Privacy Policy

PRIVACY POLICY

INTRODUCTION

In this document we will provide you with all the necessary information about:

Who we are and what we do.
What personal data do we collect?
How we process your personal data.
How long we keep your personal data.
Do we share data with third parties, do we profile personal data, or do we transfer personal data outside the European Economic Area.
How we protect your personal data.
We will inform you about your rights.
We will inform you about Cookies.

1. The administrator of personal data is MADAR SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ based in Kraków.

Contact details:

Address: os. Wandy 5/18A, 31-905 Kraków
E-mail: adn@madar.net.pl

You can contact the Administrator in writing via traditional mail or e-mail.

The Administrator has appointed a Data Protection Inspector, who can be contacted in writing by traditional mail or e-mail, specified in section above.

2. The administrator has designated the following sets of processed data:

newsletter – subscribers’ personal data,
contact form – personal data of customers and/or employees,
invoices – customers’ personal data,
company telephone – personal data in the contact book,
e-mail – personal data as part of correspondence,
co-workers – personal data related to employment,
contracts – personal data contained in contracts.

3. The legal basis for the processing of personal data is Art. 6 para. 1 letter b GDPR.

3.1 The legal basis is also your consent, which you express by checking the appropriate checkboxes when subscribing to the newsletter.

3.2 We process personal data for the purpose of:

query handling,
conclusion of the contract and its implementation,
issuing invoices,
handling complaints,
contact with customers,
contact with employees,
newsletter sending.

Additionally, the law requires us to process your data for tax and accounting purposes.

4. The data will be processed for the duration of the company's business activity, unless the company receives a decision to delete the data from the database earlier.

The data will also be processed in the period after the implementation of the contract for archival purposes. Legal basis for processing: Art. 6 section 1. letter f GDPR.

5. The administrator does not share personal data.

5.1 The Administrator does not disclose personal data to third parties, except for entities that act as intermediaries in concluding the contract and its implementation.

5.2 The administrator does not profile personal data.

5.3 The Administrator does not transfer personal data outside the European Economic Area. An exception may be the USA, which cooperates with entities participating in the Privacy Shield program, approved by the decision of the European Commission. These situations concern data migration to dedicated servers outside the EEA or data processing for marketing purposes (usually mailing systems for sending newsletters).

6. Data will be stored on servers located in Poland and in the case of sending the newsletter using the MailPoet system - in France, i.e. in the European Union, or MailChimp - in the USA. Service providers ensure an appropriate level of protection of personal data.

The hosting provider to whom we entrust the processing of your data on the basis of the Personal Data Processing Agreement ensures that all the data centers it uses are professionally prepared facilities. Each of them includes protection measures against unauthorized access by unauthorized persons, including:

Anti-burglary systems.
Physical and optical barriers.
Monitoring.
Access control systems.
No third parties allowed.
Each data center is protected against the effects of power outages by using at least: two independent power sources, including one based on power generators and UPS voltage maintenance systems.
The facilities use fire protection mechanisms adapted to extinguish energized devices.

The Administrator makes every effort to provide all means of physical, technical and organizational protection of personal data against accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable regulations when processing personal data at workplaces.

7. You have the right:

request from the Administrator access to personal data,
request the Administrator to correct personal data,
request the Administrator to delete personal data,
request from the Administrator to limit the processing of personal data,
object to the processing of personal data,
transfer of personal data,
submit a complaint to the supervisory authority.

on the terms specified in Art. 16 – 21 GDPR.

8. Cookies are small text files installed on the device of the User browsing the Website. Cookies collect information that facilitates the use of the website - e.g. by remembering the User's visits to the Website and the activities performed by him.

The Administrator informs that cookies are harmless to the User’s computer or other device and its data. The Administrator also informs that it is possible to configure the web browser or Mobile Application in such a way that prevents cookies from being saved on the user’s computer or other device.

The configuration can be changed using the links for the following browsers: