Privacy Policy

§ 1 – General Provisions

  1. The administrator of the personal data collected via the www.traxfair.com website is TRAXFAIR SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (TRAXFAIR Ltd.), KRS: 0000972974, NIP: 5862381014, REGON: 522200806, share capital: PLN 20,000; registered office: Al. Zwycięstwo 245/9, 81-525 Gdynia; e-mail: office@traxfair.com, phone: +48 798 831 286 – hereinafter referred to as the “Administrator”.
  2. Personal data collected by the Administrator through the website are processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
  3. Any capitalized words or expressions in this Privacy Policy shall be understood as defined in the Terms of Service of www.traxfair.com.

§ 2 – Type of Personal Data Processed, Purpose and Scope of Data Collection

  1. Purpose of processing and legal basis. The Administrator processes personal data of Service Recipients in the case of:
    1. Registration of an Account on the Website – in order to create and manage an individual Account, on the basis of Article 6(1)(b) GDPR (performance of an agreement for the provision of electronic services).
    2. Use of the Order Form – for the purpose of executing the Sales Agreement, on the basis of Article 6(1)(b) GDPR.
    3. Use of the Inquiry Form – on the basis of Article 6(1)(b) GDPR (performance of an agreement to provide electronic services).
    4. Use of the Offer Form – on the basis of Article 6(1)(b) GDPR (performance of an agreement for the provision of electronic services).
    5. Use of the Offer Board on the basis of Article 6(1)(b) GDPR (performance of an agreement for the provision of electronic services).
  2. Type of personal data processed. The Service Recipient provides, in the case of:
    1. Account: email address, name, tax ID, company.
    2. Order Form: email address, name, tax ID, company.
    3. Inquiry Form: email address, name, tax ID, company.
    4. Bid Form: email address, name, tax ID, company.
  3. Archiving period of personal data. Personal data of Service Recipients are stored:
    1. Where the basis of data processing is the performance of a contract – for as long as necessary for the performance of the contract, and thereafter for a period corresponding to the statute of limitations for claims (generally six years, or three years for periodic benefits and business-related claims).
    2. Where the basis for data processing is consent – for as long as the consent is not revoked, and after revocation for a period corresponding to the statute of limitations for claims (generally six years, or three years for periodic benefits and business-related claims).
  4. When using the Site, additional information may be collected, including: IP address, domain name, browser type, access time, and type of operating system.
  5. Upon separate consent (Article 6(1)(a) GDPR), data may also be processed for sending commercial information electronically or for direct marketing telephone calls, including profiling, if the Service Recipient has given the appropriate consent.
  6. Navigation data may also be collected, including information about links and actions taken on the Site. The legal basis is the Administrator’s legitimate interest (Article 6(1)(f) GDPR) in facilitating and improving the use of electronic services.
  7. Provision of personal data by the Customer is voluntary.
  8. The Administrator shall take special care to protect the interests of data subjects and shall ensure that the data it collects are:
    1. Processed in accordance with the law.
    2. Collected for designated legitimate purposes and not subjected to further incompatible processing.
    3. Substantially correct, adequate in relation to the purposes for which they are processed, and stored no longer than necessary to achieve those purposes.

§ 3 – Sharing of Personal Data

  1. Personal data of Service Recipients are transferred to service providers used by the Administrator, in particular to:
    1. Hosting providers
    2. Software providers enabling the business
    3. Entities providing the mailing system
    4. Carriers
    5. Accounting office
    6. The Service Recipient who published the Request/Offer to which another Service Recipient wishes to respond
    7. Providers of electronic payment systems
    8. Suppliers of software needed to run the website
  2. The service providers referred to in Section 1, to whom personal data are transferred, are either subject to the Administrator’s instructions as to the purposes and means of processing (processors) or determine the purposes and means of processing themselves (controllers).
  3. Personal data of Service Recipients is stored exclusively in the European Economic Area (EEA), subject to § 5.5 of this Privacy Policy.

§ 4 – The Right to Control, Access and Correct Personal Data

  1. The data subject has the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
  2. Legal grounds for the Service Recipient’s requests:
    1. Access to data – Article 15 GDPR.
    2. Correction of data – Article 16 GDPR.
    3. Deletion of data (right to be forgotten) – Article 17 GDPR.
    4. Restriction of processing – Article 18 GDPR.
    5. Data portability – Article 20 GDPR.
    6. Objection – Article 21 GDPR.
    7. Withdrawal of consent – Article 7(3) GDPR.
  3. To exercise the rights referred to in Section 2, send a relevant email to: office@traxfair.com.
  4. The Administrator shall comply with or refuse a request no later than one month after receiving it. If – due to the complex nature or number of requests – this is not possible within one month, it will comply within two months, informing the Service Recipient in advance of the extension and the reasons for it.
  5. If it is determined that the processing of personal data violates the provisions of the GDPR, the data subject has the right to file a complaint with the President of the Office for Personal Data Protection.

§ 5 – Cookies

  1. The Administrator’s website uses “cookies”.
  2. Installation of cookies is necessary for the proper provision of services on the Website. Cookies contain information necessary for the proper functioning of the website and also provide the opportunity to develop general statistics of website visits.
  3. The site uses two types of cookies:
    1. Session cookies – temporary files stored on the Service Recipient’s device until logging off (leaving the site).
    2. Permanent cookies – stored on the Service Recipient’s device for the time specified in the cookie parameters or until deleted by the Service Recipient.
  4. The Administrator uses its own cookies to better understand how Service Recipients interact with the content of the website. The files collect information about how the website is used, the type of website from which the Service Recipient was redirected, and the number and duration of visits. This information does not record specific personal data but is used to compile usage statistics.
  5. The Administrator also uses external cookies to collect general and anonymous statistical data via Google Analytics (administrator of external cookies: Google LLC, based in the USA).
  6. Cookies may also be used by advertising networks, in particular the Google network, to display advertisements tailored to the manner in which the Service Recipient uses the Site, including information about navigation paths or time spent on particular pages.
  7. The Customer has the right to manage cookie access by:
    1. Selecting the types of cookies they agree to collect when the cookie message appears upon entering the Site.
    2. Changing settings in the browser window. Detailed information about handling cookies is available in the settings of your web browser software.

§ 6 – Additional Services Related to User Activity on the Site

  1. The Service uses social plug-ins from social networks. When displaying www.traxfair.com, the Service Recipient’s browser will establish a direct connection to Facebook, Instagram and TikTok servers.
  2. The plug-in content is transmitted directly to the recipient’s browser and integrated into the website. Through this integration, service providers receive information that the Client’s browser has displayed the www.traxfair.com site, even if the Client does not have a profile with the given provider or is not logged in. This information (along with the Client’s IP address) is sent directly to the provider’s server (some servers are located in the USA) and stored there.
  3. If the Client is logged into one of the above-mentioned social networks, the service provider will be able to directly attribute the visit to www.traxfair.com to the Client’s profile on that social network.
  4. If the Service Recipient uses a particular plug-in (e.g. “Like” or “Share” buttons), the corresponding information will also be sent directly to the server of the respective service provider and stored there.
  5. The purpose and scope of data collection and further processing by service providers, as well as the rights of the Service Recipient, are described in the service providers’ privacy policies:
    1. Facebook Privacy Policy
    2. Instagram Privacy Policy
    3. TikTok Privacy Policy
    4. Google Privacy Policy
  6. If the Service Recipient does not want social networks to attribute data collected during visits to www.traxfair.com to their profile, they must log out before visiting the site. The recipient can also prevent plug-ins from loading using appropriate browser extensions such as script blockers (e.g. “NoScript”).
  7. The Administrator uses remarketing tools on the site, including Google Ads, which involves the use of cookies from Google LLC. pertaining to the Google Ads service. The Service Recipient may manage their cookie settings to decide whether Google Ads can be used in relation to them.

§ 7 – Final Provisions

  1. The Administrator shall apply technical and organizational measures to ensure the protection of processed personal data appropriate to the risks and categories of protected data, and in particular shall protect data from disclosure to unauthorized persons, unauthorized acquisition, processing in violation of applicable regulations, and from being altered, lost, damaged or destroyed.
  2. The Administrator shall provide appropriate technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically.
  3. In matters not regulated by this Privacy Policy, the provisions of GDPR and other relevant provisions of Polish law shall apply accordingly.

Create your account