Definitions
1. For the purposes of this document, the following definitions shall apply:
  1. Personal Data Administrators/Administrators - the Intermediary, i.e. Patryk Krzesaj, who conducts business activity under the name of.
    .code Patryk Krzesaj, entered in the Register of Entrepreneurs of the Central Registration and Information on Business Activity conducted by the minister responsible for economy at the address Krzeczyn 79 N, 56 - 400 Oleśnica Poland, NIP8961444268, REGON 020765141 and in the scope of conclusion and performance of the Agreement for the provision of regeneration or exchange services and all legal obligations related thereto - Service Provider, i.e. Patryk Krzesaj. Centrum Diesel sp. z o.o. with its registered office in Mirków, st. Wrocławska 1 A, 55 - 095 Mirków Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Wrocław Fabryczna in Wrocław, 9th Commercial Department of the National Court Register, under KRS number: 0001150498, NIP 8961647853, REGON 540690067, with the share capital of: PLN 5,000.00.
  2. Personal data - information relating to a natural person which identifies him or her or enables him or her to be identified, which means that on the basis of this information the identity of the natural person to whom the data relates can be established, either directly or indirectly.
  3. Processing - an activity or set of activities performed on Personal Data or sets of Personal Data in an automated or non-automated manner, such as, but not limited to, collecting, recording, organising, structuring, storing, retrieving, viewing or deleting.
  4. Privacy and Cookies Policy/Privacy Policy - this document setting out the rules for the processing of personal data through the Service, on the basis of and in accordance with the RODO.
  5. RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
  6. Website/Service - the website operated by the Intermediary under the domain injectomatic.com;
  7. User - a User or Customer within the meaning of the Terms and Conditions whose Personal Data is Processed as part of the Website and contracts concluded through it.
General information
1. The Privacy Policy has been prepared on the basis of and in accordance with all the requirements of the RODO, in particular it contains all the necessary information that the Administrator is obliged to provide to the person whose Personal Data it Processes and from whom it has collected such Data - pursuant to Article 13 of the RODO, i.e. information necessary to ensure the fairness and transparency of the Administrator's Processing of Personal Data.
2. Terms capitalized and not defined in this Privacy Policy shall have the meaning given to them in the Terms of Service, located on the Website.
3. The Privacy Policy describes issues related to the Processing of Personal Data only through the Service, including in the framework of Distance Contracts concluded on the basis of information contained on the Service website.
4. The Website of the Service uses encrypted data transmission, which means that it has a so-called SSL (Secure Sockets Layer) certificate, which is a network protocol used for secure network connections.
5. This version of the Privacy Policy is effective as of 28 March 2025.
Personal Data Administrator
1. The administrators of the User's Personal Data are:
  The Intermediary - Patryk Krzesaj, conducting business activity under the company name
  .code Patryk Krzesaj, entered in the Register of Entrepreneurs of the Central Registration and Information on Business Activity conducted by the Minister responsible for economy at the address Krzeczyn 79 N, 56 - 400 Oleśnica Poland, NIP8961444268, REGON 020765141; Service Provider - Centrum Diesel sp. z o.o. with registered office in Mirków, st. Wrocławska 1 A, 55 - 095 Mirków Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Wrocław Fabryczna in Wrocław, 9th Commercial Division of the National Court Register, under KRS no.: 0001150498, NIP 8961647853, REGON 540690067, with a share capital of: PLN 5,000.00.
2. The User may contact the Administrators regarding his/her Personal Data through the following forms of contact:
  1. by correspondence at: Broker - .code Patryk Krzesaj, Krzeczyn 79 N, 56 - 400 Oleśnica Poland; Service Provider: Centrum Diesel sp. z o.o., ul. Wrocławska 1 A, 55 - 095 Mirków Poland;
  2. By e-mail at: contact@injectomatic.com;
  3. via telephone at: +48 601 150 608.
3. The Administrators have not appointed a Personal Data Protection Officer, because due to the small scope and scale of the Processed Personal Data, it is not necessary in the Administrators' opinion, including legally required.
Scope of Personal Data Processed
1. Through the Service, the Intermediary may Process Personal Data through:
  1. contact forms;
  2. registration and maintaining an Account;
  3. subscribing to a mailing list;
  4. the Order form and the conclusion of the Agreement for the provision of the Intermediary Service and the mandatory actions related thereto;
  5. the analytical tool used Google Analytics, Hotjar;
  6. fulfilment of legal obligations arising from applicable laws, including in particular accounting and tax laws.
2. Within the framework of the concluded Contract for the provision of the Regeneration or Replacement Service, the Service Provider may Process Data through:
  1. the scope of activities falling within the scope of the conclusion of the Agreement for the provision of Regeneration and Replacement Services and the obligations incumbent on the Service Provider in connection with the conclusion of the Agreement, such as the processing of complaints, returns, guarantees;
  2. to comply with legal obligations under applicable laws, including in particular accounting, taxation and those under the General Product Safety Regulation (GPSR).
3. The Administrators may also Process Personal Data in the possible situation of establishing, investigating and enforcing claims in the event of legal proceedings or proceedings before other authorities.
4. All Personal Data that may be Processed by the Administrators through the Service is provided by the User on a voluntary basis.
5. The User does not have to provide his/her Personal Data to the Administrators, either directly (e.g. contact form) or indirectly (data collected through cookies of third parties e.g. Google Analytics). However, if the User does not provide certain Personal Data, it may result in the impossibility of providing a given service or achieving a given purpose (e.g. if the User does not provide Personal Data in the contact form, it will prevent the User from sending a message within the form).
6. However, if the User provides their Personal Data, the Administrators will Process it on the basis and within the limits of the law, including in particular in an adequate manner within the meaning of the RODO, i.e. appropriately and limited to what is necessary for the purposes for which it is Processed, i.e. in accordance with the principle of data minimisation.
7. The detailed grounds for the Processing of Personal Data are indicated further in the Privacy Policy.
Personal Data Processed by the Intermediary through contact forms
1. Through the contact forms on the Website, the Intermediary Processes the Personal Data which you provide to it by filling in the forms, i.e. in particular the Personal Data required to send a message within the form, i.e. name, surname, e-mail address, Order number.
2. The legal basis for the Processing of Personal Data is Article 6(2)(a) of the RODO, i.e. Processing on the basis of the data subject's consent, in order for the Intermediary to receive the message within the form and respond to it.
3. The User's Personal Data Processed within the contact forms, is Processed until the consent to the Data Processing is withdrawn.
4. The User may withdraw the consent granted for the processing of his/her personal data at any time. The withdrawal of consent to process Personal Data shall not affect the lawfulness of the processing carried out by the Administrator on the basis of the consent given by the User before its withdrawal.
5. If the User wishes to withdraw their consent to the processing of Personal Data for the purpose of providing the Contact Form Service, they may send an email to the Broker's address stating that they wish to withdraw their consent.
Personal Data Processed by the Intermediary through the Account
1. Through the Account registration form and the maintenance of the Account on the Website, the Administrator Processes the Personal Data which the User provides to it by filling in the form or the data in the Account, i.e. in particular the Personal Data required for the registration of the Account, i.e.: e-mail address, first name, surname, telephone number, company, EU VAT number, address.
2. The legal basis for the Processing of Personal Data within the Account registration form is Article 6(1)(b) of the RODO, i.e. Processing in order to take action at the request of the User, prior to the conclusion of a contract and processing necessary for the performance of the contract to which the User is a party.
3. Personal Data Processed within the Account, Processed until the period of limitation of claims concerning the performance of the contract.
Personal Data Processed by the Intermediary via a mailing list
1. Through the mailing list to which the User may subscribe, by means of the checkbox marked on the Website, the Intermediary Processes the Personal Data which the User provides to it by filling in and sending the form under which the User marks the checkbox, that is, in particular, the e-mail address necessary to send e-mails.
2. The legal basis for the Processing of Personal Data is Article 6(2)(a) of the RODO, i.e. Processing on the basis of the data subject's consent, for the purpose of sending marketing and commercial messages by the Intermediary.
3. The User's Personal Data Processed as part of the mailing list, is Processed until the consent to the Data Processing is withdrawn.
4. The User may withdraw their consent to the processing of their personal data at any time. The withdrawal of consent to process personal data shall not affect the lawfulness of the processing carried out by the Intermediary on the basis of the consent given by the User before its withdrawal.
5. In the event that the User wishes to withdraw their consent to the processing of Personal Data for the purpose of providing the Mailing List Enrolment Service, they may opt out by pressing the unsubscribe link sent in each e -mail message sent as part of the enrolment.
Personal Data Processed by the Intermediary through the Order form and the conclusion of the Intermediary Service Agreement, as well as within the framework of mandatory actions related thereto.
1. Within the framework of placing an Order through the Shopping Cart and concluding the Agreement for the provision of the Intermediary Service, concluded remotely through the Website and the performance by the Intermediary of the mandatory activities related thereto, the Intermediary Processes the Personal Data that are necessary for placing the Order and concluding this Agreement, i.e. name, surname, e-mail address, contact telephone number, correspondence address, bank or company account number, NIP, company.
2. The legal basis for the Processing of Personal Data within the framework of placing an Order and concluding an Agreement is Article 6(1)(b) RODO, i.e. processing in order to take action at the User's request, prior to concluding an Agreement and processing necessary for the purpose of performing the Agreement to which the User is a party.
3. The User's Personal Data Processed within the framework of the Order placed and the Agreement concluded, is Processed until the expiry of the period of limitation of claims concerning the Agreement, resulting from the provisions of currently applicable law.
Personal Data Processed by the Intermediary through analytical tools
1. The Intermediary uses analytical tools on the Website, such as Google Analytics and Hotjar.
2. Within the analytical tools, the Intermediary may Process such Personal Data of the User as: IP address, approximate location limited to the locality, gender.
3. The legal basis for the Processing of the Personal Data referred to in this paragraph is Article 6(1)(a) of the RODO, i.e. Processing on the basis of consent, expressed by the person to whom the Personal Data relates, for the purpose for which the analytical tools referred to in this paragraph are used.
4. The purpose of the Processing of the Personal Data by Google Analytics and Hotjar is, in particular, the statistical analysis of the User's traffic on the Website, the User's interaction with the Website, which is used by the Administrator in order to be able to optimise the operations of the Website and thus to conduct business efficiently.
5. The User may give his/her consent to the Processing of Personal Data by means of the aforementioned tools by means of a cookie message (the so-called "cookie bar"), which appears on the Service page when the User accesses it for the first time.
6. It is also the User's right to withdraw their consent to the Processing of Personal Data at any time, without affecting the lawfulness of the Processing carried out on the basis of the consent before its withdrawal.
7. In order to revoke your consent, you may disable the cookies described in this section at any time in your cookie settings.
8. Personal Data of the User Processed within the framework of Google Analytics, is Processed up to 2 years, i.e. until the validity of the cookie or until the User revokes his/her consent to the Processing of such Data, based on the actions referred to in the paragraph above.
9. Personal Data of the User Processed within the Hotjar tool, is Processed for up to 14 months or until the User revokes his/her consent to the Processing of such Data, based on the actions referred to in subsection above.
Processing of Personal Data by the Intermediary in fulfilment of legal obligations
1. The Intermediary, as a business, also has a number of legal obligations to fulfil, such as the provision of electronic services, billing with the Service Provider, handling of complaints or returns. Accordingly, the Intermediary processes Personal Data that is necessary to comply with all necessary legal obligations incumbent upon it, in particular with regard to the provisions of the Electronic Services Act, the Consumer Rights Act, the Civil Code, accounting regulations, tax regulations.
2. The personal data referred to in subsection 1 above are: name, surname, correspondence address, e-mail address, telephone number, bank account number, possibly also NIP or REGON, company.
3. The legal basis for the Processing of Personal Data as part of the Broker's fulfilment of the legal obligations referred to in this subsection is Article 6(1)(c) RODO, i.e. processing necessary to fulfil the Broker's legal obligations under applicable legislation.
4. The User's Personal Data Processed in order to comply with legal obligations shall be Processed until the expiry of the legal obligations incumbent on the Intermediary which required the Processing of such Data.
Personal Data Processed by the Service Provider within the framework of the Contract for Regeneration Services and Replacement Services.
1. As part of the conclusion of the Regeneration Service and Replacement Service Agreement concluded remotely through the Website by the Intermediary, the Service Provider Processes the Personal Data that is necessary for the conclusion and performance of the obligations under this Agreement, i.e. name, surname, e-mail address, contact telephone number, mailing address, bank or company account number, NIP, company.
2. The legal basis for the Processing of Personal Data as part of the conclusion and performance of the Agreement is Article 6(1)(b) RODO, i.e. processing in order to take action at the request of the Customer, prior to the conclusion of the Agreement, and processing necessary for the performance of the Agreement to which the Customer is a party.
3. The Customer's Personal Data Processed within the framework of the Order placed and the Agreement concluded, is Processed until the expiry of the period of limitation of claims concerning the Agreement, resulting from the provisions of currently applicable law.
Processing of Personal Data by the Service Provider in fulfilment of legal obligations
1. As a business, the Administrator also has a number of legal obligations that it must comply with, such as invoicing, billing, processing of complaints, warranties, returns, and obligations related to the safety of the products sold under the GPSR. Accordingly, the Administrator Processes the Personal Data that is necessary to comply with all the necessary legal obligations incumbent upon them, in particular with regard to accounting, taxation, the Consumer Rights Act, the Civil Code and the GPSR.
2. The Personal Data referred to in subsection 1 above are: name, surname, correspondence address, e-mail address, telephone number, bank account number, possibly also TIN or REGON, company, or in connection with GPSR's obligations, among others, such Data as: identification data of the Customer, information about the purchased Products, contact data.
3. The legal basis for the Processing of Personal Data as part of the Service Provider's fulfilment of the legal obligations referred to in this paragraph is Article 6(1)(c) of the RODO, i.e. processing necessary to fulfil the Service Provider's legal obligations under the applicable legislation.
4. The User's Personal Data Processed in order to comply with legal obligations, is Processed until the expiry of the legal obligations incumbent on the Service Provider which required the Processing of such Data.
Processing of Personal Data by the Administrators in the situation of possible establishment, investigation and enforcement of claims arising from the Contracts
1. In a situation where it is necessary to establish, assert and enforce claims under the Agreements or defend against such claims, in court proceedings or before other authorities, the Administrators will process the Personal Data that is necessary for this purpose, in accordance with the provisions of law.
2. The Personal Data referred to in subsection 1 above may be: name, surname, correspondence address, e-mail address, telephone number, bank account number, possibly also TIN or REGON and company.
3. The legal basis for the Processing of Personal Data in the situation referred to in this point is Article 6(1)(f) RODO, i.e. Processing for the purpose of the Administrators' legitimate interests, which may consist in establishing, pursuing or enforcing claims or defending against possible claims in court proceedings or before other authorities.
4. The User's Personal Data, which may be Processed for the purposes of possible claims or disputes, is Processed until the expiry of the limitation period for claims relating to the Contracts concluded.
Processing of Personal Data by other parties
1. In order to use the tools that enable the Intermediary to own the Website, to conduct analytical activities that support the Intermediary's activities, the User's Personal Data may also be Processed by the following entities:
  1. the host of the Website, who stores the Personal Data on the server and thus Processes it;
  2. the entity enabling the management of the Website and providing its infrastructure, i.e. Shopify International Ltd, 2nd Floor 1-2 Victoria Buildings Haddington Road, Dublin 4, D04 XN32, Ireland, as a Data Processor, on the basis of the Personal Data Processing entrustment agreement concluded with the Intermediary;
  3. entities providing services for the delivery of the Products, parts which are the subject of the Contract, as separate data controllers;
  4. Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - for the purpose of the Intermediary's use of Google Analytics tools, which is a separate controller of this Personal Data;
  5. Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta, Registration No: C65490 - for the purpose of the Intermediary's use of the Hotjar tool, which is the processor of the Personal Data on the basis of the Personal Data processing entrustment agreement concluded with the Intermediary;
  6. entities handling electronic payments, i.e. PayPal (Europe) S.à r.l.et Cie, S.C.A. (R.C.S. Luxembourg B 118 349) and Stripe Inc. 354 Oyster Point Blvd, South San Francisco, CA 94080, USA;
  7. entities providing accounting services and invoicing software used by the Service Provider.
Transfer of Personal Data to third countries or an international organisation
1. The Intermediary does not directly transfer the User's Personal Data to third countries or international organisations.
2. However, the User's Personal Data may be transferred to third countries by Google LLC, whose tools the Administrator uses (Google Analytics) and Hotjar.
3. Google LLC is on the list of entities participating in the Data Privacy Framework and in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data in accordance with the EU-US Data Privacy Framework, and therefore the protection of Personal Data corresponds to the standards of the regulations in force in the European Union.
4. Hotjar mostly stores the Data it collects in the European Union. For Personal Data that it shares with entities outside the EU, it uses standard contractual clauses to ensure adequate safeguards.
Information on automated decision-making, including profiling
1. Your Personal Data is not used by the Administrators for the purpose of making decisions towards you that are based on automated Processing of Personal Data, including profiling.
Rights to which the User is entitled in relation to the Processing of his/her Personal Data
1. On the basis of Articles 16 - 21 of the RODO, the User is granted the following rights, related to the Personal Data Processed by the Administrators.
2. Within the framework of the above-mentioned legal bases, the User has the right to exercise the following rights concerning his Personal Data that the Administrators Process, i.e. the User has the right to:
  1. access to Personal Data, on the basis of Article 15 RODO;
  2. rectification of Personal Data, pursuant to Article 16 of the RODO;
  3. erasure of Personal Data, pursuant to Article 17 of the RODO;
  4. restriction of the Processing of Personal Data, on the basis of Article 18 RODO;
  5. portability of Personal Data, pursuant to Article 20 RODO;
  6. to object to the Processing of Data, pursuant to Article 21 RODO.
3. For more detailed information on the User's rights, please refer to Articles 16 - 21 RODO respectively.
4. Where the Processing of the User's Personal Data, is carried out on the basis of the User's consent, the User also has the right to withdraw consent to the Processing of Personal Data, at any time, without affecting the lawfulness of the Processing carried out on the basis of that consent prior to its withdrawal.
5. You also have the right to lodge a complaint with the competent supervisory authority if you believe that your Personal Data is not being Processed correctly and in accordance with the law.
6. The competent supervisory authority may be the authority having jurisdiction over the User's place of permanent residence in a Member State, the User's place of work, or the place where a possible Personal Data breach was committed.
7. In Poland, the supervisory authority in respect of Personal Data is the President of the Office for Personal Data Protection.
8. However, before filing a possible complaint, the Administrators encourage the User to first contact them at the e-mail address indicated in the contact details above, in order to clarify the matter or the User's doubts related to the Processing of Personal Data through the Service or the concluded Agreements.
Cookies - general information
1. The Website uses cookies.
2. Cookies are small text files stored on the User's terminal equipment used to access the Website, e.g. a computer or mobile phone.
3. Cookies can be read by the Intermediary's information and communication system (so-called proprietary cookies) or by third party information and communication systems (so-called third party cookies).
Cookies and Processing of Personal Data
1. By reading the User's cookies through the Intermediary's ICT system, the Intermediary may have access to information that constitutes Personal Data and, therefore, based on such actions, the Processing of such Personal Data by the Intermediary takes place.
2. Some information, including Personal Data contained in Google Analytics, Hotjar cookies, may also be read by third-party ICT systems.
3. Some of the cookies used by the Intermediary are files which are necessary for the proper provision of electronic services to the User within the meaning of the Act of 18 July 2002 on electronic services, while the use of some of the cookies by the Intermediary is not necessary as it serves the Intermediary for purposes which are not necessary for the User to properly use the Website.
4. Cookies that are not necessary for the proper provision of electronic services to the User are blocked until the User consents to their use and thus consents to the Processing of Personal Data.
5. The User may give the consent referred to above via the cookie bar that is displayed on the Website during the User's first visit.
6. The legal basis for the Processing of Personal Data via cookies referred to in the section above is Article 6(1)(a) of the RODO, i.e. the User's consent, as discussed more in the section above on the principles of Data Processing within analytical tools.
7. In addition, within the framework of his/her Internet browser, the User has the possibility to manage his/her cookie settings at any time, including by blocking their use or re-enabling them.
Cookies used through the Website
1. Through the Website, the Intermediary uses its own cookies and third party cookies.
2. The Broker's own cookies are used to ensure proper operation of the various mechanisms found on the Website.
3. Third-party cookies are used for the purposes described in the paragraph above regarding the principles of Data processing within analytical tools and are:
  1. Google Analytics, owned by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
  2. Hotjar, owned by Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta, Registration No: C65490.
Final provisions
1. In matters not regulated in the Privacy Policy, the relevant provisions of the Polish law and RODO shall apply.
2. The Intermediary shall have the right to amend the content of the Privacy Policy, in particular when it is required by changes related to the processing of Personal Data on the Website, technological changes or changes in the applicable law concerning the issues described herein.