top of page

Privacy policy

GENERAL PROVISIONS

 

Using the website www.magdaposiadalo.pl is an unambiguous consent to the processing of personal data in accordance with art. 13 on Personal Data Protection. At the same time, each person has the right to access their personal data and the right to correct them if necessary.

 

The administrator of personal data collected via the website https://magdaposiadalo.pl is

Magda Posiadało

Contact: info@magdaposiadalo.pl

​

Personal data collected by the Administrator via the website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), hereinafter referred to as the GDPR and the Personal Data Protection Act of May 10, 2018.

 

FOR WHAT PURPOSE I PROCESS YOUR PERSONAL DATA

 

The data will be processed for the purpose of:

 

Communicating with you , including answering a question provided by you via the contact form, e-mail, Messenger, etc; The data will be processed based on the legitimate interest of the Administrator in the form of communication with website users. Your data will be processed no longer than until you object or the business purpose ceases to exist. However, I make sure that your data is processed no longer than until the end of the year in which the correspondence with you was legible, and after that time may be processed during the period of limitation of any claims.

​

Take the steps necessary to prepare an offer at your request or to conclude and perform the contract;  Your data will be processed in connection with the necessity of this data to conclude and perform the contract with you for the duration of the steps preceding the conclusion of the contract, as well as for the duration of its implementation. In the case of data processed for the purpose of concluding a contract, this data will be processed no longer than until the end of the calendar year following the year in which you last contacted me regarding its conclusion.

​

Newsletter dispatch , including information about new blog entries, services, products, promotions;

The data will be processed based on the legitimate interest of the Administrator for the purpose of marketing the Administrator's products and services (Article 6 (f) of the GDPR). Your data will be processed no longer than until you object, withdraw your consent (Article 10 of the Act on the provision of electronic services) or the end of the business purpose - whichever occurs first. For commercial communication purposes, however, I need your consent pursuant to Art. 10 of the Act on the provision of electronic services. You can withdraw it at any time by contacting me.

fulfillment of my legal and tax obligations (applies to a situation where you became a customer and provided data for the invoice); the data will be stored for no longer than 6 years;

pursuing claims and defending against claims based on the Controller's legitimate interest - for the period of limitation of claims.

* Periods in years are counted from the end of the year in which the processing of personal data was completed in connection with the contract / legal obligation. This serves to streamline the process of deleting personal data.

 

WHAT PERSONAL DATA I PROCESS

 

The administrator may process the following personal data of the user:

First name and last name,

Date of birth,

Address

E-mail adress,

Phone number.

​

PERIOD OF ARCHIVING YOUR PERSONAL DATA

 

Users' personal data is stored by the Administrator:

if the basis for data processing is the performance of the contract, as long as it is necessary to perform the contract, and after that time for a period corresponding to the period of limitation of claims. Unless a special provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to running a business - three years.

 

If the basis for data processing is consent, as long as the consent is not revoked, and after revocation of consent for a period of time corresponding to the period of limitation of claims that may be raised by the Administrator and which may be raised against him. Unless a special provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to running a business - three years.

 

When using the website, additional information may be downloaded, in particular: the IP address assigned to the user's computer or the external IP address of the Internet provider, domain name, browser type, access time, type of operating system.

Navigation data may also be collected from users, including information about links and links in which they decide to click or other activities undertaken on the website. The legal basis for this type of activity is the Controller's legitimate interest (Article 6 (1) (f) of the GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.

Providing personal data by the user is voluntary.

Personal data will also be processed in an automated manner in the form of profiling, provided that the user agrees to it pursuant to art. 6 sec. 1 lit. a) GDPR. The consequence of profiling will be assigning a profile to a given person in order to make decisions about him or to analyze or predict his preferences, behaviors and attitudes.

The administrator takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are:

processed in accordance with the law,

collected for specified, lawful purposes and not subjected to further processing inconsistent with these purposes,

factually correct and adequate in relation to the purposes for which they are processed and stored in a form that allows the identification of persons to whom they relate, no longer than it is necessary to achieve the purpose of processing.

 

SHARING YOUR PERSONAL DATA

 

We transfer your data to other entities only when it is necessary for, for example, the performance of a contract with you or the implementation of another processing purpose. If necessary, we transfer your personal data to the following recipients: entities providing hosting, IT and accounting services, providing the newsletter sending service, invoicing service and other entities cooperating in the performance of the contract with you or sent inquiries (to the extent necessary for the implementation of the purpose of processing).

As a rule, data will not be transferred outside the EEA. If necessary, this data will be transferred only to entities that have joined the "Privacy Shield" agreement.

 

Users' personal data are transferred to service providers used by the Administrator when running the website. Service providers to whom personal data are transferred, depending on contractual arrangements and circumstances, or are subject to the Administrator's instructions as to the purposes and methods of data processing (processors) or independently define the purposes and methods of their processing (administrators).

Users' personal data is stored only within the European Economic Area (EEA).

In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Administrator. This applies to the following groups of recipients:

  • hosting company on an entrustment basis

  • couriers

  • postal operators

  • insurers

  • payment operators

  • comment system operators

  • operators of online chat solutions

  • companies providing marketing services to the Administrator

 

 

THE RIGHT TO CONTROL, ACCESS AND CORRECT YOUR DATA

​

In connection with the GDPR, you have the right to:

  • access to your personal data;

  • rectification of personal data;

  • deletion of personal data;

  • restrictions on the processing of personal data;

  • object to the processing of personal data;

  • transferring personal data,

  • If the processing of personal data is based on your consent, you can withdraw this consent at any time - by sending a request to the Administrator in this regard. If the processing of personal data was based on consent, its withdrawal does not make the processing of personal data unlawful up to that point.

​

If you believe that your personal data is being processed contrary to the applicable law, you have the right to lodge a complaint with the President of the Personal Data Protection Office. In this case, however, I encourage you to contact me to clarify your doubts.

The data subject has the right to access their personal data and the right to rectify, delete, limit processing, the right to transfer data, the right to object, the right to withdraw consent at any time without affecting the lawfulness of the processing that has been carried out. on the basis of consent before its withdrawal.

Legal basis of the user's request:

  • Access to data - art. 15 GDPR

  • Data rectification - art. 16 GDPR.

  • Deletion of data (the so-called right to be forgotten) - art. 17 GDPR.

  • Restriction of processing - art. 18 GDPR.

  • Data transfer - art. 20 GDPR.

  • Objection - Art. 21 GDPR

  • Withdrawal of consent - art. 7 sec. 3 GDPR.

In order to exercise the rights referred to in point 2, you can send an appropriate e-mail to the following address: info@magdaposiadalo.pl

In the event of a user having the right resulting from the above rights, the Administrator fulfills the request or refuses to comply with it immediately, but no later than within one month after receiving it. However, if - due to the complexity of the request or the number of requests - the Administrator will not be able to meet the request within one month, it will meet them within the next two months, informing the user in advance within one month of receiving the request - about the intended extension of the deadline and its reasons.

If it is found that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office

​

INFORMATION ABOUT COOKIES

 

The website uses cookies.

Cookie files (so-called "cookies") are IT data, in particular text files, which are stored on the Website User's end device and are intended for using the Website's pages. Cookies usually contain the name of the website they come from, the storage time on the end device and a unique number.

The entity that places cookies on the Website User's end device and obtains access to them is the Website operator.

Cookies are used for the following purposes:

maintaining the Website user's session (after logging in), thanks to which the user does not have to re-enter the login and password on every subpage of the Website;

achieving the goals set out above in the section "Important marketing techniques";

The Website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User's end device until logging out, leaving the website or turning off the software (web browser). Persistent cookies are stored on the User's end device for the time specified in the cookie file parameters or until they are deleted by the User.

Software for browsing websites (web browser) usually allows cookies to be stored on the User's end device by default. The Website Users can change the settings in this regard. The web browser allows you to delete cookies. It is also possible to automatically block cookies.Detailed information on this subject can be found in the help or documentation of the web browser.

Restrictions on the use of cookies may affect some of the functionalities available on the Website pages.

Cookies placed on the Website User's end device may also be used by entities cooperating with the Website operator, in particular the following companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

 

COOKIES MANAGEMENT - how to express and withdraw consent in practice?

 

If the user does not want to receive cookies, he may change the browser settings. We reserve that disabling cookies necessary for authentication processes, security, maintaining user preferences may make it difficult, and in extreme cases may prevent the use of websites.

In order to manage cookie settings, select the web browser you use from the list below and follow the instructions:

  • Edge

  • Internet Explorer

  • Chrome

  • Safari

  • Firefox

  • Opera

  • Mobile devices:

  • Android

  • Safari (iOS)

  • Windows Phone

 

FINAL PROVISIONS

 

The administrator uses technical and organizational measures to ensure protection of the processed personal data appropriate to the threats and categories of data protected, in particular, protects the data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of applicable regulations and change, loss, damage or destruction.

The administrator provides appropriate technical measures to prevent the acquisition and modification by unauthorized persons of personal data sent electronically.

In matters not covered by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply accordingly.​

​​​​​​​​​

bottom of page