STOCKLOTS Dominik Malysa

This privacy policy and cookies policy define the rules for the processing and protection of personal data. Both documents are also intended to explain the reasons why we collect and process personal data as part of our business activities.

  1. What is personal data?
    This is all the information that allows you to distinguish one person from the others without much effort. They may relate directly to this person (such as their name, identification number, and sometimes even an e-mail address or online account), as well as those that do not directly describe them. For example, they concern their characteristics, health, views, place of residence, addictions, race or religion.
  1. What personal data are we talking about in our case?
    These are data that our Clients, Contractors, Associates and Employees provide us with in connection with the use of our services, cooperation with us or employment. These data are processed by us.
  1. What does data processing mean?
    Data processing is all activities that we can perform with personal data – related to both their active use, such as collecting, downloading, recording, combining, modifying or sharing, as well as passive activities, such as storing, limiting, deleting or destroying.
  1. Who is the Data Administrator (i.e. affects their processing and security)?
    The administrator of your Personal Data is STOCKLOTS Dominik Małysa ul. Elfów 105, 80-180 Gdańsk, NIP: 9570190522, REGON: 191642428.
    You can contact the Personal Data Administrator at the correspondence address: STOCKLOTS Dominik Małysa ul. Elfów 105, 80-180 Gdańsk and at the e-mail address:
  1. On what legal basis and for what purpose do we process your data?
    Any processing of your data must be based on a proper legal basis in accordance with applicable regulations. This can be the basis Your consent to data processing or other legal provisions allowing for it, in accordance with the Act of May 10, 2018 on the Protection of Personal Data (Journal of Laws of 2019, item 1781, as amended) and the Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119/1 ) – referred to as “GDPR”. Your data may be processed by us for the following purposes:
  • If you are our client or a person interested in using the services or products we provide, your personal data will be processed on the basis of art. 6 sec. 1 lit. b GDPR for the purpose of processing, which is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject before concluding the contract. Expressing the intention to conclude a contract, you know what personal data will be needed to sign it, and after signing it you have knowledge what data you have provided or will provide later.
  • If you use our services or purchase our products in the online store, we may process your data in order to issue an invoice and meet other obligations under the tax law, your data will be processed on the basis of art. 6 sec. 1 lit. c GDPR.
  • We may also process your data in connection with the need to ensure the security of persons and facilities or the security of networks and information. This is our legitimate interest, and we process the data on the basis of art. 6 sec. 1 lit. f GDPR. If video monitoring is used for this purpose, you will be informed about it in the form of appropriate information boards and pictograms.
  • If you are interested in working with us, your data contained in the application or CV are processed in paper or electronic form. The legal basis here is the fulfillment of the legal obligations incumbent on the Administrator under art. 22[1] § 1 and § 3 of the Labor Code of June 26, 1974 (Journal of Laws of 2019, item 1040, as amended) and takes place in accordance with Art. article 6 sec. 1 lit. c GDPR and in order to take action on request before concluding an employment contract – in accordance with art. 6 sec. 1 lit. b GDPR. Your personal data, other than those listed in art. 22[1] § 1 and § 3 of the Labor Code may be processed in accordance with Art. 6 sec. 1 lit. a GDPR based on your consent, which you can withdraw at any time. In this case, your application will not be considered by us and we will immediately delete all data provided by you. However, upon employment with us, further rules for the processing of your data and the mandatory scope of their transfer and further processing by us are determined by the provisions of the labor law.
  • If you use our online store and set up your user account in it – we process data on the basis of art. 6 sec. 1 lit. B RODO – processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject before concluding the contract. It is also our legitimate interest, and we process the data on the basis of art. 6 sec. 1 lit. f GDPR.• Jeśli korzystasz z naszego newslettera – twoje dane przetwarzamy na podstawie udzielonej zgody na podstawie art. 6 ust. 1 lit. a RODO.
  • If you use our website and its subpages where cookies are used – this is our legitimate interest, and we process data on the basis of art. 6 sec. 1 lit. f GDPR.
  • If you contact us via our website, we process your data on the basis of art. 6 sec. 1 lit. a GDPR – in the scope of the consent to contact.
  • If you use and/or interact with our social profiles: Fan Page on Facebook – Stocklots and our profile on LinkedIn – STOCKLOTS – The data is processed in accordance with art. 6 sec. 1 lit. b of the GDPR in order to provide services, i.e. a contract, a declaration of services by electronic means in accordance with the regulations applicable to the service and in accordance with art. 6 sec. 1 lit. f GDPR – the legitimate interest of the Administrator and users, consisting in the need to ensure contact between users and the Company, and the processing of this data does not violate the rights of users’ freedom.
  • We process your data in connection with the creation of registers resulting from separate legal provisions – pursuant to art. 6 sec. 1 lit. c GDPR (obligation resulting from legal provisions) and art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator).
  • In order to improve the quality of its services, the Administrator processes statistical information on the use of the website, including information about the session, IP number, the amount of time spent on individual pages and subpages, the use of individual service functionalities, information about the device and web browser. The administrator uses cookies or other similar technologies and statistical tools. These data are processed in accordance with art. 6 sec. 1 lit. f of the GDPR in the Administrator’s legitimate interest in facilitating the use of the Website, improving the quality and functionality of the services provided, and the processing of this data does not violate the rights and freedoms of users. Information about users is not used for any additional purposes, and due to the specificity of the website service, adjusting the way the website content is displayed, facilitating the use of the website and improving the quality of service provision on the website is not only a market standard, but also the expectations of users towards suppliers websites. In addition, the user may withdraw his consent at any time by changing the settings of the web browser in terms of the admissibility of the use of cookies or other similar technologies. These data are processed as part of the Administrator’s current activities, but not longer than 60 days from receiving the information. After this time, the administrator can continue to process general statistical data, which will be devoid of any information about individual users. However, the period of availability of statistical data in the tools may be longer than 60 days, but this remains outside the decision-making scope of the administrator. The administrator will no longer use them, but will have potential access to them until they are removed by the provider of the above-mentioned services. tools.
  • Posting on your website marketing information about your products or services. Displaying this content is made by the administrator in accordance with art. 6 sec. 1 lit. f of the GDPR, in accordance with the Administrator’s legitimate interest in publishing content related to the services provided and promotional content of actions in which the Administrator is involved. At the same time, this action does not violate the rights and freedoms of users, users expect to receive similar content, and sometimes even expect it, or it is their direct purpose of visiting the site.
  • Posting marketing information regarding the products or services of its contractors with whom it has concluded a cooperation agreement in the field of marketing. Displaying this content is made by the administrator in accordance with art. 6 sec. 1 lit. f of the GDPR, in accordance with the legitimate interest of the administrator consisting in marketing activities of products or services of its contractors. At the same time, this action does not infringe the rights and freedoms of users, in particular due to the sporadic nature of these actions, and users expect to receive similar content due to the subject matter of the website.
  1. Who do we transfer your data to?
    In accordance with applicable law, we may transfer your data to entities processing them on our behalf, e.g. hosting companies where we maintain this website or subcontractors of our services. We are also obliged to make them available at the request of entities authorized to do so under other legal provisions, e.g. ZUS, Tax Office and courts or law enforcement authorities. In some cases, however, the disclosure will only take place if they ask us to do so, indicating the law that allows them to do so.

As a rule, the administrator does not provide for the transfer of data to third countries outside the European Economic Area. However, due to the use of Google, Meta (Facebook) and LinkedIn services on our websites and social media: User data may be transferred outside the European Union, to third countries, and if such a situation occurs, they will be transferred only on the basis of standard contractual clauses issued by the European Commission in accordance with Art. 46 sec. 2 lit. c GDPR.

Detailed information is available in the content of the privacy policy of each of the providers of these services, available on their websites.
For example:

Google LLC:



Currently, the services offered by Google, Meta and LinkedIn are mainly provided by entities located in the European Union. However, you should always read the privacy policy of these providers in order to receive up-to-date information on the protection of personal data. In the European Union, in all member states, thanks to the GDPR, the text of which is available HERE, you have the same level of protection for your data.

  1. How long will we process your data?
    We attach great importance to limiting the scope of data collected by us, as well as the time of their processing, to the necessary minimum. To this end, we perform systematic reviews of paper and electronic documents, removing unnecessary ones that have expired. Remember that the time of processing your data, depending on the basis on which we obtained it, may be determined by separate legal provisions that are independent of us, which may impose on us the obligation to store your data, regardless of your will or willingness. Examples include labor law, social security law or accounting or bookkeeping regulations. If the data we hold would be used for a different purpose than for which they were obtained, you will always be informed about it and you will be able to object to it.
  2. What rights do you have in relation to your data?
    If we process your personal data, you always have the right to:
  • requesting access to data – within the limits of art. 15 GDPR,
  • their rectification – within the limits of art. 16 GDPR,
  • requests to delete – within the limits of art. 17 of the GDPR, or limitation of processing activities – within the limits of art. 18 GDPR,
  • object to data processing – within the limits of art. 21 GDPR,
  • data transfer, including obtaining a copy thereof – within the limits of art. 20 GDPR.

All these rights are discussed in detail in Art. 15 to 21 of the GDPR, to which we have provided a link above. You can also withdraw your consent to the processing of personal data, in which case we will immediately delete your personal data, as long as there is no legal obligation requiring us to further process them. For example, if you request the liquidation of your data in the HR documentation, we will immediately remove your data from the database. However, in accordance with the provisions on human resources, we will continue to have them in our financial and accounting documentation for the period regulated by the currently applicable law. If you decide that in any way – which we obviously do not want – we have violated your rights or have not ensured the security of your personal data, you have the right to lodge a complaint with the supervisory body, which is the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

  1. Automated decision making and information about profiling.
    Based on your data, we do not make any decisions that would be automated, i.e. without human participation. We also do not take any actions aimed at profiling your person. Please note that our website may contain links to other websites. They will open in a new browser window or in the same window. We are not responsible for the content provided by these websites, and you as a User are obliged to read the privacy policy or regulations of these websites.
  1. How do we protect your data?
    In order to ensure the security of your data, we use organizational and technical measures required by law. We have installed the necessary physical security measures at our headquarters to prevent unauthorized access to data. Our employees have the required authorizations, appropriate confidentiality agreements as well as entrusting the processed data and may process data in a limited way, i.e. only to the extent that it is necessary for the proper performance of their duties.

The security of your data transmitted electronically is ensured by the 128-bit SSL security protocol we use. Its graphic symbol is a green padlock displayed in the web browser next to the address of our website. Thanks to its encryption before transmission, you can be sure that you are entering our site that has not been modified in any way while traveling to you over the Internet.

Remember that you, as a User, should also exercise due diligence in securing your personal data transmitted over the Internet, in particular not to disclose your login details to third parties, use anti-virus protection and update your software.

  1. The Administrator reserves the right to change this privacy policy, in accordance with applicable law.
    The reason for the changes may be changes related to the development of Internet technology, changes in generally applicable law or the development of the Website through new administrative tools. At the top of the page is the date of publication and update of the Privacy Policy.
  2. The administrator on his pages uses:
    New user registration form – it requires entering your name, address, telephone number and e-mail address as well as company name, business profile and tax identification number in the appropriate place. These fields are mandatory. Then, the User must accept the terms of the regulations and this privacy policy and confirm the creation of an account in the store by confirmation in the received e-mail. The data obtained in this way is added to the list of store users. Setting up an account takes place on the terms set out in the sales regulations and is a service provided electronically. The rules for maintaining an account and its possible removal are included in the store’s regulations. The above consents are voluntary, but necessary to send the newsletter or use the online store, including e.g. to inform about services, new podcast episodes, blog entries, products, promotions and discounts offered by the Administrator. Consents may be withdrawn at any time, which will stop sending the newsletter in accordance with the rules contained in this privacy policy. When registering a new user, he can also subscribe to the Newsletter. This requires consent to the processing of the provided data and confirmation of reading this privacy policy. The data obtained in this way is added to the mailing list in order to send the newsletter. Subscription to the newsletter means that the User agrees to be sent marketing and commercial information by means of electronic communication, e.g. e-mail, within the meaning of the Act of 18 July 2002 on the provision of electronic services (Journal of Laws of 2019, item 123). By subscribing to the newsletter, the User also consents to the Administrator’s use of the User’s telecommunications terminal equipment (e.g. telephone, tablet, computer) for the purpose of direct marketing of the Administrator’s products and services and to present commercial information to the User in accordance with art. 172 section 1 of the Telecommunications Law (Journal of Laws of 2018, item 1954, as amended)
  3. Disclaimer and Copyright.
    Our website also contains links to other websites, videos and information that we have found valuable or interesting. However, we are not responsible for the content of these websites, their possible changes and we are not responsible for the privacy policy applied by their current or future owners. All content on our website is subject to the copyright of certain persons and/or the Administrator (e.g. photos, texts, videos, free materials, etc.). The Administrator does not agree to copying this content in whole or in part without his express prior consent.


  1. What are cookies and what are they for?
    Cookies are text files that are saved on your device and used by the server to recognize this device when reconnecting, they are downloaded each time you “enter” and “exit” our website. Cookies are not used to determine your identity, but only your device – e.g. so that after recognizing the browser you use, the displayed image is best suited to the technical capabilities of the equipment, e.g. its resolution or version.

Cookies are most often used for counters, probes, online stores, websites that require logging in, advertisements and to monitor visitor activity. Cookies also enable remembering your interests and adapting websites to them in terms of displayed content and matching advertisements. These files are used by virtually all websites operating on the Internet – search engines, information pages, blogs, online stores, official websites, etc. They are also used by our website.

  1. What cookies do?
    They generally operate on the following principles:
  • identify the data of the computer and browser used to browse websites – they allow, for example, to find out whether a given computer has already visited the website,
  • data obtained from “cookies” are not combined in any way with the personal data of users obtained, for example, during registration on websites,
  • they are not harmful to you or your computers or smartphones – they do not affect the way they work,
  • they do not cause configuration changes in end devices or in the software installed on these devices,
  • the default parameters of “cookies” allow the information contained in them to be read only by the server that created them,
  • based on your behavior on visited websites, they transmit information to the servers, thanks to which the displayed page is better suited to individual preferences.
  1. What are the types of cookies?
    There are the following types of cookies:
  • “Session cookies” – (session cookies) are temporary files stored in the browser’s memory until end of her session. These files are mandatory for some applications or their functionalities to work properly. After closing the browser, they should be automatically deleted from the device on which you viewed the page,
  • “Persistent cookies” – (persistent cookies) facilitate the use of frequently visited websites. These files are stored in the appropriate folder for a longer period of time, which you can adjust in the settings of your browser. Each time you visit the website, the data from these cookies is transferred to the server. This type of cookie is sometimes called “tracking cookies”,
  • “Third parties cookies” – are files usually coming from advertising servers, search servers, etc., cooperating with the owner of a given website. Thanks to them, the displayed advertisements are tailored to your interests and habits, which in return often allows you to use part of the website content free of charge. With their help, “clicks” on advertisements, user preferences, etc. are also counted,
  1. Do you have to agree to our use of cookies?
    Remember that you have the option of managing “cookies” yourself. This is enabled, for example, by the web browsers you use (usually the mechanism is turned on by default). In the most popular browsers you can:
  • accepting the use of “cookies”, which will allow you to take full advantage of the options offered by websites,
  • managing cookies at the level of individual websites selected by you,
  • specifying settings for various types of “cookies”, for example, accepting persistent files as session files, etc.,
  • blocking or deleting cookies.

Information on the possibility of enabling and disabling cookies in the most popular browsers can be found in their settings options. Leaving your browser settings unchanged means that you agree to our use of cookies. Blocking them or disabling support for some of their types may prevent you from using the full functionality of the website or interfere with its proper functioning.

  1. What do we use cookies for?
    The website uses both session cookies and permanent cookies. We use them for the following purposes:
  • creating statistics, which makes it possible to improve the content of the pages, their structure and content, maintain the website User’s session.

In order to display the website correctly, the following information is collected: name and version of the web browser, language settings, date and time of sending the request to the server, IP from which the request was sent, requested URL. These data are collected in order to enable the proper operation of the website. In order to create statistics, a web analytics tool is used – Google Analytics, which collects data and uses its own cookies in accordance with the Google Privacy Policy available at this address. Google collects on its servers data obtained from placing cookies on devices and uses this information to create reports and provide other services related to traffic and Internet use. Google may also transfer this information to third parties if it is required to do so by law or if these entities process such information on Google’s behalf. The data collected by our website are not disclosed or made available to third parties, except for the competent law enforcement authorities authorized to conduct criminal proceedings in connection with its initiation at our request.