§ 1
GENERAL INFORMATION
- The administrator of personal data is the REKORD Hale Namiotowe sp. z o.o. Company based in Wrocław, at ul. Mazowiecka 17, 50-412 Wrocław, entered into the National Court Register under the number KRS 0000206907, kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division – National Court Register, with the tax identification number NIP 8992210873 and statistical identification number REGON 931872446, hereinafter the Administrator.
- Contact regarding the protection of personal data is possible at the e-mail address of the Data Protection Officer appointed in the company: iod@halenamiotowe.com.pl hereinafter referred to as DPO.
- The Privacy Policy defines the rules and conditions for the processing of personal data by the Administrator of the website users: halenamiotowe.com.pl.
- The administrator takes the utmost care to protect the privacy of the data subjects. In order to protect the personal data of people using the website, the Administrator has applied technical and organizational measures ensuring the protection of personal data processed, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to processing personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (General Data Protection Regulation) (hereinafter: GDPR).
- Personal data provided on the website are treated as confidential and are not visible to other users except for the account owner and the Administrator or persons authorized by him.
- The operation of the fan page complies with the requirements contained in the Facebook regulations in the data rules chapter, available at facebook.com/about/privacy/update. All information contained in your profile and activities resulting from its use are directly administered by Facebook.
- The Administrator administers the data from the fan page only for the necessary answers to questions, commenting on entries, and communication with users as part of the activity conducted by the Administrator and the content provided by them.
- The halenamiotowe.com.pl website performs the functions of obtaining information about persons using the website and their behaviour through:
- information entered voluntarily by users in forms,
- saving cookie files in end devices (so-called “cookies”),
- registering logins and logs on servers maintained by the Administrator.
§ 2
PROCESSING PURPOSES
- The administrator processes the personal data of website users for the purpose resulting from the form function, i.e. for the purpose and scope necessary for information contact, i.e. to prepare and reply to a message using the form on the website, and to configure the appropriate hall according to the customer needs. Which means that this data is needed in particular for:
- responding answers to messages sent using the forms on the website,
- register on the website halenamiotowe.com.pl,
- sending e-mail notifications,
- direct marketing of the Administrator’s products and services,
- creating registers and records related to the GDPR, including, for example, the register of customers who objected in accordance with the GDPR, we process such personal data.
- Personal data collected through communication with fan page users are processed by the Administrator only for the purpose of providing an answer, if necessary. Your activity related to the use of our fan page will not be archived outside of Facebook.
§ 3
SCOPE OF PERSONAL DATA PROCESSING
- Providing personal data is voluntary but necessary to prepare and respond to inquiries addressed to the Administrator.
- In the Registration Form, in order to contact, it is necessary to provide the following data: name and surname, contact telephone number, e-mail address, telephone number, and the content of the message – inquiries,
- In the form “Configure the hall” it is necessary to provide the following data: telephone number and e-mail address.
- Through the operation of the fan page, the Administrator collects and processes the following personal data:
- Facebook ID (usually containing the first and last name, which is not verified by the Administrator in any way to confirm the accuracy of the data),
- profile photo (thanks to it, in some cases, the Administrator may know your image),
- other photos (which may also present an image) resulting from the fan page user relationship. Posting photos under posts is voluntary on your side,
- the content of your comments and the content of the conversation carried out by the Messenger application (thanks to it we can find out about your e-mail address, telephone number, and description that you have entered into due to the circumstances of the correspondence addressed to the Administrator).
§ 4
LEGAL BASIS FOR PROCESSING
- Personal data is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 /EC. In order to answer your inquiries using the contact form or the “configure the hall” form, the data will be processed on the basis of your voluntary consent at the time of sending the completed form – art. 6 sec. 1 (a) GDPR. In order to implement direct marketing, the legal basis for data processing is Art. 6 sec. 1 (f) GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator carries out its legitimate interest, in this case, the Administrator’s interest is to inform about its products and services. In order to create registers and records related to the GDPR, including, for example, the register of customers who have objected in accordance with the GDPR, we process such personal data because, firstly, the provisions of the GDPR impose certain documentation obligations on us to demonstrate compliance and accountability, and secondly, if you object, for example, to the processing of your personal data for marketing purposes, we need to know who not to use direct marketing because you do not wish to do so. The legal basis for such data processing is, firstly, Art. 6 sec. 1 (c) GDPR, which allows the processing of personal data, if such processing is necessary for the Personal Data Administrator to fulfill its obligations under the law; second, Art. 6 sec. 1 (f) GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator implements their legitimate interest, in this case, the Administrator’s interest is to have knowledge about people who exercise their rights under the GDPR. By sending us an inquiry in a private message and / or commenting on our entries, you consent to the processing of personal data. The legal basis for the processing of personal data from the fan page is then Art. 6 sec. 1 (a) GDPR, which allows you to process data on the basis of consent. If you, as a user of the fan page, express your will to use the Administrator’s services and express your willingness to enter into cooperation and establish its terms, the legal basis for the processing of your personal data will be Art. 6 sec. 1 (b) GDPR.
- Expressing consent to the processing of personal data is completely voluntary, however, the lack of consent makes it impossible to respond to the inquiries addressed to the Administrator.
§ 5
RIGHT TO WITHDRAW CONSENT
- If the processing of personal data is based on consent, the user may withdraw this consent at any time – at their sole and reasonable discretion.
- If the user would like to withdraw consent to the processing of personal data, it is enough to send an e-mail directly to the DPO appointed in the company to the e-mail address: iod@halenamiotowe.com.pl.
- If the processing of personal data was based on consent, its withdrawal does not affect the lawfulness of the current processing.
§ 6
PERSONAL DATA RECIPIENTS
The administrator does not make automated decisions, including decisions based on profiling.
§ 7
PERSONAL DATA RECIPIENTS
User data may be transferred to entities with whom we cooperate in order to properly provide services via the website, i.e. entities providing IT services and a hosting operator.
§ 8
TRANSMISSION OF PERSONAL DATA TO THIRD COUNTRIES
The administrator does not transfer users’ personal data outside the European Economic Area.
§ 9
TIME OF STORAGE OF PERSONAL DATA
- Personal data of people using the website, the Administrator stores until you withdraw your consent to the processing of data, object to the processing of personal data, or request their removal by the user.
- In the case of information that the Administrator has as part of your fan page comments, they will be available on the website until they are removed by the author. In the case of offensive, vulgar, and violating the law, the Administrator may delete comments and entries at any time.
- Your personal data collected by Facebook, i.e. history entries, history of activity in the Messenger application, are subject to retention on the terms set out in the Facebook regulations.
§ 10
INFORMATION ON COOKIES
- The haleamiotowe.com.pl website uses cookies.
- Cookie files (so-called “cookies”) constitute IT data. These data are, in particular, text files that are stored on the website user’s end device and are intended for the use of cookies, usually, they contain the name of the website they come from, the storage time on the end device, and a unique number.
- Cookies perform many functions on the website, most often useful, which we will try to describe below (if the information is insufficient, please contact us via e-mail address: iod@halenamiotowe.com.pl.
- The entity that places cookies on the website user’s end device and obtains access to them is the Administrator’s hosting operator.
- Cookies are used for the following purposes:
- ensuring security — cookies are used to authenticate users and prevent unauthorized use of the customer panel. Therefore, they are used to protect the user’s personal data against unauthorized access;
- effect on the processes and efficiency of using the website — cookies are used to ensure that the website works efficiently and that you can use the functions available on it, which is possible, among other things, by remembering the settings between subsequent visits to the website. Thanks to them, you can efficiently navigate the website and individual subpages;
- session status — cookie files often contain information on how visitors use the website, e.g. which subpages are displayed most often. They also make it possible to identify errors displayed on some subpages. Cookies used to save the so-called “Session state” therefore help to improve services and increase the browsing experience;
- maintaining the session status — if the customer logs in to their panel, cookies enable the session to be maintained. This means that after switching to another subpage, you do not have to re-enter your login and password each time, which contributes to the comfort of using the website;
- creating statistics — cookies are used to analyse how the website is used by the
users (how many people open the website, how long they stay on it, which content is of the greatest interest, etc.). Thanks to this, it is possible to constantly improve the website and adapt its operation to the preferences of users. In order to track activity and create statistics, we use Google tools, such as Google Analytics; in addition to reporting website usage statistics, pixel Google Analytics may also be used, together with some of the cookies described above, to help display more relevant content to the user in Google services (e.g. in the Google search engine) and throughout the web;
- The important fact is that many cookies are anonymized for us – without additional information, we are not able to establish your identity on their basis.
- If the user does not wish to receive cookies, they may change the browser settings. Please, note that disabling cookies necessary for authentication processes, security, maintaining user preferences may make it difficult, and in extreme cases, you may not be able to use websites. While respecting the autonomy of all people using the website, we feel obliged to inform you that disabling or limiting the use of cookies may cause quite serious difficulties in using the website, e.g. in the form of having to log in to each subpage, longer period of loading the page, restrictions on the use of functionalities, etc.
- The website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the user’s end device until logging out, leaving the website, or turning off the software (web browser). Persistent cookies are stored on the user’s end device for the time specified in the cookie parameters or until they are deleted by the user.
§ 11
SERVER LOGS
- Information about some of the behaviours of users are subject to logging in to the server layer. These data are used only to administer the website and to ensure the best possible service for the hosting services provided.
- The browsed resources are identified by URL addresses. In addition, the following may be saved:
- time when the inquiry arrives,
- time when the answer is sent,
- name of the client’s station – identification is carried out by the HTTP or HTTPS protocol,
- information about errors that occurred during the execution of the HTTP or HTTPS transaction,
- URL address of the page previously visited by the user (referrer link) – if the ALVI website was accessed via a link,
- information about the user’s browser,
- information about the IP address.
- The above data is not associated with specific people browsing the website.
- The above data is used only for the purposes of server administration.
§ 12
DATA SUBJECTS’ RIGHTS
- We kindly inform you that every website user has the right to:
- access to their personal data;
- rectify personal data;
- delete personal data;
- restrictions on the processing of personal data;
- an objection to the processing of personal data;
- transfer of personal data.
- We respect the rights resulting from the provisions on the protection of personal data and we try to facilitate their implementation as much as possible.
- We point out that these rights are not absolute, and therefore we may legally refuse you to comply with them in certain situations. However, if we refuse to accept the request, it is only after careful analysis and only if the refusal to accept the request is necessary.
- Regarding the right to object, we explain that the user has the right to object to the processing of personal data at any time on the basis of the legitimate interest of the Personal Data Administrator in connection with the user’s particular situation. However, you must remember that in accordance with the provisions, we may refuse to take into account the objection if we prove that:
- there are legitimate grounds for the processing which override the user’s interests, rights, and freedoms or
- there are grounds for establishing, investigating, or defending claims.
- Moreover, the user may at any time object to the processing of their personal data for marketing purposes. In such a situation, after receiving the objection, we will stop processing for this purpose.
- Each user can exercise their rights by sending an e-mail directly to the DPO appointed in the company to the e-mail address: iod@halenamiotowe.com.pl.
§ 13
RIGHT TO LODGE A COMPLAINT
If the user believes that their personal data is being processed contrary to the applicable law, they may lodge a complaint with the President of the Personal Data Protection Office.
§ 14
CLOSING REMARKS
- The halenamiotowe.com.pl website may contain links to other websites not owned or administered by the Administrator. In this case, the Administrator is not responsible for their content and access to them. Any links to other sites are provided solely for the convenience of the site. The administrator recommends that after switching to other websites, the user should read the privacy policy established there.
- Questions or doubts regarding the privacy policy and security of personal data on the website can be sent via e-mail directly to the address of the DPO appointed in the company – e-mail address: iod@halenamiotowe.com.pl.
- In matters not covered with this Privacy Policy, the provisions on the protection of personal data shall apply.
- The user will be notified by e-mail about any changes introduced to this Privacy Policy.
- This Privacy Policy is valid from 02/09/2019.