I. General provisions

The Privacy Policy sets out how the Users' personal data necessary for the provision of electronic services through the website [website address] (hereinafter: the Website) are collected, processed and stored.
The Website collects only personal data necessary for the provision and development of the services offered therein.
Personal data collected through the Service shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: RODO) and the Personal Data Protection Act of 10 May 2018.

II. Data controller

The controller of the personal data collected via the Website is [name of legal entity/business/individual], address: [registered office/residence address], KRS: [number], NIP: [number], REGON: [number], e-mail address: [e-mail address] (hereinafter: Administrator).

III. Purpose of personal data collection

Personal data are used for:
account registration and verification of the User's identity,
enable logging into the Website,
performance of the contract concerning services and e-services,
communication with the User (livechat, contact form, etc.)
sending a newsletter (after the User's consent to receive it),
running the commenting system,
providing social services,
promotion of the Administrator's offer,
marketing, remarketing, affiliation,
personalisation of the website for users,
analytical and statistical activities,
debt collection,
establishing and asserting claims or defending against them.
The provision of data is voluntary, but necessary to conclude a contract or to use other functionalities of the Website.

IV. Type of processed personal data

The Administrator may process the following personal data of the User: name and surname, date of birth, address of residence, e-mail address, telephone number, Tax Identification Number.

V. Period of personal data processing

Users' personal data will be processed for a period:
when the basis for data processing is the performance of a contract - until the statute of limitations for claims after its performance,
when the basis for data processing is consent - until its revocation, and after revocation of consent until the statute of limitations for claims.
In both cases, the statute of limitations is 6 years, and for claims for periodic benefits and claims relating to the conduct of business - 3 years (unless a specific provision provides otherwise).

VI. Disclosure of personal data

Users' personal data may be disclosed to: entities related to the Administrator, its subcontractors, entities cooperating with the Administrator e.g. e-payment service companies, courier/postal service companies, law firms.
Users' personal data will not/will not be transferred outside the European Economic Area (EEA).

VII. Rights of Users

The User of the Website has the right to: access to the content of their personal data, rectification, deletion, restriction of processing, portability, to object to processing, to withdraw consent at any time (which does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal).
Notification of the User's assertion of an entitlement under the aforementioned rights should be sent to [email address].
The Administrator shall comply or refuse to comply with the request immediately - within a maximum of one month of receipt.
The User has the right to lodge a complaint with the President of the Office for Personal Data Protection if he/she considers that the processing violates his/her rights and freedoms (RODO).

VIII. Cookies

The Website collects information by means of cookies - session cookies, permanent cookies and external entities.
The collection of cookies supports the correct provision of services on the Website and serves statistical purposes.
The User can determine the extent to which cookies can be accessed on his/her device in the browser settings.

IX. Automated decision-making and profiling

Users' data may not be processed in an automated manner in such a way that any decisions could be made against them as a result.
Users' data may be profiled in order to adapt the content and personalisation of the offer upon their consent.

X. Final provisions

The Administrator has the right to introduce changes to the Privacy Policy, but the Users' rights shall not be limited.
Information on the introduced changes will appear in the form of an announcement available on the Website.
In matters not regulated in this Privacy Policy, the provisions of RODO and the provisions of Polish law shall apply.