The controller of personal data collected through the website “seedpaper.pl” is Flawiusz Pietrzyk, running a business under the name “ART-PAPIER czerpalnia Papieru Flawiusz Pietrzyk”, registered address: ul. Pogodna 9, 44-156 Rachowice, Poland, NIP (tax ID): 9690880293, REGON: 272855015, entered in the Central Register and Information on Economic Activity (CEIDG), email address: seedpaper@seedpaper.pl, hereinafter referred to as the “Controller”.
Personal data collected by the Controller through the website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter the GDPR, and the Polish Personal Data Protection Act of 10 May 2018.
TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION
PURPOSE OF PROCESSING AND LEGAL BASIS. The Controller processes personal data through the website seedpaper.pl when:
the user uses the contact form. Personal data is processed on the basis of Art. 6(1)(f) GDPR as the legitimate interest of the Controller.
TYPE OF PERSONAL DATA PROCESSED. The Controller processes the following categories of the user's personal data:
First and last name,
Email address,
Phone number,
RETENTION PERIOD OF PERSONAL DATA. Users' personal data is stored by the Controller:
for the period necessary to complete the given task (e.g. responding to an enquiry sent via the contact form)
where the legal basis for processing is the performance of a contract, for as long as necessary to perform the contract, and thereafter for a period corresponding to the limitation period for claims.
where the legal basis for processing is consent, until the consent is withdrawn, and after withdrawal for a period corresponding to the limitation period for claims that may be raised by or against the Controller.
When using the website, additional information may be collected, in particular: the IP address assigned to the user's computer or the external IP address of the Internet provider, domain name, browser type, access time and operating system type.
Navigation data may also be collected from users, including information about links they choose to click or other actions taken on the website. The legal basis for such activities is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), consisting in facilitating the use of services provided electronically and improving their functionality.
Providing personal data is voluntary.
Personal data will also be processed by automated means in the form of profiling, provided the user consents to it under Art. 6(1)(a) GDPR. The consequence of profiling will be assigning a profile to the person in order to make decisions concerning them or to analyse or predict their preferences, behaviour and attitudes.
The Controller takes particular care to protect the interests of data subjects and, in particular, ensures that the data it collects is:
processed lawfully,
collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes,
factually correct and adequate in relation to the purposes for which they are processed, and stored in a form that permits identification of data subjects for no longer than is necessary to achieve the purpose of processing.
DISCLOSURE OF PERSONAL DATA
Users' personal data is shared with service providers used by the Controller to run the website. Depending on contractual arrangements and circumstances, the service providers to whom personal data is transferred either follow the Controller's instructions as to the purposes and means of processing (processors) or determine the purposes and means of processing themselves (controllers).
Users' personal data is stored exclusively within the European Economic Area (EEA).
RIGHT TO CONTROL, ACCESS AND CORRECT YOUR OWN DATA
The data subject has the right to access their personal data and the right to rectification, erasure, restriction of processing, data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Legal basis for the user's request:
Access to data – Art. 15 GDPR
Rectification of data – Art. 16 GDPR.
Erasure of data (the so-called right to be forgotten) – Art. 17 GDPR.
Restriction of processing – Art. 18 GDPR.
Data portability – Art. 20 GDPR.
Objection – Art. 21 GDPR
Withdrawal of consent – Art. 7(3) GDPR.
To exercise the rights referred to in point 2, you can send an email to: seedpaper@seedpaper.pl.
If the user exercises any of the above rights, the Controller will fulfil or refuse the request without undue delay, and no later than one month after receiving it. However, if – due to the complexity or number of requests – the Controller cannot fulfil the request within a month, it will do so within the next two months, informing the user within one month of receiving the request of the intended extension and the reasons for it.
If the data subject finds that the processing of personal data infringes the GDPR, they have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.
“COOKIES”
The Controller's website uses “cookies”.
Installing “cookies” is necessary for the proper provision of services on the website. “Cookies” contain information necessary for the website to function properly and also make it possible to compile general statistics on website visits.
The website uses the following types of “cookies”: session and persistent
“Session” “cookies” are temporary files stored on the user's end device until they log out (leave the website).
“Persistent” “cookies” are stored on the user's end device for the time specified in the cookie parameters or until the user deletes them.
The Controller uses its own cookies to better understand how users interact with the website content. These files collect information about how the user uses the website, the type of website from which the user was redirected, and the number of visits and duration of the user's visit to the website. This information does not record specific personal data of the user but is used to compile website usage statistics.
The user has the right to decide on the access of “cookies” to their computer by selecting this in their browser window in advance. Detailed information on the options and methods of handling “cookies” is available in the software (web browser) settings.
The website also uses solutions provided by third parties such as “Google” and “Facebook”, which have their own privacy policies. These are available on the websites of the above entities.
FINAL PROVISIONS
The Controller applies technical and organisational measures to protect the personal data processed that are appropriate to the risks and categories of data protected, and in particular protects the data against disclosure to unauthorised persons, removal by an unauthorised person, processing in breach of applicable law, and alteration, loss, damage or destruction.
The Controller provides appropriate technical measures to prevent unauthorised persons from obtaining and modifying personal data sent electronically.
Matters not covered by this Privacy Policy are governed by the GDPR and other applicable provisions of Polish law.
