PRIVACY POLICY OF THE WEBSITE WWW.CYKLORAMA.COM.PL
1. GENERAL INFORMATION
This document called the Privacy Policy defines the rights and rules related to the processing of personal data using specific functionalities of the cyclorama.com.pl website. Basic rights and obligations in the field of personal data protection are contained in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / WE (hereinafter: GDPR). Therefore, the GDPR applies to the extent not regulated in this Privacy Policy.
By using the cyclorama.com.pl website, you can provide us with your personal data, e.g. in the contact form, during the conclusion of the contract. In this case, we will process your personal data.
We present the methods we use to collect, use and share data that we may obtain from you when you use our website. Please read the entire content of the confidentiality policy before using the services of the site cyclorama.com.pl. We make every effort to secure access to the website by unauthorized persons in accordance with applicable law. It should be remembered that no information transfer via the Internet is completely secure or error-free. BTS GROUP Agata Bekier assures users of its website that it respects the right to privacy and personal data protection.
From this document you will learn:
a) why we collect personal data,
b) how we will use them,
c) what is the data retention period,
d) who else will have access to them,
e) how you can contact us,
f) what rights you have in relation to the personal data stored by us, including the right to rectify, delete and review your data.
The website uses the so-called cookies, which are information files stored locally on the computer of a visitor to the Website and using the services offered within it. The use of cookies allows BTS GROUP Agata Bekier to adjust the services provided and the content presented to the individual interests, requirements and needs of the website visitor. Cookies are also used for statistical purposes to illustrate the way the website is used by visitors. Visitors to the Website have the option of disabling (blocking) the option of accepting cookies in their browser by changing the browser settings, which, however, limits the scope of the Website's functionality and, as a result, may lead to its improper functioning.
2. ADMINISTRATOR
The administrator of your personal data is: BTS GROUP Agata Bekier in Warsaw, ul. Mazowiecka 11/49, 00-052 Warsaw, NIP: 522-285-64-77, REGON: 146064120, hereinafter the Administrator.
3. DATA PROTECTION OFFICER (DPO)
We have appointed a Data Protection Officer with whom you can contact regarding the protection of your personal data and the implementation of your rights.
Agata Bekier is the DPO.
We have enabled you to contact the Data Protection Officer in several ways:
a) as a rule, we recommend contacting us by e-mail at the following e-mail address: kontakt@cyklorama.com.pl. This form will enable us to specifically and transparently refer to the correspondence sent by you.
b) if, however, you find that e-mail contact is inconvenient for you, you can contact the Data Protection Officer by phone: +48 22 498 09 28.
4. WHY DO WE REQUEST YOUR PERSONAL DATA?
a) When you place an order, we need your contact details so that we can process the order. You can browse our website without providing us with any of the above-mentioned information. When you want to place an order on our Website, we will ask you to use the contact form;
b) We will ask for or collect information when you use our customer support services, including telephone calls, instant messaging and video calls;
c) We will ask for your consent to send marketing and promotional materials, cookies. You can withdraw your consent at any time by sending an e-mail to the address kontakt@cyklorama.com.pl. You do not need to give your consent to use the Website.
5. PURPOSES OF THE PROCESSING OF PERSONAL DATA AND THE LEGAL BASIS FOR PROCESSING
We have described the purposes for which we use your personal data below. Under applicable law, we must also provide the "legal basis for processing", ie inform you on what basis we can use the information relating to you; pertinent information on this is also provided below.
The processing of your personal data will take place on the basis of art. 6 sec. 1 lit. a), b), c), f) GDPR, inter alia, for the purpose of concluding a contract, performing a contract. The data may also be processed for the purpose of sending commercial information by electronic means or making telephone calls, provided that the Customer expresses a separate, relevant consent. If additional consent is given, on its basis (Article 6 (1) (a) of the GDPR, the data may also be processed for the purpose of sending marketing information regarding services or products of other entities - in electronic, telephone or paper form, depending on the expressed consent.
| Purpose of processing | Legal basis for processing |
|---|---|
| informing you about changes to services and communicating for other purposes, e.g. we will use your contact details to answer questions; | Art. 6 sec. 1 lit. f) GDPR. Legally legitimate interests - we use your personal data to send you up-to-date information about our services and answer your questions. |
| contacting you about a product or service evaluation or for post-contract or service feedback; | Art. 6 sec. 1 lit. f) GDPR. Legally legitimate interests - we use your personal data to contact you in order to obtain feedback on the product or service ordered by you. |
| assistance in assessing, developing and improving the products and services offered; | Art. 6 sec. 1 lit. f) GDPR. Legally legitimate interests - we use your personal data to provide the best quality services for you and other clients. |
| reviewing your previous purchases and activity history on our website in order to send special offers or adapt the website to your needs; | Art. 6 sec. 1 lit. f) GDPR. Legally legitimate interests - we use your personal data to send you special offers and customize the way you use the services offered on the web. |
| providing you with information about ordering a service or product / performance of a concluded contract; | Art. 6 sec. 1 lit. b) GDPR Necessity resulting from the contract - we use your personal data to perform the obligations under the contract concluded with you (e.g. delivery of the ordered product, handling complaints, etc.). |
| carrying out security checks to protect against fraudulent transactions and to prevent and detect crime; | Art. 6 sec. 1 lit. f) GDPR. Legally legitimate interests - we use your personal data to protect against illegal activities. In some cases, we may also be required to disclose your personal data (for example to law enforcement authorities) under applicable law. |
| response to all claims against us and archival (evidence) claims to secure information in the event of a legal need to prove facts, which is our legitimate interest | Art. 6 sec. 1 lit. f) GDPR in connection with joke. 7 (3) of the GDPR); Legitimate interests - we use your personal data to respond to any claims you may have against us. In some cases, we may also be required to disclose personal information under applicable law (for example, in connection with legal proceedings). |
| response to all claims against us and archival (evidence) claims to secure information in the event of a legal need to prove facts, which is our legitimate interest | Art. 6 sec. 1 lit. f) GDPR in connection with joke. 7 (3) of the GDPR); Legitimate interests - we use your personal data to respond to any claims you may have against us. In some cases, we may also be required to disclose personal information under applicable law (for example, in connection with legal proceedings). |
| response to all claims against us and archival (evidence) claims to secure information in the event of a legal need to prove facts, which is our legitimate interest | Art. 6 sec. 1 lit. f) GDPR in connection with joke. 7 (3) of the GDPR); Legitimate interests - we use your personal data to respond to any claims you may have against us. In some cases, we may also be required to disclose personal information under applicable law (for example, in connection with legal proceedings). |
| enabling, enriching and personalizing the experience of using our digital services provided through the website, mobile portals and applications; | Art. 6 sec. 1 lit. f) GDPR. Legally legitimate interests - we use your personal data to adapt the experience of using our digital services to your needs. |
| sending you information about products and services, including gifts, special offers and discounts; | Art. 6 sec. 1 lit. f) GDPR in connection with Recital 47 GDPR or Art. 6 sec. 1 lit. a) GDPR. Legally legitimate interests - we use your personal data to send you this information. In some cases, we will ask for your consent to process your personal data also before sending such information. |
6. RETENTION PERIOD, OR HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?
Under applicable law, we may store your personal data for no longer than is necessary to achieve the purposes for which we use it. The period for which we store your personal data will be determined based on a number of criteria, including the purposes for which we use the data, the amount, the potential risks of unauthorized use or disclosure of the data, and our obligations.
a) In terms of data processed on the basis of your consent - art. 6 sec. 1 lit. a GDPR - until its cancellation;
b) In terms of data processed by the Administrator pursuant to art. 6 sec. 1 lit. c GDPR - for the period necessary under the law, e.g. for accounting purposes and for tax reasons, we will process them as long as we are obliged to do so by law. Under the current regulations, it is a period of 5 years counted from the end of the calendar year in which the tax obligation arose;
c) After the completion of the primary purpose for which your data was collected (e.g. performance of the contract, delivery of goods), your data will be processed for archival purposes for a period consistent with the archival regulations in force in us;
d) If personal data are processed by us in order to pursue claims (including in court proceedings), we will be able to process them for this purpose for the period appropriate for the limitation of claims, i.e. up to a maximum of 10 years;
e) Personal data processed for the purpose of direct marketing of own products and services, i.e. on the basis of the so-called legitimate interest (which does not require consent) will be processed until an objection to such processing is raised;
f) Personal data processed for legitimate purposes of the administrator will be processed until such purposes exist, e.g. providing website services in the best quality for you and other customers.
7. RIGHTS RELATED TO THE PROTECTION OF PERSONAL DATA
You have the following rights:
a) The right to access your personal data and receive a copy of it;
b) The right to rectify (correct) your data;
c) the right to delete data - if, in your opinion, there are no grounds for us to process this data, you may request that we delete it;
d) The right to limit data processing - you may request that we limit the processing of your personal data only to their storage or performance of activities agreed with you, if in your opinion we have incorrect data on your subject or we process them unfoundedly; or you do not want us to remove them because they are needed to establish, assert or defend claims; or for the duration of the objection to data processing;
e) The right to object to data processing - "Marketing" objection. You have the right to object to the processing of your data for the purpose of direct marketing. If you exercise this right - we will stop processing your data for this purpose;
f) Right to object due to a special situation. You also have the right to object to the processing of your data on the basis of a legitimate interest for purposes other than direct marketing. You should then indicate to us a special situation that, in your opinion, justifies the cessation of the processing covered by the objection. We will cease to process your data for these purposes, unless we prove that the grounds for processing your data override your rights or that your data is necessary for us to establish, assert or defend claims;
g) The right to transfer data - you have the right to receive from us, in a structured, commonly used, machine-readable format, your personal data that we have on the basis of a contract or your consent. You can also order us to send this data directly to another entity;
h) The right to withdraw consent to the processing of personal data - at any time you may withdraw your consent to the processing of personal data that we process on the basis of your consent. Withdrawal of consent will not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal;
You also have the right to lodge a complaint with a supervisory authority if you are not satisfied with the way we handle your personal data. You can contact the supervisory authority at the following address: Office for Personal Data Protection, ul. Stawki 200-193 Warsaw tel. 22 531 03 00 fax. 22 531 03 01; kancelaria@uodo.gov.pl
In order to exercise your rights, please send a request to the following e-mail address: iod.rafalandrzejewski@grupapsb.com.pl.
Please remember that before exercising your rights, we will have to make sure that you are the person you say you are, i.e. identify you accordingly.
8. CONSEQUENCES OF FAILING TO PROVIDE PERSONAL DATA
Providing personal data is voluntary, however, providing marked personal data is necessary to conclude a contract for the provision of services / delivery of products, and the consequence of not providing them will be the inability to use them.
9. WHO DO WE SHARE YOUR PERSONAL DATA WITH?
We may disclose your personal data (entrust its processing) to third parties, including in the following circumstances:
a) We use the work of third parties (acting as subcontractors) who perform on our behalf and on our behalf certain activities involving the processing of personal data. For example, we may employ third party service providers to fulfill orders, deliver packages, send traditional mail, send SMS and email, maintain and update our databases containing customer information (including deleting duplicate or incorrect data), analyze data, to help us develop, provide and improve our services, provide marketing support services, process card payments, conduct research, provide customer services and handle claims. These third parties have access to the personal data needed for the performance of their tasks, but are not allowed to use such data for other purposes. We may use the information we receive from third parties to supplement, improve and enrich our customer information databases for purposes such as checking creditworthiness and preventing fraud;
b) We will be forced to disclose your personal data to external entities, including the police and other law enforcement agencies, authorized to receive them on the basis of applicable law;
c) Provide personal data to our insurers in the event of a claim or potential submission of a claim against us;
d) If we sell or acquire any business or assets, we may disclose the personal information we hold to the prospective seller or buyer interested in such business or assets. If our company or substantially all of its assets are acquired by a third party (or are reorganized within our corporate group), the personal information we hold about you will be part of the transferred assets;
e) Transfer your personal data to third parties if we are required to disclose such data or share it in order to comply with any legal requirements (also in connection with a court order) or to enforce or implement any agreements concluded with or concerning you ( including agreements between you and us); or to protect our rights, property or safety or the property or safety of our customers, employees or other third parties;
f) We may also enter into agreements with third parties that will allow you to access such third party websites or applications (such as video players) directly through our own sites or applications. Each third party has its own policy on the processing of personal data and the use of cookies when using their websites or applications, therefore we encourage you to read the privacy policy and cookie policy of that third party.
Please note that third party websites and applications are beyond our control. By clicking on links to such sites or by accessing such applications, you leave the zone controlled by us. We are not morally or legally responsible for any issues arising from the use of your data by third parties (including personal data).
10. TRANSFER OF DATA TO A THIRD COUNTRY / INTERNATIONAL ORGANIZATION
Your personal data will be processed only within the European Economic Area (EEA).
11. COOKIES
At any time, it is possible to delete cookies stored in the computer's memory using the options available in the web browser.
Available web browsers in the initial (default) settings accept the creation of cookies on your device. Each user may, however, object to the placement of cookies on his end device. As a rule, in order to change these settings, you should use the option to disable the cookies mechanism in a given web browser, both on computers, mobile phones, tablets and other devices. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or inform about their every posting in the user's device. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.
Removal or blocking the possibility of creating cookies on the user's end device may lead to the loss of the ability to use essential functionalities of websites. Detailed information on the possibilities and methods of handling cookies can be found here:
12. PROTECTION OF YOUR PERSONAL DATA
BTS GROUP Agata Bekier treats privacy as a priority, including the protection of your personal data, and makes every effort to ensure that this privacy is protected. We take every precaution to ensure that the personal data provided by Website users is protected against loss, destruction, disclosure, unauthorized access or improper use of data. By appropriate actions, users can contribute to increasing the security of their personal data on the Internet (e.g. by frequently changing the access password, using a combination of letters and numbers). Personal data provided during registration on the website and data used for logging in are secured during electronic transmission using cryptographic personal data protection measures (https protocol).
The transmission of information via the Internet is not completely secure; the associated risk is common across the web and does not specifically affect our services. We cannot guarantee the security of your data (including personal data) sent to our websites; You do so at your own risk.
You should protect yourself against unauthorized access to your password and computer device. Please remember to log out and close your browser after the session is over. This will help you protect against access of other people to your personal data when sharing your computer device or using a computer device in a public place, such as a public network, e.g. an internet cafe.
12. UPDATES
Any changes to the provisions of the Privacy Policy, caused in particular by the modernization of the Website, changes
in the legal system in the field of privacy protection, the enrichment of the catalog of services offered on the Website will be communicated to users by placing information on the Website and by sending relevant information to the e-mail address provided during registration.