Privacy Policy
I. General provisions
- Privacy policy defines how personal data of Users necessary for the provision of electronic services through the website [warrens .pl] (hereinafter referred to as the "Service") are collected, processed, and stored.
- The Service collects only the personal data necessary for the provision and development of the services offered within it.
- The personal data collected through the Service is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
II. Data Controller
The Data Controller for the personal data collected through the Service is HOLO Sp. z o.o., with its registered office in Warsaw (00-722), Podchorążych 71/7, VAT ID: 7010334025, REGON: 145989725, email address: [IOD@warrens.pl] (hereinafter referred to as the "Controller").
III. Purpose of collecting personal data
- The collected data is sent in two ways:
- information provided directly and voluntarily by the User, e.g. in contact forms (e.g. when asking a question, downloading certain publications, subscribing to newsletters);
- information obtained during the use of websites by Users. The servers automatically save the following User data:
- time of sending the response by the server,
- user's name and e-mail address provided when sending a message via the contact form,
- the IP address of the User's device,
- the User's request (address of the page the User entered),
- "referrer link" address if the website was accessed via a link,
- information about the version of the User's web browser (websites),
- information about the version of the User's operating system.
- The provision of data is voluntary but necessary to conclude an agreement or utilize other functionalities of the Service.
IV. Type of personal data processed
The Administrator may process the User's personal data: first name, last name, residential address, email address, and phone number.
V. The period of personal data processing
Users' personal data will be processed for a period:
- when the basis for data processing is the performance of the contract - until the statute of limitations for claims after its performance,
- when the basis for data processing is consent - until the consent is revoked, and after the consent is revoked, until the limitation period for claims.
In both cases, the limitation period is 6 years, and for claims regarding periodic benefits and claims related to conducting business activity, it is 3 years (unless a specific provision states otherwise).
VI. Sharing personal data
- The personal data of Users may be transferred to entities affiliated with the Administrator, its subcontractors, and entities cooperating with the Administrator, such as courier/postal service companies, law firms, and accountants.
- The personal data of Users will not be/will be transferred outside the European Economic Area (EEA).
VII. User Rights
- The Service User has the right to: access their personal data, rectify them, erase them, restrict processing, data portability, object to processing, and withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).
- To submit a request regarding the exercise of the rights mentioned above, the User should send it to the following address: [IOD@warrens .pl].
- The Administrator fulfills or refuses to fulfill the request promptly - within a maximum period of one month from its receipt.
- The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing violates their rights and freedoms under the GDPR (General Data Protection Regulation).
VIII. Cookies
- The Service collects information using cookies – session cookies, persistent cookies, and third-party cookies.
- Collecting cookies supports the proper provision of services on the website and serves statistical purposes.
- The User can define the scope of access for cookies on their device in the browser settings.
IX. Automated decision making and profiling
- User data cannot be processed in an automated manner that would result in any decisions being made concerning them.
- User data may be profiled for the purpose of content customization and personalized offers after obtaining their consent.
X. Final Provisions
- The Administrator has the right to make changes to the Privacy Policy, ensuring that the rights of the Users will not be restricted.
- Information about the implemented changes will appear in the form of a notice available on the website.
- In matters not regulated in this Privacy Policy, the provisions of the GDPR and Polish law shall apply.