This document (hereinafter referred to as the “Privacy Policy”) contains information about the processing of your personal data by us in connection with the use of the website pomorskaakademiajazdy.pl and the provision of our services.
We implement modern organizational and technical safeguards to ensure the best possible protection of your personal data. We also guarantee that we process them in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”), as well as the Act of 10 May 2018 on the protection of personal data and other regulations on the protection of personal data. Therefore, based on Article 13(1) and (2) of the GDPR, we inform you that:
1. The administrator of your personal data is:
Company Name: Pomorska Akademia Jazdy Błażej Lipiński
Tax Identification Number (NIP): 4660243797
Address:
Sybiraków 7
89-600 Chojnice, Poland
2. Your personal data, provided by you, is processed for the following purposes:
Conclusion and execution of the sales contract
Personal data: name, surname, company, NIP (Tax Identification Number), correspondence address, email address, phone number, bank account number Basis of processing: Article 6(1)(b) of the GDPR, i.e., processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are a party Data retention period: until the expiration of the limitation period for claims arising from the sales contract
Account management
Personal data: name, surname, company, NIP, correspondence address, email address, phone number Basis of processing: Article 6(1)(b) of the GDPR, i.e., processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are a party Data retention period: until the account is deleted
Contact Form
Personal data: name, surname, email address, phone number
Basis of processing: Article 6(1)(f) of the GDPR, i.e., processing for the purpose of realizing our legitimate interest, consisting in enabling contact with us and providing an answer to your question
Data retention period: until objection to the processing of personal data is raised
Newsletter
Personal data: name, email address, phone number
Basis of processing: Article 6(1)(f) of the GDPR, i.e., processing for the purpose of realizing our legitimate interest, consisting in direct marketing by sending you direct commercial information about our products and services
Data retention period: until objection to the processing of personal data is raised
Statistical analysis, website traffic analysis
Personal data: IP address
Basis of processing: Article 6(1)(f) of the GDPR, i.e., processing for the purpose of realizing our legitimate interest, consisting in conducting statistics and measuring traffic on the website
Data retention period: 14 months or until objection to the processing of your personal data is raised
Direct Marketing of Own Goods and Services
Personal data: IP address
Basis of processing: Article 6(1)(f) of the GDPR, i.e., processing for the purpose of realizing our legitimate interest, consisting in direct marketing of our own goods and services
Data retention period: until objection to the processing of personal data is raised
Establishing, Investigating, and Enforcing Claims and Defense Against Claims in Proceedings Before Courts and Other State Authorities
Personal data: name, surname, correspondence address, email address, phone number, company, NIP (Tax Identification Number), PESEL, bank account number
Basis of processing: Article 6(1)(f) of the GDPR, i.e., processing for the purpose of realizing our legitimate interest, consisting in establishing, investigating, and enforcing claims, as well as defending against claims in proceedings before courts and other state authorities
Data retention period: until the expiration of the limitation period for claims related to the performance of the contract
Fulfillment of Legal Obligations Arising from Legal Regulations, Especially Tax and Accounting Regulations
Personal data: name, surname, correspondence address, email address, phone number, company, NIP, PESEL, bank account number
Basis of processing: Article 6(1)(c) of the GDPR, i.e., processing is necessary for the fulfillment of legal obligations incumbent upon the Administrator, arising from legal regulations, especially tax and accounting regulations
Data retention period: until the expiration of the legal obligations incumbent upon the Administrator that justified the processing of personal data
3. Voluntariness of Providing Personal Data
Providing your personal data is voluntary, but it is a condition for entering into a contract or providing services by us, especially services provided electronically.
4. Recipients of Personal Data
Recipients of your personal data may include entities providing accounting, legal, marketing, analytical, IT services, mailing system providers, couriers, payment operators, and banks for payment processing.
5. Automated Decision-Making, Profiling
We apply actions involving profiling using your personal data.
If you subscribe to our newsletter, we will send you automated messages presenting our products that may fall within your area of interest. This action is beneficial for both parties, as we do not provide information about products you are not interested in, and you have the opportunity to explore products that may appeal to you.
We may also display marketing content tailored to your preferences, determined based on your online behavior, visited pages, or clicks. However, for this purpose, we use only anonymous information or IP addresses stored in cookies, for which you have given consent. By changing cookie settings in your browser or withdrawing consent, you can opt out of receiving content selected for you.
6. Transfer of Data Outside the European Economic Area or to an International Organization
Your personal data may be transferred to the USA, where Google and Facebook servers are located. We use Google and Facebook services to analyze traffic on our store’s website, build statistics in this area, and conduct marketing and remarketing activities. Google and Facebook, to provide us with these services, process your IP address and your device’s ID and may store this data on servers located in the USA.
Google LLC and Facebook Inc. use standard contractual clauses approved by the European Commission and rely on decisions of the European Commission determining an adequate level of data protection concerning specific countries in relevant cases, regarding the transfer of data from the EEA to the United States and other countries.
Data Received from External Entities
Our store allows customers to share information about the products presented in the store on their Facebook and Twitter profiles. In such cases, we receive data not directly from you but from Facebook or Twitter, respectively. To give you control over your personal data, we provide information about the processing of your personal data that we received when sharing store content on Twitter and Facebook.
7. Source of Data Origin
When sharing store content on your Facebook or Twitter profile, we receive your data directly from Facebook or Twitter (i.e., Facebook Ireland Ltd or Twitter Inc.), depending on which service you use to share information about the products.
8. Categories of Relevant Data
We process the following categories of your data: identification data (name, surname, image, nickname).
9. Purposes of Personal Data Processing
Sharing store content on social media profiles
Personal data: name, surname, nickname, image.
Basis for processing: Article 6(1)(b) of the GDPR, i.e., processing for the purpose of taking actions at your request, before entering into a contract, and processing necessary for the performance of a contract to which you are a party.
Data retention period: until the expiration of claims resulting from the agreement to share store content on social media platforms.
10. Recipients of Personal Data
Recipients of your personal data may include entities providing IT services on our behalf.
11. Automated Decision Making, Profiling
We do not use profiling with your personal data, nor do we make automated decisions about you based on your personal data.
12. Transfer of Data Outside the European Economic Area or to an International Organization
When using Facebook plugins, your personal data may be transferred to the United States, where Facebook Inc.’s servers are located. Facebook uses standard contractual clauses approved by the European Commission and relies on decisions of the European Commission determining an adequate level of data protection concerning specific countries in relevant cases, regarding the transfer of data from the EEA to the United States and other countries.
When using Twitter plugins, your personal data may be transferred to the United States, where Twitter Inc.’s servers are located. Twitter Inc. is listed in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).
13. Your Rights Regarding the Processing of Your Personal Data
Under the GDPR, you have the right to:
- Request access to your personal data,
- Request correction of your personal data,
- Request erasure of your personal data,
- Request restriction of processing of your personal data,
- Object to processing of your personal data,
- Request transfer of your personal data.
If any of the above-mentioned requests are made, we will provide you with information about the actions taken in connection with your request without undue delay, and in any case within one month of receiving the request.
If necessary, we reserve the right to extend the one-month period by an additional two months due to the complex nature of the request or the number of requests. In any case, we will inform you within one month of receiving the request about the extension and provide you with the reasons for the delay.
14. Complaint to the supervisory authority
If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the supervisory authority, especially in the member state of your habitual residence, your place of work, or the place of the alleged infringement. In Poland, the supervisory authority under the GDPR is the President of the Office for Personal Data Protection.
COOKIE POLICY
General Information
When using our online store, we use Cookies, which are small text information stored on your end device (e.g., computer, smartphone, or tablet).
These files are divided into first-party cookies (those read by our teleinformatics system) and third-party cookies (read by third-party teleinformatics systems). Their use aims to ensure the proper functioning of the online store’s websites by providing information to teleinformatics systems for specific purposes (which we will describe below).
The storage time depends on the type of cookies. Session cookies are stored until the end of your browser session. Persistent cookies are stored on your device for a longer period, allowing us to recognize your browser during your next visit to our store.
We use cookies based on your consent. An exception is made for cookies that enable the proper provision of services to you (so-called first-party cookies). You can disable all other cookies at any time through your browser settings.
Purposes of using cookies
We use first-party cookies to ensure the proper provision of electronic services to you.
We use third-party cookies for the following purposes:
- Creating statistics and measuring traffic on our store’s website. We use Google Analytics tool provided by Google Ireland Ltd. You can review Google’s privacy policy at the following address: https://policies.google.com/privacy?fg=1,
- Using Google Ads online advertising tools. This tool is provided by Google Ireland Ltd. You can review Google’s privacy policy at the following address: https://policies.google.com/privacy?fg=1,
- Using the Facebook Pixel marketing tool provided by Facebook Ireland Ltd. You can review Facebook’s privacy policy at the following address: https://pl-pl.facebook.com/privacy/explanation,
- Enabling you to subscribe to the newsletter, which we manage through Freshmail tools provided by Freshmail sp. z o.o. You can review Freshmail’s privacy policy at the following address: https://freshmail.pl/polityka-prywatnosci/.
Server Logs
Using the websites of our service involves sending requests to the server where the page is stored. Each such request directed to the server is recorded in server logs.
Data stored in server logs is not linked to specific users of our service and is not used by us for your identification.
Logs include, among other things, IP address, server date and time, information about the internet browser, and operating system you are using.
Server logs are only auxiliary material used for website administration, stored indefinitely, especially for analytical purposes. The content of the logs is not disclosed to anyone other than those authorized to administer the server.
The topic of data processing is extensive and complicated, but we have made every effort to explain the principles of data processing on our store’s website as comprehensively and comprehensibly as possible. If you have any further questions and would like to learn more, please contact us at: biuro@pomorskaakademiajazdy.pl