Dear User, on May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as “RODO”, “ORODO”, “GDPR” or “General Data Protection Regulation”) became effective. Therefore, we would like to inform you about the processing of your data and the rules under which it takes place after May 25, 2018.
WHAT KIND OF DATA ARE WE TALKING ABOUT?
We are talking about personal data entered by you in forms and collected during your use of our website, including those stored in cookies.
WHO WILL BE THE ADMINISTRATOR OF YOUR PERSONAL DATA ?
The administrator of your data will be: Cruz Group sp. z o. o. , based in Święty Marcin Street 29/8 61-806 Poznań, NIP: 7831711842, email@example.com.
WHY DO WE WANT TO PROCESS YOUR PERSONAL DATA ?
We process your personal data in order to:
to enable you to contact us via forms
to provide you with a more secure service, to detect robotic activities, fraud and abuse, and to make measurements that allow us to create better, more customized services for you.
TO WHOM IS YOUR PERSONAL DATA SHARED ?
Data is subject to sharing with external entities only within the limits of the law. Data will not be transferred to external entities.
User data may be transferred outside the European Union – to third countries.
Due to the fact that the Administrator uses external providers of various services, e.g. Facebook and subsidiaries, Google, Microsoft, Apple, etc., User data may be transferred to the United States of America (USA) in connection with their storage on American servers (in whole or in part). Google and Facebook use the compliance mechanisms provided by the RODO (e.g., certificates) or standard contractual clauses for their services. They will only be transferred to recipients that guarantee the highest data protection and security, including by:
cooperating with processors of personal data in countries for which a relevant decision of the European Commission has been issued,
applying standard contractual clauses issued by the European Commission (as is the case with Google, for example),
application of binding corporate rules approved by the relevant supervisory authority, or to those whose personal data the User has consented to transfer.
Apple (PL): https://www.apple.com/pl/legal/privacy/
Google LLC: https://policies.google.com/privacy?hl=p l
Facebook Ireland Ltd.: https://www.facebook.com/privacy/explanation
Currently, the services offered by Google and Facebook are mainly provided by entities located in the European Union. You should, however, refer to the privacy policies of these providers each time in order to receive up-to-date information regarding data protection.
LEGAL GROUNDS FOR DATA PROCESSING
Personal data shall be processed in accordance with the principles in force:
– in part (a) on the basis of Article 6(1)(a) of the General Data Protection Regulation of April 27, 2016. (the data subject has consented to the processing of his/her personal data for one or more specified purposes)
– In part (b) on the basis of Article 6(1)(f) of the General Data Protection Regulation of April 27, 2016. (processing is necessary for purposes arising from legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child)
FOR HOW LONG WILL YOUR DATA BE PROCESSED?
We process your personal data for the time it is needed to achieve the stated purpose or until you withdraw your consent .
RIGHTS OF DATA SUBJECTS
In accordance with the RODO, you have:
(a) the right to access your data and receive a copy of it;
(b) the right to rectify (amend) your data;
(c) the right to delete your personal data;
(d) the right to restrict or object to the processing of your data;
e) if you believe that we have violated the rules for processing your personal data in any way, you have the right to file a complaint directly with the supervisory authority of the President of the Office for Personal Data Protection.
In exercising this right, you should provide a full description of the situation that has arisen and indicate what action you consider to have violated your rights or freedoms. The complaint should be submitted directly to the supervisory authority at: 2 Stawki Street, 00-193 Warsaw.
Contact about personal data firstname.lastname@example.org
WHAT EXACTLY IS THE ACQUISITION OF DATA ?
The service performs functions of obtaining information about users and their behavior in the following ways:
INFORMATION IN FORMS.
The Service collects information voluntarily provided by the user.
In addition, the Service may record information about the parameters of the connection (time stamp, IP address)
The data in the form is not shared with third parties other than with the user’s consent.
The data provided in the form is processed for the purpose resulting from the function of the specific form, such as to contact us.
Data provided in the forms may be transferred to entities technically performing some of our services.
INFORMATION ABOUT COOKIES.
We would like to inform you that we use cookie technology on our websites, i.e. computer files to record information about which pages you have visited and what you did on them.
Cookies are simply information stored by your web browser. Cookies allow websites to remember your preferences and settings, such as your city setting in the weather forecast. Cookies do not identify personal information. A cookie does not even have the slightest effect on your software and hardware. These cookies are used by for purposes of:
Authentication – primarily to identify the logged-in user in order, for example, to display the right information to him/her, corresponding to his/her interests;
Providing security – necessary to support security mechanisms on the website, e.g. to protect against data leakage;
We may use the popular Google Analytics software, in which case the website places a special code on the user’s computer to collect data. However, at any time you can disable data collection by Google Analytics software by making appropriate changes to your browser settings.
Please be advised that web browsers usually allow users to control cookies in their settings. Restricting cookies in these settings may result in a degradation of the website’s performance.
Information about certain user behavior is subject to logging at the server layer. This data is used exclusively for the administration of the site and to ensure the most efficient operation of the hosting services provided.
Viewed resources are identified by URLs. In addition, the record may be subject to:
time of arrival of the request,
time of sending the response,
the name of the client’s station – identification carried out by the HTTP protocol,
information about errors that occurred during the execution of HTTP transactions,
URL address of the page previously visited by the user (referer link) – in case the user accessed the Website through a link,
information about the user’s browser,
IP address information.
The above data are not associated with specific browsers.
The above data are used only for server administration purposes.
MANAGEMENT OF COOKIES – HOW TO GIVE AND WITHDRAW CONSENT IN PRACTICE?
The collection of cookies on your computer can be disabled or limited by selecting the appropriate settings in individual browsers. We stipulate that disabling cookies necessary for authentication processes, security, maintenance of user preferences may hinder, and in extreme cases may make it impossible to use the websites
To manage your cookie settings, select your browser/system from the list below and follow the instructions: