privacy policy

The joint controllers of personal data processed as part of the use of websites are:

1. ATROM Sp. z o. o. Sp.k., ul. Osadnicza 18, 63-400 Ostrów Wlkp., KRS 0000498534,
   NIP 6222785051;
2. ATROM Sp. z o. o., ul. Osadnicza 18, 63-400 Ostrów Wielkopolski, KRS 0000488389,
   NIP 622 2784376,

referred to in this policy as "we", "us", "our" or "ATROM".

To contact us, please send a message to the e-mail address: atrom@atrom.eu or by traditional mail to our registered office address.

We have appointed a Data Protection Officer who can be contacted on any matter relating to the processing of personal data:
Jacek Rembikowski, iod@atrom.eu 

We are committed to doing the right thing when it comes to collecting, using and protecting your personal information. That is why we have developed this privacy and cookie policy (the “Policy”), which:

• identifies the types of personal information we collect;
• explains how and why we collect and use your personal data and how long we store it;
• explains when and why we will share personal data with other organisations; and
• explains the rights and choices you have regarding your personal information

The Policy applies if you use our services (referred to in this Policy as “our Services”). By using our Services we mean:

• using any service (atrom.com.pl, autosatnet.eu, autosatmini.eu, moje.autosatmini.eu, klient.atrom.eu, rozliczenie.autosatnet.eu, atromenergy.com.pl) 
• making purchases from us in the ATROM store (sklep.autosatmini.eu,) 
• using mobile applications (Autosat Mobile, AutoSatMini Mobile), 
• subscribing to electronic direct marketing communications, such as a newsletter.
• This Policy also applies when you contact us or we contact you about our Services using a contact form, e-mail, SMS, chat, social media 

Our Websites or Mobile Applications may contain links to other websites operated by other organizations that have their own privacy policies. Before providing any personal information on such websites, please read the terms and conditions and privacy policies posted there carefully, as we do not accept any responsibility for the websites of other organizations.

How long do we process personal data??

The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the service or order, until the consent is withdrawn or an effective objection is raised to data processing in cases where the legal basis for data processing is the legitimate interest of the Administrator.

The data processing period may be extended if processing is necessary to establish and pursue potential claims or defend against them, and after that time only if and to the extent required by law. After the processing period, the data is irreversibly deleted or anonymized.

Is it necessary to provide personal data and what may be the consequences of not providing it?

Using our services is completely voluntary. However, providing personal data is a contractual requirement and a necessary condition for ordering services, concluding a contract and starting to provide services. 

Failure to provide personal data in this respect will therefore make it impossible to order a service, conclude a contract, or commence the provision of services. 

We also have a legal obligation to process your personal data for accounting or tax reasons. Failure to provide them may result in, for example, the inability to issue an invoice or a named bill for you.

What rights do data subjects have in connection with data processing by ATROM Sp. z o. o. Sp.k., ATROM Sp. z o. o.?   

 Data subjects have the following rights:

1. The right to access personal data – on this basis, the Administrator provides the person making such a request with information on the processing of personal data, including in particular the purposes and legal basis of processing, the scope of the data held, the entities to which the personal data are disclosed and the planned date of their deletion, and also provides a copy of the processed data relating to the person making the request;
2. The right to rectification – on this basis, the Administrator removes any inconsistencies or errors concerning the processed personal data, and supplements or updates them if they are incomplete or have changed;
3. The right to delete data – on this basis, you can request the deletion of data whose processing is no longer necessary to achieve any of the purposes for which they were collected;
4. The right to restrict processing – on this basis, the Administrator ceases to perform operations on personal data, with the exception of operations to which the data subject has consented and their storage, in accordance with the adopted retention principles, or until the reasons for limiting data processing cease to exist (e.g. a decision of the supervisory authority is issued permitting further processing of the data);
5. The right to transfer data – on this basis, to the extent that the data is processed in connection with the concluded contract or the expressed consent, the Administrator issues the data provided by the person to whom it relates in a format that allows them to be read by a computer. It is also possible to request that this data be sent to another entity – provided, however, that there are technical possibilities in this respect on the part of both the Administrator and that other entity;
6. Right to object – the data subject may at any time object to the processing of personal data based on the legitimate interest of the Controller;
7. The right to withdraw consent – if data is processed on the basis of consent, the data subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of that consent;
8. The right to complain – if it is found that the processing of personal data violates the provisions of the GDPR or other provisions regarding the protection of personal data, the data subject may file a complaint with the President of the Personal Data Protection Office.

An application regarding the exercise of data subjects’ rights may be submitted:

• in writing to the following address: ATROM Sp. z oo Sp.k., ul. Osadnicza 18, 63-400 Ostrów Wlkp.
  • by e-mail to: atrom@atrom.eu 

The response will be provided to the e-mail address from which the application was sent and, in the case of applications sent by post, by letter to the address indicated by the applicant, unless the content of the letter indicates a desire to receive feedback to the e-mail address (in which case the e-mail address should be provided).

When and how do we share personal data with third parties? Do we transfer data to third countries?

We entrust personal data for processing to entities with which we cooperate on a permanent basis, in particular suppliers responsible for the operation of IT systems, entities such as banks and payment operators, entities providing accounting, legal, auditing and consulting services, couriers (in connection with the execution of the order), marketing agencies (in the scope of marketing services) and entities associated with the Administrator, including its business partners. 

These entities operate on the basis of entrustment agreements or other civil law agreements provided for a given activity and are obliged to protect personal data in the same way as us.

In addition, in the case of using traditional postal communication, we provide personal data to Poczta Polska and other companies operating under postal law. 

The Administrator reserves the right to disclose selected information concerning the User to competent authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with the provisions of applicable law.

The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area.

Economic Area (“EEA”). It may also be processed by companies operating outside the EEA who work for us or for one of our Service Providers. When we do this, we will ensure that your privacy rights are respected in accordance with this Policy. The most common way we use to achieve this is through a specific type of contract, either using standard contractual clauses or an approved set of privacy policies.

Further information on data transfers outside the EEA, including the text of Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard clauses, can be found at:

The security measures we use

We use computer security measures, such as firewalls and data encryption, and enforce physical access controls to our buildings and files to ensure that this data is secure. We only allow access to those employees who need it to perform their job duties.

We protect the security of your data during transmission by encrypting it using Secure Sockets Layer (SSL).

We enforce physical, electronic and organizational security measures in connection with the collection, storage and disclosure of personal information. Where appropriate, we may ask you to verify your identity before we share your personal information.

Cookies and similar technologies

We and our partners use cookies and similar technologies, including tags

("Cookies") to personalize and improve your experience when you use our Websites and Mobile Applications. This section provides more information about cookies, including how we use them and how you can exercise choices regarding our use of cookies.

How we use cookies

Cookies are small text files containing a unique identifier that are stored on your computer or mobile device so that the device can be recognized when you use a particular website or mobile application. They may be used only for the duration of your visit, or they may be used to measure your interaction with services and content over a period of time. Cookies help to provide important features and functionality of our Websites and Mobile Applications and to improve your experience of them.

If you agree to the use of cookies on our Services, they may be used for the following purposes:

Cookie management

Cookies in your web browser

You can use your browser settings to accept or reject new cookies and delete existing ones. You can also set your browser to notify you each time new cookies are placed on your computer or other device. You can find more detailed information on how to manage cookies using the help function available in your internet browser.

If you choose to disable some or all cookies, you may not be able to take full advantage of our Sites. For example, you may not be able to add products to your shopping cart, proceed to checkout, or use those of our products and services that require you to log in.

Mobile Applications

Cookies work differently on Mobile Apps because they are encoded into the app itself and will use a unique identifier created by your mobile device for advertising purposes. You can disable or reset this advertising identifier through your mobile device's privacy settings.

Third Parties Operating Through Our Websites and Mobile Applications

Below is a list of our key partners, along with information about the services they provide to us. This list is not exhaustive, but includes those partners with whom we have established relationships and whose cookie technologies are most commonly used in our Services.

Version from 03/07/2025