Privacy Policy
This Privacy Policy (“Privacy Policy”) sets out the rules for the processing and protection of the Customer’s personal information.
I. Definitions
- ADMINISTRATOR – means Kambu Sp. z o.o., a company registered in Poland, registered office at: Raciborowice, ul. Młyńska 35, 32-091 Michałowice; KRS: 0000358218, tax identification number: 5130205826, e-mail: hello@kambu.pl, which is the controller of the personal information.
- Cookies – means IT data, in particular small text files, saved and stored on the Devices through which the Customer uses the Website.
- Website – means Administrator’s website: http://localhost:8241/
- Device – means an electronic device through which the Customer accesses the Website.
- Customer – means any person for whom the Services may be provided.
- GDPR – means the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
II. Personal information protection
- The Privacy Policy applies if you use ADMINISTRATOR Services, i.e. use ADMINISTRATOR’S website, contact ADMINISTRATOR e.g. via email, via form available on the ADMINISTRATOR website or if you receive messages from ADMINISTRATOR via electronic means of communication.
- Depending on the services you use, ADMINISTRATOR processes the following personal information:
- when using the contact form on the website: Name, Surname, e-mail address, the content of the message;
- when using the electronic correspondence: Name, Surname, the name of the company, e-mail address, adress, telephone number, other data, the content of the message.
- ADMINISTRATOR uses personal information to provide Customers with ADMINISTRATOR services, for accounting and tax purposes, as well as receive and send correspondence in connection with the performance of the contract or before its conclusion. The basis for personal information data processing is art. 6 (1) (b) of the GDPR – the processing necessary for the performance of the contract or to take action at the request of the data subject before the conclusion of the contract. In some cases a specific provision may also be the legal basis that allows ADMINISTRATOR to process personal information in order to comply with a legal obligation – e.g. tax regulations (the basis of art. 6 (1) (c) of the GDPR).
- ADMINISTRATOR uses personal information to contact Customers, for example, by email, as well as responding to posts on social media that have been addressed to ADMINISTRATOR, in order to better perform of the services, inform about changes and provide explanations and information. The basis for data processing is the legitimate interest of ADMINISTRATOR (the basis of art. 6 (1) (f) of the GDPR).
- ADMINISTRATOR requires the Customer to provide personal information that is necessary for the performance of the services or replying for the message. In the event that this information is not provided by the Customer, ADMINISTRATOR will not be able to provide the services or reply for the message. If required by law, e.g. tax, ADMINISTRATOR may also require providing other necessary information. Apart from the above cases, providing personal data by the Customer is voluntary.
- ADMINISTRATOR entrusts personal information for processing to service providers who perform certain duties and functions on behalf of ADMINISTRATOR. ADMINISTRATOR provides data to service providers: data storage services, accounting services for ADMINISTRATOR. ADMINISTRATOR entrusts to the service providers listed above only such data that is necessary for the proper performance of services for or on behalf of ADMINISTRATOR. In the case of data transmission, ADMINISTRATOR ensures that the service provider processes data in compliance with security requirements, and does not use the data for purposes other than providing services to ADMINISTRATOR.
- ADMINISTRATOR does not transfer personal information to entities other than the service providers described above, except when it is necessary in connection with legal regulations or a decision of authorities, as well as in the case of the need to establish, exercise or defend ADMINISTRATOR rights.
- ADMINISTRATOR processes the personal data in the EU. ADMINISTRATOR doesn’t transfer the data outside European Union.
- ADMINISTRATOR processes Customer’s personal data only for such a period as is necessary for the proper performance of contracts with Customers, i.e. the provision of services, as well as the handling of the complaint process, pursuing claims in connection with the performance of the contract, as well as for the period resulting from the obligations imposed at ADMINISTRATOR by law, only in a necessary scope.
- ADMINISTRATOR ensures the use of appropriate technical and organizational security for personal data to ensure an adequate level of security of the personal data being processed.
- Customers have the right to access their personal information, including requesting information about their data or providing a copy of this data processed by ADMINISTRATOR.
- Customers have the right to amend their personal information if the data is incomplete, out of date or incorrect.
- Customers have the right to object to the processing of personal information by ADMINISTRATOR. “Marketing” objection – the Customer has the right to object to the processing of his personal information for the purpose of direct marketing. Objection due to a special situation – the Customer also has the right to object to the processing of his personal information on the basis of a legitimate interest for purposes other than direct marketing, as well as when the processing is ADMINISTRATOR necessary to perform a task carried out in the public interest. You should then indicate the specific situation that justifies ADMINISTRATOR ceasing the opposition for the processing. ADMINISTRATOR will cease to process the Customer’s personal information for these purposes, unless it shows that the grounds for ADMINISTRATOR processing of personal information prevail over the rights of the Customer or that the data is ADMINISTRATOR necessary to establish, assert or defend claims.
- Customers have the right to request the restriction of personal information processing by ADMINISTRATOR.
- Customers have the right to request the removal of personal information.
- Customers have the right to request the transfer of personal information to the Customer or an indicated third party.
- Customers have the right to lodge a complaint to the competent supervisory authority for the protection of personal information: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, website: http://www.uodo.gov.pl/
- The ADMINISTRATOR does not profile data and does not automatically collect any information, except for information contained in Cookies, if the Customer has consented to it.
III. Cookies
- The ADMINISTRATOR collects information using Cookies, saved on Customer Devices.
- The ADMINISTRATOR automatically collects the following data about Customers – IP address, domain name, browser type, operating system type.
- Cookies are IT data, in particular text files, which are stored on the Website Customer’s end Device and are intended for the use of the Website. Cookies usually contain the name of the website they come from, their storage time on the Device and a unique number. Cookies make it possible to identify the software used by the Customer and adapt the Website to the individual needs of each Customer.
- The ADMINISTRATOR collects information using Cookies for the following purposes:
- to adapt the services provided as part of the Website to the needs of Customers and to optimize the use of the Website;
- in order to develop general and anonymous statistics on the use of the Website by Customers, through analytical tools that help to understand how users use the Website, which allows improving the structure and content of the Website.
- The ADMINISTRATOR collects information using the following categories of Cookies:
- temporary files that remain on the Customer’s Device, usually until the web browser is closed. The files are deleted when the browser is closed. Such cookies are used by the ADMINISTRATOR, inter alia, to remember Customer data.
- permanent files that remain on the Customer’s Device for a specified period of time or until they are deleted by the Customer. The files are not deleted when the browser is closed.
- The ADMINISTRATOR uses third-party software to analyze user behavior. Scripts provided by software suppliers may use Cookies to identify visitors to the Website and send information to their servers about the visitor’s IP number, his web browser, his operating system, and the subpages and files viewed. The data collected in this way is used only for statistical purposes.
- Using the Website without changing the browser settings for Cookies means that they will be placed on the Customer’s Device.
- The Customer may change the Cookies settings at any time. The Customer may block or limit the placing of Cookies on the Device by changing the web browser settings. Detailed information on changing cookie settings is available in the settings of the web browser used by the Customer.
- Disabling or limiting the option of saving Cookies in the web browser does not prevent the Customers from using the Website, however, it may affect some of the functionalities available on the Website.
- The legal basis for the processing of data contained in Cookies is the legitimate interest of the ADMINISTRATOR (the basis of Article 6 (1) (f) of the GDPR) – improving the structure and content of the Website, statistical purposes, proper functioning and optimization of the use of the Website.