Privacy Policy and Policy on Using Cookies Zortrax Dental S.A.

1. General information

1. By visiting the website zortrax.dental, filling out the forms made available thereon (e.g. contact form, newsletter form), making a purchase of products or services via that website, registering a product or using any other service offered by Zortrax Dental S.A. via the aforementioned website, the user provides Zortrax Dental S.A. with different data, including personal data.

2. The Controller of the personal data and at the same time an owner of the website zortrax.dental is Zortrax Dental S.A. with its registered office in Olsztyn, address: ul. Lubelska 34, 10-409 Olsztyn, Poland, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court in Olsztyn, 8th Commercial Division of the National Court Register under KRS number 0000900312, with share capital of PLN 102,225.50 paid in full, NIP [Tax ID No.] 739-39-54-101, REGON [National Business Registry] No. 389002380, hereinafter referred to as Zortrax Dental.

3. The terms and conditions pursuant to which Zortrax Dental collects and processes the personal data acquired from users of the website zortrax.dental are laid down in this Privacy Policy.

4. Please carefully read the Privacy Policy to get acquainted with the principles on processing the personal data obtained by Zortrax Dental.

5. Zortrax Dental makes any and all efforts to ensure protection and respect of privacy of users, including the personal data.

6. The personal data collected by Zortrax Dental via the website zortrax.dental are processed in accordance with the Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as the “GDPR”.

7. Any references made herein to:

• 1) “personal data” shall mean information which can directly or indirectly identify a user of the website zortrax.dental, including such as: first name and last name, phone number, residence address, email address, IP address or data concerning location;

• 2) “user” shall mean a person visiting the website zortrax.dental and using the services offered via that website;

2. Source of origin of the personal data and categories of the personal data

   • II.1. In principle, Zortrax Dental processes the personal data given directly by the user while benefiting from the services offered by Zortrax Dental via the website zortrax.dental, filling out the forms available on that website (e.g. contact form or newsletter form), registering a product, participating in surveys, as well as while exchanging information with Zortrax Dental, by email, traditional post or in any other way whatsoever, including by phone, and also while reporting problems concerning the services offered by Zortrax Dental. The personal data referred to in the previous sentence may include: first name and last name, residence address/address for correspondence, phone number, email address, data contained in emails, bank account number, first name and last name of an account holder. In the case of entities carrying out a sole proprietorship, such data may additionally include: business name under which the user carries out a business activity, NIP [Tax ID No.], REGON [National Business Registry] No. and address at which that activity is performed. In order to use some services offered on the website, the forms made available thereon may also indicate other personal data the provision of which is necessary to benefit from a service proposed. Provision of the personal data is voluntary, however with the reservation that failure to provide the data stated in the forms accessible on the website may make it impossible to correctly render the given service.

   • II.2. The only browsing through the website zortrax.dental does not require the user to provide his/her personal data, nevertheless in connection with visiting the website zortrax.dental by the user, Zortrax Dental may also collect – in a manner consistent with applicable provisions and, if required, solely upon consent of the user – information concerning devices and networks used by him/her to gain access to our services. It may include the following information: user’s IP address, data concerning logging, type and version of a web browser, type and version of plug-ins used by web browsers of an operating system, information on visits, including URL address of the website on which a link to the Zortrax Dental website has been clicked. Zortrax Dental acquires such information via various technologies, including Cookies (detailed information is made available in item XI hereof).

3. Purpose and bases of processing personal data

1. The user’s personal data are processed for the following purposes:

   • 1.1) if the user orders a service available on the website zortrax.dental, creates a user account, contacts to perform the service, lodges a complaint regarding the ordered service or product of Zortrax Dental or in the case of sending a commercial offer upon user’s demand, the personal data shall be processed to conclude and perform the agreement. The legal basis for the processing of the personal data is Article 6(1)(b) of the GDPR;

   • 1.2) in the case of contacting Zortrax Dental, including by email, traditional correspondence, via the available contact form, chat or by phone in a matter that is not connected with the given service/agreement performed for the benefit of a given person, the personal data shall be processed to communicate and provide answers to questions, requests or demands. The legal basis for the processing of the personal data is Article 6(1)(f) of the GDPR. The legitimate interest of Zortrax Dental in this case consists in the necessity to contact in order to give answers to questions, requests, demands or to solve another potential problem;

   • 1.3) in the case of subscription of an information bulletin (Newsletter), the personal data shall be processed to make information about products, promotions, novelties of Zortrax Dental available on the basis of user’s consent. The legal basis of the processing of the personal data is Article 6(1)(a) of the GDPR; The user can at all times resign from obtaining the Newsletter by clicking on the link available in each message sent as part of the Newsletter or by contacting Zortrax Dental;

   • 1.4) in the case of registration of a purchased product of Zortrax Dental via the form made available on the website zortrax.dental, the user’s data shall be processed for the purpose specified by Zortrax Dental, e.g. to extend the warranty period or obtain technical support. The legal basis for the processing of the personal data is Article 6(1)(b) of the GDPR;

   • 1.5) in the case of filling out questionnaires available on the website zortrax.dental, provided that they are not anonymous, the personal data shall be processed for the purpose of getting acquainted with users’ opinions by Zortrax Dental about offered products or services, optimising Zortrax Dental’s offer, carrying out market research and for marketing purposes on the basis of user’s consent. The legal basis for the processing of the personal data is Article 6(1)(a) of the GDPR;

2. In addition, the personal data are processed for the purpose of:

   • 2.1) administering the website zortrax.dental, including for the purpose of solving problems, analysing data, testing, carrying out research works, analytical works and for the purposes connected with supervision and security. The legal basis for the processing of the personal data is Article 6(1)(f) of the GDPR, and the legitimate interest of Zortrax Dental consists in the necessity to protect the business activity carried out, to ensure security of the website, to optimise it and to improve its functionalities;

   • 2.2) fulfilling the obligations arising out of generally applicable legal provisions, in particular fiscal and accounting regulations. The legal basis of the processing of the personal data is Article 6(1)(c) of the GDPR, i.e. the data processing is carried out due to the need to fulfil the legal obligation imposed on the Controller;

   • 2.3) any possible establishing and asserting claims by Zortrax Dental or defending against claims. The legal basis for the processing of the personal data is Article 6(1)(f) of the GDPR, and the legitimate interest of Zortrax Dental consists in the right to protect the rights thereof;

4. Personal data processing period

1. Zortrax Dental does not store the user’s personal data longer than it is necessary for the purposes for which such data have been gathered. Therefore:

   1. if the personal data are processed by Zortrax Dental on the basis of Article 6(1)(a) of the GDPR, i.e. on the basis of the consent given, the users’ personal data are processed by Zortrax Dental for the period necessary to achieve the purpose for which such data have been collected, however not longer than by the time of withdrawing the consent given by the user on a voluntary basis;

   2. if the personal data are processed by Zortrax Dental on the basis of Article 6(1)(b) of the GDPR, the users’ personal data are processed by Zortrax Dental for the period necessary to achieve the purpose for which such data have been collected, however not longer than for the period of validity of a commercial offer placed, period of rendering the given service or examining a lodged complaint;

   3. if the personal data are processed by Zortrax Dental on the basis of Article 6(1)(c) of the GDPR, the users’ personal data are processed by Zortrax Dental for the duration period of the legal obligation imposed on Zortrax Dental, including the obligation pertaining to storage of accounting documents;

   4. if the personal data are processed by Zortrax Dental on the basis of Article 6(1)(f) of the GDPR, the users’ personal data are processed by Zortrax Dental for the period necessary to achieve the purpose for which such data have been collected, however not longer than by the date of lodging an objection by the user.

2. The personal data processing periods may be extended in the case of a necessity to establish, assert or defend against any possible claims – by the expiry of the claim prescription time limits, arising out of applicable legal provisions.

3. The data connected with an analysis of network traffic gathered via Cookies and similar technologies may be stored by Zortrax Dental by the time of expiry of a cookie file. Some cookies never expire, therefore the data storage time shall be equivalent to the time needed by the Controller to achieve the purposes related to the gathering of data, e.g. to ensure security and analyse historical data connected with traffic on the website.

5. Personal data recipients

1. The recipients of the personal data are entities that render, upon order of Zortrax Dental, services necessary to achieve the purposes for which Zortrax Dental processes the user’s personal data, including:

   1. Zortrax S.A. with its registered office in Olsztyn at ul. Lubelska 34, 10-409 Olsztyn, Poland entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Olsztyn, 8th Commercial Division of the National Court Register under KRS number: 0000499608, NIP [Tax ID No.]: 524-27-56-595, REGON [National Business Registry] No.: 146496404, share capital of: PLN 11,542,250, paid in full; contact details: email address office@zortrax.com, phone number: +48 89 672 40 01,

   2. service providers responsible for handling of IT systems, i.e. hosting service providers and server service providers,

   3. payment operators,

   4. entities cooperating with Zortrax Dental in the field of accounting, legal, advisory and audit, logistics, courier and postal services,

   5. trade partners of Zortrax Dental, i.e. sellers and distributors of products and services of Zortrax Dental but only if the user gives his/her consent to the provision of his/her personal data to those entities.

2. Zortrax Dental benefits from services only of such entities which guarantee the use of technical and organisational measures so that the processing will meet the requirements of GDPR and protect rights of data subjects.

3. Entities rendering services upon order of Zortrax Dental, which process the user’s personal data shall be obliged to keep confidentiality of the personal data and they cannot use such data for a purpose other than performance of the services.

4. In view of capital ties between Zortrax Dental and Zortrax S.A., Zortrax Dental informs that on the principles laid down in recital 48 of the GDPR the users’ personal data may also be made available to Zortrax S.A. with its registered office in Olsztyn, Poland, on the basis of Article 6(1)(f) of the GDPR to achieve internal administrative purposes.

6. Profiling and automated decision-making

The personal data of users shall not be processed in an automated way (including in the form of profiling).

7. Data security

Zortrax Dental hereby declares that it processes the users’ personal data in accordance with the GDPR, as well as applies technical and organisational measures to ensure protection of the processed personal data, adequate to hazards and categories of data covered by the protection, and in particular it secures the users’ personal data against unauthorised access, loss or damage.

8. Social media

Zortrax Dental has a company website/profile on Facebook and Instagram. Within possession of the aforesaid profiles Zortrax Dental publicly processes the available data of people visiting those profiles (such as comments, likes, web IDs).

These data are collected for:

1. 1. the purpose of enabling users of social portals to actively participate in Zortrax Dental profiles,

   2. for the purpose of running company websites/profiles of social portals and communicating information by means of them about Zortrax Dental activity,

   3. for analytical and statistical purposes,

   4. for the purpose of asserting claims and defending against claims.

The legal basis of processing of the data is Article 6(1)(f) of the GDPR, and the legitimate interest of Zortrax Dental consists in the right of Zortrax Dental to run the company website/profile on Facebook and Instagram on the principles specified by the owner of these services and to inform by means of them about Zortrax Dental activity, to promote own brand, products and services, to inform about events, to communicate via the tools available on Facebook and Instagram (comments, messages) and to keep statistics (through an analysis of data on activity of account users);

Within the scope of processing of the personal data for the needs of statistics Zortrax Dental performs a function of the joint controller within the meaning of Article 26(1) of the GDPR along with a controller of the social networking portal which makes accessible the option of statistics and advertisements. More information on the data processing for the needs of statistics and advertisements is available at the following address: https://www.facebook.com/legal/terms/information_about_page_insights_data

Zortrax Dental underlines that the entities which run the social network portals are separate entities responsible for processing the data of persons using them. These entities process the users’ personal data for their own purposes, pursuant to legal bases established by them.

Information on the principles of personal data processing by Facebook is available at the address:

https://www.facebook.com/about/privacy/

Information on the principles of personal data processing by Instagram is available at the address:

https://help.instagram.com/519522125107875

9. Provision of the data outside the European Economic Area

In principle, all personal data of users are stored in the territory of the European Economic Area (“EEA”). Taking into consideration the international nature of Zortrax Dental activity and the fact that providers of some services may operate outside the EEA, Zortrax Dental can provide certain personal data of users to countries that do not belong to the European Economic Area, in which less rigorous provisions concerning protection of personal data may be in force.

In the case of providing the personal data outside the European Economic Area, Zortrax Dental warrants that this shall take place in a way that is consistent with binding legal regulations and in assurance of an appropriate degree of protection, mainly by:

– cooperating with entities which process personal data in countries with reference to which a relevant decision of the European Commission has been issued;

– applying standard contractual clauses, issued by the European Commission;

– applying binding corporate rules, approved by a competent supervisory authority;

For more detailed information on the applied security measures, please contact Zortrax Dental using the contact details available at the end of this Privacy Policy. Each and every person has the right to obtain a copy of applied protections or information on the place of sharing them.

10. Rights of Data Subjects

Users whose personal data are processed by Zortrax Dental have the following rights arising out of the GDPR:

1. right to access personal data, i.e. the user has the right to demand information on the processing of his/her personal data by Zortrax Dental and obtain a copy of such personal data;

2. right to demand rectification (correction) of personal data, i.e. the user has the right to demand rectification of incorrect, inaccurate personal data and complete any and all incomplete data;

3. right to demand erasure of personal data (so-called “right to be forgotten”), i.e. the user has the right to demand that his/her personal data be erased within the scope laid down in Article 17 of the GDPR;

4. right to demand limitation of personal data processing, i.e. the user has the right to demand limitation of the data processing within the scope laid down in Article 18 of the GDPR;

5. right to transfer data to another controller or Country – on the terms laid down in Article 20 of the GDPR;

6. right to withdraw consent to the processing of personal data, i.e. if the processing of personal data is carried out on the basis of the user’s consent, the user has the right to withdraw his/her consent at any time, with the reservation that the withdrawal of consent does not affect the lawfulness of the processing, which was carried out on the basis of consent before its withdrawal;

7. right to lodge an objection to the processing of personal data, for reasons connected with a special situation of the user – to the processing of personal data based on the legitimate interest of Zortrax Dental, including profiling on the basis of these provisions.

8. Right to lodge a complaint with a supervisory authority, in particular in the Member State of his/her habitual residence, place of work or place where the alleged breach was committed if the user finds that the processing of personal data is in violation of the GDPR.

11. Cookies and similar technologies

1. The website of Zortrax Dental uses Cookie files (so-called “cookies”) and similar technologies to ensure correct functioning of the website zortrax.dental.

2. Cookies are small files saved on a hard disk of user’s device, which monitor, save and store information on activities of the user on the website. 

3. The software used for browsing through websites (web browser) in many cases by default allows for storage of the cookies in user’s device. However, the user can make a change of settings concerning Cookie files at all times. Such settings may be changed in particular in such a way as to block the automatic handling of cookies in settings of a web browser or inform about their being placed every time in a device of the user of the website. Detailed information about the possibility and ways of handling Cookies is available in settings of a web browser. Failure to change the settings concerning Cookies means that they will be placed in the user’s device, and thereby Zortrax Dental will store the information in the user’s device and gain access to such information.

4. If the user does not agree to save and store Cookies in his/her device, it is advisable to incorporate security settings into a browser, blocking the use of Cookies. In the case of deactivating cookies in a web browser, using the services will not be made impossible, however it may lead to certain inconvenience related to correct display of the website or using the services available on the website.

12. Cookie files of independent companies

To get to know and understand preferences of users, the website zortrax.dental uses the Google Analytics monitoring software. The supplier of the aforesaid software is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google). The Google Analytics software saves own Cookies on a hard disk of user’s computer to monitor how users use the website but it does not collect and does not store personal data. Detailed information on the Google Analytics is contained in the Google Privacy Policy, available at the following address: http://www.google.com/privacy.html

Other Cookies may be stored on a user’s hard disk by external suppliers when the website uses their programs, sponsored links or advertisements. Such Cookies are used for monitoring behaviour of users both on the website which has carried out the installation and on websites of the foregoing suppliers. The time of storing them is, in principle, 30 days, however some may be stored longer. No personal data are stored, saved or collected.

13. Links to other websites and social networking services

The website zortrax.dental may contain links to websites of Zortrax Dental’s partners, advertisers or companies associated with Zortrax Dental. In the case of using links to such websites, it should be remembered that principles of the privacy policy of entities being their owners are in force thereon, and Zortrax Dental does not bear any liability for them. Zortrax Dental recommends getting acquainted with the provisions of such policies before sending any own personal data to those websites.

14. Amendments to the Privacy Policy

Zortrax Dental regularly monitors the Privacy Policy. For this reason, the Privacy Policy of Zortrax Dental may be updated so that its content will reflect the changes arising out of the practice concerning protection of privacy. Any and all amendments to the Privacy Policy are placed on this website on an ongoing basis. Each time before using the website zortrax.dental Zortrax Dental advises getting acquainted with the Privacy Policy and privacy protection principles.

15. Contact

Contact with the Controller is possible via the email address: contact@zortrax.dental, by phone +48 89 672 40 01 or in writing, to the following address: Zortrax Dental S.A. ul. Lubelska 34, 10-409 Olsztyn.