PRIVACY POLICY

As KORAL Joint Stock Company (hereinafter: KORAL), we attach great importance to respecting and honoring the rights of users, with particular emphasis on the right to protect their privacy.

The website koral.pl is intended primarily to provide information about our company and the products, services we offer, and to enable interested parties to contact us.

The information we collect through our websites may be used by us in connection with the conduct of our business, primarily in the presentation of our product and service offerings to enable us to present the best possible offerings and to support marketing and sales activities.

This policy explains KORAL’s policies for collecting and processing personal data.

This Privacy Policy covers all data obtained through our websites and provided to us directly or indirectly in connection with our business activities.

I. Principles of processing users’ personal data

KORAL is responsible for the lawful use of the collected personal data, which is done in a manner that guarantees its security and compliance with the provisions of RODO (Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC).

KORAL, as a data controller, processes the data in accordance with the following principles:

• “legality, integrity and transparency.”
• “target reduction.”
• “data minimization.”
• “regularity.”
• “storage restriction”,
• “integrity and confidentiality.”

KORAL processes personal data on the basis of the relevant legal provisions, i.e. Article 6 (1) of the RODO, that is:

• Your consent;
• when the processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract;
• when the processing is necessary to fulfill a legal obligation of the controller;
• when the processing is necessary to protect the vital interests of the data subject or another natural person;
• when the processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party (e.g., analysis of traffic on our website), except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

By agreeing to the use of cookies by all of our services, you declare that your browser is set to do so in accordance with your preferences.

When you browse our site, according to the configuration of your browser, one or more cookies may be stored on your computer (terminal device).

Before giving your consent, cookies necessary for the proper functioning of the site are stored on your computer.

Cookies may be placed by KORAL, as well as by third parties with whom KORAL cooperates. Please read more about cookies and how they are used.

II. Information on the data to be collected

In order to use some of the features offered by our site, registration will be required. During registration, we ask users for the login and password they will use on our site. He or she will also be asked to consent to the processing of his or her personal data by KORAL.

When you visit our website, we automatically collect data about your visit, in particular your IP address, domain name, browser type, operating system type. For more information, see the cookie policy.

The personal data collected through this website, of which we are the Personal Data Administrator, is obtained by us directly from the persons to whom it pertains by means of forms, e-mails or on the basis of connections established by the web browser with our server.

We process this data mainly using information systems in an automated manner, and in the case of obtaining data provided to us in written correspondence, also in a manual manner.

III. Personal data controller

The administrator of the personal data is: KORAL Spółka Akcyjna, Kukinia 43, 78-111 Ustronie Morskie, District Court in Koszalin, IX Economic Department of the National Court Register KRS No. 0000368059, NIP 583-00-19-847, REGON 190397369.

The Administrator has not appointed a Data Protection Officer nevertheless, regarding your personal data, it is possible to contact him at e-mail address: [_] or in writing to the Administrator’s registered address.

IV. Purpose and basis of personal data processing

Your Personal Data collected through our website will be processed primarily in connection with the conduct of marketing activities and in connection with the provision of communications.

Personal data obtained in connection with the use of the website may also be processed by KORAL for the following purposes:

• for the purpose of taking steps to enter into a contract such as submitting an offer, correspondence on agreeing contract terms, etc. – based on Art. 6(1)(b) RODO;
• for the purpose of executing the concluded contract – based on Article 6(1)(b) of the RODO;
• in order to fulfill the Administrator’s legal obligations, in particular with regard to settlements under tax law, the Accounting Act – based on Article 6(1)(c) of the RODO;
• for the purpose of directing personalized commercial information to you regarding related products and services or providing the “Newsletter” service if you have given your consent – based on Article 6(1)(a) of the RODO;
• to the extent necessary for the purposes arising from the legitimate interests pursued by the Administrator – based on Article 6(1)(f) of the RODO, in particular:
  • For the purpose of marketing its own products and services;
  • For fraud prevention purposes;
  • to ensure network and information security;
  • For the purpose of establishing, investigating or defending against claims;
  • for customer satisfaction surveys;
  • For archival purposes.

When you use our Web pages, we also acquire data provided by your browser or the device you use to connect to the Internet. This data primarily relates to how you use our websites and is used by us to monitor your interest in our products and offers, to improve the solutions used, or to tailor the content and offers of our products and services. This information may relate to the IP address of your connection to the Internet, the type of browser, the type of operating system, the time you spend on our websites, the offers you view and select.

V. Who will have access to personal data

Recipients of personal data will be entities entitled to obtain personal data, in particular, entities participating in the implementation of the contract such as, among others, courier companies and postal services, entities engaged in payment activities (banks, institutions providing payment and settlement services), as well as accounting offices, entities providing legal services to the administrator, public administration bodies to the extent specified by applicable law, financial institutions to the extent concerning the provision of services to the administrator, entities performing consulting or auditing services.

Your personal data may also be transferred to a third country or international organization based on appropriate legal safeguards, which are standard contractual clauses for the protection of personal data approved by the European Commission. This may be mainly in connection with:

• conducted activities undertaken on social networks and the use of plug-ins and other tools from these sites (including Facebook, Twitter, Google+);
• using analytical and anonymized user behavior tracking tools, in particular, such as Google Analytics, Gemius Traffic, Chartbeat;
• The use of advertising platforms to raise funds to maintain websites (in particular: Google adsense).

VI. How long the data will be kept

Personal data will be stored for the period of cooperation or use of the Account if the service has been activated, and after its termination, at least for the period specified by the law on public and legal settlements, but no less than until the final settlement or statute of limitations of possible claims arising from mutual cooperation, and in the event of a dispute until its final conclusion, by which we also mean the effective termination of enforcement proceedings. In the case of processing of personal data based on Article 6(1)(a) or (f) of the RODO, subject to the provisions of the RODO, respectively, until you withdraw your consent or object to such processing.

VII. What are the users’ rights in connection with the collected data

In accordance with the provisions of the RODO, subject to the relevant regulations, each user has the right:

• Request access to personal data concerning him;
• data rectification;
• requesting the completion of incomplete personal data, including by providing an additional statement;
• Deletion of data or restriction of processing;
• object to further processing of your personal data;
• transfer of your personal data.

The user has the right to withdraw the consent given at any time. The withdrawal of consent shall not affect the lawfulness of data processing carried out on the basis of the consent given before its withdrawal.

When processing data that is collected through cookies, KORAL is in most cases unable to identify the user. Thus, if the user would like to exercise his or her rights, he or she may be asked to provide additional information for identification purposes.

If you have doubts about the correctness of KORAL’s processing of your personal data, you have the right to lodge a complaint with a supervisory authority.

VIII. What if data is not provided

Provision of data is voluntary or may be a prerequisite for concluding a contract (e.g., creating an account on the site) or providing services. Without providing them, the contract cannot be concluded.

XI. Changes to the Privacy Policy

We reserve the right to change the presented privacy policy by publishing new content on our website. Once the change is made, the privacy policy will appear on the website with the new date.

Kukinia, on [_] 2025.