PRIVACY POLICY AND PERSONAL DATA PROTECTION

 

PRIVACY POLICY

Our privacy policy specifies the principles of protecting the personal data processed by UnitopSp. z o.o. The information obligation results from the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and on repealing the directive 95/46/EC (the GDPR).

PERSONAL DATA CONTROLLER:

The Controller of your personal data shall be UNITOP Sp. z o.o. with its registered office in Łódź (postcode: 90‑959), at Andrzeja Struga 61. Unitop Sp. z o.o. can be contacted via e-mail: unitop@unitop.com.pl or in writing to the following address: Unitop Sp. z o.o. with its registered office in Łódź (postcode: 90-959), at Andrzeja Struga 61.

Unitop Sp. z o.o. shall also be the personal data controller for individuals visiting the controller’s profiles maintained in social media (i.e. Facebook, YouTube, Instagram, and Twitter).

THE PURPOSES OF PROCESSING, LEGAL BASIS AND DURATION OF PROCESSING:

Unitop Sp. z o.o. processes your personal data for the following purposes:

Purpose of processing

Legal basis

Duration of processing

providing electronic services (e-services)

Article 6, Section 1b) of the GDPR in connection with the Act on Rendering Electronic Services

Until completion of the contract / service and also for the period of claim limitation

solving technical problems related to the service performed

Article 6, Section 1f) of the GDPR

 

Until completion of the contract / service and also for the period of claim limitation

handling a complaint in the event where such a complaint should be lodged

Article 6, Section 1f) of the GDPR

 

Until examination of the complaint and also for the period of claim limitation

handling the notifications addressed to us (e.g. via the contact form)

Article 6, Section 1b) of the GDPR

 

Until examination of the notification and also for the period of claim limitation

contacting you, including for the purposes related to service provision

Article 6, Section 1b) of the GDPR

 

Until completion of the contract / service and also for the period of claim limitation

conducting marketing activities for you, including the performance of direct marketing of its own services

Article 6, Section 1a) of the GDPR

Until withdrawal of the consent to personal data processing and also for the period of claim limitation

contacting you, including for the purposes related to permitted marketing activities, via the communication channels available, in particular and with your consent via e-mail and telephone

Article 6, Section 1a) of the GDPR

Article 10 of the Act on Rendering Electronic Services

Article 172 of the Telecommunications Law

Until withdrawal of the consent to personal data processing and also for the period of claim limitation

performing the contract

Article 6, Section 1b) of the GDPR

Until completion of the contract / service and also for the period of claim limitation

ensuring the provision of payment services

Article 6, Section 1f) of the GDPR

Article 6, Section 1 c) of the GDPR in connection with accounting and tax regulations

Until complete provision of the payment services and also for the period of claim limitation

Insofar as the controller shall be obligated to process the personal data for the needs of tax settlements – the data shall be processed for the period required by law.

ensuring the safety of services we render for you by electronic means, including enforcing the compliance with the internal rules of UNITOP Sp. z o.o., as well as counteracting fraud and abuse

Article 6, Section 1f) of the GDPR

 

Until completion of the contract / service and also for the period of claim limitation

handling your requests submitted, in particular, to the user/client service department and via the contact form where they are not directly related to the organisation of loyalty programmes, contests and promotional campaigns in which you can participate by performing the contract

Article 6, Section 1b) of the GDPR

 

Until examination of the request and also for the period of claim limitation

debt collection; handling litigation, arbitration and administrative proceedings

Article 6, Section 1f) of the GDPR

 

Until completion of the contract / service and also for the period of claim limitation

maintenance of statistical analyses

Article 6, Section 1f) of the GDPR

 

storage of personal data for archiving purposes, and ensuring accountability (to demonstrate our compliance with legal obligations)

Article 6, Section 1f) of the GDPR

 

Until completion of the contract / service and also for the period of claim limitation

recruitment

Article 6, Section 1b) of the GDPR

Until completion of the recruitment process and also for the period of claim limitation

future recruitment processes

Article 6, Section 1a) of the GDPR

Until withdrawal of the consent for the processing of personal data

processing of personal data in social media exclusively in connection with administration of the profile, including for the purposes of reporting on and promoting the controller’s activities, communication with visitors to the controller’s profiles and for analytical purposes.

Article 6, Section 1f) of the GDPR

The data shall be processed as long as the Controller’s profile exists, or until an objection against the processing of the data or the demand that they be erased.

 

COOKIES

This website uses cookies, i.e. short fragments of text that are stored on your device to improve the quality of operation. Cookies are used for remembering user preferences, saving such data as the list of products, and delivering anonymous tracking data to external companies, such as Google Analytics.

Cookies are small data files that a given website leaves on the user’s device, e.g. a computer, tablet or smartphone, during a visit to the website. For the processing needs, the Controller uses only session cookies, which are necessary for the website to function and cannot be deactivated. The cookies shall be stored until logging out of the website or closing the Internet browser. The provision of personal data is voluntary but necessary for receiving a response.

Your data contained in the cookies shall be processed for the following purposes:

  1. the necessity to perform the service requested by the user, such as: displaying the website, adding products to the cart (the legal basis – Article 6, Section 1 b) of the GDPR).
  2. improving and streamlining our website by analysing the users’ behaviour on our website, which represents the controller’s legitimate interest (legal basis – Article 6, Section 1 f) of the GDPR).

You may disagree to the processing of personal data under cookies for analytical purposes. You can either block or delete the cookies from your Internet browser. You can find out how to do it at: www.aboutcookies.org. You can delete all the cookies from your computer and set most of the browsers not to accept such files. Then, however, using this website or some of its functionalities may be difficult or impossible.

DATA RECIPIENTS:

  • the recipient of your personal data shall be the following, as relevant for the purposes of processing: banks, entities processing the transactions with payment cards, IT service providers and IT system developers, as well as subjects entitled to obtain personal data based on the provisions of law.

CONTACT INFORMATION:

  • The Controller has appointed the Inspector for Personal Data Protection that can be contacted via e-mail at: odounitop@unitop.com.pl

STORAGE PERIOD:

Your personal data shall be stored:

  • in the event of data processing necessary for us to fulfil the legal obligation– for the limitation period of the tax obligations arising out of the relevant tax regulations;
  • in the event of data processing for the purposes of executing our legitimate interest, for the period until you lodge an objection, without prejudice to the necessity to process the data until the end of the period required for establishing, seeking or defending claims;
  • in the event of data processing for the purposes of direct marketing – for a maximum period of 5 years or shorter in the event you withdraw your consent (in the absence of other legal bases for processing) or object to the processing (we shall no longer process your data for this purpose). Moreover, for the period of 10 years, we shall store the proof of your consent for evidence purposes – to demonstrate facts in the event of any potential claims related to improper processing of personal data.

INFORMATION ON THE RIGHTS:

You shall have the right to access the contents of your data and demand that they be rectified (corrected) or erased, to limit their processing, to transfer the data, to lodge a complaint against the processing of your data, to lodge a complaint against profiling, the right to withdraw any consent at any time without affecting the lawfulness of the processing that took place based on the consent prior to its withdrawal; in the event of processing your personal data for the purposes of direct marketing, including profiling, you shall have the right to object to the processing of your personal data for the purposes of direct marketing.

THE RIGHT TO LODGE A COMPLAINT:

You shall also have the right to lodge a complaint with the President of the Personal Data Protection Office when you consider that the processing of your personal data infringes the provisions concerning the protection of personal data.

THE RIGHT TO OBJECT:

You shall have the right to object at any time to your personal data being processed on the basis of the legitimate interest defined above.

WITHDRAWAL OF THE CONSENT FOR THE PROCESSING OF PERSONAL DATA:

Where your personal data are processed on the basis of your consent, you shall have the right to withdraw your consent at any time by sending an e-mail message or, should that be difficult for you, in the form of a standard letter to the following addresses:

  • in the case of e-mail messages: odounitop@unitop.com.pl;

 

Information clause of personal data processing:

 

  • The Controller of your personal data shall be Unitop Sp. z o.o. with its registered office in Łódź (90-959), at ul. Andrzeja Struga 61.
  • Unitop z o.o. can be contacted via e-mail: _______ or in writing to the following address: Unitop Sp. z o.o. with its registered office in Łódź (90-959), at ul. Andrzeja Struga 61.
  • The Controller has appointed the Inspector for Personal Data Protection that can be contacted via e-mail at: odounitop@unitop.com.pl.
  • Your personal data shall be processed:
  1. for the purposes of responding to the message sent via the contact form – the legal basis for the processing is the necessity to perform the contract, a party to which includes the data subject, or to undertake actions on demand of the data subject, prior to contract conclusion (Article 6, Section 1 b) of the GDPR);
  2. for the purposes of examining the complaint lodged by the client – the legal basis for the processing is the execution of the legitimate interest of Unitop Sp. z o.o. (Article 6, Section 1 f) of the GDPR);
  3. for the purposes of establishing or seeking potential claims or defence against claims – the legal basis for the processing is the execution of legitimate interests of Unitop Sp. z o.o. (Article 6, Section 1 f) of the GDPR);
  4. for the purposes of conducting marketing activities with your consent – the legal basis for the processing is your consent (Article 6, Section 1a of the GDPR)
    • Your personal data shall be transferred to the marketing agencies cooperating with Unitop Sp. z o.o.
    • We shall store your personal data for the period required to provide a response (examine the complaint) and the period necessary for seeking potential claims. For marketing purposes, your personal data shall be processed until withdrawal of the consent.
    • You shall have the right: to access the contents of your data and demand that they be rectified (corrected) or erased, to limit their processing, to transfer your data, to object to the processing of the data and to lodge a complaint to the President of the Personal Data Protection Office on the principles stipulated in the GDPR.
    • Where the legal basis for the processing of your personal data is the consent under Article 6, Section 1 a) of the GDPR, you shall have the right to withdraw such consent to the processing of personal data at any time. Withdrawal of the consent shall have no effect on the lawfulness of the processing based on the consent prior to its withdrawal.
    • You shall have the right to object to the processing of personal data based on a legitimate interest of the Controller on the grounds directly related to your specific situation.
    • The processing of personal data is necessary for us to respond (including to examine the complaint). The processing of personal data for marketing purposes is optional.