PRIVACY POLICY CONCERNS USERS VISITING THE WEBSITE
On the basis of Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th of April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR” (OJ EU L of 4th of May 2016), we are providing you below with information on our processing of your personal data.
CONTROLLER
The Controller of your personal data within the meaning of the personal data protection regulations is ENERGOZYSK spółka z ograniczoną odpowiedzialnością with its registered office in Poznan (60-125) ul. Bosa 4/6/24, registered by the District Court Poznan-Nowe Miasto i Wilda in Poznan, 8th Commercial Division of the National Court Register, KRS No.: 0000941528, NIP: 7792534180, REGON: 520800264 (hereinafter “Controller”).
The Controller reserves the right to introduce changes to the Privacy Policy.
PURPOSES, CATEGORIES OF YOUR DATA AND BASIS OF PROCESSING
We process your data on the basis of our legitimate interest (Article 6(1)(f) of the GDPR), which includes:
- managing of the Website,
- ensuring the safety of the Website and other users,
- conducting statistical analyses,
- conducting direct marketing of Controller products or services,
- sending newsletter to e-mail addresses provided by the Users, for receiving of which Users have subscribed to via form,
- responding to inquiries received from users via the contact form to the e-mail addresses provided by users,
- meeting the legal obligations that arise from the GDPR to exercise your rights and therefore archiving your requests to us or informing you about threats to your privacy.
RIGHTS
The GDPR grants you the following potential rights related to the processing of your personal data:
– The right to access your personal data,
– The right to rectify personal data,
– The right to delete personal data,
– The right to restriction of processing of personal data,
– The right to object to the processing of personal data,
– The right to data portability,
– The right to lodge a complaint with a supervisory authority,
– The right to withdraw consent to the processing of personal data if such consent was given.
The rules related to the exercise of the indicated rights are described in detail in Articles 15 – 21 of the GDPR. If you think that we have violated the rights of personal data protection while processing your personal data, you have the right to lodge a complaint with the supervisory body that is President of the Office for Personal Data Protection [Prezes Urzędu Ochrony Danych Osobowych], Stawki 2, 00-193 Warsaw.
You can also always ask us to provide you with information about what data about you are stored and what is the purpose of processing it by us. In order to do so you shall send a message to biuro@energozysk.pl . This e-mail address may also be used if you have any questions about the processing of your personal data. Your questions, queries and requests will be recognized without undue delay, at the latest within one month of receipt of such. If necessary, we will extend this period by two months due to the complexity of the request or due to a significant number of requests. You will then be informed of the extension and the reasons behind it within one month of receipt of the query or request.
SAFETY
We guarantee to keep confidential any personal data provided to us. We ensure that all measures concerning the security and personal data protection are taken as indicated by the regulations on personal data protection. Personal data is collected with due diligence and accurately protected against access by unauthorized persons.
All entities to whom we entrust the processing of personal data, guarantee the application of appropriate measures to protect and secure personal data required by law.
Your personal data may be transferred to authorized state authorities in connection with the proceedings conducted by them, at their request and after meeting the conditions confirming the necessity of obtaining such data from the Controller.
Your personal data may also be transferred outside the European Union (to third countries). In such case, data will be transferred to recipients who guarantee data security.
Due to the use of services of Google, Facebook, your data may be transferred to a third country in connection with their storage on servers outside the EU. These entities apply the compliance mechanisms enumerated in the GDPR or standard contractual clauses.
We will not process your data by automated means, including profiling.
PURPOSES AND PROCESSING ACTIVITIES:
CONTACT VIA THE CONTACT FORM AND EMAIL CONTACT
When contacting us via the contact form and by e-mail, you provide us with your e-mail. In addition, you may also include other personal data in your message.
In this case, your data is processed for the purpose of contacting you and the basis for processing it is Article 6(1)(a) of the GDPR, e.g. your consent resulting from initiating contact with us. The legal basis for the processing after the contact is a legitimate interest in the form of archiving correspondence for internal purposes (Article 6(1)(f) of the GDPR).
The content of the correspondence may be subject to archiving and we are not able to clearly determine when it will be deleted. You have the right to demand the history of your correspondence with us (if it has been archived) as well as to demand its deletion, unless its archiving is justified by our overriding interests, e.g. defending against potential claims on your part.
SOCIAL MEDIA
The Controller is also the Controller of your personal data on the Facebook fanpage. Your personal data will be processed for the purpose of administering and managing the fanpage or profile, communicating with you, directing promotional and marketing content to you, and creating communities on the profile.
The basis for the processing of your personal data is your consent, which you give by voluntarily observing or joining your profile. The rules on the fanpage or on the profile are set by the Controller, and the rules of using each social networking site result from its regulations. You can stop observing a given profile or fanpage at any time.
The Controller sees your personal data uploaded on your profile as public, such as your name, surname. Processing of other personal data is carried out by the social network and under the terms of its regulations.
Your personal data will be processed for the period of maintaining the profile on a given social media portal or for the period of Fanpage existence. They are processed based on your consent or in order to achieve legally justified interests of the Controller (marketing purposes).
Your data may be transferred to third countries in accordance with the regulations of a given social media portal.
NEWSLETTER
Newsletter is a free service provided electronically by the Controller, which relates to sending electronic letters that the Controller uses to inform about news, promotions, etc., in order to achieve the Controller’s legally justified goal that is direct marketing.
When subscribing to our newsletter, you shall fill in your name and e-mail address in the newsletter subscription form. By subscribing, you confirm that you accept this Privacy Policy and that you agree to receive marketing and commercial information from us by means of electronic communication (e‑mail) within the scope of the Act of 18 July 2002 on the provision of electronic services.
By subscribing to the newsletter, you also agree to our use of telecommunications terminal equipment (computer, tablet) for direct marketing of the Controller’s products and services and to present commercial information in accordance with Article 172(1) of the Telecommunications Law.
The above consent is voluntary, although it is necessary to receive the newsletter. Consent may be withdrawn at any time.
The newsletter is sent beginning with the moment of activation until your objection to the processing of your personal data is filed, until you withdraw your consent, or until the newsletter is ceased permanently. After withdrawal of consent, your data may be stored for up to 2 years in order to defend against possible claims, in order to show your consent to receive the newsletter, time of its withdrawal, the number of newsletters received, activity, etc., which all constitutes a legitimate interest of the Controller (Article 6(1)(f) of GDRP).
Mailing system records activity and actions taken by you in connection with the newsletter.
COOKIES
Our website, like almost all other websites, uses cookies to provide you with the best user experience.
Through most browsers you can check whether cookies were installed on your device, as well as delete installed cookies and block the installation of cookies by the website in the future or other sites. However, removing or blocking cookies may cause problems with using the website. More information about deleting, modifying, or blocking cookies can be found on http://www.cookiecentral.com/faq/.
Cookie files enable the use of the website. In accordance with international NAI standards (https://www.networkadvertising.org/ ), Controller stores them for up to five years.
Moreover, Controller uses information contained in the cookie files for analytical purposes, e.g. to count the number of visits to the Site. Information contained in them is for statistical purposes only and Controller does not use them to identify you.
SOCIAL MEDIA
On our website we use plugins that redirect to the websites of external providers, i.e. owners of social networking site such as Facebook.
We have no influence on the data processed by these websites. As soon as you click on the button of the plugin that refers to social media, your personal data is processed by the social network (Facebook), which becomes their Controller and decides on the purposes and scope of their processing. Cookies left by these plugins can also be applied on the user’s device when he or she accesses the site and then associated with the data collected by the social media portal. We have no control over the processing of data by these portals in the manner described above.
SERVER LOGS
Using the site involves sending queries to the server where the site is stored. Each query addressed to the server is saved in the server logs.
The logs include, among others, your IP address, date and time of the server, information about your web browser and operating system you are using. The logs are saved and stored on the server.
The data stored in the server logs are not associated with specific people using the site and are not used by us to identify you.
Server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone except those authorized to administer the server.