PRIVACY POLICY

I Introduction

PRIVACY POLICY AT EVAPIFY SP. Z O.O.

  1. Evapify is an importer and distributor of disposable electronic cigarettes.

  2. This Policy explains what personal information we collect, how the data are disclosed and how you can inform us to do not share certain information with a certain third parties.

II Data protection

  1. Please be informed that the controller of your personal data is Evapify sp. z o.o. with its registered seat in Warsaw, Złota street 75a/7, 00-819 Warsaw, Poland, registered with the Polish National Court Trade Registry, kept by the District Court for the Capital City of Warsaw, XIIIth Commercial Department of the National Court Registry under KRS number 0000937457, NIP 5272980073, REGON 5206358650, shares capital 5.000 PLN (hereinafter “Evapify” or “Controller”).

  2. Should you have any doubts about the processing of your data, you may contact us any time at the following address: [email protected], or by sending a letter to the address of the Evapify.

  3. Please be informed that we operate under the Regulation (EU) 2016/679 of the European Parliament and of the Counsil of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter “GDPR”).

  4. In relation to the processing of your personal data, in the situations provided for under the law, you have:

    • the right to access your personal data and receive copies of the same;

    • the right to rectify (correct) your data;

    • the right to erase personal data;

    • the right to restrict the processing of personal data;

    • the right to data portability – if the legal basis for data processing is a consent (Article 6(1)(a) or Article 9(2)(a) of the GDPR) or a contract (Article 6(1)(b) of the GDPR);

    • the right to withdraw consent to the processing of data, where such consent is the basis for data processing (Article 6(1)(a) of the GDPR), without this affecting the processing based on consent before its withdrawal;

    • the right to object to the processing of your personal data – if the legal basis for the processing is a legitimate interest (Article 6(1)(f) of the GDPR).

  5. Should you decide that the processing of your personal data infringes any provisions of the GDPR, you may submit a complaint to the President of the Personal Data Protection Office for the Protection of Personal Data, with his registered office at Stawki street 2, 00-193 Warsaw, Poland.

  6. Your personal data will not be processed in an automated manner (including in the form of profiling) that may produce legal effects concerning you or similarly significantly affect you.

  7. The provision of personal data is voluntary but necessary for the implementation of the purposes of processing for particular processes listed below. The aforementioned information applies to each process under which your data are processed by Evapify.

III. Processes

1. Contact form

1.1 You can contact with the Controller via the contact form located on the Evapify website. In order to use it, you must provide a certain minimum set of personal data. Please note that in this regards your personal data are processed for the following purposes:

a)  in order to contact and handle your questions submitted through our contact form (Article 6 (1) (f) of the GDPR), consisting in enabling handling the request
b)  to accept and handle service requests regarding the Controller’s products (Article 6(1)(b) of the GDPR);
c)  in connection with the fulfilment of the Controller’s legitimate interests (Article 6(1)(f) of the GDPR) establishing, asserting and defending against any possible claims.
1.2.  Please note that your personal data will be processed:
a)  for the period of the service completion and for a period of 5 years after its completion;

b)  in the case of data processed for the purpose of a legitimate interest of the Controller, until 

you raise a reasonable objection;

c)  upon raising an objection, the personal data may be retained for the purpose of confirming

that the Controller meets its legal obligations. 

1.3.  Your personal data we may receive from the following sources:

a)  entities carrying out marketing activities;

b)  providers of IT services or solutions.

1.4.  Please note that our business requires cooperation with many suppliers and subcontractors. The

potential business partners may contact Evapify through the contact form. This may involve data processing for the purpose of:

a)  establishing and implementing cooperation with contractors.
b)  delivery of products.

Social Media

2.1. Please note that your personal data are processed for the following purposes on our social medias like Facebook, TikTok, Twitter, Instagram, LinkedIn:

a)  to promote the Controller’s activity (Article 6(1)(f) of the GDPR);

b)  to maintain and facilitate the use of our account on the social media portal (Article 6(1)(f) of the GDPR);

c)  to accept complaints and other types of requests/information (Article 6(1)(f) of the GDPR);

d)  to fulfil obligations arising from the provisions of law, particularly related to submitted requests/information (Article 6(1)(c) of the GDPR)

2.2.  We also process personal data in connection with the fulfilment of the Controller’s other legitimate interests under Article 6(1)(f) of the GDPR:

a)  to establish, assert and defend any claims;

b)  for statistical purposes related to improvement of work efficiency, the quality of services 

provided and their adaptation to the recipients’ needs.

2.3.  Your personal data may be received by:

a)  any social media portal;
b)  entities carrying out marketing activities.

  1. 2.4.  Your personal data will be stored until you object to it. Upon withdrawal of the consent or raising

    an objection, personal data may be retained for the purpose of confirming that the Evapify meets its legal obligations and until the claim limitation periods have expired, whichever period is longer. However, please note that despite the withdrawal from the group, the data will still be retained by the owner of the social media portal. Each user of a particular fanpage, account or group, apart from leaving them, may also at any time delete the posts published by them or delete their account on the portal completely.

3. Marketing

3.1. Your personal data will be processed:

a) to fulfil obligations arising from the provisions of law, particularly from the act on the provision of services electronically (Article 6(1)(c) of the GDPR);

b) in connection with the fulfilment of the Controller’s other legitimate interests (Article 6(1)(f) of the GDPR), consisting in:

  1. conducting marketing activities;

  2. establishing, asserting and defending against any possible claims;

  3. carrying out statistical activities related to the improvement of the Controller’s work efficiency and the quality of services provided.

3.2.  Your personal data will be stored until you withdraw your consent or object to such storing. Upon withdrawal of the consent or raising an objection, personal data may be retained for the purpose of confirming that the Controller meets its obligations and related claims. In the case of other activities taken to comply with the legitimate interest of the controller, the data will be processed until a reasonable objection is raised by you.
3.3.  Please be informed that your personal data may be received by the Controller from the following sources:
a)  entities carrying out marketing activities;
b)  providers of IT services or solutions;
c)  members of the Controller’s capital group.
 
4. Communication
4.1. Your personal data will be also processed to implement the legitimate interest of the Controller (Article 6(1)(f) of the GDPR), consisting in:
a) exchanging correspondence by the Controller in connection with letters and messages sent by customers, representatives of the Controller’s contractors and other persons or entities in a paper and electronic form;
b) establishing, asserting and defending against any claims.
4.2. Please note that your personal data will be processed for the period of the correspondence exchange or until an objection is raised to data processing, deemed by the Controller as justified. In addition, the data will be processed until any possible claims have expired.
4.3. We may receive your personal data from the following sources:
a) companies carrying out marketing activities;
b) companies providing IT services or solutions;
c) courier and postal service companies.
 

5. Complaints

5.1. Your personal data will be processed in order to performance of the obligation resulting from the guarantee or warranty in connection with the sale of the products offered by Evapify. The legal basis for the processing of your personal data is your consent given when 
completing the complaint form (Article 6 of the GDPR) and Controller’s legitimate interest 
in fulfilling a statutory or contractual obligation under a guarantee or warranty (Article 
6(1)(f) of the GDPR).
5.2.      Your personal data may be received from the following sources:
a)   from you;
b)  from our business partner,
c)   members of the Controller’s capital group.
5.3. Your personal data will be stored until you object to it. Upon withdrawal of the consent or  raising an objection, personal data may be retained for the purpose of confirming that the 
Evapify meets its legal obligations and until the claim limitation periods have expired, whichever period is longer.
 
IV. Disclosing of personal data to thirty parties
 
1. Please be advised that your personal data may be disclosed to external entities, including, in
particular, suppliers responsible for the operation of IT systems and other entities that are part of
Evapify Group, if necessary and in accordance with the regulations laws.
2. At the same time Controller and data processors undertake to ensure appropriate data protection
measures, in line with market standards for the purpose protection and ensuring their
confidentiality, correctness and availability, as well as protection against their unauthorized use or
unauthorized access, in accordance with Evapify instructions and policies and applicable law.
 
V. Access to your data
Please be informed that access to your personal data may have only authorized employees of the Evapify.
Access is granted in accordance with the needs of employees and the type of tasks performed by them.
 
VI. Final provisions
1. We may update our Policy from time to time. Whenever we make a change, we will post the updated
Policy at our website www.evaipfy.com. We encourage you to check our Policy periodically. The
new terms may be displayed on-screen and you may be required to read and accept them to
continue your use of the services.
2. This Privacy policy was prepared at 30th March 2022.
 

PRODUCT CATALOGUE

Fill out the form and receive our product catalogue.