PERSONAL DATA CONTROLLER:
The Controller of your personal data shall be UNITOP Sp. z o.o. with its registered office in Łódź (postcode: 90‑959), at Andrzeja Struga 61. Unitop Sp. z o.o. can be contacted via e-mail: firstname.lastname@example.org or in writing to the following address: Unitop Sp. z o.o. with its registered office in Łódź (postcode: 90-959), at Andrzeja Struga 61.
Unitop Sp. z o.o. shall also be the personal data controller for individuals visiting the controller’s profiles maintained in social media (i.e. Facebook, YouTube, Instagram, and Twitter).
THE PURPOSES OF PROCESSING, LEGAL BASIS AND DURATION OF PROCESSING:
Unitop Sp. z o.o. processes your personal data for the following purposes:
|Purpose of processing||Legal basis||Duration of processing|
|providing electronic services (e-services)||Article 6, Section 1b) of the GDPR in connection with the Act on Rendering Electronic Services||Until completion of the contract / service and also for the period of claim limitation|
|solving technical problems related to the service performed||Article 6, Section 1f) of the GDPR||Until completion of the contract / service and also for the period of claim limitation|
|handling a complaint in the event where such a complaint should be lodged||Article 6, Section 1f) of the GDPR||Until examination of the complaint and also for the period of claim limitation|
|handling the notifications addressed to us (e.g. via the contact form)||Article 6, Section 1b) of the GDPR||Until examination of the notification and also for the period of claim limitation|
|contacting you, including for the purposes related to service provision||Article 6, Section 1b) of the GDPR||Until completion of the contract / service and also for the period of claim limitation|
|conducting marketing activities for you, including the performance of direct marketing of its own services||Article 6, Section 1a) of the GDPR||Until withdrawal of the consent to personal data processing and also for the period of claim limitation|
|contacting you, including for the purposes related to permitted marketing activities, via the communication channels available, in particular and with your consent via e-mail and telephone||Article 6, Section 1a) of the GDPR Article 10 of the Act on Rendering Electronic Services Article 172 of the Telecommunications Law||Until withdrawal of the consent to personal data processing and also for the period of claim limitation|
|performing the contract||Article 6, Section 1b) of the GDPR||Until completion of the contract / service and also for the period of claim limitation|
|ensuring the safety of services we render for you by electronic means, including enforcing the compliance with the internal rules of UNITOP Sp. z o.o., as well as counteracting fraud and abuse||Article 6, Section 1f) of the GDPR||Until completion of the contract / service and also for the period of claim limitation|
|handling your requests submitted, in particular, to the user/client service department and via the contact form where they are not directly related to the organisation of loyalty programmes, contests and promotional campaigns in which you can participate by performing the contract||Article 6, Section 1b) of the GDPR||Until examination of the request and also for the period of claim limitation|
|debt collection; handling litigation, arbitration and administrative proceedings||Article 6, Section 1f) of the GDPR||Until completion of the contract / service and also for the period of claim limitation|
|maintenance of statistical analyses||Article 6, Section 1f) of the GDPR|
|storage of personal data for archiving purposes, and ensuring accountability (to demonstrate our compliance with legal obligations)||Article 6, Section 1f) of the GDPR||Until completion of the contract / service and also for the period of claim limitation|
|recruitment||Article 6, Section 1b) of the GDPR||Until completion of the recruitment process and also for the period of claim limitation|
|future recruitment processes||Article 6, Section 1a) of the GDPR||Until withdrawal of the consent for the processing of personal data|
|processing of personal data in social media exclusively in connection with administration of the profile, including for the purposes of reporting on and promoting the controller’s activities, communication with visitors to the controller’s profiles and for analytical purposes.||Article 6, Section 1f) of the GDPR||The data shall be processed as long as the Controller’s profile exists, or until an objection against the processing of the data or the demand that they be erased.|
Cookies are small data files that a given website leaves on the user’s device, e.g. a computer, tablet or smartphone, during a visit to the website. For the processing needs, the Controller uses only session cookies, which are necessary for the website to function and cannot be deactivated. The cookies shall be stored until logging out of the website or closing the Internet browser. The provision of personal data is voluntary but necessary for receiving a response.
Your data contained in the cookies shall be processed for the following purposes:
a. the necessity to perform the service requested by the user, such as: displaying the website, adding products to the cart (the legal basis – Article 6, Section 1 b) of the GDPR).
b. improving and streamlining our website by analysing the users’ behaviour on our website, which represents the controller’s legitimate interest (legal basis – Article 6, Section 1 f) of the GDPR).
You may disagree to the processing of personal data under cookies for analytical purposes. You can either block or delete the cookies from your Internet browser. You can find out how to do it at: www.aboutcookies.org. You can delete all the cookies from your computer and set most of the browsers not to accept such files. Then, however, using this website or some of its functionalities may be difficult or impossible.
• the recipient of your personal data shall be the following, as relevant for the purposes of processing: banks, entities processing the transactions with payment cards, IT service providers and IT system developers, as well as subjects entitled to obtain personal data based on the provisions of law.
• The Controller has appointed the Inspector for Personal Data Protection that can be contacted via e-mail at: email@example.com
Your personal data shall be stored:
• in the event of data processing necessary for us to fulfil the legal obligation – for the limitation period of the tax obligations arising out of the relevant tax regulations;
• in the event of data processing for the purposes of executing our legitimate interest, for the period until you lodge an objection, without prejudice to the necessity to process the data until the end of the period required for establishing, seeking or defending claims;
• in the event of data processing for the purposes of direct marketing – for a maximum period of 5 years or shorter in the event you withdraw your consent (in the absence of other legal bases for processing) or object to the processing (we shall no longer process your data for this purpose). Moreover, for the period of 10 years, we shall store the proof of your consent for evidence purposes – to demonstrate facts in the event of any potential claims related to improper processing of personal data.
INFORMATION ON THE RIGHTS:
You shall have the right to access the contents of your data and demand that they be rectified (corrected) or erased, to limit their processing, to transfer the data, to lodge a complaint against the processing of your data, to lodge a complaint against profiling, the right to withdraw any consent at any time without affecting the lawfulness of the processing that took place based on the consent prior to its withdrawal; in the event of processing your personal data for the purposes of direct marketing, including profiling, you shall have the right to object to the processing of your personal data for the purposes of direct marketing.
THE RIGHT TO LODGE A COMPLAINT:
You shall also have the right to lodge a complaint with the President of the Personal Data Protection Office when you consider that the processing of your personal data infringes the provisions concerning the protection of personal data.
THE RIGHT TO OBJECT:
You shall have the right to object at any time to your personal data being processed on the basis of the legitimate interest defined above.
WITHDRAWAL OF THE CONSENT FOR THE PROCESSING OF PERSONAL DATA:
Where your personal data are processed on the basis of your consent, you shall have the right to withdraw your consent at any time by sending an e-mail message or, should that be difficult for you, in the form of a standard letter to the following addresses:
• in the case of e-mail messages: firstname.lastname@example.org;