GENERAL PROVISIONS
- The administrator of your data is MODERN spółka z ograniczoną odpowiedzialnością with its registered office in Czaniec, at ul. Zagłębocze 65, 43-354 Czaniec, entered into the register of entrepreneurs of the National Court Register kept by the District Court in Bielsko-Biała, 8th Commercial Division, under KRS number: 0000985966, NIP: 9372745681, REGON: 522778126. Data protection is carried out in accordance with the requirements of generally applicable laws, and data is stored on secured servers.
- The Administrator takes particular care to protect the interests of individuals whose data is processed, and in particular ensures that the data collected is:
- processed lawfully, including in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR);
- collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes;
- substantially correct and adequate in relation to the purposes for which they are processed, and stored in a form which permits identification of data subjects for no longer than is necessary to achieve the purpose of processing.
TERMS OF SERVICE OPERATION
- In line with the common practice of most websites, the Administrator stores HTTP requests directed to the server. Resources viewed are identified by URL addresses. The detailed list of information stored in server log files includes:
- the public IP address of the computer from which the request originated (this may be directly the user’s computer);
- the name of the client station – identification performed by the HTTP protocol, if possible;
- the username provided during the authentication process;
- the time of the request;
- the first line of the HTTP request;
- the HTTP response code;
- the number of bytes sent by the server;
- the URL address of the previously visited page (referer link) – if the transition to the website was made via a hyperlink;
- information about the user’s browser;
- information about errors that occurred during the HTTP transaction.
PURPOSE AND BASIS FOR PERSONAL DATA PROCESSING
The Administrator collects and processes personal data provided by the User, such as name, phone number, email address. The Administrator also manages the personal data of individuals subscribed to the newsletter and those who consent to receive commercial and marketing information.
User data will be processed by the Administrator for the purpose of:
1) sending newsletters, transmitting messages containing commercial information with prior consent, and transmitting messages for marketing purposes with prior consent;
The Administrator will also process Users’ personal data for the purpose of sending newsletters and/or other marketing materials related to products and services offered by the Seller, including sending messages containing commercial information and marketing messages.
As part of this process, the Administrator processes personal data, including name, surname, email address, and phone number.
Data processing will be based on the User’s prior consent, pursuant to Art. 6(1)(a) GDPR – the data subject has given consent to the processing of their personal data for one or more specific purposes.
Providing personal data is voluntary, but without it, the Seller will not be able to send newsletters and/or other marketing materials. The User may withdraw their consent to data processing at any time, e.g., by submitting a relevant request via the contact form or clicking the appropriate link in the newsletter.
Providing personal data for marketing purposes is voluntary and at the discretion of the data subject. The Administrator’s ability to process data depends on obtaining such consent, which may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
2) ensuring the proper delivery of electronic services,
The Administrator will process Users’ personal data to ensure the proper delivery of electronic services.
Data processing will be based on Art. 6(1)(f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data. A legitimate interest includes the Administrator’s right to ensure the security of information, individuals, or property, as well as to improve the quality of offered products and services.
3) Website usage – data collected by the website
For Users visiting the Service for informational purposes only, data transmitted by the User’s browser is collected, which is technically necessary to display the website and ensure its stable and secure operation.
The collected data may also be used for developing and improving the website and tailoring it to Users’ needs, such as determining how many Users visited the site, how they accessed it, and what topics or products they were interested in.
Collected data may include: IP address, software and hardware parameters of the User’s device, pages viewed, mobile device identifier, and other data related to device usage and system usage.
The Administrator uses cookies to provide services, tailor the Service to user preferences, and for statistical and advertising purposes. This mechanism can be disabled in browser settings. Using the Service without changing browser settings means consent to storing cookies on the device.
DATA RETENTION PERIOD
- Personal data will be processed for the following periods:
- data processed based on consent: until the consent is withdrawn. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
- data processed based on a legal obligation imposed on the Seller, for periods specified by relevant laws – as appropriate to the given legal obligation;
- data processed for the purposes of the Administrator’s legitimate interests, for the duration necessary to achieve the purpose or until the User successfully objects to the processing of the data.
- Personal data may also be stored for other periods if regulated by relevant laws. After the specified retention period, data will be deleted or anonymized.
USER RIGHTS
- Each data subject has the right to access their data, correct it, delete it, restrict its processing, object to its processing, and data portability.
- Under the provisions of GDPR or other data protection regulations, and as outlined by these regulations, in cases where personal data is processed in a way that violates the data protection laws, Users have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office in Warsaw (00-193) Warsaw, ul. Stawki 2.
- Users can update their personal data by sending a relevant statement to the Administrator’s address.
RECIPIENTS OF PERSONAL DATA
- Users’ personal data may be shared with:
- employees and collaborators of the Administrator authorized to process personal data;
- authorities or entities authorized by law;
- entities with whom data is shared under agreements related to the Seller’s activities, to whom the Seller delegates tasks involving data processing (processors), e.g., IT service providers, system operators, payment system operators, law firms, accounting service providers, auditing firms;
- distributors, manufacturers, or guarantors of goods, in the event of a complaint filed by a Client;
- entities authorized by the consent of the data subject.
COOKIES
- The Service does not automatically collect any information except for information contained in cookies.
- Cookies are data files, specifically text files, stored in the User’s end device, designed for use on the Service’s websites. Cookies typically contain the name of the originating website, the time of storage on the end device, and a unique number. Cookies and similar technologies do not identify Users, and their identity is not established based on them. Cookies and similar technologies may become personal data only when combined with other unique identifiers or other information that allows the identification of a natural person.
- The entity placing cookies on the User’s device and accessing them is the operator.
- Cookies are used to:
- adjust the content of the Service’s websites to the User’s preferences and optimize the use of websites; in particular, these files allow recognition of the User’s device and properly display the website tailored to their individual needs;
- create statistics that help understand how Users use the Service’s websites, enabling improvements to their structure and content;
- maintain User sessions (after login), so that Users do not have to re-enter their login and password on every subpage;
- As part of the Service, two main types of cookies are used: „session” (session cookies) and „persistent” (persistent cookies). „Session” cookies are temporary files that are stored in the User’s end device until logging out, leaving the website, or disabling the software (web browser). „Persistent” cookies are stored in the User’s end device for the time specified in the cookie parameters or until they are deleted by the User. The following types of cookies are used as part of the Service:
- „necessary” cookies, enabling the use of services available within the Service, e.g., authentication cookies used for services requiring authentication within the Service;
- cookies used to ensure security, e.g., used to detect abuse in authentication processes within the Service;
- „performance” cookies, enabling the collection of information on how the Service’s websites are used;
- „functional” cookies, enabling the „remembering” of User-selected settings and personalization of the User’s interface, e.g., in terms of the selected language or region from which the User comes, font size, website appearance, etc.;
- „advertising” cookies, enabling the delivery of advertising content to Users that is more tailored to their interests.
- In many cases, the software used for browsing websites (web browser) allows cookies to be stored on the User’s end device by default. Users of the Service may change cookie settings at any time. These settings can be changed, in particular, to block the automatic handling of cookies in the web browser settings or to inform about their placement on the User’s device each time. Detailed information about the possibilities and methods of handling cookies is available in the software settings (web browser).
- The Service Operator informs that restrictions on the use of cookies may affect some functionalities available on the Service’s websites.
- Cookies placed on the User’s end device may also be used by advertisers and partners cooperating with the Service Operator.
FINAL PROVISIONS
- The Administrator processes your personal data in accordance with the provisions of the Regulation, including applying appropriate technical and organizational measures to ensure data security and appropriate confidentiality, including protection against unauthorized access.
- The Administrator reserves the right to make changes to this Privacy Policy, of which Users will be informed in advance.
- Any requests, inquiries, notifications, or questions regarding the processing of your personal data by the Administrator, including access to its content, methods of updating, or withdrawal of consent for processing, may be sent by email to the address: biuro@rolety-modern.pl or in writing to the address MODERN spółka z ograniczoną odpowiedzialnością, based in Czaniec, at ul. Zagłębocze 65, 43-354 Czaniec.