PRIVACY POLICY AND PERSONAL DATA PROTECTION

PRIVACY POLICY

This Privacy Policy sets forth the rules of protection of personal data processed by Unitop Sp. z o.o. in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR). 

CONTROLLER OF DATA:

The controller of your personal data is UNITOP Sp. z o.o. with its registered office in Łódź (90-959), ul. Andrzeja Struga 61. You may contact Unitop Sp. z o.o. by e-mail to unitop@unitop.com.pl or in writing to Unitop Sp. z o.o. with its registered office in Łódź (90-959), ul. Andrzeja Struga 61.

Unitop Sp. z o.o. is also the controller of data of visitors of the controller’s social media profiles (Facebook, Instagram, Linkedin).

PURPOSES, LEGAL BASES AND PERIODS OF DATA PROCESSING:

UNITOP Sp. z o.o. processes your personal data for the following purposes:

Purpose of processingLegal basisPeriod of processing
handling of your enquiries (e.g. sent via the online form)Article 6(1)(b) of the GDPR Until the contract/service is performed and until any legal claims become time-barred
conducting marketing activities in respect of you, including direct marketing of own servicesArticle 6(1)(a) of the GDPRUntil consent to processing of personal data is withdrawn and until any legal claims become time-barred
contacting you for purposes connected with permissible marketing activities through available communication channels, in particular and with your consent – by e-mail and telephoneSection 10 of the Act on Provision of Services by Electronic MeansSection 172 of the Telecommunications Law ActUntil consent to processing of personal data is withdrawn and until any legal claims become time-barred
conducting statistical analyses, ensuring safety of services we provide to you by electronic means, including enforcing compliance with internal regulations of UNITOP Sp. z o.o., and counteracting fraud and abuse; contacting you for purposes connected with permissible marketing activities through available communication channels, in particular and with your consent – by e-mail and telephoneArticle 6(1)(f) of the GDPRBy the time the contract/service is performed and until legal claims become time-barred
processing of data in social media solely in connection with operation of a profile, including for the purpose of providing information on and promoting the controller’s activity, communicating with visitors of the controller’s profilesArticle 6(1)(f) of the GDPR For the period stated on social media websites  

COOKIES

This website uses cookies – short text files placed on your device to improve usability. Cookies are used to remember the user’s preferences, save such data as the product list and providing anonymised tracking data to third parties such as Google Analytics.

Cookies are small data files placed by a website on a computer, tablet or smartphone during your visit. As part of processing, the controller only uses session cookies which are necessary for the website to operate and which cannot be disabled. Cookies will be stored until you log out of the website or close the web browser. Provision of personal data is voluntary, but necessary for giving a reply.

We will process your data contained in cookies for the purpose of:

  1. being necessary for providing a service requested by the user such as: displaying the website (legal basis – Article 6(1)(b) of the GDPR);
  2. improving and streamlining our website by analysing the way our website is used by the users, which constitutes the controller’s legitimate interest (legal basis – Article 6(1)(f) of the GDPR).

You may disagree to processing of data with the use of cookies for analytical purposes. You may block or remove cookies in your web browser. You may learn how to do it here: www.aboutcookies.org. You may remove all cookies from your computer and set most browsers in such a way that they do not accept cookies. However, in such case the use of the website or some of its functionalities may be hindered or impossible.

DATA RECIPIENTS:

  • The recipients of your personal data, depending on the purpose of processing, will be: banks, card payment processors, IT service and IT system providers and entities authorised to receive personal data under the provisions of law.

CONTACT WITH THE DPO:

  • The controller designated a Data Protection Officer – Ms Małgorzata Matusiak who may be contacted by e-mail to: odounitop@unitop.com.pl

PERIOD OF STORAGE:

Your personal data are stored:

  • in the case of processing of data required for us to comply with our legal obligation – until tax obligations arising from the relevant tax law provisions become time-barred;
  • in the case of processing of data for the purpose of pursuing our legitimate interests – until you object to such processing; however, it is necessary to process data until the end of the period necessary for the establishment, exercise or defence of legal claims;
  • in the case of processing of data for direct marketing processes – up to 5 years or shorter if you withdraw your consent (if there is no other legal basis for processing) or if you object to such processing (we will no longer process your data for this purpose). Furthermore, for 10 years we will store proof of consent for evidentiary processes – to demonstrate facts in case of any legal claims connected with improper processing of personal data.

NOTICE OF RIGHTS:

You have the right to access your personal data, the right to rectify, erase or restrict processing of your personal data, the right of data portability, the right to object to processing of data, the right to object to profiling, the right to withdraw any consent at any time without affecting the lawfulness of processing before its withdrawal; in the case of processing of data for direct marketing purposes, including profiling, you have the right to object at any time to processing of your data for direct marketing purposes.

RIGHT TO COMPLAIN:

You have the right to lodge a complaint with the President of the Office for Personal Data Protection if you think that your personal data are processed in breach of the provisions on personal data protection.

RIGHT TO OBJECT:

You have the right to object at any time to processing of your personal data on the basis of the above-described legitimate interests.

WITHDRAWAL OF CONSENT TO PROCESSING OF YOUR PERSONAL DATA:

In cases where your personal data are processed on the basis of your consent, you have the right to withdraw your consents at any time by sending an e-mail or, if this is too difficult for you, an ordinary letter to the following addresses: