Valid from July 26, 2024.
INTRODUCTION
The Privacy Policy specifies how personal data of users who use services provided electronically via the website www.wypozyczalniaswiatla.pl (hereinafter "Services") are collected and processed and what rights the users whose personal data are processed have. The administrator of personal data is BLUE LIGHT based in Krakow, os. 2 Pułku Lotniczy 46/71, NIP: 6751798415. (hereinafter: "Administrator" or "Company"). In matters relating to personal data, please contact us by e-mail at kontakt@wypozyczalniaswiatla.pl or by traditional mail by sending a letter to the company address indicated above.
PERSONAL DATA PROTECTION
All personal data are processed by the Administrator in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (“GDPR”). The Administrator does not knowingly collect personal data from children under 16 years of age without obtaining the consent of their parent or guardian. In case of doubt, parents and guardians are asked to contact us at kontakt@wypozyczalniaswiatla.pl.
PURPOSE OF PROCESSING PERSONAL DATA
Users' personal data are processed by the Administrator for the following purposes:
providing the services used by the user (i.e. in order to perform the contract between the user and the Administrator) - refers to maintaining a user account on the Rent and Lend website and using the services provided by the website;
providing services to which the user has consented* - refers to the sending of the newsletter (hereinafter referred to as the "Newsletter"). * The user's consent may be withdrawn at any time, which will be tantamount to discontinuing the services provided on its basis.
CATEGORIES OF PERSONAL DATA PROCESSED
In the case of providing the service of maintaining a user account, the following categories of personal data are obligatorily collected: a) e-mail address, b) name and surname, c) delivery address, d) telephone number, e) and in the case of entrepreneurs or entities that are not natural persons also data necessary to issue an invoice, i.e. NIP number, company name and business address. Failure to provide the above data will prevent the provision of services to the user. Each User also has the option of creating an account using the login mechanisms provided by Facebook. In such a case, he provides the following data: a) name and surname, b) e-mail address, c) profile photo from Facebook. Failure to provide the above data will prevent the provision of services to the user. As part of the provision of the Newsletter service, it is necessary to provide the following data: a) e-mail address; b) name, c) city of residence. Failure to provide the above data will prevent the provision of services to the User. They are stored on the User's end device for the period specified in the cookie parameters or until they are deleted by the User. Cookie technology is not used to obtain any personal data of visitors to the Website. The customer may at any time disable the option of accepting cookies in the settings of his web browser. However, this may cause irregularities in the operation of the Website.
Below you will find links to information on how to disable cookies in the most popular web browsers: Chrome, Firefox, Safari, Microsoft Edge. Cookies are used to: Create statistics that help understand how the Website is used and improve its content; Personalization of advertising materials on the Google network after determining the Customer's profile and transmitting them to server partners. Personalization of advertising materials on Facebook after determining the Customer's profile and transmitting them to server partners. The Administrator may use the above data to generate statistics helpful in administering the Website and to improve the quality of the services offered. These summaries are aggregated and do not contain data identifying persons visiting the Website. These data are not disclosed to other persons and entities. Using the Website involves sending queries to the server on which the Website is stored. Sent queries are saved as server logs. Collected server logs, including: Client's IP address, query arrival time, first line of the http request, http response code, number of bytes sent by the server, information about the client's browser, information about errors that occurred during the HTTPS transaction, information about the type of devices are stored for an indefinite period of time. Server logs are not used to identify the User.
LOCATION OF DATA STORAGE
Users' personal data collected by the Administrator are stored in the EU, on secured servers of trusted partners. The data necessary to provide the Newsletter service is transferred to our partner in the USA, i.e. Mailchimp (The Rocket Science Group, LLC, 675 Ponce de Leon Ave, NE Suite 5000, Atlanta, GA 30308 USA), and in the case of logging in via Facebook, is they are also processed by Facebook (Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) The Administrator is responsible for implementing appropriate technical and organizational measures to protect personal data against unlawful processing, loss, destruction or damage . The Administrator ensures that personal data is processed securely and in accordance with this Privacy Policy.
DATA STORAGE PERIOD
Users' personal data are processed for as long as necessary to meet the purposes set out in this Policy. In some exceptional situations, longer retention periods may be required by law. If the processing of the user's personal data is no longer necessary to provide the services indicated above, the Administrator is obliged to delete or anonymize them. In particular: 1. data related to a specific service will be processed for the duration of the contract regarding access to this service (User Account), and then for the period required for legal purposes (i.e. in the event of a potential risk of claims regarding the Company's services - the period storage may be up to 10 years from the due date of the claim (limitation period), or the duration of court proceedings and the period of enforcement of judgments) or for settlement purposes, 2. data collected on the basis of the user's consent (Newsletter) will be processed for the period for which the consent has been granted, but no longer than is consistent with the purpose of processing, and then for the period required for legal or settlement purposes, 3. in the event of contact with the Administrator, user data, including correspondence with the user, will be processed for as long as necessary needed to provide assistance, and then for the period required for legal or settlement purposes.
RESPONSIBILITY
The Administrator is not responsible for the use by other users or third parties of any personal data that has been made publicly available by the users themselves using the website www.wypozyczalniaswiatla.pl.
TRUSTED PARTNERS (DATA PROCESSING ENTITIES)
Personal data may be made available to the Administrator's Trusted Partners who help provide services to users (e.g. sending the Newsletter). The administrator ensures that he always provides partners with the minimum information necessary to achieve the goals for which the cooperation was established. Trusted Partners may have potential or actual access to limited user data and process it on behalf of the Administrator. We share personal data covered by the following Privacy Policy with the following Trusted Partners, who may process them on behalf of the Administrator only for the purposes specified below: partners responsible for hosting and newsletter; partners providing the Administrator with tools for internal management and data sharing; partners providing assistance in data analysis by providing analytical tools; partners providing assistance in managing the Administrator's newsletter and electronic communications by providing appropriate tools; partners handling the Administrator's accounting and settlements.
USER RIGHTS
In accordance with applicable law, persons whose data are processed have the following rights: the right to access the user's personal data processed by the Administrator, the right to request the removal of the User's personal data from the Administrator's database, the right to request rectification/correction of the user's personal data in justified cases, the right request to limit the processing of the user's personal data, the right to transfer the user's personal data to another entity, the right to lodge a complaint with the appropriate data protection authority. In order to exercise the rights indicated above, please contact us by e-mail at kontakt@wypozyczalniaswiatla.pl. If you have any questions or doubts regarding the protection of personal data, please contact the Administrator: kontakt@wypozyczalniaswiatla.pl. In order to lodge a complaint with the appropriate personal data protection authority, the user may contact the local personal data protection authority or the Polish President of the Personal Data Protection Office ("PUODO") in Poland.
FINAL PROVISIONS
This Privacy Policy may be changed at any time, in particular if necessary to reflect changes made as part of the Services provided by the Administrator or changes in applicable law.
