Dear User!
This Privacy Policy is intended to provide you with information on how your personal data is processed during your visits to our website, as well as when you contact our company using the data and tools provided on the website. It serves to provide you with the information referred to in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”). The Privacy Policy is for informational purposes and does not impose any obligations on you (it is not a set of regulations or a contract).
Who is the controller of your personal data?
The controller of your personal data is the company operating under the name WIZJO Spółka z ograniczoną odpowiedzialnością with its registered office in Rzeszów, al. Wyzwolenia 2, 35-501 Rzeszów, share capital: PLN 100,000.00, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court in Rzeszów, XII Commercial Division of the National Court Register under KRS number: 0000801955, NIP: 5170401485, REGON: 384255478.
The Controller has appointed a Data Protection Officer – Patrycja Myśliwiec, who can be contacted via e-mail: iod@panmaterac.pl or in writing to the address: Wizjo Sp. z o.o., Al. Wyzwolenia 2, 35-501 Rzeszów with the note “Data Protection Officer”.
How do we care for the security of your personal data?
Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”) and other currently applicable personal data protection laws.
We apply technical and organizational measures required by national and EU law to ensure the protection of the processed personal data and to secure personal data against its disclosure to unauthorized persons, takeover by unauthorized persons, processing in violation of the regulations, as well as change, loss, or destruction.
Providing personal data is voluntary but necessary to use the website functionalities that require it, as well as to conclude a contract related to the use of our services and to issue accounting documents related to the concluded contract.
In a situation where the basis for processing personal data is consent, its absence will prevent us from taking the action to which this consent applies. You may withdraw your consent at any time; however, this will not affect the lawfulness of our processing of your personal data based on consent before its withdrawal.
For what purpose and on what basis do we process your personal data and how long will we store it?
We process your personal data specifically for the purpose of providing electronic services in connection with your use of our website. Your personal data may be processed by us for the following purposes:
1. Services provided electronically
Your personal data provided by you or other data collected in connection with your use of our website (such as, in particular: your IP address, request URL, device identifier, amount of time spent on individual pages, browser type, browser language, date and time of using the website, screen resolution, type and version of the operating system) are or may be processed by us for the following purposes and on the following legal bases:
a) provision of electronic services, based on a contract for the provision of electronic services, as well as taking action, at your request, before concluding the aforementioned contract (Art. 6(1)(b) GDPR),
b) possible establishment, exercise, or defense against claims that may arise in connection with your use of our website, as well as other purposes (e.g., archival purposes for the purpose of proving facts), which constitute our legitimate interest (Art. 6(1)(f) GDPR).
We will process your personal data for the period of providing electronic services, unless further data storage is justified by the statute of limitations for claims, results from generally applicable law, or is justified by our overriding interest resulting from the implementation of legitimate interests. In any case, the longer period of personal data storage shall prevail.
2. Marketing and website analytics
Your personal data provided by you or other data collected in connection with your use of our website are or may be processed by us for the following purposes and on the following legal bases:
a) marketing of our services, which constitutes our legitimate interest in conducting marketing activities (Art. 6(1)(f) GDPR), with the reservation that sending commercial information by us via telecommunications terminal equipment and automatic calling systems is possible only with your prior consent (providing this consent is voluntary but necessary for sending commercial information); in such a case, the basis for processing personal data may also be your consent (Art. 6(1)(a) GDPR),
b) creating summaries, analyses, and statistics, including reporting, service development planning, development work, and creating statistical models, which constitutes our legitimate interest in improving and developing the website (Art. 6(1)(f) GDPR),
c) possible establishment, exercise, or defense against claims that may arise in connection with your use of our website, as well as other purposes (e.g., archival purposes for the purpose of proving facts), which constitute our legitimate interest (Art. 6(1)(f) GDPR).
In the case of marketing activities conducted on the basis of consent, we will process your personal data until it is withdrawn. In the case of marketing activities conducted based on the premise of legitimate interest, until an objection is lodged, unless further storage (in both cases) is justified by the statute of limitations for claims, results from generally applicable law, or is justified by the Controller’s overriding interest resulting from the implementation of legitimate interests.
3. E-mail or telephone contact
Your personal data provided by you in connection with e-mail or telephone contact (i.e., data necessary to establish and maintain contact), as well as data collected in the course of further communication, are or may be processed by us for the following purposes and on the following legal bases:
a) responding to e-mail or telephone contact, which constitutes our legitimate interest (Art. 6(1)(f) GDPR),
b) taking action at your request before concluding a contract, if the ongoing communication concerns this (Art. 6(1)(b) GDPR),
c) possible establishment, exercise, or defense against claims that may arise in connection with your contact with our company, as well as other purposes (e.g., archival purposes for the purpose of proving facts), which constitute our legitimate interest (Art. 6(1)(f) GDPR).
We will process your personal data until the correspondence is conducted, unless further data storage is justified by the statute of limitations for claims, results from generally applicable law, or is justified by the Controller’s overriding interest resulting from the implementation of legitimate interests. In any case, the longer period of personal data storage shall prevail.
4. Social media
Your personal data that you leave when visiting our social media profiles (comments, likes, shares) are or may be processed by us for the following purposes and on the following legal bases:
a) managing profiles in social media and conducting marketing and promotional activities within these profiles, which constitutes our legitimate interest (Art. 6(1)(f) GDPR),
b) possible establishment, exercise, or defense against claims that may arise in connection with your use of our social media profiles, as well as other purposes (e.g., archival purposes for the purpose of proving facts), which constitute our legitimate interest (Art. 6(1)(f) GDPR).
We will process your personal data until the aforementioned purposes are achieved or until an objection is lodged, unless further data storage is justified by the statute of limitations for claims, results from generally applicable law, or is justified by the Controller’s overriding interest resulting from the implementation of legitimate interests. In any case, the longer period of personal data storage shall prevail. Information collected in this way by social media services may be used by these services for their own purposes, which you can learn more about in their privacy policies. Social media services may be independent controllers of this data or may act as joint controllers.
What are cookies?
Our website uses cookie technology and similar functionalities. Cookies are saved on the end device of the person visiting the website. Every person visiting the website has the option to choose the scope of using cookies and then give consent within the so-called “cookie banner” displayed during the first visit to the website.
Cookies constitute IT data, in particular text files, which are stored on the end device of the person visiting the website and are intended for using the website. Cookies usually contain the name of the website they come from, their storage time on the end device, and a unique number.
Cookies are used primarily to ensure the proper functioning of the website. Depending on the choice of the scope of using cookies by the visitor, cookies may also be used for other purposes, such as creating statistics that help understand how users use websites, which allows for improving their structure and content, as well as for marketing purposes involving, among others, reaching visitors who have previously visited the website with advertising messages while they use other websites or social portals (third-party cookies, i.e., from providers of tools used for this purpose by the Controller, may also be used in this regard).
Depending on the choice of the scope of using cookies, they collect various types of information which, as a rule, do not constitute personal data. However, some information collected in this way, depending on the type of cookies, may contain information allowing for the identification of the person visiting the website, in particular when combined with other data. This applies primarily to cookies whose use requires consent expressed by the person visiting the website. The remaining provisions of the Privacy Policy apply to such information, including, in particular, the rights of the data subject.
Detailed information regarding the scope and types of cookies used within the website can be found within the cookie banner displayed during the first visit to the website, as well as after clicking the “Cookie Settings” button. In the same way, the person visiting the website may at any time change their preferences regarding the use of cookies, including withdrawing previously granted consents, without affecting the lawfulness of the actions taken based on the consent before its withdrawal.
In terms of ensuring the proper functioning of the website, cookies are used on the basis of Art. 399 sec. 3 point 2 of the Electronic Communications Law. In other respects, obtaining and storing information using cookies takes place on the basis of the consent of the person visiting the website, expressed within the cookie banner displayed during the first visit to the website or as a result of changing settings after clicking the “Cookie Settings” button.
To the extent that cookies may contain information constituting personal data, the basis for their processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR) in the form of, among others, researching and analyzing traffic on the website for statistical purposes, as well as conducting marketing activities by the Controller or third parties. To the extent that these third parties will have direct access to this type of information, then the legal basis for such processing will be the legitimate interest of these third parties or separate consent expressed by the visitor (e.g., within the privacy settings of a social networking site). To the extent that information collected within cookies is necessary for the proper provision of electronic services within the website, the basis for processing such information is Art. 6(1)(b) GDPR.
Depending on the purposes and legal basis for processing personal data, information collected by cookies may be stored for different periods. Information about the storage period of information collected by individual cookies can be found within the cookie banner displayed during the first visit to the Website, as well as after clicking the “Cookie Settings” button. If the information collected within cookies constitutes personal data, it will generally be stored until an objection is lodged. Personal data may also be stored until the statute of limitations for claims or for the time required by law. In any case, the longer period of personal data storage shall prevail.
The website uses marketing and analytical tools from other providers who use cookies on the website (third-party cookies). The providers of these tools are the entities listed in the point below. More information on the cookies of these entities can be found in their privacy policies. Cookies from these third parties, who may be independent controllers or act as joint controllers with the Controller, may be stored on the visitor’s end device.
The website uses marketing and analytical tools provided by the following entities using external cookies:
Google Ireland Limited (Google Analytics, Google Ads),
Meta Platforms Ireland Limited (Facebook Pixel, Facebook Ads).
Some of the above-mentioned providers may store user data outside the European Economic Area. In such situations, your data will be transferred only to countries that ensure an adequate level of protection, and to countries that do not ensure an adequate level of protection, only if appropriate safeguards are provided, including, among others, based on standard contractual clauses adopted by the European Commission.
The website also uses additional Google Analytics features (Google Analytics Advertising Features). You can change this through the appropriate browser settings, but also through Google’s advertising preference settings.
What are your rights?
In connection with our processing of your personal data, you have a number of rights. You can exercise each of these rights by contacting our Data Protection Officer – Patrycja Myśliwiec, who can be contacted via e-mail: iod@panmaterac.pl or in writing to the address: Wizjo Sp. z o.o., Al. Wyzwolenia 2, 35-501 Rzeszów with the note “Data Protection Officer”.
You have the right to:
a) access your personal data and the right to demand its rectification, deletion, and restriction of processing. To the extent that the basis for processing is our legitimate interest, you have the right to object to the processing of your personal data,
b) to the extent that the basis for processing your personal data is consent, you have the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal,
c) to the extent that the basis for processing your personal data is consent or a contract, you also have the right to data portability, i.e., to demand to receive your personal data from us in a structured, commonly used format,
d) lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) in any case where you believe that the processing of personal data violates your rights.
To whom do we share your personal data?
Your personal data may be transferred to entities authorized to obtain personal data on the basis of legal provisions, as well as to entities to whom we entrust data on the basis of contracts regarding the provision of services related to the functioning of our website, including hosting services, marketing services, and the delivery of IT systems.
In certain cases, the Website uses Google reCAPTCHA to avoid the use of text fields by automated bots. For this reason, the Controller may disclose the IP address of the Client’s computer to Google Ireland Limited.
We may also transfer your personal data to providers of tools used for: conducting analytical research, creating statistics, tracking traffic on our website, and marketing automation.
Some entities providing services for us may store your data outside the European Economic Area. In such situations, your data will be transferred only to countries that ensure an adequate level of protection, and to countries that do not ensure an adequate level of protection, only if appropriate safeguards are provided, including, among others, based on standard contractual clauses adopted by the European Commission.