Privacy policy

The personal data administrator responsible for their processing is:

3mk Protection sp. z o. o.
Krotoszyńska 35 building B-02 lok.4a
63-400 Ostrow Wielkopolski, Poland
sklep@3mk.pl
Phone: +48 728 365 365

Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information on how we handle your data.

1. Access data and hosting

 

Our websites can be visited without providing any personal data. For each website call-up, the server automatically saves only so-called server logs, e.g. the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting Internet service provider (so-called access logs) and documents the page call-up. This data is analysed exclusively for the purpose of ensuring the proper functioning of our website and improving our offer. This serves, in accordance with Article 6 paragraph 1 letter f of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: "GDPR"), to safeguard our legitimate interest in the optimal, correct presentation of our websites and offers. All access data is deleted within seven days of the end of your visit to the website.

Hosting

The services for hosting and displaying the website are partly provided on our behalf by our service providers as part of a data processing contract. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis for cooperation with them, please contact us. You will find our contact details in the section "Our contact details and your rights".

2. Collection and processing of data for the purposes of fulfilling the contract

 


2.1 Data processing for the purposes of contract execution

We process the personal data you voluntarily provide when placing an order in order to perform the contract (including inquiries regarding the handling of claims for warranty for defects or guarantees and the obligation to provide information on necessary updates). The legal basis in this respect is Article 6, paragraph 1, letter b of the GDPR. Mandatory fields are marked as such because they concern data that are necessary to perform the order and without their provision we are unable to perform it. What data is collected results directly from the forms into which the data is entered.

Further information on the processing of your data, in particular the transfer of data to our service providers for the purpose of order processing, payment and shipping, can be found in the following sections of this privacy policy. After the contract has been fulfilled, the processing of your data will be restricted and after the retention periods required under tax regulations and the Accounting Act have expired, the data will be deleted (Article 6 paragraph 1 letter c GDPR), unless you expressly consent (Article 6 paragraph 1 letter a GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy or in a separate notice.

Merchandise management system

We also use an external goods management system to process orders and execute the contract. Our service providers provide us with services in this regard under a data processing agreement. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You will find their contact details in the section "Our contact details and your rights".

2.2 Customer account

If, in accordance with Art. 6 sec. 1 lit. a GDPR, you give your consent to set up a customer account, we will process your personal data required for this purpose. They will also be used for future orders on our website. Your customer account can be deleted at any time. To do this, send a message to our contact address indicated in the section "Our contact details and your rights" or use the appropriate function in the customer account settings. After deletion of your customer account, the processing of your data will be restricted and after the retention periods specified in tax regulations and the Accounting Act have elapsed, the data will be deleted (Art. 6 sec. 1 lit. c GDPR), unless you expressly consent (Art. 6 sec. 1 lit. a GDPR) to the further use of this data or, in accordance with applicable law, we reserve the right to continue using the data for other purposes in legally permitted cases, about which we will inform you in this privacy policy or in a separate notice.

2.3 Data processing for contact purposes

As part of customer communication, we process personal data in order to process your enquiries (Article 6, paragraph 1, letter a GDPR). You provide us with this data voluntarily when contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such because they concern data that is necessary to process the enquiry. The data collected results directly from the forms into which the data is entered. After your enquiry has been fully processed, your data will be deleted, unless you expressly consent (Article 6, paragraph 1, letter a GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy or in a separate notice.

2.4. Data processing for purposes related to handling reports regarding illegal content or content inconsistent with the online store's regulations

In the event of receiving a user report regarding illegal content or content that is inconsistent with the online store's regulations, the administrator may process personal data contained in the report and other data provided by the reporting person in order to consider the report, issue a decision, consider a possible appeal and take any other actions necessary to clarify the matter related to the user's report. In a similar scope, the administrator may process not only the data of the reporting person, but also the person who published the content covered by the report.

The legal basis for data processing is Article 6 paragraph 1 letter c of the GDPR, i.e. compliance with the legal obligation incumbent on the controller (arising from Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on the single market for digital services and amending Directive 2000/31/EC - Digital Services Act).

3. Data processing for the purpose of delivery

 

In order to execute the contract (Article 6, paragraph 1, letter b of the GDPR), we transfer your data to the shipping company selected by you during the ordering process, which was commissioned to deliver the ordered products.

4. Data processing for the purpose of payment execution

 

In order to process payments in our online store, we cooperate with external service providers handling electronic online payments and transfer your data to the payment service company you selected during the ordering process. The above serves to perform the contract (Article 6, paragraph 1, letter b of the GDPR).

Data processing for the purpose of preventing abuse and optimising payments

In some cases, we may provide our service providers with additional information that they may use together with the information required to process payments. These service providers then act on our behalf as processors and provide us with services to prevent abuse and optimise payment processes (e.g. invoicing, analysis of rejected payments, accounting support). In accordance with Article 6 (1) (f) of the GDPR, this serves our legitimate interests in protection against abuse and fraud and in the effective management of payments.

Transferring data to the company handling payments Tpay (the entity providing online payment services is Krajowy Integrator Płatności SA) and PayPo Sp. z o. o.

If you use the option of payment using Tpay instruments, then, in order to make the payment. In addition to the purposes indicated in point 2 (primary purpose), the Online Store may process your personal data for other legally permitted purposes (secondary purpose), when the primary and secondary purpose are closely related. As part of such processing, the Online Store, acting on the basis of art. 6 sec. 1 letter f) of the Regulation, provides for the processing of personal data also for the following secondary purposes: supervision of the website for marketing and other purposes.

In connection with the processing of personal data for the purposes specified above, your personal data may be made available by the Online Store to other recipients or categories of recipients of personal data, which may include Tpay. In the event that your personal data is provided for the purpose of transferring your personal data to Tpay before concluding a sales agreement for goods (or services) purchased in the Online Store, the transfer of such data is a condition for concluding a sales agreement in connection with the business model of conducting business adopted by the Online Store.

If you use the option of payment using PayPo instruments, then, in order to make the payment. Details in the Regulations of the service "Pay in 30 days" available at www.paypo.pl .

5. Marketing channels

 

After obtaining separate consent, we may process your personal data for marketing purposes, including contacting you by e-mail or telephone to send marketing content, including commercial materials and information.

In principle, the legal basis for processing your personal data for these purposes is Article 6(1)(a) of the GDPR ("the data subject has consented to the processing of his or her personal data for one or more specific purposes"). You can withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

In some cases, the legal basis for processing your personal data for direct marketing purposes may be the legitimate interest of the controller (in accordance with Article 6(1)(f) of the GDPR – “processing is necessary for the purposes of the legitimate interests pursued by the controller”, and according to Recital 47 of the GDPR – “processing personal data for the purposes of direct marketing may be considered as an act carried out in a legitimate interest”). Such a legitimate interest may exist in cases where there is a relevant and appropriate relationship between the data subject and the controller (for example, where the data subject is a client of the controller).

Please remember that you always have the right to object at any time and free of charge to this processing, initial or further - including profiling, to the extent that it is related to direct marketing. After you have objected to the processing of personal data for direct marketing purposes - the controller may no longer process your data for such purposes.

5.1 Sending a newsletter

If you subscribe to our newsletter, we will use the data required for this purpose or provided to us separately by you to regularly send you our newsletter electronically based on your consent.

The legal basis for the processing of your personal data is Article 6(1)(a) of the GDPR (the data subject has consented to the processing of his or her personal data for one or more specific purposes).

We may process the following data of our newsletter subscribers: e-mail address and information on how they responded to the sent newsletter (including whether and when the e-mail containing the newsletter was read).

You can unsubscribe from the newsletter at any time. To do this, send a message to our contact address indicated in the section "Our contact details and your rights" or use the unsubscribe link provided in the newsletter. After unsubscribing from the newsletter recipient list, we will delete your e-mail address, unless you expressly consent (Article 6, paragraph 1, letter a of the GDPR) to the further use of this data for other purposes or, in accordance with applicable law, we reserve the right to continue using the data in legally permitted cases, about which we will inform you in this privacy policy or in a separate notice.
 
You can unsubscribe from the newsletter at any time by sending us a message with the appropriate information or by using the appropriate link in the newsletter. After unsubscribing, we will delete your e-mail address, unless you expressly consent to the further use of your data for other purposes or we reserve the right to continue using the data in legally permitted cases, about which - in such a case we will inform you in this privacy policy or in a separate notice.

The newsletter is sent as part of the entrustment of data processing on our behalf by a service provider to whom we provide your e-mail address for this purpose. This service provider is based in a country belonging to the European Union or the European Economic Area.

5.2 Telephone advertising

If you have given us your consent (Article 6, paragraph 1, letter a of the GDPR), we will use your data for our own advertising purposes, e.g. to inform you about our new products and promotions. You can withdraw your consent at any time by sending us a message to our contact address specified in the section "Our contact details and your rights" or by making an oral statement during a telephone conversation. After withdrawing your consent, we will delete your telephone number, unless you expressly consent to its further use for other purposes or reserve the right to continue using this data in legally permitted cases, about which we will inform you in this privacy policy or in a separate notice.

6. Cookies and similar technologies

 

General information

In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools, including so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and enable us to recognise your browser when you next visit the website (so-called persistent cookies).

Privacy protection for end devices
 
When using our online offer, we use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website. In this respect, the storage of information on the user's end device or access to information already stored on his end device does not require the user's consent.

For functions that are not strictly necessary, storing information on the user's end device or accessing information already stored on the user's end device requires the user's consent. Please note that in the absence of consent, some functions or elements of the website may not be fully available. Any consent granted by the user remains valid until the consent is withdrawn, the settings are configured or the relevant settings on the end device are reset.

Any further processing of data using cookies and other technologies

We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. the shopping cart function). These technologies process data such as your IP address, time of visit to the website, information about your device and browser, as well as information about the use of our website (e.g. the contents of the shopping cart). This serves, in accordance with Art. 6 para. 1 letter f GDPR, to pursue our legitimate interest in the optimal presentation of our offer.

In addition, we also use technological tools to fulfill legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the relevant legal basis for data processing, can be found in the following sections of this privacy policy. In the help menu of your internet browser, you will find explanations on how to change your cookie settings. These are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Where you have given us your consent to use certain technological tools (Article 6, paragraph 1, letter a of the GDPR), you may withdraw your consent at any time. To withdraw your consent, please contact us using the contact address provided in the section "Our contact details and your rights". If you reject the use of cookies, the functionality of our website may be limited.

Cookiebot – User Consent Management Platform

Our website uses the Cookiebot tool to provide you with information about the technologies used on our website and operating on the basis of cookies and to obtain, manage and document your consent to the processing of your personal data by these technologies. This is necessary in accordance with Article 6 paragraph 1 letter c of the GDPR in order to fulfil our legal obligation under Article 7 paragraph 1 of the GDPR, which states that in the case of processing based on consent, the controller must be able to demonstrate that the data subject has consented to the processing. The Cookiebot consent management tool is a service of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf and on our behalf. When you express your decision on our website regarding the use of cookies by individual technologies, the Cookiebot server stores your anonymous IP address, the date and time of your decision, information about your browser and the URL from which the decision was sent, as well as your anonymous identification key. In addition, a cookie (so-called CookieConsent) is stored on your end device, which remembers information about your decisions regarding the use of individual cookies and your anonymous identification key. Your data will be deleted after twelve months, unless you expressly consent to the further use of this data in accordance with Art. 6 para. 1 lit. a or we reserve the right to continue using the data for other purposes in accordance with applicable regulations, which are legally permitted and about which we inform you in this privacy policy.

7. Use of cookies and similar technological tools for web analytics and marketing purposes

 

If you have given your consent (Article 6, paragraph 1, letter a of the GDPR), we use the cookies and other similar technological tools of external service providers listed below on our website. Once the purpose of processing has been achieved and the use of the given technological tool has ended, the data collected as part of the use of these tools will be deleted. You may withdraw your consent at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the websites of the individual service providers. If you have any questions about our service providers and the basis for our cooperation with them, please contact us. You will find their contact details in the section "Our contact details and your rights".

7.1 Use of Google services

We use the technological tools of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") indicated below. The information automatically collected by Google technologies regarding your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Our cooperation is based on the standard data protection clauses adopted by the European Commission. If your IP address is processed as part of the use of Google technological tools, your address is shortened by the activated IP anonymization before being saved on Google servers. Only in exceptional cases will the full IP address be transferred to a Google server and shortened there. Unless otherwise specified for the individual Google technologies described in this privacy policy, the data processing takes place on the basis of a joint data controller agreement with Google in accordance with Art. 26 of the GDPR. Further information on data processing by Google can be found in the privacy policy on the Google website.

Google Analytics

For the purpose of analysing the use of our website, we use Google Analytics, a web analytics tool from Google that automatically processes your data for this purpose (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and creates pseudonymous user profiles based on them. Cookies may be used for this purpose. Your IP address is generally not combined with other data collected by Google. Data processing within the Google Analytics service is based on a data processing agreement concluded with Google.

To create and perform A/B tests of our website, we also use the Google Optimise tool, which is an extension of Google Analytics.

For the purposes of analysing the use of our website and advertising, we also use the so-called DoubleClick Cookie within the Google Analytics service, which allows your browser to be recognised when you use other websites. Google will use this information to compile a report on your activities on our website and to provide other services related to the use of the website.

Google Ads

With the help of Google Ads, we promote our website in search results and on third-party websites. For this purpose, when you visit our website, a Google re-marketing cookie is automatically saved on your device, which enables the display of interest-based advertising based on the websites you visit, processing your data (IP address, time of visit to the website, information about your device and browser, as well as information about your use of our website) using a pseudonymous identifier (ID). Further data processing only takes place if you have activated the option of personalising ads in your Google account settings. In this case - if you are logged into Google while visiting our website, Google will use your data together with the data collected within Google Analytics to create and define so-called target group lists for cross-device re-marketing purposes.

For web analytics purposes, we use Google Ads Conversion Tracking to measure and analyse your behaviour when you visit our website via a Google Ads ad. Cookies may be used for this purpose and data such as IP address, time of visit, device and browser information, as well as information about the use of our website, e.g. website visit or newsletter registration, may be processed. Pseudonymised user profiles are then created based on this data.

Google reCAPTCHA

In order to protect against spam and to prevent abuse and misuse of our web forms (e.g. by using malicious bots), our website has integrated the Google reCAPTCHA tool, which processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website) and, on the basis of this, uses JavaScript and cookies to analyse your use of our website. Personal data entered by you in individual form fields on our pages will not be read or saved.

Google Fonts

In order to ensure a consistent presentation of the content on our websites, a script called "Google Fonts" is integrated into our website, which processes your data (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website). We have no influence on the above data processing by Google.

YouTube Video Plugin

In order to integrate third-party content using the YouTube video plug-in, the following data is processed by Google when playing the video: IP address, time of visit, information about the user's device and browser.

7.2 Using Microsoft technologies for web analytics and marketing purposes

We use the technology tools of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft") indicated below. Data processing is carried out in accordance with Article 26 of the GDPR on the basis of joint agreements between the joint controllers. Information collected automatically by Microsoft technology tools regarding the use of our website is usually transferred to a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and stored there. Our cooperation is based on standard data protection clauses adopted by the European Commission. Further information on data processing by Microsoft can be found in the Microsoft privacy policy.

Microsoft Advertising

For marketing purposes, we promote our website in Bing, Yahoo and MSN search results and on third-party websites. For this purpose, when you visit our website, a cookie (so-called Microsoft Advertising Re-marketing Cookie) is automatically saved on your device, which, with the help of a pseudonymous identifier (ID) and processed data (your IP address, time of visit, information about your device and browser, as well as information about your use of our website) and based on the websites you visit, enables the display of advertisements based on your interests.

7.3 Use of Facebook services Facebook Pixel

We use the Facebook Pixel tool provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The scope of the Facebook Pixel functionalities we use is described below. The Facebook Pixel automatically collects and stores data (your IP address, time of visit, information about your device and browser, as well as information about your use of our website, e.g. visit to the website or registration for the newsletter). Pseudonymous user profiles are then created based on this data.

For this purpose, when you visit our website, the Facebook Pixel stores a cookie on your device that enables automatic recognition of your browser using a pseudonymised cookie ID when you visit other websites. Facebook will link this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of the website, in particular for the purpose of personalising advertising. The information automatically collected by Facebook technologies regarding your use of our website is usually transferred to a server of Facebook, Inc. 1601 Willow Road, Menlo Park, California 94025, USA and stored there. To the extent that data transfer to the USA is our responsibility, our cooperation is based on the standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in the Facebook privacy policy.

Facebook Ads (ad management)

Facebook Ads allows us to advertise our website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular for the decision to display a given advertisement to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of a joint data controller agreement in accordance with Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. This does not include the subsequent processing of data by Facebook Ireland.

Based on statistics generated using the Facebook Pixel tool regarding the activity of users visiting our websites, we use the Facebook Custom Audience function to broadcast advertisements to the appropriate group of recipients, while defining the profile/characteristics of the given target group.

Based on the pseudonymous Cookie ID stored by Facebook Pixel and the information collected about user activities on our website, we create personalised advertising via the Facebook Pixel Re-marketing function.

For the purposes of web analytics and optimisation of our offer – using the Facebook Pixel Conversions function, we analyse the activity of users who visit our website via advertisements displayed as part of the Facebook Ads service. Data processing by Facebook takes place on the basis of a concluded data processing agreement.

7.4. Using GetResponse Support

We use the GetResponse platform provided by GetResponse, a joint-stock company with its registered office in Gdańsk, at al. Grunwaldzka 413 (80-309 Gdańsk, KRS 0000942075, NIP 9581468984). GetResponse supports, among other things, the automation of marketing activities and their adjustment to the needs and preferences of users. For this purpose, cookies are used to analyse user activity. More information is available in the GetResponse privacy policy: https://www.getresponse.pl/informacje-prawne/polityka-prywatnosci .

8. Opinions in the online store

 

The Online Store Customer has the option of voluntarily and free of charge issuing an opinion regarding purchases made in the Online Store. The subject of the opinion may also be an assessment, photo or review of a product purchased in the Online Store.

After making purchases in the Online Store, the Seller transfers the data necessary to create an email invitation to the company handling the survey process. Sending surveys and the process of collecting opinions in forms is handled entirely by TrustMate SA with its registered office at Bartoszowicka 3, 51-641 Wrocław.

TrustMate SA sends the Customer an email with a request to leave a review and a link to an online form enabling it to be issued – the online form enables answering the Seller's questions regarding purchases, assessing them, adding your own description regarding the review and a photo of the purchased product. In the event of failure to leave a review after receiving the first invitation to leave a review, TrustMate may re-send the invitation.

An opinion may only be submitted by a Customer who has made a purchase in the Seller's Online Store.

Opinions submitted by the Customer are published by the Seller in the Online Store and the TrustMate.io business card.

The issuance of an opinion may not be used by the Customer for illegal activities, in particular for activities constituting an act of unfair competition towards the Seller, or activities violating personal rights, intellectual property rights or other rights of the Seller or third parties.

An opinion can only be issued for products actually purchased in the Seller's Online Store. It is prohibited to conclude fictitious/sham sales agreements for the purpose of issuing an opinion. The author of the opinion cannot be the Seller himself or his employees, regardless of the basis of employment.

An opinion may be removed by its author at any time.

9. Social media

 

Our activity on social media: Facebook, Twitter, Instagram, Youtube, LinkedIn

If you have given the social networking site consent in this regard (Article 6, paragraph 1, letter a GDPR), your data will be automatically collected and stored when you visit our account/profile on the aforementioned social networking sites for the purposes of web analytics and marketing. Pseudonymous user profiles are created based on this data. They can be used, for example, to place so-called personalized advertisements within and outside social networking sites that are likely to match your interests. Cookies are usually used for this purpose.

Detailed information on the processing and use of your data by individual social media portals, as well as information on your rights and the possibility of configuring privacy settings, as well as contact details for submitting inquiries are described in the privacy policies of the individual social media portals linked below. If you need help in this regard, you can also contact us.

Facebook (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The automatically processed information about your activities and use of our fan page on Facebook (by Meta) is usually transferred to a server of Meta Platforms Ireland, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and saved there. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing within the framework of visiting the fan page on Facebook (by Meta) takes place in accordance with Art. 26 GDPR on the basis of the jointly concluded agreements between the joint controllers, which are available here. Further information on the processing of your personal data within the framework of visiting the fan page on Facebook (information on the page statistics function) is available here.

Twitter is a social network provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("Twitter"). The automatically processed information about your activities and use of our Twitter profile is usually transferred to a server of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 in the USA and saved there. Our cooperation is based on the standard data protection clauses adopted by the European Commission.

Instagram (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The automatically processed information about your activities and use of our fan page account on Instagram is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and saved there. Our cooperation is based on the standard data protection clauses adopted by the European Commission. The data processed within the framework of the visit to the fan page account on Instagram (by Meta) is carried out in accordance with Art. 26 GDPR on the basis of the joint agreements concluded by the joint controllers. Further information on the processing of your personal data within the framework of the visit to the fan page on Facebook (information on the page statistics function) can be found here.

YouTube is a social network provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The automatically processed information about your activities and use of our YouTube profile is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043 in the USA and saved there. Our cooperation is based on the standard data protection clauses adopted by the European Commission.

LinkedIn is a social network offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The automatically processed information about your activities and use of our LinkedIn profile is usually transferred to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 in the USA and saved there. Our cooperation is based on the standard data protection clauses adopted by the European Commission.

10. Events

 

10.1. Participation in events

We may process your personal data for the purpose of conducting events, including in the form of meetings, webinars, lectures, trainings, conferences, talks, workshops and other projects of an entertainment, educational, sales or business nature (hereinafter collectively referred to as "Events").

Personal data of participants in Events organised or co-organised by the administrator may be processed in particular for the purposes of registration, recruitment and selection of participants, conducting Events, verifying attendance at Events, documenting the course of Events, providing surveys and assessments regarding Events, sending information and materials related to Events and providing answers to questions and concerns regarding Events.

In connection with your participation in the Events, we may process data such as: name and surname, company name, e-mail address, telephone number, or image.

The legal basis for the processing of your personal data in connection with your participation in the Events is Article 6(1)(a) of the GDPR (i.e. "the data subject has consented to the processing of his or her personal data for one or more specific purposes"). You may withdraw your consent at any time (without affecting the lawfulness of the processing based on consent before its withdrawal).

We may also contact you after the Events have ended. The legal basis for our processing of your personal data in such a case is Article 6 paragraph 1 letter f) of the GDPR (i.e. "processing is necessary for the purposes of the legitimate interests pursued by the controller"). This legitimate interest is to inform you about our activities and offers, in particular by inviting you to participate in subsequent Events and informing you about the services and products we offer related to the controller or the Event.

We store your personal data collected in connection with participation in the Events for the duration of the Events (unless you have consented to being informed about subsequent Events or other actions of the administrator), and then (in justified cases) for the purposes of considering complaints related to participation in the Events for the limitation period for claims specified in the relevant provisions.

10.2. Image

If, in connection with your participation in our Events, we have recorded your image (e.g. in photos or videos) - we may process it for the purpose of including it in information and promotional materials distributed in traditional or electronic form, including on the Internet - on websites and social media (such as Instagram, Facebook, YouTube, TikTok, LinkedIn, etc.).

The legal basis for the activities described above is usually your consent, as referred to in Article 6(1)(a) of the GDPR (i.e. "the data subject has consented to the processing of his or her personal data for one or more specified purposes"). You can withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal). Please note that sometimes your consent may not be legally required (e.g. where your image is merely a detail of a larger whole, such as a gathering, landscape or public event).


We will most often store your image recorded in connection with your participation in the Events for the period specified in your consent, and then (in justified cases) for the purposes of considering complaints related to the use of the image recorded in connection with your participation in the Events for the limitation period for claims specified by the relevant provisions.

11. Our contact details and your rights

 

11.1 Your rights

Persons whose data is processed have the following rights:

in accordance with Article 15 of the GDPR: the right to obtain information about data processing within the scope specified in that article;

in accordance with Article 16 of the GDPR: the right to rectify your inaccurate or incomplete personal data;

in accordance with Article 17 of the GDPR: the so-called "right to be forgotten", i.e. the right to delete your personal data stored with us, provided that their further processing is not necessary: ​​to exercise the right to freedom of expression and information;

to comply with a legal obligation;

for reasons of public interest;

to establish, pursue or defend legal claims;

in accordance with Article 18 of the GDPR: the right to restrict the processing of your personal data, unless: the accuracy of the personal data is disputed by you;

the processing is unlawful and you oppose their deletion;

we no longer need the personal data but you require it to establish, pursue or defend legal claims;

you have objected to the processing of your data pursuant to Article 21;

in accordance with Article 20 of the GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller;

in accordance with Article 77 of the GDPR: the right to lodge a complaint with a supervisory authority (in Poland, the supervisory authority is the President of the Office for Personal Data Protection. You can also obtain more detailed information on the website of the Office for Personal Data Protection at: https://uodo.gov.pl/. To contact another supervisory authority responsible for the protection of personal data, visit the website of the European Data Protection Board at: https://edpb.europa.eu/about-edpb/about-edpb/members_pl). The right to object (Article 21 of the GDPR)

If we process personal data in the manner described in this privacy policy in order to protect our legitimate interests, you may object to the processing of your data for this purpose - with effect for the future. If the processing takes place for direct marketing purposes, you may exercise your right to object at any time. If the processing takes place for other purposes, you only have the right to object for reasons arising from your particular situation.

Once you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests and rights, or the processing is for the purpose of asserting, exercising or defending legal claims.

The previous sentence does not apply when the data is processed for direct marketing purposes. In such a case, we will always cease further processing of your personal data after you have expressed your objection.

11.2 Contact Us

If you have any questions regarding the collection, processing and use of your personal data, or if you wish to request information, rectification, restriction of processing or deletion of data, or to revoke consent or object to the use of certain data, please contact the data controller indicated at the beginning of this privacy policy directly.