Who we are

Whenever the following terms are used in this privacy policy, they should be understood as follows:

Administrator: ANB Company

Personal data – information about an identified or identifiable natural person (data subject). An identifiable natural person is a person who can be directly or indirectly identified, in particular on the basis of an identifier such as name and surname, identification number, location data, internet identifier or one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person.

Data subject – any natural person whose personal data are processed by the Administrator in connection with the activities conducted by it, e.g. a person traveling to restricted access zones in the Administrator’s locations, a person with whom the Administrator is bound by a contractual contract or sending an inquiry to it in the form of an e-mail.

User – any person who has registered an Account on the website.

The website – is the property of ANB Company, which also acts as the data controller.

Registration form – a form filled out by the User, used to set up an Account;

Contact form – a form filled out by the User, used for contact purposes;

Account – a collection of resources and settings created for the Service Recipient within the Services. The User may use the Account to manage the Services.

Chat – “Conversation” between two or more people, consisting of alternately sending text messages.

Privacy Settings – Account functionality, allowing users using selected Services to appropriately manage these Services, including independently modifying their scope.

Profile – a confirmed set of data of the owner in online services.

Services – any activity containing an element of intangibility, which consists in influencing the customer or their items, which does not result in the transfer of ownership rights. This is a voluntary action that one party can offer to another.

Working days – days of the week from Monday to Friday, excluding public holidays;

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

§1
Technical requirements

To use the Website, it is necessary to meet the following minimum technical requirements:

have a computer or other multimedia device with access to the Internet;
have an Internet browser in the latest version:
Opera or
Mozilla Firefox or
Google Chrome or
Mozilla Firefox or
Google Chrome or
Safari, Safari Mobile or
Microsoft Edge or
another compatible one.
have an active e-mail account;
open HTML documents;
accept and use cookies.
In the absence of a registration / contact / notification / order / Chat form, the above definitions do not apply, paragraph 2, points 3-4 do not apply.

§2

This Privacy Policy defines the principles regarding the processing of personal data collected via the website (hereinafter referred to as the “Website”).
Personal data collected by ANB Company via the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.

The Administrator attaches great importance to protecting the privacy of users who visit our website.

§3
Type of data processed, purpose and legal basis for processing user data

ANB Company collects information about individuals conducting business or professional activities on their own behalf and individuals representing legal entities or organizational units that are not legal entities, to which the law grants legal capacity, hereinafter referred to collectively as Users.
Type of data processed:
in the case of registering an account on the Website, in order to create an individual profile (account) and manage this account. Legal basis: necessity for the performance of the contract for the provision of the Account service (Article 6, paragraph 1, letter b of the GDPR);

in the case of placing an order on the Website, in order to perform the sales contract. Legal basis: necessity for the performance of the sales contract (Article 6, paragraph 1, letter b of the GDPR);

when using the contact form service on the Website in order to perform the contract provided electronically. Legal basis: necessity for the performance of the contract for the provision of the contact form service (Article 6, paragraph 1, letter b of the GDPR);
When using the chat service, in order to perform a contract for a service provided electronically or a sales contract, if the user places an order using a free chat service. Legal basis: necessity to perform the contract for the provision of the chat service or necessity to perform the sales contract – if the user places an order using a free chat service (Article 6, paragraph 1, letter b of the GDPR).

In the case of registering an account on the Website, the User provides:
e-mail address;

name and surname;
telephone number.
For entrepreneurs, additional information is provided, such as:
company name;
tax identification number.
During the process of registering an account on the “Website”, the User independently creates a unique password for their account. It is possible to change the password at any time, in accordance with the rules described in paragraph §5
When placing an order on the Website, the User provides the following data:
e-mail address;
telephone number.
address data (postal code, town, street and house/apartment number):
name and surname;
For entrepreneurs, additional information is provided, such as:
Company name;
Taxpayer Identification Number.
When using the contact form service, the User provides the following data:
e-mail address;
phone number.
name and surname;
When using the Ask for an offer service, the User provides the following data:
e-mail address;
name and surname;
company name;
phone number.
When using the “Website”, additional information regarding the user’s device may be collected in order to ensure the correct operation of services, such as: computer IP address, information contained in cookies or other similar technologies, session data, web browser data, device data, data regarding activity on the Site, including on individual subpages;
Geolocation information, if the user has consented to the service provider’s access to geolocation. Geolocation information is used to provide more tailored offers of products and services. Navigation data from users may also be collected, including information about opened links and references, or other actions taken on the “Website” page. The legal basis is the legitimate interest (Article 6, paragraph 1, letter f of the GDPR), which consists in facilitating the use of services provided electronically and improving the functionality of these services.

In the event that the administrator needs to pursue claims or defend against claims, the administrator may process personal data provided by the user when using the “Website” functions, such as first name, last name, information about the use of services, may be processed if the claims result from the way the services are used by the user. Other data necessary to prove the existence of the claim, including the extent of the damage suffered, may also be processed. The legal basis is the legitimate interest of the administrator (Article 6, paragraph 1, letter f of the GDPR), which consists in determining, pursuing and enforcing claims against the user, as well as defending against claims in court proceedings and before other state authorities.
Providing personal data to ANB Company is voluntary, but is required in the context of concluding sales agreements or providing services via the “Website”. Failure to provide certain data in the registration forms will prevent registration and creation of a user account. Similarly, placing an order without registering a user account will prevent the placement and fulfillment of the order.

§4
Recipients of shared or entrusted data and the time of their storage

1. The Administrator discloses the personal data of users only to entities processing under concluded agreements entrusting the processing of personal data in order to provide services to the administrator, e.g. hosting and maintenance of the Website, IT services, accounting services, marketing and PR services, legal and advisory services.
2. Location. Service providers are based in Poland and other countries of the European Economic Area (EEA) or outside the mentioned area.
3. The personal data of Users may be processed for a period not longer than necessary to achieve the purposes for which the data is processed (Article 5, paragraph 1, letter e of the GDPR). In the case of claims, until the proceedings are pending and the limitation period for the administrator’s claims against the user expires, which is usually 3 years, but in special cases provided for by law may be longer.
4. Navigation data may be used to provide better service to users, analyze statistical data, adapt the website to user preferences and administer the website.
If the user chooses to pay via the payment system, their personal data will be transferred to the extent necessary to make the payment to PayU S.A. with its registered office in Poznań (ul. Grunwaldzka 182, 60-166 Poznań), registered in the register of entrepreneurs maintained by the District Court of Poznań – Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number 0000274399.
In the event of receiving a request, ANB Company will provide personal data to the relevant state authorities, in particular organizational units of the Prosecutor’s Office, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.

§5
Cookie mechanism, IP address

Cookies, also known as cookies, are small text files that are saved on the user’s device when using the “Internet Service” page. They are used to store information that can be used for various purposes, such as remembering user preferences, tracking user sessions, collecting statistical data or personalizing advertising content.
ANB Company uses several types of cookies:

Session cookies – these are files that are deleted when the user closes the browser. They are used to manage a specific user session and are often necessary for the proper operation of some website functions.

Persistent cookies – these are files that remain on the user’s device even after the browser is closed, until they expire or are deleted by the user. They are used to remember information between sessions, such as user preferences or login data.

Own cookies – these are files that are placed on the user’s device by the website that the user is using. They can be used to remember preferences on this site, track user sessions or provide personalized content.
External cookies – these are files that are placed on the user’s device by third-party providers, such as advertisers or analytics companies. They can be used to track user activity on different sites, collect statistical data or provide personalized advertising content.
ANB Company uses its own cookies to:

Authenticate the user on the website and ensure the user’s session on the website (after logging in), which allows the user to avoid re-entering their login and password on each subpage of the website;
Conduct analyses, research and audience audits, and above all to create anonymous statistics that help understand how users use the website, which allows for improving its structure and content. ANB Company uses external cookies for the following purposes:
Collecting data to measure the effectiveness of paid advertising on Facebook (cookie administrator: Facebook, Inc. based in the USA; more information on the website: https://pl- pl.facebook.com/business/gdpr) – Identification of the user visiting the website for remarketing purposes.
The cookie mechanism is safe for the computers of website users. First of all, it is not possible for viruses, unwanted software or malware to get onto users’ computers using this mechanism. However, users have the option to limit or block access to cookies on their computers using the settings of their browsers. If they use this option, it will still be possible to use the website, with the exception of functions that by their nature require cookies.
Below we present how you can adjust the settings for cookies in the most popular web browsers:
Mozilla Firefox browser;
Chrome and Chrome Mobile browser;
Microsoft EDGE browser;
Internet Explorer browser;
Safari and Safari Mobile browser;
Opera browser. ANB Company may collect Users’ IP addresses. An IP address, or Internet Protocol address, is a unique number that identifies a device connected to the Internet. This number enables data to be transferred between different devices on the network. IP addresses can be fixed (so-called static) or dynamic, which change each time a device connects to the network. The IP address is used by ANB Company for statistical purposes, e.g. to determine where its users come from, to block undesirable identification and block suspicious activities, such as attempted hacking or DDoS attacks, which consist of flooding the website with a huge amount of traffic, which can burden the server. The Internet Service contains links and references to other websites. Please note that ANB Company is not responsible for the privacy policies used on these websites. We recommend that you read the privacy policies of each of them individually.

§6 Rights of data subjects
[Rights of data subjects]

Every data subject has the right to:
access – to obtain from the controller confirmation of whether their personal data are being processed. If data about a person is being processed, they are entitled to access them and to obtain the following information: about the purposes of processing, categories of personal data, recipients or categories of recipients to whom the data has been or will be disclosed, the period of data storage or the criteria for determining them, the right to request rectification, deletion or restriction of the processing of personal data of the data subject and to object to such processing (Article 15 of the GDPR);
to receive a copy of the data – to obtain a copy of the data subject to processing, with the first copy being free of charge, and for subsequent copies the controller may impose a reasonable fee resulting from administrative costs (Article 15, paragraph 3 of the GDPR);
to rectify – request the rectification of personal data concerning them that are incorrect, or to complete incomplete data (Article 16 of the GDPR);
to delete data – request the deletion of their personal data if the controller no longer has a legal basis for their processing or the data are no longer necessary for the purposes of processing (Article 17 of the GDPR);
to restrict processing – request the restriction of the processing of personal data (Article 18 of the GDPR), when:
the data subject questions the accuracy of the personal data – for a period allowing the controller to check the accuracy of the data,
the processing is unlawful and the data subject objects to their deletion, requesting the restriction of their use,
the controller no longer needs the data, but they are needed by the data subject to establish, pursue or defend claims,
the data subject has objected to the processing – until it is determined whether the legitimate grounds on the part of the controller override the grounds for the objection of the data subject;
to transfer data – to receive in a structured, commonly used and machine-readable format the personal data concerning them that they have provided to the controller, and to request that this data be sent to another controller, if the data is processed on the basis of the consent of the data subject or a contract concluded with them and if the data is processed in an automated manner (Article 20 of the GDPR);
to object – to object to the processing of their personal data for the legitimate purposes of the controller, for reasons related to their specific situation, including profiling. In such a case, the controller assesses the existence of important legitimate grounds for processing that override the interests, rights and freedoms of the data subjects, or grounds for establishing, pursuing or defending claims. If, according to the assessment, the interests of the data subject are more important than the interests of the controller, the controller will be obliged to stop processing the data for these purposes (Article 21 of the GDPR);
to withdraw consent at any time and without giving a reason, but the processing of personal data carried out before the withdrawal of consent will still be lawful. Withdrawal of consent will result in the administrator ceasing to process personal data for the purpose for which the consent was given.

In order to exercise the above-mentioned rights, the data subject should contact the administrator using the contact details provided and inform him/her which right and to what extent he/she wishes to exercise.

In the event of the User exercising the right resulting from the above rights, the Administrator shall comply with the request or refuse to comply with it immediately, but no later than within one month of its receipt. However, if – due to the complex nature of the request or the number of requests – the Administrator is unable to comply with the request within one month, it shall comply with it within the next two months, informing the User in advance within one month of receiving the request – of the intended extension of the deadline and its reasons.

The User may submit complaints, inquiries and requests to the Administrator regarding the processing of his/her personal data and the implementation of his/her rights.

The User has the right to request the Administrator to provide copies of standard contractual clauses by sending the inquiry in the manner indicated in §6 of the Privacy Policy.
The User has the right to lodge a complaint with the President of the Personal Data Protection Office regarding a violation of his or her rights to personal data protection or other rights granted under the GDPR.

§7
Security management – password

The Administrator provides Users with a secure and encrypted connection when sending personal data and when logging in to the User Account on the Website. The Administrator uses an SSL certificate issued by one of the world’s leading companies in the field of security and encryption of data sent over the Internet.

In the event that a User who has an account on the Website has lost their access password in any way, the Website allows the generation of a new password. The Administrator does not send a password reminder. The password is stored in encrypted form, in a way that makes it impossible to read. In order to generate a new password, the e-mail address must be entered in the form available under the link “Forgot your password” provided at the login form to the account on the Website. The User will receive an e-mail to the e-mail address provided during registration or saved in the last change of the account profile, containing a redirection to a dedicated form provided on the Website of the Service, where the User will be able to set a new password.
The Administrator never sends any correspondence, including electronic correspondence, requesting login details, in particular the access password to the User’s account or providing sensitive data.

§8
Changes to the Privacy Policy

The privacy policy may be supplemented or updated in accordance with the current needs of the administrator in order to provide current and reliable information to users regarding their personal data and information about them. Users will be informed of any changes to the privacy policy on the Website.
Please send questions related to the Privacy Policy to: contact@simcards.online
This privacy policy is effective from 01.05.2025