PRIVACY POLICY WWW.LEDLINE.PL
§1 General Provisions
1. This Privacy Policy sets out the protective measures and the basis on which any personal data, which we collect through the www.ledline.pl website, will be processed.
2. The administrator (data collector) of personal data obtained via the website is the LEDIN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ SPÓŁKA KOMANDYTOWA (hereinafter referred to as LEDIN) with its registered office in the town of Ostrołęka, at ul. Kołobrzeska 15 lok. B, post code: 07-410 Ostrołęka, entered into the Register of Companies maintained by the District Court for the capital city of Warsaw in Warsaw, XIV Commercial Division of the National Court Register under the number KRS: 0000580373, NIP: 7582278888, REGON: 141680103.
3. Data protection principles herein set out are in adherence to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as the GDPR.
§2 Scope and specific purpose for which personal data is processed
1. LEDIN collects and processes the following information about the User:
a) name and surname
b) company name
c) address details (postcode and town; street and number of the house/apartment)
d) e-mail address
e) the contact number
f) the VAT number
2. User’s personal data is collected for the following purposes:
a) performance of the contract for the provision of services (i.e. procurements: purchase and the sale of goods, financial settlements, any communication related to the processed order). The legal basis for the processing of these data is the necessity of their processing for the performance of the contract (Article 6 (1) (b) GDPR).
b) handling complaints and other claims (i.e. guarantees, warranties, returns and other claims related to business cooperation). The legal basis for processing these data is a legitimate interest of LEDIN (Article 6 (1) (f) GDPR). It is therefore necessary for LEDIN to retain securely information about past and current cooperation (history of orders, communication with LEDIN, payments) in order to handle possible claims.
c) Analytical. The legal basis for processing these data is the legitimate interest of LEDIN (Article 6(1)(f) GDPR) to use the analysis for internal reporting and to improve the quality of the services provided.
d) Sending out product and marketing related contents with prior permission. The legal basis for processing these data is the legitimate interest of LEDIN (Article 6 (1) (f) of GDPR). LEDIN may send out product related and marketing contents to the subscribers in the form of newsletters, i.e. messages sent electronically, containing information about current promotions, offers, competitions and industry news. Processing of your data for this purpose takes place only if you have consented to receive them.
3. Personal data is also used to contact Users in relation to the provision of our services and for proper processing of orders. We also contact you for information and marketing purposes (e.g. newsletter). Your data is necessary for us to analyse and, if necessary, to provide after-sales services (e.g. technical support, warranty).
§3 Who is this data shared with or entrusted to, and how long can it be stored?
1. We store personal data for as long as it is necessary to satisfy the above purposes for which the data is stored or until a User objects to the processing of their data. Any reported objection does not, however, affect the retention of data for the purpose of completing our accounting and tax obligations for the duration of such legal obligations, and for reasons of legal and any possible litigation security in accordance with the limitation legislation.
2. In view of separate business entities providing services for the benefit of LEDIN, these entities may have access to your personal data. These entities include service providers, including IT services, postal operators, couriers, payment operators, advisory and legal service providers and other subcontractors.
§4 Cookies, IP addresses and similar technologies.
1. Cookies used by the Administrator are safe for the User’s Device. No viruses or any other unwanted malicious software files cannot be transmitted to the User’s Device through Cookies or similar technologies. These files allow to identify the software used by the User and to customise the service for each User. Cookies usually contain the name of the domain they come from, the time of storing them on the Device and the assigned value.
2. The Administrator uses two types of cookies:
a) Session cookies: are stored on the User’s Device and remain there until the end of the browser session. The stored information is then permanently deleted from the Device’s memory. The mechanism of session cookies does not allow to collect any personal data or any confidential information from the User’s Device.
b) Long live cookies: are stored on the User Device and remain there until they are deleted. The end of a given browser session or switching off the Device does not cause their removal from the User’s Device. The mechanism of permanent cookies does not allow to collect any personal data or any confidential information from the User’s Device.
3. All Users have the possibility to limit or disable the access of cookies to their Device.
4. The Administrator uses Internal Cookies for the following purposes:
a) Service Configuration
• To adjust the content of the Website to the User’s preferences and optimise the use of the Website pages.
• To identify the User’s device and its location and, accordingly, to display the website, adjusted to his or her individual needs.
• To remember settings selected by the User and personalise the User interface, e.g. in the scope of the selected language or region from which the User originates.
• To remember the history of visited pages on the site in order to recommend the content, font size, appearance of the website, etc.
b) User authentication and ensuring the User’s session is kept (after logging in)
• To keep the User’s session (after logging in), thanks to which the User does not have to re-enter the login and password on every subpage of the Website.
• To adjust configuration of selected functions on the Website, enabling in particular verification of the authenticity of the browser’s session.
• To optimise and increase the efficiency of services provided by the Administrator.
c) Completion of all processes necessary for enabling full functionality of the Website
• To adjust the content of the Website to the User’s preferences and optimise the use of the Website pages. In particular, these files allow to recognise the basic parameters of the User’s Device and properly display the website, adapted to his or her individual needs; correct use of the affiliate program, allowing in particular to verify the sources of redirecting Users to the particular pages of the Website.
d) Remembering the User’s location
• To adjust configuration of selected functions on the Website, allowing in particular to adjust the information provided to the User taking into account his or her location.
e) Analyses, research and audience audit
• To create anonymous statistics that help to understand how Service Users use Service pages to improve their structure and content.
f) Providing advertising services
• To adjust the advertisements of services and products of third parties presented on the Website.
g) Ensuring safety and reliability of the Service
5. The Administrator of the service uses External Cookies for the following purposes:
a) To present multimedia content on the particular pages of the Website, which are downloaded from an external website:
• www.vimeo.com [cookie administrator: Vimeo, LLC. with its registered office in the USA]
• www.youtube.com [cookie administrator: Google Inc. with its registered office in the USA]
• www.wrzuta.pl [cookie administrator: Free4Fresh Sp. z o.o. with its registered office in Warsaw]
b) To collect general and anonymous statistical data using analytical tools:
• Google Analytics [Administrator of cookies: Google Inc. with its registered office in the USA]
• Gemius Traffic [cookie administrator: Gemius S.A. with its registered office in Warsaw]
• Stat24 [Administrator of cookies: Redefine Sp. z o.o. with its registered office in Warsaw]
• KissMetrics [Cookie Administrator: Space Pencil, Inc., USA]
c) To present advertisements adjusted to the User’s preferences using the Internet advertising tool:
• Google AdSense [Administrator of Cookies: Google Inc. with its registered office in the USA]
• Advertising network [cookie administrator: Internetowy Dom Mediowy net S.A. with its registered office in Warsaw].
d) To log in to the website using a social networking site:
• Facebook Connect [cookie administrator: Facebook Inc. with its registered office in the USA or Facebook Ireland with its registered office in Ireland]
• Google [Administrator of Cookies: Google Inc. with its registered office in the USA]
• LinkedIn [Cookie Administrator: LinkedIn Ireland Limited based in Ireland]
e) To use interactive functions to promote the use of social networking sites:
• twitter.com [cookie administrator: Twitter Inc., USA]
• plus.google.com [cookie administrator: Google Inc. based in the USA]
• Facebook.com [cookie administrator: Facebook Inc. with its registered office in the USA or Facebook Ireland with its registered office in Ireland]
• nk.pl [cookie administrator: Nasza Klasa Sp. z o.o. with its registered office in Wrocław]
• LinkedIn.com [Cookie Administrator: LinkedIn Ireland Limited based in Ireland]
f) To present opinions on the particular pages of the Website, which are downloaded from an external website:
• opineo.pl [Administrator of cookies: Opineo Sp. z o.o. with its registered office in Wrocław].
1. To use functions to facilitate communication via the Website, which are downloaded from an external website:
• skype.com [Cookie Administrator: Microsoft Corporation based in the USA]
§5 The rights of Data Subjects
1. The right to withdraw the consent – Article 7(3) of the GDPR
• The user has the right to withdrawn/revoke any consent given to the LEDIN company;
• Withdrawal of consent shall take effect upon the receipt of request for the withdrawal of consent;
• The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal
• Withdrawal of consent does not entail any adverse consequences for the User, but may prevent further use of services or functionalities, which under the law, LEDIN can provide only with the consent.
2. The right to object to data processing – Article 21 of the GDPR
• The data subject shall have the right to object, at any time to processing of personal data concerning him or her, on grounds relating to his or her particular circumstances. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
3. The right to erasure (the right to be forgotten) – Article 17 of the GDPR
The user shall have the right to request the deletion of personal data if:
• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• Withdraw a specific consent, to the extent that personal data were processed on the basis of his or her consent;
• Personal data have been unlawfully processed;
• Personal data must be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which the LEDIN company is subject;
• Personal data have been collected in connection with the provision of information society services.
Despite a request for the deletion of personal data based on submitted objection or withdrawal of consent, LEDIN may retain personal data to the extent that the processing is necessary to establish, enforce or defend claims.
4. Right of access to data by the data subject – Article 15 of the GDPR
• The User shall have the right to obtain from LEDIN confirmation whether or not personal data concerning him are being processed and, if so, the right to access them and the following information: the purpose of the processing, the categories of personal data processing, the recipients or categories of recipients of the data, the intended storage period of the data or the criteria for determining this period, the right to lodge a complaint with the supervisory authority, the source of the data.
• The User shall have the right to obtain a copy of their personal data.
5. The right to rectify data – Article 16 of the GDPR
• The user has the right to obtain from the LEDIN company without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement to iod@ledin.pl
6. The right to transfer data – Article 20 of the GDPR
• The user has the right to receive his or her personal data, which he or her has provided to the Administrator and then transmit the data to another controller, chosen by him or her. The user shall also hav the right to request that the personal data be sent directly by the Administrator to another, if technically feasible.
§ 6 Amendments to the Privacy Policy
1. Any changes provided for in this Privacy Policy will be communicated to you well in advance of the effective date of such changes.
2. If you have any questions regarding this Privacy Policy, please contact us at: iod@ledline.pl