Privacy policy

Privacy

The rules on the protection of personal data changed on 25 May 2018. From that date, the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 apply on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), colloquially referred to as the GDPR. Therefore, evenly providing the information obligation under Article 13 of the GDPR, we provide in this Privacy Policy the necessary information regarding our processing of your personal data.

Identity of the Administrator

Data controller in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/WE (General Data Protection Regulation) of 27 April 2016 hereinafter referred to as the GDPR is ALEKSY LISOWSKI NETFOX with its registered office in Myślenice (postcode: 32-400), Kazimierza Wielkiego 58. You can contact the Administrator via email: handel@netfox.pl

Objectives and legal bases for the processing of personal data

The Controller processes personal data in accordance with the conditions laid down in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/
The controller processespersonal persons mainly for the purpose of fulfilling the order. Personal data the Controller may process on the basis of the following legal basis : pursuant to Article 6(1)(a) of regulation (EU) No 2016/679, the Controller may process the following legalbasis: pursuant to Article 6(1)(a) of regulation (EC)No 125 (a) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, i.e. the data subject has consented to the processing of his/her personal data for one or more specific purposes , e.g. for the purpose of transmitting information and commercial and marketing purposes;pursuant to Article 6(1)(b) of the Regulation of the European Parliament (i) Council (EU) 2016/679 of 27 April 2016, i.e. processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject before the conclusion of the contract; under Article 6(1)(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, i.e. processing is necessary to comply with the legal obligation to comply with the legal obligation. administrator. Your personal data may also be processed on the basis of other conditions under the General Data Protection Regulation, i.e. the implementation of the Legitimate Interests of the Controller e.g. establishing, pursuing and executing claims or answering your questions, requests, complaints made. ALEKSY LISOWSKI NETFOX is the Administrator of personal data of its employees and contractors, i.e. cooperating companies. ALEKSY LISOWSKI NETFOX at the same time informs that in the case of customer service as part of the process of redistribution of other brands, it can act as a processor.

Recipients of personal data

Your personal data may be shared with other recipients of data, but only for the proper execution of the project to us, in order to carry out your complaint and in the field of legal obligations on us. These may be other personal data controllers, as well as entities processing personal data on our behalf (manufacturers, suppliers of the subject of the order,IT service provider, accounting office, legal service).

Criterion for the duration of storage of personal data

The Administrator stores the Personal Data of the Client to achieve the purpose for which they were collected, i.e. for the duration of the order, and after that period for the period during which the regulations require the Controller to store data (the criterion of data storage will be due, inter alia, to the provisions of tax law); for the time necessary for the establishment, defense and recovery of claims and for any legitimate interest of the Controller; until the consent granted to the processingof personal data is revoked(in case the processing process takes place on the basis of the consent granted).

Rights of data subjects under Articles 15 – 22 GDPR

Any person whose personal data is processed has the right to request:
access to the content of your data (the person to whom the processing relates can find out what data the Controller processes, how and for what purpose);
rectification of his data (the person concerned may request correcting incorrect data or completing missing data);
erasure of your data (if there is one of the conditions under Article 17(1) of the GDPR; the conditions for the possibility of requesting the erasure of data are provided for in Article 17(3) of the GDPR);
restriction of processing (the person concerned may apply for restriction of Where the application is justified, the Controller may process storage data while being in accordance with Article 18(2) of the GDPR);
the right to data portability (the right to be exercised at the time when the legal basis for processing is the consent of the person to whom the processing relates or the performance of the contract and processing takes place under the conditions of complete automation);
the right to object (upon receipt of such a request, the Controller ceases to process personal data for which the objection has been expressed, unless it demonstrates the existence of valid legitimate grounds for processing, overriding the interests of the applicant, rights and freedoms or grounds for establishing, asserting or defending against claims);
the right to withdraw consent at any time without affecting the lawfulness of processing (if processing takes place on the basis of consent), which was made on the basis of consent before its withdrawal.
Customers may exercise the above-mentioned rights by submitting an application via the following communication channel: by sending e-mail to the following address: handel@netfox.pl or through the Administrator’s postal address.
The administrator shall, without undue delay, or in any event within one month of receipt of the request, provide the data subject with information on the actions taken in connection with the exercise of the rights.
Any person whose personal data is processed has the right to lodge a complaint with the supervisory authority, i.e. the competent authority of the Supervisory Authority. President of the Office for Personal Data Protection if he considers that the processing of her personal data violates the law.

Profiling/transfer of personal data to third countries

Personal data of clients will not be processed by the Administrator in a way that would result in automated decision-making, including This means that the Administrator does not use IT systems that collect information about Clients and at the same time automatically, automatically, make decisions that could have legal effects on the Client or similarly significantly affect him.
As a general rule, the Administrator does not transfer personal data to third countries or international organizations, although communication with the Administrator via Facebook or fanpage’s likement is considered to be the transfer of data to a third country due to the fact that the social network itself is run by Facebook Inc. based in the USA. The owner of Facebook, who is also the recipient of personal data, processes the data as a separate administrator on its own terms set out in its own privacy policy available at: https://www.facebook.com/about/privacy. Facebook is EU-US-Privacy Shield certified. For entities that hold such a certificate, the European Commission considers that these undertakings meet the criterion of an adequate level of data protection. The legal basis for the processing of personal data for the likes of Fanpage or communication with the Administrator through Facebook is the legitimate interest pursued by the Administrator. The Administrator thus pursues his/her goals, such as promoting the brand by posting information about current events or promotions, as well as keeping users informed about their activity, which allows you to build and maintain the community associated with the Administrator. The criterion of the duration of storage may be: the removal by the author of the posted content, the objection to processing, the time needed to answer the question asked through the portal. Facebook, as a separate administrator, sets its criteria for storing data. The rights catalogue indicated by the Administrator in the information clause is the same as the directory of rights available to the person communicating with the Administrator via Facebook. The administrator does not process profiling or automatic decision-making. Providing data in case of fanpage likeor or communicating with the Administrator via Facebook is voluntary. At the same time, if you do not provide data, you will not be able to browse Fanpage, it is impossible to leave comments or messages on fanpage.

Obligation or voluntary provision of personal data

Providing personal data is necessary for the purpose of fulfilling the order,establishing and fulfilling the contract – failure to provide data will result in the inability to present an offer /execution of the contract.

Cookie policy

The Website does not automatically collect any information, except for the information contained in
Cookies (so-called „cookies” „cookies”) are iterative data, in particular text files, which are stored in the end device of the Website User, e. the user of the website and are intended to use the Website’s websites. Cookies usually contain the name of the website from which they originate, the duration of their storage on the end device and a unique number.
Cookies are used to create statistics that help to understand how Website Users use websites, which allows to improve their structure and
Within the Website, two main types of cookies are used: „session cookies” and „persistent cookies”. „session” cookies are temporary files that are stored on the User’s end device until the website is left or the software (web browser) is disabled. „Permanent” cookies are stored in the User’s end device for the time specified in the parameters of cookies or until they are deleted by the
The following types of cookies are used within the Website:

„analytical” cookies (independent company Google Inc.) – the removal of these files does not prevent the use of the Website. Analytical cookies collect information about the use of the Website by visitors, the type of website from which users were redirected, and the number of visits to users and the time of the visit to this website. These files do not record specific personal data of the User, but are used to develop statistics on the use of the Website.

In many cases, the software used to browse the web (web browser) by default allows the storage of cookies on the User’s end device. Users of the Website can change their cookie settings at any time. These settings may be changed in particular in such a way as to block the automatic handling of cookies in the settings of the web browser or to inform about their inclusion in the Website User’s device. Detailed information about the possibilities and methods of handling cookies is available in the settings of the software (web browser).
More information about cookies is available at the „Help” section of your web browser menu.

Changes to the Privacy Policy

The Administrator reserves the right to make changes to the Privacy Policy.
New versions of the Privacy Policy will be posted on the Administrator’s website with the relevant message. The revised Privacy Policy will apply from the date of posting of the relevant message on the Administrator’s website.