I. General information
The Data Administrator is COLUMBUS POLSKA SA with its seat in Warsaw. The Administrator’s contact details are provided in Section XII below.
II. Processing of Users’ Personal Data
Obtaining Personal Data: The Administrator may obtain Users’ Personal Data, such as: name, surname, address and contact details, including e-mail address, telephone number, as well as position and company data. The Administrator may obtain Users’ Personal Data, in particular, in the following cases:
Processed Personal Data: The categories of Users’ Personal Data Processed by the Administrator may, in particular, include:
Purposes of Personal Data Processing: The purposes for which the Administrator may process Users’ Personal Data are as follows:
III. Providing Personal Data to third parties
The Administrator may share Users’ Personal Data:
Currently, on our pages, we leave the option of redirecting to the following social networks: https://www.facebook.com, https://www.instagram.com, https://linkedin.com.
If we engage a third party to Process Users’ Personal Data, in accordance with the processing entrustment agreement concluded with such entity, the Processor will be obliged to: (i) Process only the Personal Data indicated in the Administrator’s prior written instructions; and (ii) apply all measures to protect the confidentiality and security of Personal Data and ensure compliance with all other requirements of generally applicable law.
The entity that processes the Personal Data of Users obtained through the Website is the company Woocommerce, which is the creator of this Website, as well as providing the Administrator with technical support services in connection with the use of the Website. This entity stores and processes Users’ Personal Data obtained during the use of the Website by Users. The processing entity ensures full security of Users’ Personal Data by applying appropriate and newest technical and organizational measures. The processing entity may not use the Users’ Personal Data provided to it for purposes other than the purposes for which they were entrusted to it by the Administrator. The Administrator has concluded an agreement with the Processor for entrusting the processing of personal data, on the basis of which this entity has been obliged to comply with the requirements for the protection of Users’ Personal Data.
IV. International transfer of Personal Data
V. Data Protection
The Administrator informs that he has implemented appropriate technical and organizational security measures to protect Personal Data, in particular including safeguards against accidental or unlawful destruction, loss, alteration, unauthorized publication, unauthorized access and other unlawful and unauthorized forms of Processing, in accordance with applicable law.
The Administrator is not responsible for the actions or omissions of Users. Users are responsible for ensuring that all Personal Data is sent to the Administrator in a secure manner.
VI. Accuracy of Data
The controller takes all appropriate measures to make sure that:
The Administrator may at any time ask Users about the accuracy of the Processed Personal Data.
VII. Data minimization
VIII. Data storage
IX. Users’ rights
In accordance with the provisions of the general data protection regulation, the Users have the following rights in relation to Users’ Personal Data processed by the Administrator:
If the Processing of Personal Data takes place on the basis of the consent expressed by the Users, the Users have the right to withdraw their consent at any time without affecting the lawfulness of the Processing which was carried out on the basis of consent before its withdrawal.
In the event of incorrect Processing of Personal Data, Users have the right to lodge a complaint with the state supervisory body for data protection, i.e. the President of the Office for Personal Data Protection.
The above does not affect the rights of Users resulting from acts or other generally applicable provisions of law.
X. Cookie files (cookies)
A cookie is a small file placed on the User’s device when visiting a website (also on our Website). It records information about the device, browser, and in some cases, also about preferences and typical activities that Users perform when browsing the website . The Administrator may Process Users’ Personal Data through the Cookie technology, in accordance with the Administrator’s Cookies Policy.
If Users give their voluntary, specific, informed and unambiguous consent to receive the Administrator’s newsletter, the Administrator may send Users an electronic newsletter with commercial information for promotional and informational purposes. Personal data provided to the Administrator in connection with subscribing to the newsletter will be used only for the purpose of sending the newsletter. Users may at any time unsubscribe from the newsletter by using the unsubscribe option contained in the newsletter, using the opt-out link in the footer of the e-mail or by contacting the Administrator in another way.
The Personal Data received from Users will be stored by the Administrator only for the above purpose and for the period during which the Users subscribe to the newsletter and until the Users withdraw their consent to subscribe to the newsletter.
The newsletter is distributed by The Rocket Science Group LLC d / b / a Mailchimp, this entity processes Users’ Personal Data on behalf of the Administrator. The processing entity also ensures full security of Users’ Personal Data by applying appropriate and newest technical and organizational measures. This entity stores and processes Users’ Personal Data obtained in the registration process, i.e. e-mail address and, if applicable, IP address and newsletter subscription data. The processor may not use the Users’ Personal Data provided to it for purposes other than the purposes for which it was received. The Administrator has concluded an agreement with the Processor for entrusting the processing of personal data, on the basis of which this entity has been obliged to comply with the requirements for the protection of Users’ Personal Data.
The provision of Users’ Personal Data related to receiving the newsletter is not required for legal or contractual reasons, nor is it required for the conclusion of any contract. Therefore, the provision of this data or consent to receive the newsletter is not obligatory for Users. The legal basis for receiving the newsletter is only the consent expressed by the Users (Article 6 (1) (a) of the General Data Protection Regulation). In the absence of such consent, the newsletter will not be sent.
XII. Contact details
COLUMBUS POLSKA SA, with its seat at: ul. Koneser Square 5 /F0.01, 03-736 Warsaw. Email address: [email protected]