GDPR / SECURITY POLICY
I. Information Obligation / General
Pursuant to Article 13 paragraphs 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), we inform that:
1. The administrator of your personal data is RESPECT GROUP Sp. z o.o. with registered office in Wrocław, address: ul. Powstańców Śląskich 5; 53-332 Wrocław, registered in the National Court Register under number KRS: 0000547463, REGON number: 361028993, NIP number: 6762486085, hereinafter also referred to as the Administrator.
2. The Administrator has not appointed a Data Protection Officer. For matters concerning personal data protection and exercising your rights:
2.1. We encourage you to contact Ms. Olena Rybka;
2.2. Contact details of the person to contact regarding your personal data protection: e-mail address: o.rybka@respectgroup.pl or in writing at the registered office address provided in point 1.
3. Your personal data will be processed for the purposes of:
3.1. necessary for the conclusion and performance of the contract to which you are a party, pursuant to Art. 6(1)(b) GDPR;
3.2. necessary for the conclusion of a contract based on your interest in the offer, pursuant to Art. 6(1)(b) GDPR;
3.3. customer satisfaction surveys, which constitute the legitimate interest of the Administrator and assessment of service quality, pursuant to Art. 6(1)(f) GDPR;
3.4. possible claims or defense against claims, as part of the legitimate interest of the Administrator, pursuant to Art. 6(1)(f) GDPR;
3.5. offering you products and services as part of the Administrator’s legitimate interest within direct marketing, including products and services provided by cooperating entities (partners), and profiling them according to your needs, pursuant to Art. 6(1)(f) GDPR. Profiling involves evaluating some of your features based on your personal data to analyze your preferences and adjust your profile to provide services. Automated decision-making is necessary for the conclusion or performance of the contract to which you are a party.
4. Right to object.
You have the right to object to the processing of your personal data, based on which the Administrator will cease processing your data for the purposes specified in point 3, except where we demonstrate legally justified grounds overriding your interests, rights, and freedoms, especially as part of our legitimate interest, or where data are necessary for establishing, pursuing, or defending claims.
5. Data retention period.
5.1. For data processed for the purpose necessary for the performance of a contract to which you are a party, data will be processed during the period when claims related to the contract may arise under civil law or tax law provisions, and for 5 years from the end of the calendar year in which the tax obligation arose.
5.2. Where the basis for processing your personal data is consent, data will be processed until consent is withdrawn. After withdrawal, personal data will be processed for the statute of limitations period applicable to claims that the Administrator may raise or that may be raised against the Administrator.
6. Disclosure of personal data.
Your personal data may be disclosed to the following recipients: entities within our capital group, our employees, and partners with whom we cooperate to combine products or services. Our subcontractors (processors), such as accounting firms, auditors, and law firms, may also have access to your data.
7. Transfer of personal data to third countries.
7.1. The Administrator has the right to transfer your personal data necessary for the performance of service contracts to a third country or international organization (e.g., Google, Facebook). Facebook and Google have joined the EU-US Privacy Shield agreement, and pursuant to the European Commission decision of 12 July 2016 IP/16/216, the transfer of personal data to entities based in the USA that participate in this agreement ensures an adequate level of data protection under Art. 45 GDPR;
7.2. You have the possibility to obtain a copy of the personal data transferred to a third country.
8. As data subjects, you have the rights to:
8.1. access your data and receive copies;
8.2. data portability;
8.3. object to data processing;
8.4. rectify (correct) your data;
8.5. delete data or restrict processing;
8.6. lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
9. Information on voluntary data provision:
Providing personal data is voluntary but necessary for:
9.1. providing services based on concluded contracts and/or orders;
9.2. preparing offers and concluding contracts for other Administrator services.
II. Privacy
The privacy of visitors to our website (also referred to as the “site”) is very important to us, and we strive to protect it. This privacy policy explains how we handle your personal data.
Consent to use cookies according to this policy during your first visit to our website allows us to use cookies on each subsequent visit.
III. Cookies
Our website uses cookies, which are files containing an identifier (a string of letters and numbers) sent by a web server to a browser and stored by the browser. The identification data is sent back to the server every time the browser requests a page from the server.
Cookies can be permanent or session cookies:
1. permanent cookies – stored for a specified time on the device;
2. session cookies – automatically deleted after the browser is closed.
Cookies usually do not contain identifying information, but personal data we store about you may be linked to the information stored in and obtained from cookies.
The names of the cookies we use on our site and their purposes are as follows:
1. improving site usability;
2. analyzing website usage;
3. administering and managing the website;
4. fraud prevention and improving site security;
5. personalizing the site for each user.
Most browsers (Internet Explorer, Firefox, Chrome) allow you to refuse cookies. However, blocking all cookies may negatively affect your ability to use many websites. If you block all cookies, you will not be able to use all the features of our site.
You can also delete cookies already stored on your computer, but doing so may negatively impact the usability of many websites.
IV. Collection of personal data
The following types of personal data may be collected, stored, and used:
1. computer information, including IP address, geographical location, browser type and version, and operating system;
2. information about your visits and use of our website, including referral source, visit duration, page views;
3. information such as email address, name, and phone number that you provide when filling out the contact form on our site;
4. information entered when using services on our site;
5. information about the services you use;
6. information contained in all correspondence sent to us via email or through our site;
7. any other personal data you provide to us.
Before disclosing another person’s personal data, you must obtain that person's consent to disclose and process their data in accordance with these principles.
V. Use of submitted personal data
Personal data submitted to us through our site will be used for the purposes specified in section I.3, i.e., we may use your personal data for:
1. administration of the site and business;
2. personalizing the site;
3. providing services purchased through the site;
4. sending statements, invoices, and payment reminders;
5. sending non-marketing business correspondence;
6. sending email notifications at your request;
7. sending email newsletters at your request;
8. sending marketing information about our activities at your request;
9. handling your inquiries and complaints;
10. ensuring the security of our site and preventing fraud;
11. verifying compliance with the terms of use of our site.
Your privacy settings may be used to limit the publication of your information on our site and may be adjusted using privacy controls on the site.
VI. Disclosure of personal data
Your personal data may be disclosed to third parties mentioned in section I.6 in the following cases:
1. as required by law;
2. in connection with ongoing or potential legal or administrative proceedings or other regulated matters;
3. for establishing, enforcing, or defending our rights (including sharing information to prevent fraud);
4. to any persons who, in our reasonable opinion, may request disclosure from a court or competent authority if there is a high probability such court or authority will order disclosure;
5. to the extent necessary to perform a contract with you.
VII. International data transfers
Personal data we collect may be stored and processed in any country where we operate and may be transferred between those countries to enable use in accordance with this policy. Personal data you publish on our site or submit for publication may be accessible worldwide via the internet. We cannot prevent misuse of such data by others. You expressly consent to the data transfers described herein.
VIII. Personal data security
We take appropriate technical and organizational precautions to prevent loss, misuse, or alteration of your personal data. Your personal data is stored on secure servers (protected by password and firewall). Any electronic financial transactions made through our site will be protected by encryption technology.
However, internet transmission is potentially insecure, and the security of data transmitted this way cannot be guaranteed. You are responsible for keeping your password confidential.
IX. Changes/updates
This policy may be periodically updated by posting a new version on our site. Please check our site regularly for changes. We may notify you of policy changes via email.
Please inform us if you need to correct or update your personal data we hold.
X. Third-party websites
Our website contains hyperlinks to third-party websites and information about them. We have no control and accept no responsibility for the privacy policies and practices of third parties.