Each time the website is opened, the server automatically saves only the so-called server logs (e.g. the name of the requested file, your IP address, the date and time of the request, the amount of data transmitted, and the requesting Internet service provider) and documents the visit. These data are analysed solely to ensure the proper functioning of our website and to improve our offer. In accordance with Art. 6(1)(f) GDPR, this serves to safeguard our legitimate interest in presenting our website and our offer in an optimal and correct manner.
 

Hosting
All access data will be deleted no later than fourteen days after your visit to our website ends.
Hosting and website-display services are partially provided on our behalf by our service providers as data processors. Unless this privacy policy states otherwise, all access data and data collected from forms on our website will be processed on their servers. For questions about our service providers and the basis of our cooperation with them, please contact us. Our contact details can be found under “Our contact details and your rights”.

2. Collection and processing of data

2.1 Processing of data for contact purposes
When communicating with customers, we process personal data in order to handle your enquiries (Art. 6(1)(b) GDPR). You provide this data to us voluntarily when contacting us (e.g. through the contact form or e-mail). Mandatory fields are marked as such because they contain data necessary to process the enquiry. The data collected is set out directly in the form being completed. After fully processing your enquiry, your data will be deleted, unless you give your explicit consent (Art. 6(1)(a) GDPR) for further use of the data for other purposes, or we reserve the right to further use it in cases permitted by law, which we will inform you about in this privacy policy.

3. Cookies and similar technologies
3.1 General information
To make your visit to our website more attractive and to enable you to use its key functions, we use technological tools, including so-called cookies. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted at the end of the browser session, i.e. after the browser is closed (session cookies). Other cookies are stored on your terminal device and allow us to recognise your browser on subsequent visits (persistent cookies). The storage duration can be checked in your browser’s cookie settings. Protection of terminal-device privacy: when you use our online offer we apply technologies that are absolutely necessary to ensure the proper and optimal use of essential functions of our website. In this respect, storing information on the user’s terminal device or accessing information already stored there does not require the user’s consent.

For features that are not strictly necessary, storing information on the user’s terminal device or accessing information already stored there requires the user’s consent. Please note that without consent some functions or elements of the website may not be fully available. Any consent given by the user remains valid until the consent is withdrawn, the settings are reconfigured, or the relevant settings on the terminal device are reset.
Other cases of data processing using cookies and other technologies: we use technologies that are absolutely necessary for the proper and optimal use of essential functions of our website. These technologies process data such as your IP address, time spent on the website, information about your device and browser, as well as information about your use of our website (e.g. shopping-cart contents). In accordance with Art. 6(1)(f) GDPR, this serves our legitimate interest in optimally presenting our offer.

In addition, we also use technological tools to comply with legal obligations to which we are subject (e.g. to prove receipt of your consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the relevant legal bases for data processing, can be found in the following sections of this privacy policy.
Cookie settings: in the help menu of your web browser you will find explanations of how to change cookie settings. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
Where you have given us consent to use specific technological tools (Art. 6(1)(a) GDPR), you may withdraw it at any time. To withdraw consent, please contact us via the contact address indicated under “Our contact details”.
Alternatively, you can click the privacy-settings button. If you reject the use of cookies, the functionality of our website may be limited.

3.2 Consent Management Platform (CMP)
On our website we use a Consent Manager Platform (“CMP”) to inform you about the cookies and other technologies used on our site, and to obtain, manage and document the consents you give for the processing of your personal data by those technologies and cookies. In accordance with Art. 6(1)(c) GDPR this is necessary to fulfil our legal obligation under Art. 7(1) GDPR, which states that where data is processed on the basis of consent, the controller must be able to demonstrate that the data subject has consented to the processing. The CMP we use is provided by CookieYes Limited, 3 Warren Yard, Wolverton Mill, MK12 5NW Milton Keynes, United Kingdom, which processes your data on our behalf. Once you make your cookie-use decision on our website, the web server records and stores the following information: your IP address, the date and time of your consent decision, information about your device and browser, and the URL from which the decision was sent. The following technologies that contain information about your consent decisions are also used: cookies.
Your data will be deleted after 30 days, unless you have explicitly consented in accordance with Art. 6(1)(a) GDPR to further use of the data for other purposes, or unless we reserve the right to further use it in cases permitted by law, in which case we will inform you about it in this privacy policy.
Our service providers have their main office and/or use servers in countries for which the European Commission has issued adequacy decisions confirming an appropriate level of data protection. Our service providers are based in: United Kingdom.

Information on the transfer of data to third countries
On our website we use tools and technology of external service providers whose offices and/or server locations may be in third countries outside the EU or EEA. If there is no EU Commission adequacy decision for a particular third country, an appropriate level of data protection must be ensured through other appropriate safeguards. Other safeguards such as contractual agreement on the use of standard contractual clauses of the EU Commission or binding corporate rules are generally possible, but require the contracting parties to verify in advance whether they can guarantee an appropriate level of protection. According to the CJEU case-law, additional protective measures may be necessary. As a rule, we have agreed with our service providers processing personal data in a third country to apply standard data-protection clauses issued by the EU Commission. Wherever possible, we also agree on additional protective measures to ensure adequate data protection in third countries for which no adequacy decision has been issued. Despite all this, it may happen that the level of data protection in a third country does not match the level in the EU. In such cases, we ask you – through the cookie-consent tool (Consent Manager) – for consent under Art. 49(1)(a) GDPR to transfer your personal data to the third country. In third countries there is a risk that authorities or individual bodies may not have sufficiently limited rights of access to your personal data from the perspective of European data-protection standards, and that we as the data exporter or you as the data subject may not be aware of this and/or may not have sufficient legal means to prevent and/or take action against such access. In particular, the following countries are currently among those for which the EU Commission has not issued an adequacy decision (the list is illustrative): – China – Russia – Taiwan. Information about which third countries we transfer data to can be found in the descriptions of the tools provided in this privacy policy and/or in the content provided within the relevant tool in our cookie-consent manager (Consent Manager).

4. Use of cookies and similar technological tools
On our website we use the cookies and similar third-party tools/technologies listed below. Unless otherwise stated in the description of the individual technologies, they are used on the basis of your consent within the meaning of Art. 6(1)(a) GDPR. Once the processing purpose has been achieved and we no longer use the tool/technology, the data collected through that tool/technology will be deleted. Consent can be withdrawn at any time. Detailed information on revoking consent and on your right to object can be found under “Cookies and similar technologies”. You will find further information on the websites of the respective service providers. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found under “Our contact details and your rights”.

4.1 Use of Google services
We use the Google technological tools listed below provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information collected automatically by Google technologies about your use of our website is generally transmitted to and stored on a Google LLC server, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless otherwise specified for the individual Google technologies described in this privacy policy, data processing takes place on the basis of an agreement on joint controllership of personal data concluded with Google in accordance with Art. 26 GDPR. Further information on Google’s data processing can be found in Google’s privacy policy. Our service providers are based and/or use servers located in countries outside the EU and EEA for which the European Commission has issued an adequacy decision confirming an appropriate level of data protection. Our service providers are also based and/or use servers in countries outside the EU and EEA for which the European Commission has not issued such an adequacy decision. Our cooperation is based on the standard data-protection clauses adopted by the European Commission.
 

Google Analytics
To analyse the use of our website we use Google Analytics – a web-analytics tool from Google, which automatically processes your data (IP address, time spent on the site, information about your device and browser, and information about your use of our website) and creates pseudonymised user profiles on that basis. Cookies may be used for this purpose. When a user visits our website from EU territory, the IP address is stored on a server located in the EU to obtain location data and is then immediately deleted before traffic is forwarded to further Google servers. Data processing under Google Analytics takes place on the basis of a data-processing agreement concluded with Google.
To optimise and make our website’s offer more attractive, we have also enabled the data-sharing settings for “Google products and services”. This allows Google to access the data collected and processed under Google Analytics and use it to improve Google’s products and services. The data sharing for this purpose with Google is based on an additional agreement between the data controllers. We have no influence over the subsequent processing of data by Google.

For the purposes of analysing the use of our website and for advertising, we also use within Google Analytics the so-called DoubleClick cookie, which allows us to recognise your browser when you visit other websites. Google will use this information to compile reports on your activity on our website and to provide other services related to website use.

If a user does not consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, no cookies are read or stored on their terminal device. The data processing described in the preceding paragraphs then does not take place. To fill statistical gaps through behaviour and conversion modelling, data pings (user-agent, information about user behaviour, screen resolution, IP address) are sent to Google.

Google Ads
With Google Ads we promote our website in search results and on third-party sites. For this purpose, when you visit our website, a Google remarketing cookie is automatically stored on your device, which – based on the pages you visit – enables interest-based advertising to be displayed, processing your data (IP address, time spent on the site, information about your device and browser, and information about your use of our website) by means of a pseudonymous identifier (ID). Further processing only takes place if you have enabled ad personalisation in your Google account settings. In that case, if you are logged into Google during your visit to our website, Google uses your data together with data collected under Google Analytics to create and define so-called target-audience lists for cross-device remarketing.

For web-analytics purposes we use Google Ads Conversion Tracking to measure and analyse your behaviour if you have visited our website via an ad delivered through Google Ads. For this purpose, cookies may be used and data processed such as: IP address, time of visit, information about your device and browser, and information about your use of our website, e.g. a website visit or newsletter sign-up. Pseudonymised user profiles are then created on the basis of this data.

If a user does not consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, no cookies are read or stored on their terminal device. The data processing described in the preceding paragraphs then does not take place. To fill statistical gaps through behaviour and conversion modelling, data pings (user-agent, information about user behaviour, screen resolution, IP address, page URL, and information about ad clicks contained in URL parameters) are sent to Google. The user’s IP address is used to determine the IP country.

Google Maps
For the visual presentation of geographic information, Google Maps stores and processes information about how you use the maps and their functions, including your IP address and location data. We have no influence over this data processing by Google.
 

Google reCAPTCHA
To protect against spam and prevent abuse or improper use of our online forms (e.g. by harmful bots), Google reCAPTCHA has been integrated with our website. It processes your data (IP address, time spent on the site, information about your device and browser, and information about your use of our website) and, using JavaScript and cookies, analyses your use of our website. Personal data you enter into form fields on our pages will not be read or saved.
 

Google Fonts
To ensure consistent display of content on our websites, the “Google Fonts” script is integrated with our website. It processes your data (IP address, time spent on the site, information about your device and browser, and information about your use of our website). We have no influence over this data processing by Google.
 

YouTube Video Plugin
For the integration of third-party content via the YouTube video plugin, the following data is processed by Google when a video is played: IP address, time of the visit, information about the user’s device and browser.
6.2 Use of Facebook services
 

Facebook Pixel
We use the Facebook Pixel provided by Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). The scope of the features we use is described below. The Facebook Pixel automatically collects and stores data (your IP address, time spent on the site, information about your device and browser, and information about your use of our website, e.g. a website visit or newsletter sign-up). On this basis pseudonymised user profiles are then created.
For this purpose, when you visit our website the Facebook Pixel stores a cookie on your device which uses a pseudonymised Cookie-ID to automatically recognise your browser on other websites. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to prepare reports on website activity and to provide other services related to your use of websites, in particular for ad personalisation. The information collected automatically by Facebook (by Meta) technologies about your use of our website is generally transmitted to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information on Facebook’s data processing can be found in the Facebook (by Meta) privacy policy. Our service providers have their main office and/or use servers in countries for which the European Commission has issued adequacy decisions confirming an appropriate level of data protection. Our service providers are based in: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. The adequacy decision for the USA applies as a basis for transferring data to third countries, provided that the service provider has been certified. The certificate has been obtained. Our service providers also have their main office and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. The European Commission has not issued adequacy decisions for these countries. Data transfers in the context of our cooperation with service providers from these countries are based on the following safeguards:  standard data-protection clauses of the European Commission.
 

Facebook Ads (ad management)
Facebook Ads allows us to advertise our website on Facebook and other platforms. We set the parameters of the given ad campaign. Facebook is responsible for the precise execution, in particular the decision to display a given ad to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of an agreement on joint controllership of personal data pursuant to Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. It does not include the subsequent processing of data by Facebook Ireland.

Based on statistics generated by the Facebook Pixel about the activity of users visiting our websites, we use Facebook Custom Audience to display ads to the right audience while defining the profile/characteristics of the target group.
Based on the pseudonymised Cookie-ID stored by the Facebook Pixel and information collected about user activity on our website, we create personalised ads using Facebook Pixel Remarketing.
For web-analytics and offer-optimisation purposes – via Facebook Pixel Conversions we analyse the activity of users who visit our website through ads displayed within Facebook Ads. Data processing by Facebook takes place on the basis of a data-processing agreement.

5. Social media
Our activity on social media: YouTube
If you have given consent to the relevant social media platform (Art. 6(1)(a) GDPR), when you visit our account/profile on the social media platforms mentioned above, your data will be automatically collected and stored for the purposes of web analytics and marketing. Pseudonymised user profiles are created on the basis of this data. They may be used, for example, to display personalised ads within and outside social media platforms that are likely to match your interests. Cookies are usually used for this purpose. Detailed information about the processing and use of your data by individual social media platforms, as well as information about your rights and options for configuring privacy settings, and the contact details for submitting requests, can be found in the privacy policies of the respective social media services linked below. Should you need help in this regard, you can also contact us.

YouTube is a social media service offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information automatically processed about your activity and your use of our YouTube profile is generally transmitted to and stored on a Google LLC server, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Our service providers are based and/or use servers located in countries outside the EU and EEA for which the European Commission has issued an adequacy decision confirming an appropriate level of data protection. Our service providers are also based and/or use servers in countries outside the EU and EEA for which the European Commission has not issued such an adequacy decision. Our cooperation is based on the standard data-protection clauses adopted by the European Commission.

6. Our contact details and your rights
6.1.  Your rights
Data subjects have the following rights: under Art. 15 GDPR – the right to information about the processing of data to the extent specified in that article; under Art. 16 GDPR – the right to rectification of inaccurate or incomplete personal data; under Art. 17 GDPR – the so-called “right to be forgotten”, i.e. the right to have your personal data stored by us erased, provided that further processing is not necessary: to exercise the right to freedom of expression and information; to fulfil a legal obligation; for reasons of public interest; to establish, exercise or defend legal claims; under Art. 18 GDPR – the right to restriction of processing of personal data if: the accuracy of the personal data is contested; processing is unlawful and you object to its erasure; we no longer need the personal data but you need it to establish, exercise or defend legal claims; you have objected under Art. 21 to the processing of data; under Art. 20 GDPR – the right to receive the data you have provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller; under Art. 77 GDPR – the right to lodge a complaint with a supervisory authority (the President of the Personal Data Protection Office, “UODO”).
Right to object: If, as described in this privacy policy, we process personal data in order to safeguard our legitimate interests, you may object to the processing of your data for that purpose – with effect for the future. If the processing takes place for direct-marketing purposes, you may exercise your right to object at any time. If the processing takes place for other purposes, the right to object only applies for reasons arising from your particular situation. After you exercise your right to object, we will no longer process your personal data, unless we demonstrate compelling legitimate grounds for processing that override your interests and rights, or unless the processing serves to establish, exercise or defend legal claims. The preceding sentence does not apply where data is processed for direct-marketing purposes. In that case, after you object we will always cease further processing of your personal data.

Contacting us
For questions about the collection, processing and use of your personal data, as well as requests for information, rectification, restriction of processing or erasure of data, and to withdraw consent or object to the use of specific data, please contact the data controller indicated at the beginning of this privacy policy.