§1. GENERAL INFORMATION

1. This Privacy Policy sets out the rules for processing and protecting personal data collected by the Data Controller in relation with your activity on the website www.noxaprime.com
2. Personal data collected through this website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), referred to hereinafter as “GDPR”.
3. The Data Administrator and Co-administrators (whose details are provided in §2 of this Privacy Policy) make every effort to ensure that your data is processed lawfully, solely for the purpose for which it was collected, and to provide the necessary protection against any possible threats.
4. The Data Administrator strives to ensure that you can exercise your rights under GDPR and continuously updates the website to comply with current legal requirements.

§2. DATA ADMINISTRATOR AND CO-ADMINISTRATORES 

1. The personal data collected through the aforementioned website is controlled by AIRCON Sp. z o.o., KRS: 0000147972, registered office address: ul. Logistyczna 5, 05-230 Kobyłka, phone: +48 22 390 53 55, e-mail: sekretariat@aircon.pl (hereinafter referred to as the “Administrator”).
2. The Co-administrators of your personal data are entities that regularly cooperate with the Administrator, namely ZYMETRIC Sp. z o.o. and TECHNAB Sp. z o.o. (ul. Logistyczna 5, 05-230 Kobyłka).
3. For matters related to data protection, you may contact us via the contact form available in the “Contact” section of the website or directly via the phone/email provided above. The Controller strives to respond to all inquiries regarding data protection as soon as possible, within no more than 30 days.

§3. PURPOSE, SCOPE, AND LEGAL BASIS OF DATA PROCESSING 

1. The purpose of processing personal data collected in connection with your activity on the Administrator’s website depends on the option you use (contact form/expert inquiry, newsletter, training registration forms).
2. The scope of processed personal data includes only basic information. The Administrator does not process sensitive data (e.g., health status, addictions, political views, etc.). Any sensitive information voluntarily submitted (e.g., in contact forms) is immediately and permanently deleted.
3. Contact form: 
   a) The personal data provided includes: name, surname, company details, address (city), email address, and phone number.
   b) The data in the form is processed to respond to your inquiry. The legal basis for this processing is Article 6(1)(b) GDPR (processing is necessary for the performance of a contract or to take steps prior to entering into a contract at the request of the data subject).
   c) While completing the form, you may consent to the processing of your data for marketing purposes and to receive commercial information electronically. In this case, your data may be processed for marketing purposes, based on Article 6(1)(a) GDPR (consent). You may withdraw your consent at any time, including via the form. The consent is voluntary, and its absence does not affect the ability to use the contact form. Withdrawal of consent does not affect the lawfulness of processing before its withdrawal.
   d) Providing personal data as specified in point 1 is voluntary (not legally required), but failure to do so may hinder or completely prevent the use of the contact form.

§4. RECIPIENTS OF PERSONAL DATA 

1. The Administrator does not share your personal data with entities other than those that have signed a data processing agreement with it. Data may be shared with the entities mentioned above only for the purposes specified in the agreement and only when necessary or justified by the legal interest of the Administrator. Possible data recipients include trusted IT service providers or a legal office providing services to the Administrator.
2. Data may be disclosed to law enforcement authorities or courts only upon official request.

§5. DATA RETENTION PERIOD 

1. The Administrator aims to minimize the retention period of personal data that is no longer necessary for its original purpose.
2. Your data related to inquiries via the contact form is processed until the correspondence/negotiations are concluded. If a purchase does not occur and no marketing consent was given, your data is deleted immediately.
3. Data processed based on consent is stored until the consent is withdrawn.
4. Data processed under a contract is stored for the period required by law.

§6. DATA SUBJECT RIGHTS 

1. As a data subject, you have the following rights concerning data processing: 
   a) the right to access and obtain a copy of your data,
   b) the right to rectify (correct) your data,
   c) the right to request deletion, restriction, or objection to processing,
   d) the right to data portability,
   e) the right to withdraw consent for data processing,
   f) the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).
2. To exercise these rights, you should contact the Administrator via the contact form or by sending a request to the email address specified in §2 of this Privacy Policy.

§7. COOKIES AND PROFILING 

1. This website uses cookies (as stated in the Cookie Policy). Failure to change browser settings implies consent to their use.
2. Cookies contain necessary information for the proper functioning of the website, especially features requiring authentication.
3. This website uses basic cookies. Upon your first visit, you will be informed about them and asked for consent. If you decline, your device will not be monitored for marketing purposes.
4. Session cookies may be required for certain website functions. Such cookies are not blocked even if you do not consent to their placement. Your choice will be stored in a cookie for 90 days. To change this setting, delete cookies from your browser settings.
5. Most web browsers allow cookies by default, but you can change these settings in the browser’s “Tools” or “Preferences” menu. You may also delete cookies at any time. However, disabling cookies may limit website functionality.
6. The Administrator does not sell your data or engage in profiling. Your data is not transferred outside the European Economic Area or to international organizations.

§8. FINAL PROVISIONS 

1. This website is not intended for children under the age of 16. The Administrator does not knowingly collect or store data on individuals under this age.
2. The Administrator has implemented a comprehensive data protection system, which all employees must comply with, ensuring the highest level of data security for your personal data.