Privacy Policy

WEB SERVICE

WWW.PIASECKIGAGALA.PL

§1

GENERAL PROVISIONS

1. The administrator of personal data collected through the Website www.iaseckigagala.pl is Piasecki Gągała Sp. z o.o. entered in the Register of Entrepreneurs by the District Court for the City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register under the number KRS: 0000634215, place of activity and address for service: ul. Alzacka 3C, 03-972 Warsaw, NIP: 1132916831, REGON: 365285652, e-mail address: biuro@piaseckigagala.pl, hereinafter referred to as the “Administrator” and also the “Service Provider”.
2. Personal data collected by the Controller via the website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as
3. Any words or expressions written in the content of this Privacy Policy with a capital letter should be understood in accordance with their definition contained in the Terms and Conditions of the Website www.iaseckigagala.pl

§2

TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

1. THE PURPOSE OF THE PROCESSING AND THE LEGAL BASIS. The Administrator processes the personal data of the Service Recipients of the www.iaseckigagala.pl Service in the case of:
   1. placing an order on the Website, in order to perform the sales contract, on the basis of Article 6 (1) (b) of the GDPR (execution of the sales contract),
   2. use the Contact Form, in order to send a message to the Administrator, on the basis of Article 6 (1) (f) of the GDPR (legitimate interest of the entrepreneur).
   3. Sending email notifications for the purposes of marketing the Controller's own services — on the basis of Article 6 (1) (f) of the GDPR (legitimate interest of the entrepreneur).
2. THE TYPE OF PERSONAL DATA PROCESSED. The Service Recipient shall state, in the case of:
   1. Orders: name and surname, address, TIN, e-mail address, telephone number,
   2. Contact Form: name, e-mail address.
   3. Newsletters: name, e-mail address.
3. THE PERIOD OF ARCHIVING PERSONAL DATA. Personal data of the Service Recipients are stored by the Administrator:
   1. in the event that the basis for data processing is the performance of a contract, for as long as it is necessary for the performance of the contract and thereafter for a period corresponding to the limitation period for claims. Unless otherwise provided for in a specific provision, the limitation period shall be six years, and for claims for interim benefits and for claims relating to the conduct of business, three years.
   2. in the event that the basis for data processing is consent, as long as the consent is not revoked, and after the withdrawal of consent for a period of time corresponding to the limitation period of claims that the Administrator may raise and which may be raised against him. Unless otherwise provided for in a specific provision, the limitation period shall be six years, and for claims for interim benefits and claims relating to the conduct of business, three years.
4. When using the Website, additional information may be collected, in particular: IP address assigned to the Service Recipient's computer or external IP address of the Internet provider, domain name, browser type, access time, type of operating system.
5. Subject to a separate consent, pursuant to Article 6 (1) (a) of the GDPR, the data may also be processed for the purpose of sending commercial information by electronic means or making telephone calls for direct marketing — respectively in connection with Article 10 (2) of the Act of 18 July 2002 on the provision of electronic services or Article 172 (1) of the Act of 16 July 2004 — Telecommunications Law, including those directed as a result of profiling of the Service, if the Service Recipient has given the appropriate consent.
6. Navigation data may also be collected from the Service Recipients, including information about links and links that they choose to click on or other actions taken on the Website. The legal basis for this type of activity is the legitimate interest of the Controller (Article 6 (1) (f) of the GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.
7. Providing personal data by the Service Recipient is voluntary.
8. The controller takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are:
   1. processed in accordance with the law,
   2. collected for marked, lawful purposes and not subjected to further processing incompatible with those purposes,
   3. are substantively correct and adequate for the purposes for which they are processed and stored in a form that allows the identification of data subjects for no longer than is necessary to achieve the purpose of the processing.

§3

PROVISION OF PERSONAL DATA

1. The personal data of the Service Recipients are transferred to the service providers used by the Administrator when running the Website, and in particular to:
   1. payment system providers,
   2. Accountant's office,
   3. hosting providers,
   4. providers of business-enabling software,
   5. the provider of the software needed to run the website.
2. The service providers referred to in point 1 of this paragraph, to whom personal data are transferred, depending on contractual arrangements and circumstances, are either subject to the Controller's instructions regarding the purposes and methods of processing these data (processors) or independently determine the purposes and methods of their processing (controllers).
3. Personal data of Service Recipients are stored exclusively in the European Economic Area (EEA), subject to §5 point 5 and §6 of the Privacy Policy.

§4

THE RIGHT OF CONTROL, ACCESS TO THE CONTENT OF OWN DATA AND THEIR CORRECTION

1. The data subject has the right to access the content of their personal data and the right to rectification, erasure, restriction of processing, the right to data portability, the right to object, the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
2. Legal basis of the Service Recipient's request:
   1. access to data — Article 15 of the GDPR,
   2. rectification of data — Article 16 GDPR,
   3. erasure of data (the so-called right to be forgotten) — Article 17 of the GDPR,
   4. restriction of processing — Article 18 of the GDPR,
   5. transfer of data — Article 20 of the GDPR,
   6. opposition — Article 21 of the GDPR,
   7. withdrawal of consent — Article 7 (3) of the GDPR.
3. In order to exercise the rights referred to in point 2, you can send an appropriate e-mail to the following address: biuro@piaseckigagala.pl.
4. In the event of a request by the Service Recipient with the right resulting from the above rights, the Administrator fulfills the request or refuses to fulfill it immediately, but no later than within a month after its receipt. However, if — due to the complicated nature of the request or the number of requests — the Administrator will not be able to fulfill the request within a month, he will fulfill it within the next two months by informing the Service Recipient in advance within one month of receiving the request — about the intended extension of the deadline and its reasons.
5. In the event that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the President of the Office for Personal Data Protection.

§5

“COOKIES”

1. Admin page uses files”cookies”.
2. File Installation”cookies” is necessary for the proper provision of services on the Website. In the files”cookies” contains the information necessary for the proper functioning of the website, and it also gives the possibility of compiling general statistics of visits to the website.
3. Two types of files are used within the site”cookies”: “sessional” and “permanent”.
   1. ”Cookies“Session” files are temporary files that are stored on the end device of the Service Recipient until logging out (leaving the site).
   2. “Fixed” files”cookies” are stored in the end device of the Service Recipient for the time specified in the file parameters”cookies” or until they are removed by the Service Recipient.
4. The Administrator uses its own cookies in order to better understand how the Service Recipients interact with the content of the website. The files collect information about how the Service Recipient uses the website, the type of website from which the Service Recipient was redirected and the number of visits and the time of the Service Recipient's visit to the website. This information does not record specific personal data of the Service Recipient, but is used to compile statistics on the use of the website.
5. The administrator uses external cookies to collect general and anonymous static data through the analytical tools of Google Analytics (third-party cookie administrator: Google LLC. based in the USA).
6. Cookies may also be used by advertising networks, in particular the Google network, in order to display advertisements tailored to the way in which the Service Recipient uses the Website. For this purpose, they may retain information about the navigation path of the Service Recipient or the time spent on a given page.
7. The Service Recipient has the right to decide in the field of access to files”cookies” to your computer by selecting them in advance in your browser window. Detailed information about the capabilities and methods of handling files”cookies” are available in the settings of the software (web browser).

§6

ADDITIONAL SERVICES RELATED TO THE USER'S ACTIVITY ON THE WEBSITE

1. The Website uses so-called social plug-ins (“plugins”) of social networking sites. By displaying the website www.iaseckigagala.pl, containing such a plugin, the User's browser will establish a direct connection to the servers of Facebook and Google.
2. The content of the plugin is transmitted by the respective service provider directly to the User's browser and integrated into the website. Thanks to this integration, service providers receive information that the Service Recipient's browser has displayed the website www.iaseckigagala.pl, even if the Service Recipient does not have a profile with a given service provider or is not logged in. Such information (together with the IP address of the Service Recipient) is transmitted by the browser directly to the server of the respective service provider (some servers are located in the USA) and stored there.
3. If the Service Recipient logs into one of the above social networking sites, the Service Provider will be able to directly assign a visit to www.iaseckigagala.pl to the Service Recipient's profile in the given social network.
4. If the Service Recipient uses a given plug-in, e.g. by clicking on the “Like” button or the “Share” button, the corresponding information will also be sent directly to the server of the respective service provider and stored there.
5. The purpose and scope of data collection and their further processing and use by the service providers, as well as the possibility of contact and the rights of the Service Recipient in this regard and the possibility of making settings ensuring the protection of the privacy of the Service Recipient are described in the privacy policy of the service providers:
   1. https://www.facebook.com/policy.php
   2. https://policies.google.com/privacy?hl=pl&gl=ZZ.
6. If the Service Recipient does not want social networks to assign the data collected during the visit to the website www.iaseckigagala.pl directly to his profile on the given website, then before visiting the website www.iaseckigagala.pl he must log out of this service. The Service Recipient can also completely prevent the loading of plugins on the website by applying appropriate extensions for the browser, e.g. blocking scripts with “NoScript”.
7. The administrator uses remarketing tools on his website, i.e. Google Ads, this is associated with the use of cookies from Google LLC regarding the Google Ads service. As part of the mechanism for managing cookie settings, the Service Recipient has the opportunity to decide whether the Service Provider will be able to use Google Ads (third-party cookie administrator: Google LLC. based in the USA) in relation to him.

§7

FINAL PROVISIONS

1. The Controller applies technical and organizational measures ensuring the protection of processed personal data appropriate to the risks and categories of data protected, and in particular protects the data against their disclosure to unauthorized persons, taking by an unauthorized person, processing in violation of applicable regulations and alteration, loss, damage or destruction.
2. The Controller shall provide appropriate technical measures to prevent the acquisition and modification by unauthorized persons of personal data transmitted electronically.
3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law apply accordingly.