Website Privacy Policy

I. GENERAL INFORMATION

1. This Privacy Policy stipulates the principles of processing and protection of personal data collected in connection with using the Website by the Users.
2. The co-administrators of personal data included on the Webiste as well as other personal data processed by Microservice are:
   Roman Bednarczyk Biuro Projektowo-Konstrukcyjne MICROSERVICE s.c. J. Bogacz R. Bednarczyk, contact information: e-mail: roman.bednarczyk@microservice.info, telephone: +48 34 3246048 address: Biuro Projektowo Konstrukcyjne MICROSERVICE s.c. al. Jana Pawła II 66/7, 42-218 Częstochowa, (hereinafter referred to as: "the Executive Administrator").
   Jacek Bogacz Biuro Projektowo-Konstrukcyjne MICROSERVICE s.c. J. Bogacz R. Bednarczyk, contact information: e-mail: jacek.bogacz@microservice.info, telephone +48 34 3246048
   Address: Biuro Projektowo Konstrukcyjne MICROSERVICE s.c. al. Jana Pawła II 66/7, 42­-218 Częstochowa, (hereinafter referred to as: "the Co-administrator").
3. The protection of personal data has a significant meaning by running the businesses of our company.
   Actually our Website can be used without providing any personal data. However if a person whom data refer to would like to use special services of our company through our Website, then processing of personal data may turn out necessary. If it is necessary to process data and there is no legal basis for this type of activity in the provisions of law, we generally obtain the consent of the person whom such data refers to.
4. Out of concern for the safety of data entrusted to us, we have elaborated internal procedures and recommendations that are to prevent making available of data to unauthorized persons. We control performance thereof and permanently verify their compliance with adequate legal acts - GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to processing of personal data, and repealing Directive 95/46/EC (General Data Protection Regulation)), Personal Data Protection Act of 10th May 2018,
   Provision of Services By Electronic Means Act of 18th July 2002 as well as with all types of executive and community law acts.
5. Personal Data is processed on the basis of consent expressed by the User and in cases when the provisions of law allow the Administrator to process personal data on the basis of their legally justified interests, provisions of law or for the purpose of an agreement concluded between the parties.

II. PURPOSE AND SCOPE OF DATA COLLECTION

1. By means of this statement on data protection our enterprise wishes to publicly inform on the nature, scope and purpose of personal data that we collect, use and process. This statement is also intended to inform persons who such data refer to about the rights they are entitled to.
2. Collection of data by the party
   a) The Service performs the functions of obtaining information about the users and their behavior as follows:
   - by means of information voluntarily entered in the forms
   - by means of collection of "cookies"
   b) The Co-administrators process the Users' personal data for the purpose of:
   - contact - on the basis of legally justified interest, which is a reply to the person initiating the contact with the company;
   - improvement of the Website and performance of statistical analyses of Website usage, which is the Administrator's legally justified interest.
   c) The Co-administrators process Users' data for the purpose and in the scope indispensable for using the Website by the Users and for the Website functioning - on the basis of the Administrator's justified interest consisting in the Website's efficient functioning.
   d) Data provided in the form is processed for the purpose resulting from the function of the specific form, e.g. for the purpose of the process of the information contact service.
   e) While using the Service, additional information may be collected, in particular: IP address assigned to the User's computer or external IP address of the Internet provider, the name of the domain, the type of browser, access time, the type of operational system.
   f) Navigational data can also be collected from the Users, including information on the links that they decide to click or other activities undertaken in the Service.
   g) Navigational data may be used for the purpose of guaranteeing to the Users better service, for the analysis of statistical data and for adjusting the Services to the Users' preferences as well as for administration of the Service.
   h) The recipients of personal data may be the employees and the co-employees of the Co-administrators as well as entities rendering IT, telecommunication, financial, logistic or marketing services for the benefit of the Administrator.
   i) Personal data collected for the purpose of contact will be processed until it is settled that it is outdated, however not longer than two years from the date of last contact.
   j) Data collected for the purpose of efficient functioning of the website and performing statistical analysis as well as functioning of the Website shall be kept for the period not longer than two years.
   k) The User's personal data shall not be used for the purpose of undertaking automated decisions, in particular of profiling. We do not transfer the User's personal data beyond the area of Poland/UE/ or EEA.
   l) Provision of personal data by the User is voluntary, but indispensable for using the Website or enabling us to reply the inquiries addressed to us.
3. Collection of data beyond the Website
   a) Apart from data collected through the Website, the Co-administrators process personal data in their activities also for the purposes of:
   - running electronic and paper correspondence, which is our legally justified interest (Art. 6 it. 1 letter f GDPR);
   - performance of orders and contracts concluded with the customers (Art. 6 it. 1 letter b GDPR);
   - and for other purposes of which the entity that they refer to shall be informed each time while obtaining such data.
   b) Provision of data is voluntary and fails to result from any legal obligation. In case of denial to provide data we shall not be able to correspond with you, including to reply to your questions or to perform a service/sell goods, which you would like to purchase.
   c) The recipients of personal data may be the employees and the co-employees of the Co-administrators as well as entities rendering IT, telecommunication, financial, logistic or marketing services for the benefit of the Administrator.
   d) Data for the purpose of performance of orders and contracts shall be processed until termination of the given contract/order and then throughout the periods of limitation of claims that may result from such contracts/orders or throughout the period resulting from the provisions of tax and accounting laws - depending on which of the time-limits shall require longer data storage. Personal data collected for the purpose of running correspondence shall be processed until it is determined that it is outdated, however not longer than 3 years from the date of the last contact.
   e) The User's personal data shall not be used for the purpose of undertaking automated decisions, in particular profiling. We do not transfer the User's personal data beyond the area of Poland/UE/ or EEA.

III. THE RIGHT TO CONTROL, ACCESS THE CONTENT OF OWN DATA AND AMENDMENT THEREOF

1. Each person, whose personal data is processed by the Co-administrators, has the right to:
   a) demand access to their personal data and receive a copy thereof, to correct, to remove or to limit processing of such data, to object against processing as well as the right to transfer data.
   b) withdraw the consent for processing data at any time if it is processed on the basis of a consent; it fails to affect the compliance with the right to process, which was performed on the basis of the consent before withdrawal thereof.
   c) appeal to the President of the Personal Data Protection Office, 2 Stawki Street, 00-193 Warsaw.
2. In order to exercise one’s rights, a person should send a request by means of one of the methods of contact with the Co-administrators (an e-mail, a telephone, a letter, a personal visit) using the Co-administrators' contact data stipulated in §1 it. 2.

IV. "COOKIES" MECHANISM

1. The Service uses small files, called cookies. They are saved by the Service on the User's computer if the browser allows such action. Information collected using such files allows to elaborate general statistics of visits of the contents presented in the Service.
2. The cookies are used for the purpose of analysis, testing and audit of viewing figures, and in particular for creation of anonymous statistics that helps to understand how the Service is used, which allows improvement of structure and content thereof.
3. The cookies mechanism is safe for the Users' computers. In particular, it is impossible for viruses and unwanted or malicious software to enter this way to the Users' computers. However, the Users have the option in their browsers to limit or to remove the cookies’ access to the computers.
4. The Service registers your data to cookies if you were filling in the form, but at a certain moment you resigned from further filling in so as to go to another subpage. Data shall be kept until the browser is shut down. The names of cookies that store such data are: sFirstName, sLastName, sCompanyName, sStreet, sZipCode, sCity, sPhone, sEmail.
5. The Service can store the Users' IP addresses. An IP address is a number assigned by the Internet provider to the computer of the person visiting the Service. The IP number allows access to the Internet. In most cases it is assigned to the computer dynamically , i.e. it changes by each connection with the Internet and therefore it is considered to be a non-personal identification information. The IP address is used by the Service when diagnosing technical problems with the server, by creation of statistical analyses (e.g. determination from which regions most visits are registered), as information useful for administration and improvement of the Service as well as for the purposes of safety and possible identifications burdening of the server, unwanted automatic software for viewing the content of the Service.
6. More about operation of cookies as well as about cookies used by this website can be found in a separate document available on our Website.

V. ADDITIONAL INFORMATION ON CO-ADMINISTRATION

1. Pursuant to Art. 13, 26 and 28 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as: "GDPR"), we inform that we jointly process your personal data and inform the Co-administrators of the basic content of joint settlements. You are welcome to contact us on the issue of protection of your personal data and performance of your rights.
2. In connection with processing of your personal data we also inform that:
   a) the Executive Administrator and the Co-administrator declare that they process your personal data pursuant to the principles regarding processing of personal data stipulated in Art. 5 GDPR.
   b) The Executive Administrator keeps all documentation regarding co-administration for the purpose of meeting the requirement of accountability.
   c) The Executive Administrator and the Co-administrator undertake to limit access to your personal data exclusively to the persons, who need such access for the performance of the above mentioned purposes. Moreover, the Executive Administrator and the Co-administrator guarantee that they allow personal data to be processed exclusively by persons, who have personal authorization granted by the Executive Administrator and the Co-administrator and that persons allowed to process personal data were obliged to keep personal data confidential and trained in advance in the scope of the principles and provisions regarding personal data protection.
   d) The Executive Administrator and the Co-administrator guarantee the proper level of personal data safety. For the purpose of safety the Executive Administrator and the Co-administrator guarantee:
   - capacity for continuous guaranteeing of confidentiality, integrity, availability and resistance of the systems and services of personal data processing;
   - capacity for quick re-establishing of access to personal data and access thereto in case of a physical or technical incident;
   - regular testing, measuring and assessment of efficiency of the technical and organizational measures intended for guaranteeing of the safety of processing;
   - if needed and possible, the Executive Administrator and the Co-administrator undertake to use, if required by the risk, pseudonymization and coding of personal data.
   e) The Executive Administrator and the Co-administrator can entrust the processing of personal data to a processing entity by maintaining the requirements resulting from GDPR, and in particular the requirements of Art. 28 GDPR.
3. You are welcome to contact both the Executive Administrator and the Co-administrator with regard to all issues regarding your personal data protection, but it is the Executive Administrator that will reply to all issues and see to the performance of your rights. It means that it is best for you to send all correspondence in the scope of execution of your rights to the Executive Administrator.