Privacy policy

This document defines the terms and conditions for the processing of personal data (hereinafter also referred to as “data”) and cookies on the website osadabliskonatury.pl (hereinafter referred to as the “Website”).

CONTENTS

  1. HOW TO CONTACT THE DATA ADMINISTRATOR
  2. ON WHAT BASIS DO WE PROCESS YOUR DATA
  3. INFORMATION ABOUT DATA PROCESSING FOR CONTRACT CONCLUSION AND EXECUTION, CLAIMS AND DEFENSE
  4. INFORMATION ABOUT DATA PROCESSING FOR SENDING THE NEWSLETTER
  5. INFORMATION ABOUT DATA PROCESSING FOR SENDING NOTIFICATIONS
  6. INFORMATION ABOUT DATA PROCESSING FOR DIRECT MARKETING AND PROFILING
  7. INFORMATION ABOUT DATA PROCESSING FOR SECURITY PURPOSES
  8. INFORMATION ABOUT DATA RECIPIENTS
  9. ABSOLUTE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
  10. RELATIVE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
  11. COOKIES – INTRODUCTION
  12. ADMINISTRATOR’S COOKIES
  13. THIRD-PARTY COOKIES
  14. CONSENT TO USE COOKIES AND MANAGE THEM
  15. CACHE
  16. LINKS TO OTHER WEBSITES OR SOFTWARE
  17. CHANGES TO THE PRIVACY AND COOKIE POLICY

§1. HOW TO CONTACT THE DATA ADMINISTRATOR

The administrator of personal data processed on the Website is Daniel Stachowiak, conducting business under the name eBigroup Daniel Stachowiak, based in Józefowo (88-300) at Józefowo 22, registered in the Central Register and Information on Economic Activity maintained by the Minister of Development, with TIN number 5571664575 and REGON number 341172369.

You can contact the Data Administrator by phone: +48 791 166 743 and by email: recepcja@osadabliskonatury.pl.

§2. ON WHAT BASIS DO WE PROCESS YOUR DATA

When collecting personal data, we always inform about the legal basis for their processing. This is derived from the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – General Data Protection Regulation). When we inform about:

  • Article 6(1)(a) GDPR – it means that we process personal data based on the received consent,
  • Article 6(1)(b) GDPR – it means that we process personal data because they are necessary to perform a contract or to take actions before its conclusion, at your request,
  • Article 6(1)(c) GDPR – it means that we process personal data to fulfill a legal obligation,
  • Article 6(1)(f) GDPR – it means that we process personal data to pursue our legitimate interests.

§3. INFORMATION ABOUT DATA PROCESSING FOR CONTRACT CONCLUSION AND EXECUTION, CLAIMS AND DEFENSE

  1. We may process personal data necessary to perform the contract concluded with you. However, even before its conclusion, we may process personal data necessary to take actions at your request. This data processing is based on Article 6(1)(b) GDPR.
  2. During the execution of the contract and after its completion, we process the personal data of the party to the contract for potential claims and their pursuit. Our legitimate interest is, for example, the possibility of responding to a possible complaint, which we are obliged to do based on separate civil law provisions. In this case, we will process personal data based on our legitimate interest, which is the defense against potential claims or their pursuit. This data processing is based on Article 6(1)(f) GDPR.
  3. We will store this data for the period necessary to achieve the designated purposes, no later than until the expiration of claims resulting from separate legal provisions.
  4. You have the right to access your data, correct it, delete it, limit its processing, the right to data portability, and the right to lodge a complaint with the supervisory authority. In the case of data processing for the purpose specified in point 3, you also have the right to object to its processing.
  5. Providing this data is voluntary, but failure to provide it will prevent the conclusion or execution of the contract.
  6. The recipients of this data are: our hosting provider, email service provider, IT service provider, transport service providers, accounting and invoicing software service providers, electronic payment service provider, legal, advisory, and debt collection service providers, and other service providers we use for the designated purpose, leasing service provider.

§4. INFORMATION ABOUT DATA PROCESSING FOR SENDING THE NEWSLETTER

  1. We enable you to subscribe to our newsletter. If you use this feature, we process your personal data for the purpose of sending it. The newsletter may contain advertising, commercial, or marketing content.
  2. This data processing is based on your consent and therefore Article 6(1)(a) GDPR.
  3. You have the right to withdraw your consent at any time. However, withdrawal of consent does not affect the lawfulness of data processing carried out before its withdrawal.
  4. We will store your data until the withdrawal of the given consent. If you never withdraw it, we will process your data until we stop sending the newsletter.
  5. You have the right to access your data, correct it, delete it, limit its processing, the right to data portability, and the right to lodge a complaint with the supervisory authority.
  6. Providing this data is voluntary, but failure to provide it will prevent the sending of the newsletter.
  7. The recipients of this data are: our hosting provider, IT service provider, email service provider, and newsletter sending service provider.

§5. INFORMATION ABOUT DATA PROCESSING FOR SENDING NOTIFICATIONS

  1. We enable you to subscribe to our notifications, displayed via the web browser. If you use this feature, we process your personal data for the purpose of sending it. Notifications may contain advertising, commercial, or marketing content.
  2. This data processing is based on your consent and therefore Article 6(1)(a) GDPR.
  3. You have the right to withdraw your consent at any time. However, withdrawal of consent does not affect the lawfulness of data processing carried out before its withdrawal.
  4. We will store your data until the withdrawal of the given consent. If you never withdraw it, we will process your data until we stop sending notifications.
  5. You can withdraw consent for data processing in your web browser.
  6. You have the right to access your data, correct it, delete it, limit its processing, the right to data portability, and the right to lodge a complaint with the supervisory authority.
  7. Providing this data is voluntary, but failure to provide it will prevent the sending of notifications.
  8. The recipients of this data are: our hosting provider, advertiser, and notification sending service provider.

§6. INFORMATION ABOUT DATA PROCESSING FOR DIRECT MARKETING AND PROFILING

  1. We may process your personal data for direct marketing purposes. This happens, for example, when we respond to your message, presenting details of our offer.
  2. For direct marketing purposes, we may use profiling, which involves automated decision-making about displaying ads to you. This decision is based on your activities on the Website, particularly on concluded contracts or browsed pages. In practice, profiling enhances the usability of our Website, allowing us to present you with content that may potentially interest you.
  3. This data processing is based on Article 6(1)(f) GDPR.
  4. We will store your data for the period necessary to achieve the purpose.
  5. You have the right to access your data, correct it, delete it, limit its processing, the right to data portability, the right to object to data processing, and the right to lodge a complaint with the supervisory authority.
  6. You have the right not to be subject to profiling unless you have given consent for it. However, in such cases, the basis for processing your data will be the given consent (Article 6(1)(a) GDPR), which you can withdraw at any time. In this case, your data will be processed until the withdrawal of the given consent.
  7. Providing this data is voluntary, and failure to provide it will prevent the execution of direct marketing activities.
  8. The recipients of this data are: our hosting provider, IT service provider, email service provider, advertising service provider.

§7. INFORMATION ABOUT DATA PROCESSING FOR SECURITY PURPOSES

  1. From the moment you launch our website, we process data such as:
    • public IP address of the device from which the request was made,
    • browser type and language,
    • date and time of the request,
    • number of bytes sent by the server,
    • URL address of the previously visited page, if the visit was made via that link,
    • information about errors that occurred during the request.
  2. Our legitimate interest in this processing is to maintain server event logs and protect the Website from potential hacker attacks and other abuses. This includes the possibility of identifying the IP address of a person performing unauthorized actions on the Website, such as attempting to breach security or publish prohibited content, or attempting unauthorized activities using our servers.
  3. This data processing is based on Article 6(1)(f) GDPR.
  4. We will store this data for the period necessary to achieve the designated purposes, no later than until the expiration of claims resulting from separate legal provisions.
  5. You have the right to access your data, correct it, delete it, limit its processing, object to its processing, and the right to lodge a complaint with the supervisory authority.
  6. Providing this data is a condition for using the Website. Failure to provide it will prevent the use of the Website.
  7. The recipients of this data are our hosting provider and IT service provider.

§8. INFORMATION ABOUT DATA RECIPIENTS

When processing personal data, we use external services. Therefore, the recipients of your personal data may be third parties:

  • Transport service providers / couriers.
  • IT service providers.
  • Email service providers.
  • Advertising service providers.
  • Accounting service providers.
  • Software providers for invoicing.
  • Legal, advisory, and debt collection service providers – these service providers are appointed individually when needed.
  • Newsletter sending service provider.
  • Electronic payment service providers.

§9. ABSOLUTE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED

When we refer to the rights related to the processing of your personal data, we mean the rights described below. The ability to exercise the following rights is independent of the legal basis for processing personal data.

Right of access to data

You have the right to obtain from us confirmation whether we process your personal data. If so, you have the right to access this data and receive additional information about:

  • the purposes of processing,
  • the categories of data,
  • the recipients or categories of recipients to whom the data has been or will be disclosed, especially recipients in third countries or international organizations,
  • if possible, the planning period of data storage, or if not possible, the criteria for determining this period,
  • the right to request correction, deletion, or limitation of data processing and to object to such processing, the right to lodge a complaint with the supervisory authority,
  • the source of data if it was not collected from the data subject,
  • the existence of automated decision-making, including profiling, and relevant information about the rules for their use, as well as the significance and expected consequences of such processing for the data subject.

Upon receiving such a request, we are obliged to provide a copy of the personal data undergoing processing. If such a request is made electronically and unless we receive other objections, the information will also be provided electronically.

 

Right to Rectification of Data

You have the right to request that we promptly rectify your personal data if it is incorrect. Considering the purposes of processing, you have the right to request the completion of incomplete personal data, including by providing an additional statement.

 

Right to Erasure (Right to be Forgotten)

You have the right to request that we promptly delete your personal data. We are then obliged to delete the personal data without undue delay if one of the following circumstances applies:

  • You have withdrawn your consent to the processing of your personal data and there is no other legal basis for processing,
  • You have made an effective objection to the processing of your data,
  • Your personal data was processed unlawfully,
  • Your personal data must be erased to comply with a legal obligation,
  • Your data was collected in connection with offering information society services.

Right to Restrict Processing

You have the right to request that we restrict processing in the following cases:

  • When you contest the accuracy of the data – for a period allowing us to verify the accuracy of the data,
  • Processing is unlawful and you oppose the erasure of the data, requesting instead the restriction of its use,
  • We no longer need the personal data for processing purposes, but you need it to establish, exercise, or defend legal claims,
  • You have objected to the processing of your data – pending the verification of whether our legitimate grounds override your objection.

Automated Decision-Making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This right does not apply if the decision:

  • Is necessary for entering into or performing a contract between you and us,
  • Is authorized by Union or Member State law to which we are subject, and which also lays down suitable measures to safeguard your rights, freedoms, and legitimate interests, or
  • Is based on your explicit consent.

Right to Lodge a Complaint

You have the right to lodge a complaint regarding the processing of your personal data with the supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, tel. 22 531 03 00, fax. 22 531 03 01, email: kancelaria@uodo.gov.pl.

§10. RELATIVE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED

When we refer to rights related to the processing of your personal data, we mean the rights described below. The ability to exercise these rights depends on the legal basis for processing personal data.

Right to Withdraw Consent

If we process your personal data based on the consent you have given, you have the right to withdraw that consent at any time. Naturally, the withdrawal of consent does not affect the legality of the prior processing of personal data.

 

Right to Data Portability

You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us if the processing is based:

  • On consent or on a contract, and
  • In an automated manner.

In exercising the right to data portability, you have the right to request that the personal data be transmitted by us directly to another controller, if technically feasible. This right cannot adversely affect the rights and freedoms of others.

 

Right to Object

If we process your personal data based on Art. 6(1)(f) of the GDPR, you have the right to object to the processing of your data on grounds relating to your particular situation.

We must then no longer process your personal data unless we demonstrate:

  • Compelling legitimate grounds for processing that override your interests, rights, and freedoms, or
  • Grounds for establishing, exercising, or defending legal claims.

If you object to the processing of your personal data for direct marketing purposes, we can no longer process it for such purposes.

§11. COOKIES – INTRODUCTION

The website uses cookies. These are commonly used small files containing a string of characters that are sent and stored on the end device (e.g., computer, laptop, tablet, smartphone) used when visiting the website. This information is sent back to the browser’s memory on subsequent visits to the website. We can categorize cookies based on three methods of classification.

Regarding the purposes of using cookies, we distinguish three categories:

  • Necessary cookies – these files enable the proper functioning of the website and its features, e.g., authentication or security cookies. Without storing them on your device, using the website would be impossible.
  • Functional cookies – these files allow the website to remember your chosen settings and tailor it to your needs and preferences, such as selected language, font size, and website appearance. They enable us to improve the functionality and performance of the website. Without storing them on your device, some functionalities of the website will be limited.
  • Business cookies – this category includes advertising cookies. They allow the customization of ads displayed on or off the website according to your preferences. Without storing them on your device, some functionalities of the website may be limited.

Regarding the duration of cookies, we distinguish two categories:

  • Session cookies – existing until the end of a given session,
  • Persistent cookies – existing after the session ends.

Regarding the distinction of the entity managing the cookies, we distinguish:

  • Our cookies,
  • Third-party cookies.

§12. ADMINISTRATOR’S COOKIES

The cookies we administer allow for:

  • Authentication of access,
  • Maintaining the session after logging in,
  • Securing the website against hacker attacks,
  • The browser to “remember” the content of form fields (optional),
  • The browser to “remember” items added to the cart,
  • Customizing the content of website pages to your preferences.

This makes using the website’s functionalities easier and more enjoyable.

§13. THIRD-PARTY COOKIES

The use of third-party cookies is subject to the privacy and cookie policies of that party.

GOOGLE

We use cookies managed by Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States, as part of services:

  • Google Ads – they allow us to conduct and assess the quality of advertising campaigns conducted using Google Ads,
  • Google Analytics – they allow us to assess the quality of advertising campaigns conducted using Google Ads, and to study user behavior and traffic, and compile traffic statistics.

The data collected by Google Inc. is anonymous and collective. In particular, it does not contain identifying features (understood as personal data) of website users. Using these services, we collect data such as the sources of users visiting the website and their behavior on the website, information about the devices and browsers they use, IP address, domain, demographic data (age, gender), interests, and geographic data.

The use of third-party cookies is subject to the privacy and cookie policies of those parties. Current third-party policies in this regard can be found here: https://www.e-regulaminy.pl/biuletyn/polityki-prywatnosci-i-plikow-cookies/.

§14. CONSENT TO USE COOKIES AND MANAGE THEM

Consent to the processing of cookies is voluntary and can be withdrawn at any time. However, please note that refusing to use certain cookies may limit the functionality of the website and even prevent its use.

Consent to the processing of cookies can be given by:

  • Using the settings of the software installed on the telecommunications end device used by the user,
  • By using a button containing a statement of consent to the processing of cookies or confirming acknowledgment of its terms.

Usually, the browser settings default to allow placing cookies and other information on the end device. If you do not agree to the storage of these files, you need to change the browser settings. It is possible to disable their storage for all connections from a given browser or for a specific website, as well as delete them. The method of managing files depends on the software used.

Current rules for managing files can be found in the settings of the used web browser and also here: https://www.e-regulaminy.pl/biuletyn/polityka-cookies-obsluga/.

§15. CACHE

When you use the website, we may automatically use the cache installed on your device. In local storage, it is possible to store data between sessions, i.e., between subsequent visits to the website. The purpose of using the cache is to speed up the use of the website by eliminating the situation where the same data would be repeatedly downloaded from the website, thereby burdening the user’s internet connection. The cache can also store data such as login passwords.

§16. LINKS TO OTHER WEBSITES OR SOFTWARE

The website may contain links to other websites or software. We are not responsible for the privacy and cookie policies applied on those websites or in that software. We recommend familiarizing yourself with the privacy and cookie policies of those websites or software after accessing them or before installing them.

§17. CHANGES TO THE PRIVACY AND COOKIE POLICY

  1. The privacy and cookie policy comes into effect on the date of its publication on the website.
  2. Changes to the privacy and cookie policy occur by publishing its new content on the website.
  3. We publish information about changes to the privacy and cookie policy on the website area no later than 3 days before the new terms take effect.