PRIVACY POLICY

§1. Data Controller

1. The Data Controller for personal data in the sense of Art. 4 point 7 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), is ChillerSerwis Limited Liability Company, located in Warsaw at Myszkowska Street 1 apt. 18, 03-553 Warsaw, VAT ID: 5242950191, REGON: 523084791, entered into the register of entrepreneurs of the National Court Register under number KRS: 0000991421, registry court: District Court for the capital city of Warsaw in Warsaw, XIV Commercial Division of the National Court Register, share capital: PLN 5,000.00. 2. The data controller’s email address is info@chillerserwis.com. 3. In accordance with Art. 32 paragraph 1 of the GDPR, the Controller adheres to the principle of personal data protection and applies appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, modification, unauthorized disclosure of, or access to personal data processed in connection with its operations. 4. The provision of personal data by the client is voluntary but necessary for the conclusion of a contract with the data controller. 5. The data controller processes personal data to the extent necessary to fulfill the contract or provide services to the person concerned.

§2. Purpose and Legal Basis for Data Processing

The data controller processes personal data for the following purposes: a) preparation of a commercial offer in response to the client’s interest, which is the legitimate interest of the data controller (Art. 6(1)(f) GDPR); b) conclusion and execution of sales contracts with clients, based on the concluded contract (Art. 6(1)(b) GDPR); c) provision of electronic services through the Online Store, based on the concluded contract (Art. 6(1)(b) GDPR); d) handling of the complaint process, based on the obligation incumbent on the data controller in connection with applicable legal provisions (Art. 6(1)(c) GDPR); e) accounting related to issuing and receiving settlement documents, based on tax law provisions (Art. 6(1)(c) GDPR); f) archiving data for the possible determination, investigation, or defense against claims, or the need to demonstrate facts, which is the legitimate interest of the data controller (Art. 6(1)(f) GDPR); g) telephone or email contact, especially in response to inquiries directed to the data controller, which is the legitimate interest of the data controller (Art. 6(1)(f) GDPR); h) sending technical information related to the operation of the Online Store and services used by the client, which is the legitimate interest of the data controller (Art. 6(1)(f) GDPR); i) marketing, which is its legitimate interest (Art. 6(1)(f) GDPR) or is based on prior consent (Art. 6(1)(a) GDPR).

§3. Recipients of Data

Transfer of data to third countries 1. Recipients of personal data processed by the data controller may be entities cooperating with the data controller, when it is necessary for the implementation of the contract concluded with the person concerned. 2. Recipients of personal data processed by the data controller may also be subcontractors – entities whose services are used by the data controller in processing data, e.g., accounting offices, law firms, IT service providers (including hosting services). 3. The data controller may be obliged to provide personal data based on applicable legal provisions, in particular to provide personal data to authorized state organs or institutions. 4. Personal data in connection with the use of tools for analyzing and tracking website traffic by the controller may be transferred to an entity based outside the European Economic Area, e.g., to Google LLC. As an appropriate data protection measure, the data controller has agreed on standard contractual clauses in accordance with Art. 46 GDPR with the providers of these services. More information on this subject is available here: https://commission.europa.eu/law/law-topic/data-protection_en.

§4. Period of Personal Data Storage

1. The data controller stores personal data for the duration of the contract concluded with the person concerned and after its expiration for purposes related to pursuing claims related to the contract, performance of obligations arising from legal provisions, but for no longer than the limitation period according to the Civil Code provisions. 2. The data controller stores personal data found on settlement documents for the period indicated by the provisions of the Act on Goods and Services Tax and the Accounting Act. 3. The data controller stores personal data processed for marketing purposes for a period of 10 years, but no longer than until the withdrawal of consent for data processing or objection to data processing. 4. The data controller stores personal data for purposes other than those indicated in paragraphs 1-3 for a period of one year, unless consent to data processing is withdrawn earlier, and data processing cannot be continued on a basis other than the consent of the person concerned.

§5. Rights of the Data Subject

1. Every person concerned has the right to: a) access – to obtain confirmation from the controller whether their personal data is being processed. If data about the person is processed, they are entitled to access it and receive the following information: about the purposes of processing, categories of personal data, information about recipients or categories of recipients to whom the data has been or will be disclosed, about the period of data storage or the criteria for determining it, about the right to request rectification, deletion, or limitation of personal data processing applicable to the person concerned, and to object to such processing (Art. 15 GDPR); b) receive a copy of the data – to obtain a copy of the data undergoing processing, where the first copy is free of charge, and for further copies the controller may impose a reasonable fee arising from administrative costs (Art. 15(3) GDPR); c) rectification – to request rectification of their personal data that is incorrect or to have incomplete data completed (Art. 16 GDPR); d) deletion of data – to request deletion of their personal data when the controller no longer has a legal basis for processing or the data is no longer necessary for the purposes of processing (Art. 17 GDPR); e) restriction of processing – to request restriction of personal data processing (Art. 18 GDPR), when: – the person concerned disputes the accuracy of the personal data – for a period allowing the controller to verify the accuracy of these data, – processing is unlawful, and the person concerned opposes their deletion, requesting instead the restriction of their use, – the controller no longer needs these data, but they are required by the person concerned for the establishment, exercise, or defense of legal claims, – the person concerned has objected to processing – pending the verification whether the legitimate grounds of the controller override those of the person concerned; f) data portability – to receive in a structured, commonly used and machine-readable format personal data concerning them which they have provided to the controller, and to request the transmission of those data to another controller, if the data is processed based on the consent of the person concerned or a contract with them and if the processing is carried out by automated means (Art. 20 GDPR); g) object – to object to the processing of their personal data for legally justified purposes of the controller, for reasons related to their particular situation, including profiling. In such a case, the controller assesses the existence of valid legally justified grounds for processing, overriding the interests, rights, and freedoms of the persons concerned, or grounds for the establishment, exercise, or defense of legal claims. If, according to the assessment, the interests of the person concerned are more important than the interests of the controller, the controller will be obliged to cease processing data for these purposes (Art. 21 GDPR). 2. To exercise the above rights, the person concerned should contact the controller using the provided contact details and inform them which right and to what extent they wish to exercise. 3. The person concerned has the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office in Warsaw.

§6. Profiling

1. Personal data obtained by the data controller may be processed in an automated manner – including profiling. Profiling of personal data by the data controller involves assessing selected information about the person concerned for the purposes of analyzing and predicting personal preferences and interests, especially for the possibility of providing the person concerned with a personalized offer. 2. Automated processing of data by the data controller does not have any legal effects on the person concerned. The person concerned may object to the automated processing of their data at any time.

§7. Google Analytics

1. The controller uses Google Analytics, a web analytics service provided by Google Inc., based in the USA. 2. Google Analytics uses cookies, which enable the analysis of the user’s use of the website. Information generated by the cookie about the use of the website is transmitted to and stored by Google on its servers. On behalf of the Controller, Google will use this information to analyze the use of the site by users, to compile reports on website activity, and to provide other services related to website and internet use to the contracting entity. 3. The data will not be used to identify any individual. 4. The user can prevent the storage of cookies by setting their browser accordingly; however, this may mean that they will not be able to use all the features of the website fully. Moreover, users can prevent the collection of data generated by the cookie and related to their use of the website (including their IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. 5. At any time, the user can object to the collection and processing of data related to the use of the site by Google by downloading and installing the browser plugin, which is available at the following address: https://tools.google.com/dlpage/gaoptout?hl=en.

HVAC World Support Section

For any inquiries or assistance, please reach out to the appropriate department listed below. Our dedicated teams are here to help you with your specific needs.

Sales Department

For information about our products, pricing, and orders, please contact:
📧 sales@hvacworld.eu

Customer Support

For technical support, service requests, and help with our products, please reach out to:
📧 support@hvacworld.eu

General Inquiries

For all other questions, feedback, or information, feel free to contact us at:
📧 info@hvacworld.eu

We strive to respond to all queries within 24 hours during business days. Your satisfaction and support are our top priorities!