Privacy privacy
and data protection
This document explains how we process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). We take the greatest care to protect your privacy.
General provisions
This Privacy Policy sets out the rules for processing and protecting the personal data of Customers and Users of the website www.zecero.pl, in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
The purpose of this document is to provide full transparency regarding what data we collect, for what purpose, to whom we may disclose it and what rights you have.
Good to know
By using our website and placing an order, you confirm that you have read and accept the terms of this Privacy Policy. We make every effort to keep your data secure and to process it lawfully, fairly and transparently.
Definitions of terms used
Controller
Adjatech Metalworking sp. z o.o. — the entity that independently determines the purposes and means of processing personal data within the Zecero.pl website.
Personal data
Any information about an identified or identifiable natural person (e.g. first name, last name, address, e-mail, phone number, IP address).
GDPR
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 — the General Data Protection Regulation.
Processing
Any operation performed on personal data: collecting, recording, storing, modifying, disclosing, deleting.
User
Any natural person visiting the website www.zecero.pl or using the services made available on it.
Customer
An individual, legal entity or organizational unit that makes a purchase in the Zecero.pl online shop.
Trusted Partner
An external entity cooperating with the Controller (e.g. a courier, accounting or hosting company) to which data may be entrusted.
Website / Site
The online shop operating at www.zecero.pl, run by the Controller.
Cookies
Text files saved by the web browser on the User's device, which make it possible to remember preferences.
Consent
A freely given, specific, informed and unambiguous indication of the wishes of the data subject, given in the form of a statement or a clear affirmative action.
Profiling
Any automated processing of personal data that makes it possible to evaluate characteristics of an individual — the Controller does not use profiling.
Supervisory authority
The President of the Personal Data Protection Office (UODO) — an independent state authority that supervises compliance with the GDPR in Poland.
Personal Data Controller
The controller of your personal data is:
Adjatech Metalworking sp. z o.o.
Distributor of the Zecero brand — a Polish manufacturer of premium stainless steel cemetery accessories. We handle your data in line with the highest security standards required by the GDPR.
NIP: 7792430210 · REGON: 361226405
60-304 Poznań
Janikowo k. Poznania
62-006 Kobylnica
Dedicated address for GDPR matters
To make it easier for you to contact us about the processing of personal data, we provide a dedicated e-mail address: office@zecero.com. Please send all questions, requests and applications concerning your data to this address.
Purposes and legal bases of processing
We process your personal data only for specified purposes and only on the basis of applicable law. Below you will find a detailed overview:
Order handling and fulfillment
Concluding and performing the contract of sale of products offered in the Zecero.pl shop, including delivery, contact with the Customer and after-sales service.
Accounting and tax settlements
Issuing VAT invoices and receipts, keeping accounting records and meeting tax obligations arising from the law.
Handling inquiries and contact
Replying to inquiries sent through the contact form, by e-mail or by phone, and conducting business correspondence.
Handling complaints
Handling of complaints, returns and withdrawals from the contract in accordance with the Terms and Conditions and consumer protection law.
Marketing of products and services
Informing you about new products, promotions and offers, solely on the basis of your voluntary consent.
Establishing and defending claims
Protection against potential claims arising from the conduct of our business, including before courts and public authorities.
What do the individual legal bases mean?
Point (a) — consent of the data subject. Point (b) — performance of a contract. Point (c) — compliance with a legal obligation. Point (f) — legitimate interests of the Controller.
Types of data processed
The scope of data we process is limited to the necessary minimum — we collect only the information that is needed to carry out the purposes set out in §4.
Data minimization principle
In accordance with the GDPR, we process only the data that is necessary to achieve a specific purpose. We do not collect information "just in case" or sensitive data (e.g. about health, religious beliefs or orientation).
Trusted Partners and data recipients
In the course of our business, we work with external companies to which we entrust the processing of part of your data — only to the extent necessary to fulfill the purposes set out in §4. Each of our Trusted Partners has signed with us a data processing agreement compliant with the GDPR.
Courier companies
Delivery of the parcel
(e.g. GLS, DPD, Poczta Polska)
Accounting firm
Bookkeeping
and tax services
IT company
Technical support
and system maintenance
Hosting company
Storage
of website data
Payment operators
Processing of
electronic payments
Email provider
Sending transactional
email (confirmations)
No transfers outside the EEA
Your data is not transferred outside the European Economic Area (EEA). All our systems and Trusted Partners are located within the jurisdiction of the European Union, which ensures full compliance with the GDPR.
Data retention period
We store your data only for as long as necessary to fulfill the purposes for which it was collected, or for the period required by law.
After the retention period
After the stated periods have passed, your data is securely deleted or anonymized in a way that makes it impossible to recover. It can also be deleted earlier, at your request (subject to legal obligations).
Rights of the data subject
You have 8 fundamental rights
In connection with the processing of your personal data by the Controller, you have a number of rights, which you can exercise free of charge, at any time and without giving a reason (subject to certain legal restrictions).
Right of access to data
You can receive information about what data we process and obtain a copy of it in a readable form.
Art. 15 GDPRRight to rectification
You may request the correction of inaccurate data or the completion of incomplete data.
Art. 16 GDPRRight to erasure ("right to be forgotten")
You may request the deletion of your data in the specific situations provided for by the GDPR.
Art. 17 GDPRRight to restriction of processing
You may request a temporary suspension of certain operations on your data.
Art. 18 GDPRRight to data portability
You may receive your data in a machine-readable format and transmit it to another controller.
Art. 20 GDPRRight to object
You may object to processing based on legitimate interest, including processing for direct marketing.
Art. 21 GDPRRight to withdraw consent
You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out before its withdrawal.
Art. 7(3) GDPRRight to lodge a complaint with the UODO
You may lodge a complaint with the President of the Personal Data Protection Office (UODO) — ul. Stawki 2, 00-193 Warsaw.
Art. 77 GDPRHow to exercise your rights
Simply send a message to office@zecero.com or a letter to the Controller's registered office. You will receive a reply within 30 days. Exercising any of these rights is completely free of charge.
Voluntary provision of data
Cookies
The website www.zecero.pl uses cookies — small text files saved by the web browser on the User's device. These files make it possible to remember preferences and session behavior and to better tailor our offer to users' needs.
Cookies necessary for the website to function properly — including login, the shopping cart and session handling. Without these files the website cannot work properly. They do not require your consent (they are permitted on the basis of so-called "legitimate interest" or for the performance of a contract).
Files used to collect anonymous statistics on how the website is used — e.g. the number of visits, the most popular pages and traffic sources. They help us improve the website. For this purpose we use tools such as Google Analytics. They require your consent.
Files used for ad profiling and for displaying personalized marketing content — including on other websites you visit after leaving our website. They require your explicit consent and can be disabled at any time.
You have full control over cookies. Available options:
• Cookie banner settings displayed on your first visit — it lets you choose which categories of cookies you accept.
• Browser settings — in every popular browser (Chrome, Firefox, Safari, Edge) you can block or delete cookies in the "Privacy" section.
• Private / incognito mode — browsing without saving cookies.
Disabling essential cookies may prevent some of the shop's features from working (e.g. adding items to the cart).
Cookie banner
When you first visit our website, we display a cookie consent banner, where you can accept or reject individual categories of files. Your decision is remembered and you can change it at any time.
Security of personal data
Adjatech Metalworking sp. z o.o. makes every effort to provide all physical, technical and organizational measures to protect personal data against accidental or deliberate destruction, accidental loss, unauthorized disclosure or use — in accordance with all applicable regulations.
SSL/TLS encryption
Communication with the server is secured with a 256-bit certificate.
Firewall and monitoring
Multi-layered firewalls and 24/7 incident monitoring.
Access control
Only authorized persons with individually assigned permissions have access to the data.
Regular backups
Daily, automatic backups in a secure infrastructure.
Staff training
Employees receive regular training in GDPR and security.
Response procedures
Procedures are in place in case of a data breach.
In the event of a data breach
If a breach of your personal data protection occurs that may result in a high risk to the rights or freedoms of individuals, we will notify you without delay and report the breach to the President of the Personal Data Protection Office (UODO) within 72 hours — in accordance with Articles 33 and 34 of the GDPR.
Contact us about GDPR
If you have any questions about the processing of personal data, wish to exercise your rights, report an incident or obtain additional information, we are at your disposal. We treat every inquiry with the utmost care and we respond within 30 days.
Contact Regarding Data Protection
To make it easier for you to reach us, we have set up a dedicated e-mail address. Please send all inquiries concerning the processing of personal data to this address. You may also contact us by regular mail.
ul. Gnieźnieńska 26, Janikowo k. Poznania
62-006 Kobylnica
(usually 5–7 business days)
Supervisory Authority — UODO
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office — ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl.
No results
No policy excerpts matching your search were found. Please try a different phrase.