Privacy and cookie policy

Polska Wytwórnia Papierów Wartościowych S.A. (PWPW S.A.) with its registered office in Warsaw, at the address: ul. Sanguszki 1, 00-222 Warszawa, entered in the National Court Register - Register of Business Entities kept by the District Court for the Capital City of Warsaw, 12th Commercial Division under KRS No. 0000062594, NIP (Tax Identification Number) 525-000-10-90, REGON (Statistical Number) 011836796, acting on the basis of the relevant legal act, namely the Regulation of the Minister of Finance of 5 April 2019 on the designation of the entity issuing identifiers (Issuer) pays particular attention to respecting the privacy of users visiting the http://www.idissuer.pl website.

The personal data is processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) and the applicable provisions of law, in particular the Act of 18 July 2002 on the provision of services by electronic means and the Act of 16 July 2004 Telecommunications Law.

The personal data in the ID Issuer system is processed for the purposes of the execution and implementation of the agreements concluded, in particular the operative execution of orders, the collection of receivables and other contractual rights and obligations following from the European legislation on the marking of all tobacco products with a unique identifier, enabling the registration of their movement throughout the Union and other applicable provisions of law in accordance with the conditions set out in the terms and conditions. As an Issuer of ID Issuer, PWPW respects the right to privacy and strives to ensure data security. To this end, among other things, the secure communication encryption protocol (SSL) and the personal data provided in the form are treated as confidential and are not visible to unauthorised persons.

We want each user to know exactly what data is being processed and how they can protect their privacy.

To this end, the user should read the Privacy Statement containing the essential information on the intended processing operations, explaining how the personal data of data subjects is processed in connection with the issuing and registration of identification codes for economic operators, facilities and machines, the registration and transmission of information on product movements and the registration and transmission of information on transactions in the tobacco product traceability system. The statement referred to above can be found at: EU Commission Statement

The data collected is transmitted in two manners: it comprises the information provided directly and voluntarily by the user in the registration and account login form and during the use of the website for the sole purpose of administering the website. The servers automatically save data such as the user's page request, the date and time of the request, the IP address and so-called cookies.

The IP address data is saved to the system logs of the Website and contains the date and time of the connection to the Website. This information is only used for statistical purposes regarding the number of page views and does not allow personal identification of the User.

Cookies are small text files sent by the website visited by the User to their device (computer, smartphone, etc.).

The user can change the cookie settings in their web browser. If these settings are not changed, the user accepts the use of cookies. In most cases, web browsers allow cookies to be stored on the user's computer or smartphone by default. The user can also manage cookies, including blocking them. All the user has to do is select the option to reject cookies in the browser. It is important to note that in this case, certain features of the website may not function properly.

The website uses session cookies (which expire upon closing the session) - used when the user logs into the website.

In addition, the System's website collects anonymous data on the pages visited, such as: number of unique visits/views, country, browser, time of visit, etc. The data is collected using a solution from an external provider, which currently is Google Analytics. The tool operates on the basis of so-called cookies and does not provide personally identifiable data. Please refer to the Google Analytics Privacy Policy.

PWPW makes every effort to protect the ID Issuer service from unauthorised access by third parties and controls its methods of collecting, processing and storing information. Firewalls, server security devices, encryption devices and physical security measures are used. Only those employees and entities that need to have access to the data are granted access to process it exclusively for the purposes specified in the Privacy Policy.

The website http://www.idissuer.pl contains links to other websites.

PWPW is not responsible for the privacy practices of these websites. This Privacy Policy applies only to the http://www.idissuer.pl website.

PWPW S.A. reserves the right to amend the above Privacy Policy by publishing a new Privacy Policy on this website.