Privacy Policy

§ 1 General provisions

1. The controller of personal data is Zakode Władysław Zakrzewski, based at Bobrzyńskiego 41, Kraków, 30-348, Poland, NIP (Tax ID): 9462668949. You can contact Zakode Władysław Zakrzewski in writing at the address given above, or by email at: [email protected]
2. Pursuant to Art. 37 GDPR, the company “Zakode Władysław Zakrzewski” has not appointed a Data Protection Officer.
3. This privacy policy is an integral part of the Terms of Service. By using the services we offer, you entrust us with your information. This document is intended only to help you understand what information and data is collected, for what purpose, and how it is used. This data is very important to us, so please read this document carefully, as it sets out the rules and methods for processing and protecting personal data. This document also sets out the rules for the use of “Cookies”.
4. We inform you that we comply with the personal data protection rules and all legal regulations provided for by the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
5. At the request of the person whose personal data is being processed, we provide comprehensive information on how we use their personal data. We always try to clearly inform about the data we collect, how we use it, what purposes it serves, who we transfer it to, what protection we provide for this data when it is transferred to other entities, and we provide information about the institutions to contact in case of doubt.

§ 2 Privacy principles

1. We respect your privacy. We want to guarantee you a comfortable experience using our services.
2. We value the trust you place in us by entrusting us with your personal data for the purpose of providing services. We always use personal data honestly and in a way that does not betray your trust, only to the extent necessary to provide the services.
3. As a User, you have the right to obtain complete and clear information about how we use your personal data and for what purposes it is needed. We always clearly inform you about the data we collect, how and to whom we make it available, and provide information about the entities to contact in case of doubt.
4. If you have any doubts about how we use your personal data, we will immediately take action to clarify and resolve such doubts. We answer all related questions comprehensively.
5. We will take all reasonable steps to protect your data from improper and uncontrolled use.
6. The legal basis for processing your personal data is:
   1. Art. 6(1)(a) the data subject has given consent to the processing of their personal data for one or more specific purposes
   2. Art. 6(1)(b) processing is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract
   3. Art. 6(1)(c) processing is necessary for compliance with a legal obligation to which the controller is subject
   4. Art. 6(1)(d) processing is necessary to protect the vital interests of the data subject or of another natural person
   5. Art. 6(1)(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
   6. Art. 6(1)(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
7. Your personal data related to the conclusion and performance of a contract will be processed for the duration of that contract, and for a period no longer than provided for by law, including the Civil Code and the Accounting Act, i.e. no longer than 10 years, counted from the end of the calendar year in which the last contract was performed.
8. Your personal data processed for the purpose of concluding and performing future contracts will be processed until you object.
9. You have the right to: access your personal data and receive a copy of the personal data being processed; rectify your incorrect data; request erasure of data (the right to be forgotten) in the circumstances provided for in Art. 17 GDPR; request restriction of data processing in the cases indicated in Art. 18 GDPR; object to data processing in the cases indicated in Art. 21 GDPR; and transfer the data you provided that is processed in an automated manner.
10. If you believe your personal data is being processed unlawfully, you may lodge a complaint with the supervisory authority (the Personal Data Protection Office, ul. Stawki 2, Warsaw, Poland). If you need additional information about personal data protection or want to exercise your rights, please contact us in writing at our correspondence address.
11. We comply with all applicable data protection laws and regulations and will cooperate with the authorities responsible for data protection and the relevant law enforcement authorities. Where data protection regulations do not provide guidance, we will act in accordance with generally accepted data protection principles, principles of social conduct, and established customs.
12. If you have any questions, please contact us via the website from which you were redirected to this Privacy Policy. Your enquiry will be forwarded promptly to the appropriate person.
13. To help us respond to or address the information provided, please include your full name.

§ 3 Scope and purpose of collecting personal data

1. We process only the personal data necessary to provide our services and for accounting purposes, and no other purposes.
2. We collect, process and store the following user data:
   1. first and last name,
   2. residential address,
   3. delivery address (if different from the residential address),
   4. tax identification number (NIP),
   5. email address,
   6. phone number (mobile, landline),
   7. information about the user's browser,
   8. other personal data voluntarily provided to us.
3. Providing personal data is voluntary but necessary for the operation of the website.
4. We may transfer personal data to servers located outside your country of residence, or to affiliated entities or third parties based in other countries, including countries within the EEA (European Economic Area), for the purpose of processing personal data by such entities on our behalf, in accordance with the provisions of this Privacy Policy and applicable law, customs, and data protection regulations.
5. Access to your data may be granted to entities that provide us with services necessary to operate the website, i.e.:
   1. hosting companies, providing hosting or related services to the Controller,
   2. companies through which the email service is provided,
   3. service and IT support companies performing maintenance or responsible for maintaining IT infrastructure,
   4. companies responsible for the Controller's bookkeeping.

§ 4 Cookies

1. We use cookies or similar technologies (hereinafter collectively referred to as “cookies”), meaning IT data, in particular text files, intended for use with the website and stored on the end devices of Users browsing the pages. Information collected using cookies allows us to tailor services and content to individual needs and user preferences, and is also used to develop general statistics on how users use the pages. Data collected using cookies is collected solely to perform specific functions for Users.
2. On our website, we use the following cookies:
   1. Internal cookies — files placed on and read from the User's device by the website's IT system.
   2. External cookies — files placed on and read from the User's device by the IT systems of external services.
   3. Session cookies — temporary files placed on and read from the User's device by the website for the duration of a single session. They are deleted from the User's device once the session ends.
   4. Persistent cookies — files placed on and read from the User's device by the website until manually deleted. They are not automatically deleted at the end of a session unless the device is configured to delete cookies at the end of each session.
3. The following types of cookies are used on our website, based on how necessary they are for providing our services:
   1. essential cookies, enabling the use of services available on the website, in particular authentication cookies used for services requiring authentication;
   2. cookies used to ensure security, in particular for detecting authentication abuse;
   3. performance cookies, enabling the collection of information about how the website is used;
   4. functional cookies, allowing settings chosen by the user to be “remembered” and enabling personalisation of the user interface.
4. Web browsing software (a web browser) usually allows cookies to be stored on the end device by default. A User browsing the website can independently change their cookie settings at any time, specifying the conditions under which cookies are stored and access their device. These settings can be changed through the web browser's settings — in particular, to block the automatic handling of cookies or to be notified whenever a cookie is placed on the User's device. Detailed information on how to manage cookies is available in the web browser's settings.
5. Using the website without changing your cookie settings means you consent to cookies being stored. You can always withdraw this consent by changing your browser settings. Information on how to configure cookie settings in popular web browsers can be found here:
   • Chrome
   • Opera
   • Firefox
   • Edge
   • Safari
   • Internet Explorer 11

§ 5 Social media plugins

1. Plugins, so-called “plug-ins” for social networking sites, may be present on our website:
   1. Facebook, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. To see Facebook's plugins, go to: developers.facebook.com/docs/plugins
   2. Twitter, operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. To see Twitter's plugins, go to: dev.twitter.com/web/tweet-button
2. The plugin only sends its provider information about which of our pages you accessed and when. If, while viewing our website, the user is logged into their account, e.g. on Facebook or Twitter, the provider is able to link their interests and preferences with other data obtained, e.g. by clicking the “Like” button or leaving a comment. This information will be sent by the browser directly to the provider.
3. To prevent a plugin from recording your visit against your account, you must log out of your account before browsing our website.

§ 6 Rights and obligations

1. We have the right, and in cases specified by law also the statutory obligation, to disclose selected or all information concerning personal data to public authorities or third parties who submit such a request under applicable Polish law.
2. The User has the right to:
   1. access to personal data — the User has the right to obtain access to their personal data, exercised on request submitted to the Controller.
   2. rectification of personal data — the User has the right to request that the Controller promptly rectify personal data that is inaccurate, and complete incomplete personal data, exercised on request submitted to the Controller.
   3. erasure of personal data — the User has the right to request that the Controller promptly erase personal data, exercised on request submitted to the Controller. The Controller reserves the right to withhold compliance with an erasure request in order to protect the Controller's legitimate interest (e.g. where the data was obtained in the course of correspondence).
   4. restriction of personal data processing — the User has the right to restrict the processing of personal data in the cases indicated in Art. 18 GDPR, including contesting the accuracy of personal data, exercised on request submitted to the Controller.
   5. data portability — the User has the right to receive, from the Controller, the personal data concerning them in a structured, commonly used, machine-readable format, exercised on request submitted to the Controller.
   6. objecting to the processing of personal data — the User has the right to object to the processing of their personal data in the cases specified in Art. 21 GDPR, exercised on request submitted to the Controller.
   7. lodging a complaint — the User has the right to lodge a complaint with the supervisory authority responsible for personal data protection.