PRIVACY POLICY
Production, service and trade company „Joniec”
Tymbark 109, 34-650 Tymbark
In accordance with art. 13 section 1 and item 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th of April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter also the "GDPR"), below we provide basic information on the rules for the processing of personal data in connection with a visit to the website www.joniec.pl.
Data identifying the Personal Data Administrator
The administrator of your personal data is Mieczysław Joniec, conducting business activity under the name: Mieczysław Joniec Firma Produkcyjno - Usługowo - Handlowa "Joniec", Tymbark 109, 34-650 Tymbark, tax ID: 7371000914, REGON: 490711307.
The Administrator takes special care to protect the interests of persons to whom the personal data relate, and in particular ensures that the personal data collected by him are:
- processed in accordance with the law, fairly and transparently for the data subject;
- collected for specific, explicit and legitimate purposes and not further processed in a way incompatible with those purposes;
- Adequate, relevant and limited to what is necessary for the purposes for which they are processed;
- correct and updated as necessary;
- stored in a form that enables identification of the data subject for no longer than is necessary for the purposes for which the data are processed;
- processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate technical and organizational measures.
Contact with the Personal Data Administrator
- in writing at: Mieczysław Joniec Firma Produkcyjno – Usługowo – Handlowa „Joniec”, Tymbark 109, 34-650 Tymbark
- electronic: rodo@joniec.pl
- telephone: +48 18 332 53 90
Purpose and scope of data collection
- The Administrator processes personal data in the form of name and surname, e-mail address and telephone number in order to answer the questions asked by the Website User using the contact form, in particular questions regarding the Administrator's offer.
- The Administrator has the right to entrust personal data to entities through which the Administrator implements the purposes of personal data processing specified in this policy, and in particular employees, contractors and other entities with which the Administrator cooperates, including in particular the website host. The Administrator ensures the protection of personal data entrusted to these entities on the principles set out in this policy and in applicable law.
Basis for data processing
- The legal basis for the processing of personal data in order to perform the obligation is the concluded contract (Article 6 paragraph 1 point b, c of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th of April 2016 on the protection of individuals with regard to processing of personal data and on the free movement of such data and repealing Directive 95/46/EC - "GDPR”).
- The legal basis for the processing of personal data for the purpose of taking action at the request of the data subject prior to the conclusion of the contract is a voluntary consent (Article 6 (1) a of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th of April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC - "GDPR”).
- The Administrator also has the right to process personal data, regardless of the consent given, in a situation where:
- processing is necessary to fulfill the legal obligation incumbent on the Administrator;
- processing is necessary to protect the vital interests of the data subject or of another natural person;
- processing is necessary to perform a task carried out in the public interest or in the exercise of official authority vested in the Administrator,
- processing is necessary for purposes arising from legitimate interests pursued by the Administrator or by a third party, except for situations where the interests or fundamental rights and freedoms of the data subject, requiring personal data protection, prevail over these interests when the data subject is a child.
- The data subject has the right to withdraw his consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawal of consent may take place in writing to the Administrator's address, or in electronic form to the e-mail address: rodo@joniec.pl
- In the event of withdrawal of consent, there may be a situation that the Administrator will be entitled to process personal data on the basis of generally applicable law. In such a situation, the Administrator will process personal data only for the purposes and to the extent that it is allowed by law despite the lack of consent of the data subject.
Rights of the Data Subject
- Access to data
- The data subject is entitled to obtain confirmation from the Administrator whether personal data concerning him are being processed, and if this is the case, he is entitled to access this data and to the following information:
- purposes of personal data processing;
- categories of personal data processed;
- information about recipients or categories of recipients to whom personal data have been or will be disclosed, in particular about recipients in third countries or international organizations, as well as the safeguards applied in connection with the transfer of data to recipients in third countries or international organizations;
- if possible, the planned period of storage of personal data and, if this is not possible, criteria for determining this period;
- information about the right to request the Administrator to rectify, delete or limit the processing of personal data regarding the data subject, and to object to such processing;
- information on the right to lodge a complaint with a supervisory authority;
- if personal data have not been collected from the data subject - all available information about their source;
- information on automated decision making, including profiling;
- The Administrator, upon request, provides the data subject with a copy of the personal data being processed. For any subsequent copies requested by the data subject, the Administrator may charge a reasonable fee based on administrative costs. If the data subject asks for a copy by electronic means and unless otherwise stated, the information will be provided by electronic means if possible.
- The data subject is entitled to obtain confirmation from the Administrator whether personal data concerning him are being processed, and if this is the case, he is entitled to access this data and to the following information:
RECTIFICATION
The data subject has the right to request the Administrator to immediately correct any personal data that is incorrect. Taking into account the purposes of processing, the data subject has the right to request the completion of incomplete personal data, including by providing an additional statement.
DELETION OF DATA
The data subject has the right to request the Administrator to immediately delete personal data concerning him, and the Administrator is obliged to delete personal data without undue delay if one of the following circumstances occurs:
- personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- the data subject has successfully withdrawn the consent on which the processing is based and there is no other legal basis for the processing;
- the data subject objects to the processing and there are no overriding, legitimate grounds for processing
- the data subject objects to the processing of data for direct marketing purposes;
- personal data was processed unlawfully;
- personal data must be deleted in order to fulfill the legal obligation provided for in Union law or the law of the Member State to which the Administrator is subject;
- personal data was collected in connection with offering information society services.
LIMITATION OF DATA PROCESSING
The data subject has the right to request the Administrator to limit data processing in the following cases:
- the data subject questions the correctness of personal data - for a period enabling the Administrator to check the correctness of such data;
- the processing is unlawful and the data subject opposes the deletion of personal data, demanding instead a restriction on their use;
- the Administrator no longer needs personal data for the purposes of processing, but it is needed by the data subject to determine, pursue or defend claims;
- the data subject has objected to the processing - until it is determined whether legally justified grounds on the part of the Administrator prevail over the grounds of objection of the data subject.
- by limiting the processing of personal data, one should understand the storage of personal data in order to limit their further processing.
- If the processing of data has been restricted by the aforementioned request, such personal data may be processed, with the exception of storage, only with the consent of the data subject, or to establish, assert or defend claims, or to protect the rights of another natural person or for important reasons of public interest of the Union or a Member State. Before revoking the processing limitation, the Administrator shall inform the data subject who requested the limitation.
DATA TRANSFER
- The data subject has the right to receive in a structured, commonly used machine-readable format personal data concerning him which he has provided to the Administrator, and has the right to send this personal data to another administrator without any obstacles on the part of the administrator to whom the personal data was provided, if the processing takes place on the basis of consent or on the basis of a contract, and if the processing takes place in an automated manner.
- When exercising the right to transfer data specified above, the data subject has the right to request that personal data be sent by the Administrator directly to another administrator, if it is technically possible.
- The data subject has the right not to be subject to a decision that is based solely on automated processing, including profiling, and has legal effects on that person or similarly significantly affects him.
OBJECTION
- The data subject has the right to object at any time - for reasons related to his particular situation - to the processing of personal data concerning him based on the provision of art. 6 clause 1 let. e, f of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th of April 2016, including profiling based on these provisions.
- After filing an objection, the Administrator may no longer process this personal data, unless he demonstrates the existence of valid legitimate grounds for processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, investigating or defending claims.
- If personal data is processed for the purposes of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning him for the purposes of such marketing, including profiling, to the extent that the processing is related to such direct marketing . If the data subject objects to processing for direct marketing purposes, personal data may no longer be processed for such purposes.
EXECUTION OF RIGHTS
The rights set out above are exercised upon a request made to the Administrator in writing or electronically to the email address rodo@joniec.pl. Any questions regarding the rights of the data subject may be sent to the same email address. The Administrator makes every effort to explain the applicable rights in a clear and accessible manner and enable the data subject to exercise them.
COMPLAINT
The data subject has the right to lodge a complaint with the supervisory authority, in particular in the Member State of his habitual residence, place of work or place of alleged infringement if he thinks that the processing of personal data concerning him violates this Regulation.
The above-mentioned complaint should be submitted to the supervisory body, the President of the Office for Personal Data Protection, to the following address: ul. Stawki 2, 00-193 Warsaw.
Profiling
- Personal data will not be processed in an automated manner and they will not be profiled.
Transfer of data outside the European Economic Area
- Personal data will not be transferred to a third country/international organization outside the European Economic Area.
Cookies and other technologies
- Please be advised that we use cookies (text files) on our website and other technologies to record information about pages or subpages visited by the user and his activity.
- Cookies are information saved by the browser. They have no effect on the software or hardware. Cookies are associated only with the browser of a specific device, without providing the user's first or last name (anonymous user). This is information saved by the server on the user's device, which the server can read each time it connects to the user's device.
- We use cookies to guarantee the highest standard of convenience of our website, and the collected data is used only inside our company to optimize operations.
- We use the following cookies on our website:
- "necessary" cookies, enabling the use of services available on the website, e.g. authentication cookies used for services that require authentication on the website;
- cookies used to ensure security, e.g. used to detect fraud within the scope of website authentication;
- "performance" cookies, enabling the collection of information on the use of website pages;
- "functional" cookies, enabling "remembering" the settings selected by the user and personalizing the user interface, e.g. in terms of the selected language or region where the user comes from, font size, website appearance, etc..;
- The Administrator also uses cookies to collect static data, via analytical tools: Google Analytics (cookies administrator: Google Inc. USA)
- The user may at any time disable or restore the option of collecting cookies by changing the settings in the web browser.
- If you do not want to receive cookies, you can change your browser settings. At the same time, we point out that disabling cookies necessary for Authentication, Security and Preferences will hinder the use of websites, and in extreme cases may prevent their use.
- Most browsers allow users to control cookies in preferences. Users should read the privacy policy of these browsers to learn about their rules of using cookies. Restricting the ability to set cookies may affect the overall quality of website use.
Final statements
- The extent to which it will be possible to exercise the rights of the data subject may be limited by law, in particular because of the rights and freedoms of others or because of public interest.
- The rights of the data subject, described in detail in this Privacy Policy, result from the generally applicable law, and the provisions of this Privacy Policy in no way limit these rights.
- In order to ensure a high level of personal data protection, the Administrator will take regular actions to review this privacy policy and make changes to it, in the event of a change in the scope of personal data processed, the technology for processing such personal data, as well as in the event of a change in applicable law or guidelines for their application.