We hereby inform you that we process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”), as well as Polish regulations issued in connection with GDPR, including the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2019, item 1781, as amended).
The purpose of this Privacy Policy is to present the regulations and rules under which your personal data is processed and to indicate the basic rights related to the processing of your personal data by us.
Data Controller
The controller of your personal data is Złoty Liść Sp. z o.o., with its registered office in Warsaw, ul. Fosa 19A, 02-768 Warsaw, Poland, registered in the National Court Register maintained by the District Court for the Capital City of Warsaw, XX Commercial Division of the National Court Register, under KRS number 0001074252, NIP 9512584380 (hereinafter referred to as the “Controller”).
The Controller has not appointed a Data Protection Officer.
The Controller processes the following types of personal data: name and surname, phone number, email address, correspondence address.
Your personal data is collected directly from you when you consent to receive commercial offers via email or when you consent to be contacted via telecommunication terminal devices (e.g., phone).
Your personal data will be processed for the following purposes:
- To conclude and execute a contract, including issuing an invoice or receipt and providing the service (scope of personal data: name, surname, correspondence address, email address, phone number) (basis: Article 6(1)(b) GDPR).
- To send commercial information via email and to use telecommunication terminal devices to contact you for direct marketing purposes based on your voluntary consent (scope of personal data: name, surname, email address, phone number) (basis: Article 6(1)(a) GDPR).
- For purposes arising from the legitimate interests of the Controller, such as establishing, defending, and pursuing claims, creating summaries, analyses, and statistics for the Controller’s internal needs, adjusting the content of the Controller’s services (e.g., websites) to your needs, ensuring the security of these services, continuously improving them, and handling inquiries and complaints about the Controller’s products and services (scope of personal data: name, surname, correspondence address, email address, phone number) (basis: Article 6(1)(f) GDPR).
If the processing of your personal data is to be carried out for purposes other than those indicated above, it will be done each time after obtaining your consent for the processing of personal data, to the extent and for the purpose specified in that consent (basis: Article 6(1)(a) GDPR).
Browsing the content of the website does not require providing personal data other than automatically collected information about connection parameters.
Your data is not used by the Controller for automated decision-making, including profiling.
Data Sharing
Your personal data may be shared with:
- Authorized employees and associates of the Controller.
- Entities cooperating with us, in particular, providers of IT systems and IT services, and providers of services supplying the Controller with technical, IT, and organizational solutions, enabling the Controller to conduct business activities, including our websites and services provided through them (in particular, software providers for our websites, email and hosting providers, software providers for business management and technical support).
- Entities providing customer service tools, accounting, legal, and advisory services supporting the Controller’s accounting.
- Providers of social media plugins, scripts, and tools that enable the integration of the website and services provided through it with the services of external social media portals.
- Entities authorized under applicable laws.
Transfer of Personal Data to Third Countries or International Organizations
Your personal data will not be transferred to a third country or international organization, i.e., outside the EEA.
Data Processing Period
The period of processing your personal data depends on the purpose for which the data is processed:
- When processing based on consent, including for marketing purposes, until you withdraw your consent. Consent is voluntary, so you can withdraw it at any time, which will not affect the lawfulness of the processing carried out before the withdrawal.
- When data processing is necessary for the conclusion of a civil law contract, we will process the data until the expiration of any limitation periods for claims under the contract and in accordance with applicable legal regulations.
- In accordance with legal provisions that may oblige us to process data for a specified period (e.g., accounting records – 5 years from the end of the tax period).
- For the period necessary to protect our interests as the Data Controller.
- For direct marketing purposes until you object to such processing or we determine that the data is outdated.
- For other purposes based on our legitimate interest, for the duration of those purposes or until you object.
Your Rights
You have the right to:
- Access your data.
- Request rectification of data.
- Request deletion of data or restriction of its processing in cases provided by law.
- Obtain a copy of your data.
- Withdraw consent to data processing at any time.
- Object at any time to the processing of your personal data based on our legitimate interest, including for reasons related to your particular situation.
If you have concerns about how we process your data, please contact us first by email at kontakt@local-marketing.pl or at our registered office address indicated above.
- Lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, if you believe that we have violated GDPR regulations during the processing of your personal data.
Right to Object to “Marketing”
You have the right to object at any time and free of charge to the processing of your personal data for direct marketing purposes. If you exercise this right, we will cease processing your data for this purpose. To exercise this right, please contact us by email at kontakt@zloty-lisc.pl or at our registered office address indicated above.
Information on the Requirement/Voluntary Nature of Providing Data
Providing personal data is voluntary and depends on your consent, but it is necessary to receive commercial information via email and to use telecommunication terminal devices for direct marketing purposes. You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out based on consent before its withdrawal.
The Controller reserves the right to change this privacy policy.