Privacy Policy

I. SOURCE OF PERSONAL DATA COLLECTION AND VOLUNTARY PROVISION OF PERSONAL DATA

In connection with the operation of the website, we inform you that your personal data, in the form of identifiable telecommunication data, particularly in the form of device identifiers – cookies, is collected exclusively from you.

In connection with your use of the website’s functionality, the Company may also process personal data you provide, such as your name, surname, residential address, mailing address, phone number, which occurs when you use the contact form provided on the website.

The Administrator does not obtain your personal data from other sources in connection with the operation of the website. We emphasize that providing these personal data is entirely voluntary but necessary to enable you to use the website and its functionalities. If you do not provide this information, achieving the above purpose and other purposes listed below will not be possible.

We note that for personal data processed by the Company in connection with its activities other than the operation of the website, detailed information can be found in a separate document – the information clause.

II. PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA

Your personal data processed in connection with the operation of the website and your use of the website is processed by the Company for the following purposes, with the legal basis for their processing being one or more of the following provisions:

• 6(1)(a) GDPR, i.e., based on your consent, to enable you to use the Company’s website, especially to allow you to become familiar with the details of the programs and campaigns conducted by the Company;
• 6(1)(a) GDPR, i.e., based on your consent, to enable you to contact the Company via the contact form, including obtaining detailed information about the programs and campaigns conducted by the Company, and with your consent, to pass your data to our business partners and allow you to participate in initiatives, programs, events, meetings, and get familiar with the product and service offers of our business partners, including phone contact, as well as possibly sending such information to the address you provided, phone or SMS contact;
• 6(1)(c) GDPR, i.e., to fulfill legal obligations imposed on the Administrator, including responding to your contact, especially in handling complaints, grievances, and requests, and answering any questions you may have;
• 6(1)(f) GDPR, i.e., to pursue the legitimate interest of the Administrator, including the Company’s statutory goals, the implementation of concluded agreements, statistical and training purposes, continuously improving the quality of conducted campaigns and provided services, including the development of supporting programs, including artificial intelligence-based systems, and for the protection of the Administrator’s or third parties’ rights, including pursuing or defending against claims, as well as for marketing the Administrator’s or our business partners’ services.

The Administrator does not plan to further process your personal data for purposes other than those specified above. If such a necessity arises, the Administrator will inform you of the additional purposes and clarify any doubts, and, as required by law, will ask for your consent to use your personal data for a new purpose if such consent is necessary for processing in that new purpose.

III. RECIPIENTS OF PERSONAL DATA

Your personal data is shared with:

• entities or authorities entitled under applicable law to obtain your data or process it, as well as entities to which data must be transferred to protect the Administrator’s or third parties’ rights, including for the purpose of pursuing claims or protecting against them;
• our business partners with whom we cooperate in connection with the operation of the website, including content providers, IT infrastructure and software providers, IT service providers related to the website’s operation;
• our business partners in connection with activities commissioned by the Company in our name, particularly to service providers, including IT and software service providers, providers of telecommunication systems and devices, legal, tax, and accounting service providers, postal or courier service providers, when it is necessary to send you correspondence other than email, and other contractors of the Administrator as part of agreements based on data processing agreements.

If, by filling out the contact form, you have consented to the processing of your data for the purposes related to the implementation of programs and campaigns run by the Company, including transferring your data to our business partners to enable participation in initiatives, programs, events, meetings, or interest in the products and services offered by our business partners, your data may be transferred to our business partners engaged in direct sales or telemarketing.

IV. THE RIGHT TO WITHDRAW CONSENT FOR THE PROCESSING OF PERSONAL DATA AND OTHER RIGHTS

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of the processing based on your consent before it was withdrawn. Your consent is given indefinitely and is valid until withdrawn. Withdrawal of consent can be done by contacting the Administrator by email or written statement sent to the Administrator’s contact details provided earlier.

Regardless of the above, you are entitled to:

• The right to access your data and obtain a copy of it – the data subject has the right to receive from the Administrator confirmation of whether their personal data is being processed, and if so, the right to information on which personal data is processed and for what purposes, as well as to obtain a copy of it.
• The right to rectify (correct) your personal data – the data subject has the right to request from the Administrator the rectification of inaccurate data and to complete incomplete data.
• The right to delete personal data – the data subject has the right to request the Administrator to delete their data if, for example, the data is no longer necessary for the performance of the contract for which it was collected, or the data subject has withdrawn consent for processing, and there are no other legal grounds for further processing of the data, or the data is being processed unlawfully.
• The right to restrict the processing of personal data – the data subject has the right to request from the Administrator the restriction of processing if, for example, the Administrator does not need certain data, there are no grounds for further processing, and the data subject requests the suspension of operations on the data or its non-deletion.
• The right to object to the processing – the data subject has the right to object at any time to the processing of their data on grounds relating to their particular situation, particularly where processing is based on the legitimate interest of the Administrator, including profiling.
• The right to data portability – the data subject has the right to receive their personal data, which they have provided to the Administrator, in a structured, commonly used, and machine-readable format, and to transmit it to another Administrator.

You can exercise your rights by contacting us through the methods previously provided.

If you have doubts about the legality of the processing, you have the right to file a complaint with the supervisory authority – the President of the Personal Data Protection Office.

V. DATA RETENTION PERIOD

The period for processing your personal data depends on the purpose for which the data is processed. The period during which your personal data will be stored is determined based on the purpose and legal basis for processing:

• the validity period of cookies – in accordance with the cookie policy;
• the period for which you have granted consent or until its withdrawal;
• the period for the implementation of a specific campaign and the statutory purposes of the Company;
• the period during which the Company cooperates with its business partners in direct sales and marketing, in accordance with concluded agreements and your consent;
• the period during which the Company develops and creates supporting computer programs, including those based on artificial intelligence;
• legal regulations that may require the Administrator to process data for a specific period or the necessity to fulfill legal obligations;
• the period necessary for the protection of the Administrator’s or third parties’ rights, including for pursuing claims or protection against them.

After the expiration of the latest of the above-mentioned periods, your personal data will be permanently deleted by the Administrator.

VI. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

The Administrator processes personal data primarily within Poland. Due to cooperation with business partners, the use of software, and IT infrastructure, the Company may transfer your data outside of Poland and the European Economic Area. In this regard, we take actions to ensure the security, integrity, and inviolability of transferred personal data by applying various protective mechanisms, especially in cooperation with contractors based on standard contractual clauses approved by the European Commission.

VII. AUTOMATED DECISION-MAKING (INCLUDING PROFILING)

The personal data processed in connection with the operation of the website and your use of it is not subject to profiling or any automated decisions based solely on the processing of personal data.

VIII. DOCUMENT CHANGES

To ensure that this document continues to meet the current legal requirements, we reserve the right to make changes at any time. If necessary, we will inform you of any changes made.