Privacy Policy

§ 1 General provisions

1. The administrator of the personal data is A-Concept Sp. z o.o., headquartered at 11/4 Targ rybny Street, 80-838 Gdańsk, with NIP number: 583-317-85-75 and KRS number: 0000553358. A-Concept Sp. z o.o. can be contacted in writing at the address indicated in the preceding sentence or by e-mail at biuro@a-concept.pl.

2. Pursuant to Article 37 of RODO, the company “A-Concept Sp. z o.o.” has not appointed a Data Protection Officer.

3. Privacy policy is an integral part of the Terms and Conditions. By using the services we offer, you entrust us with your information. This document serves only as an aid to understanding what information and data are collected and for what purpose and for what they are used. This data is very important to us, so please read this document carefully as it sets out the rules and ways of processing and protecting your personal data. This document also defines the rules for the use of “Cookies”.

4. We would like to inform you that we comply with the principles of personal data protection and all legal regulations provided by the Personal Data Protection Act and the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

5. At the request of the person whose personal data is being processed, we provide comprehensive information on how we use his or her personal data. We always make a clear effort to inform you about the data we collect, how we use it, what purposes it is intended to serve and to whom we transfer it, what protection we provide for this data when it is transferred to other entities, and provide information on institutions to contact in case of doubt.

§ 2 Privacy rules

1. We respect your privacy. We want to guarantee your convenience in using our services.

2. We value the trust you place in us by entrusting us with your personal information to perform our services. We always use your personal information fairly and in such a way as not to disappoint your trust, only to the extent necessary to perform the services.

3. As a User, you have the right to be fully and clearly informed about how we use your personal data and for what purposes it is necessary. We always clearly inform you about the data we collect, how and to whom we share it, and provide information about who to contact if you have concerns.

4. If you have any doubts about our use of your personal information, we will immediately take steps to clarify and resolve such doubts. We will answer all related questions in a comprehensive manner.

5. We will take all reasonable measures to protect your data from improper and uncontrolled use.

6. The legal basis for processing your personal data is:

• 6(1)(a) the data subject has consented to the processing of his/her personal data for one or more specified purposes

• 6(1)(b)Processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract

• 6(1)(c) processing is necessary for the fulfillment of a legal obligation incumbent on the controller

• 6(1)(ep) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

• 6(1)(f)-processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party

7. Your personal data related to the conclusion and execution of the contract will be processed for the period of its execution, as well as for a period no longer than provided by law, including the provisions of the Civil Code and the Accounting Act, i.e. no longer than 10 years, counting from the end of the calendar year in which the last contract was executed.

8. Your personal data processed for the purpose of entering into and performing future contracts will be processed until you object.

9. You are entitled to: access your personal data and receive a copy of the personal data being processed, rectify your inaccurate data; request deletion of your data (right to be forgotten) in the circumstances provided for in Article 17 of the RODO; request restriction of data processing in the cases indicated in Article 18 of the RODO, object to data processing in the cases indicated in Article 21 of the RODO, portability of data provided, processed by automated means.

10. If you believe that your personal data is being processed illegally, you can file a complaint with the supervisory authority (Office for Personal Data Protection, 2 Stawki Street, Warsaw). If you need additional information related to data protection or wish to exercise your rights, please contact us by mail at the mailing address.

11. We comply with all applicable data protection laws and regulations and will cooperate with data protection authorities and authorized law enforcement agencies. In the absence of data protection regulations, we will comply with generally accepted data protection principles, rules of social intercourse as well as established customs.

12. If you have any questions, you are welcome to contact us using the page from which you were redirected to this Privacy Policy. Your request for contact will be promptly forwarded to the appropriate appointed person.

13. To make it easier for us to answer or respond to the information provided, please provide your name.

§ 3 Scope and purpose of personal data collection

1. We process the necessary personal data to provide services and for accounting purposes and only such.

2. We collect, process and store the following user data:

• name,

• electronic mail (e-mail) address,

• information about the web browser you are using,

• other personal data voluntarily provided to us.

3. Provision of the above data by you is completely voluntary, but also necessary for the full implementation of services.

4. We may transfer personal data to servers located outside your country of residence or to affiliated entities, third parties based in other countries including countries in the EEA (European Economic Area, EEA – free trade zone and Common Market, comprising the countries of the European Union and the European Free Trade Association EFTA) for the purpose of processing personal data by such entities on our behalf in accordance with the provisions of this Privacy Policy and applicable laws, customs as well as data protection regulations.

5. Access to your data may have entities that provide services necessary for the operation of the service, i.e.:

• Hosting companies, providing hosting or related services to the Administrator

• Companies through which the Newsletter service is provided

• IT service and support companies performing maintenance or responsible for maintaining IT infrastructure

§ 4 Cookie Files

1. Uses cookies or similar technologies (hereinafter collectively referred to as “cookies”) by which is meant computer data, in particular text files, intended for the use of the website and stored in the end devices of Users browsing the sites. Information collected using cookies allows customization of services and content to individual needs and preferences of users, as well as used to compile general statistics on the use of the sites by users. The data collected using cookies is collected for the sole purpose of performing certain functions for the benefit of Users and is encrypted in a way that prevents unauthorized access.

2. We use cookies on our site:

• Internal cookies – files placed and read from the User’s Device by the Service’s data communications system

• External Cookies – files placed and read from the User’s Device by the ICT systems of External Services. The scripts of External Services that can place Cookies on User Devices have been knowingly placed on the Site through scripts and services made available and installed on the Site

• Session cookies – files placed and read from the User Device by the Service during a single session of a given Device. When the session ends, the files are deleted from the User Device.

• Persistent Cookies – files placed and read from the User Device by the Website until they are manually deleted. The files are not deleted automatically after the end of the Device session unless the configuration of the User Device is set to delete cookies after the end of the Device session.

3. As part of our website, the following types of cookies are used due to their necessity for the services:

• necessary cookies to enable the use of services available on the website, in particular authentication cookies used for services that require authentication;

• security cookies, in particular used to detect authentication abuse;

• Performance cookies, which allow you to collect information about how you use the websites;

4. Web browsing software (web browser) usually allows cookies to be stored on the end device by default. The user browsing the website may independently and at any time change the settings for cookies, specifying the conditions for storing and accessing cookies on his/her device. The customer may change the settings referred to in the preceding sentence using the settings of his/her web browser. These settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the settings of the Internet browser, or to inform about the placement of cookies on the User’s device each time. Detailed information about the possibility and methods of handling cookies is available in the settings of your software (web browser).

5. By using the website, without changing your cookie settings, you consent to the storage of cookies. The customer can always withdraw consent by changing the cookie settings

§ 5 Rights and obligations

1. We have the right and, in cases provided for by law, the statutory obligation to disclose some or all information about your personal data to public authorities or third parties who make such a request for information under the applicable provisions of Polish law.

2. The user has the right to:

• Access to personal dataUser has the right to obtain access to his/her personal data, exercised upon request submitted to the Administrator

• Rectification of personal dataUser has the right to request the Administrator to promptly rectify personal data that is inaccurate and/or to complete incomplete personal data, exercised upon request submitted to the Administrator

• deletion of personal dataThe User has the right to demand from the Administrator immediate deletion of his/her personal data, carried out upon request submitted to the Administrator In the case of user accounts, deletion of data consists in anonymization of data enabling identification of the User. The Administrator reserves the right to withhold the execution of a request for data deletion in order to protect the legitimate interest of the Administrator (e.g. when the User has violated the Terms of Use or the data was obtained as a result of conducted correspondence). In the case of the Newsletter service, the User has the possibility to delete his/her personal data by himself/herself, using a link placed in each e-mail message sent.

• Restriction of personal data processingYou have the right to restrict the processing of your personal data in the cases indicated in Article 18 of RODO, including but not limited to questioning the correctness of your personal data, exercised upon request submitted to the Administrator

• Transfer of personal dataUser has the right to obtain from the Administrator, personal data concerning the User in a structured, commonly used machine-readable format, executed upon request submitted to the Administrator

• object to the processing of your personal dataYou have the right to object to the processing of your personal data in the cases specified in Article 21 RODO, exercised upon request submitted to the Administrator

• lodging a complaintThe user has the right to lodge a complaint with the supervisory authority dealing with personal data protection.