I. Processing of Personal Data
In compliance with the obligations arising from Articles 12-14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, we inform you that:
- Data Controller
The controller of your personal data is the company “Project Vitae Beata Mintus”, located at ul. Zwycięzców 2 lok. 9, 73-110 Stargard, registered in the Central Business Register, REGON: 389978313, NIP: 5941598699, email: biuro@projectvitae.pl, phone number +48 691 237 170. - Data Protection Officer
The Data Protection Officer appointed by the Controller is based at the Controller’s address: ul. Zwycięzców 2 lok. 9, 73-110 Stargard, email: projectvitae21@gmail.com, phone number +48 691 237 170. - Purposes of Personal Data Processing
Your personal data may be processed for the following purposes:
a) Purpose of processing: All activities related to the preparation, conclusion, proper execution, and termination of contracts.
Processing period: Until the end of the contract, and thereafter for other purposes related to the contract, e.g., the period of securing potential claims.
Legal basis: Regulation, Article 6(1)(b).
b) Purpose of processing: All activities related to the preparation, conclusion, proper execution, and termination of contracts to which you are not a party.
Processing period: Until the end of the contract, and thereafter for other purposes related to the contract, e.g., the period of securing potential claims.
Legal basis: Regulation, Article 6(1)(f).
c) Purpose of processing: Implementation of actions based on consents granted, including: informing about the Controller and its activities, marketing conducted via electronic and telephone channels, preparing and sending ordered commercial offers, responding to messages sent via the Controller’s website.
Processing period: Until the withdrawal of granted consents.
Legal basis: Regulation, Article 6(1)(a). In reference to the situations in points 3(a-b), providing personal data is voluntary but necessary to achieve the stated purposes. - Sources of Personal Data Acquisition
We process your personal data obtained directly from you (e.g., data provided on forms), as well as data obtained from other publicly available sources, such as the National Court Register (KRS), the Central Business Register (CEIDG), and the REGON database. - Recipients of Personal Data
Recipients of your personal data may include:
a) public authorities or entities authorized to request access to or receive personal data based on legal regulations,
b) entities to whom the Controller has entrusted the processing of personal data based on concluded contracts, such as accounting offices, law firms, printing houses, courier service providers, IT service providers, and other services processing data on behalf of the Controller,
c) entities to whom you have given consent to share and process your personal data. The Controller will not transfer your personal data to a third country or international organizations. - Data Retention Period
Your personal data will be retained for the duration of cooperation with you or the Entity you represent. After that, for the limitation period of claims related to this cooperation or the period necessary to fulfill obligations imposed by generally applicable legal regulations. Your personal data processed based on consent will be retained for the duration of its validity, i.e., until its withdrawal. Thereafter, for the period necessary to fulfill obligations imposed by generally applicable legal regulations. - Rights
You have the right to:
a) request access to your personal data,
b) request rectification of your personal data,
c) request erasure or restriction of processing of your personal data,
d) object to the processing of your personal data,
e) request the transfer of your personal data,
f) file a complaint with the Supervisory Authority (President of the Personal Data Protection Office, previously the General Inspector for Personal Data Protection). The detailed scope of your rights as a data subject is contained in Chapter III of the GDPR titled “Rights of the data subject”. - Automated Decision-Making
Your personal data will be processed in an automated or partially automated manner. However, it will not be used to make decisions based solely on automated processing, including profiling. - Policy Changes
The Controller reserves the right to change this policy and update it.
II. Cookie Policy
“Cookies” are small text files containing IT data stored on users’ devices, designed for use on websites. “Cookies” allow, among other things, the display of websites tailored to individual preferences and typically contain the website address, storage time on the user’s device, and a unique identifier.
We use session (temporary) and persistent cookies. Session cookies are stored on the user’s device until logging out of the website or closing the web browser. “Persistent” cookies, on the other hand, are stored for a defined period specified by a parameter in the “Cookies” file.
The information contained in “Cookies” is used, among other things, to provide various website tools and functionalities, as well as to collect general statistical data. This allows us to identify how users use the website and provides the opportunity to improve its structure and content. We emphasize that personal data collected using “Cookies” is encrypted in a way that prevents unauthorized access. They also prevent personal identification of the user.
In the web browser, you can change the “Cookies” settings and manually delete them. Proper information about cookie handling and possible configurations is available in the settings, depending on the type of browser.
Detailed information on changing cookie settings and self-deleting them in the most popular web browsers is available in the web browser’s help section and on the following pages: