This Privacy Policy provides information to lnianawyspa.pl website (Website) users (Users) on the purposes and the legal basis for the Website processing personal data, and on the manner in which the data is used, and on the rights the Users are entitled to in association thereof. The controller of personal data (Controller) protects the Users’ privacy and ensures security for the data provided by them. The Controller observes personal data processing rules and applies technical and organisational measures ensuring personal data security and processing thereof in accordance with the law. Users’ personal data are processed each and every time on the basis of legal regulations as in force at present, and in particular pursuant to the Telecommunications Law Act and Regulation of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR). Personal data may be processed in Users’ Cookies pursuant to the terms as set forth in the Cookies Policy. 

Who is the Controller of your personal data?

Lniana Wyspa AEGIR Anna Bąk Kordiana 68/80A, 30-653 Kraków, NIP (tax identification number): 9451909898, REGON (Business Identification Number): 120634884 is the Controller of your personal data. Contact address: pracownia@lnianawyspa.pl

Users whose personal data are processed may also choose another method for contacting the Controller, including voice and written communication.

Purposes and legal basis for personal data processing:

  • communication using the Website contact form:
    personal data are processed for purposes associated with the Controller’s legitimate interests (article 6, paragraph 1f of the GDPR). Communication with a person who approaches the Controller looking for a response, and in particular to handle User enquiries and reply to User questions constitutes the Controller’s legitimate interest. There may be a number of reasons for communicating which are difficult to categorise. Provision of personal data is voluntary and may be necessary to receive a response from the Controller.
  • communication using contact details provided to the Website:
    personal data are processed for purposes associated with the Controller’s legitimate interests (article 6, paragraph 1f of the GDPR). Communication with a person who approaches the Controller looking for a response, and in particular to handle User enquiries and reply to User questions constitutes the Controller’s legitimate interest. There may be a number of reasons for communicating which are difficult to categorise.  Provision of personal data is voluntary and may be necessary to receive a response from the Controller.
  • pursuing and defending against claims, preventing fraud, performing analyses and statistical calculations, ensuring security for the IT environment, applying internal control systems:
    personal data are processed for purposes associated with the Controller’s legitimate interests (article 6, paragraph 1f of the GDPR). The ability to undertake the aforementioned actions is the Controller's legitimate interest. 
  • installing and using Cookies on a User device:
    purposes and legal basis for personal data processing in Cookies are defined in detail by the Cookies Policy. 

Personal data recipients:

User data shall not be made available to other third parties, unless this proves to be necessary and the User agrees or is obliged to do so, or unless making the data available results from mandatory legal provisions, a final court decision or a final decision by a competent authority. The Website may contain links to other websites. The Controller shall not be responsible for processing of personal data resulting from a User browsing such websites. Upon opening other websites, in the first place the User should read the applicable privacy policies and personal data protection procedures. The Controller does not transfer data to third countries outside of the EEA or international organisations. 

What is profiling and are data profiled by this Website?

Profiling entails any automated processing of personal data which makes it possible to evaluate personal factors of an individual and, in particular, to analyse or predict aspects relating to the work, economic situation, health, personal preferences or interests, reliability or behaviour, location or movements of the data subject – in so far as it produces legal effects in relation to the data subject or significantly affects the data subject in a similar manner. The Website does not profile data. If, in conjunction with the Website’s expansion, personal data will be subject to profiling, the Controller shall inform the Users of this and data shall be profiled in accordance with the applicable regulations. If profiling is to be employed, the Controller shall implement appropriate rights, freedoms, and Users’ legitimate interests’ protection measures, which include an option for the Controller to perform a human intervention and the ability to express one’s opinion and question decisions. 

What rights do Users have? 

Users have the right to request access to and rectification or erasure of personal data or restriction of processing as well as the right to data portability. Users have the right to object to data processing, and in particular within the scope of data profiling. To exercise these rights Users can contact the Controller on pracownia@lnianawyspa.pl. Users may also choose another method for contacting the Controller, including voice and written communication. Users have the right to lodge a complaint with the President of the Data Protection Office if they consider that the processing of their personal data infringes legally binding regulations.

How does the Controller protect personal data?

The Controller protects Users’ data against unauthorised access, disclosure, amendments, and destruction. In particular the Controller applies data encryption, physical protection measures as well as verification within IT systems. The Controller also employs anti-virus software and firewalls. Only authorised persons, obligated to maintain confidentiality, as well as subcontractors who have concluded data processing agreements with the Controller may access User data. 

What is the scope of personal data processing? 

User data are processed for the duration of their Website use. For processing of personal data in connection with:

  • communication via the Website’s contact form – personal data shall be processed for a period necessary to provide the User with a reply, complete handling a User enquiry or until the User raises an effective objection;
  • communication using contact details provided to the Website – personal data shall be processed for a period necessary to provide the User with a reply, complete handling a User enquiry or until the User raises an effective objection;
  • pursuing and defending against claims, preventing fraud, performing analyses and statistical calculations, ensuring security for the IT environment, applying internal control systems – personal data shall be processed for a period justified by the nature of the aforementioned actions, legal regulations or until such time as the User raises an effective objection;
  • installing and using Cookies on a User’s device – personal data shall be processed for a period as set forth in the Cookies Policy.

If the period for processing personal data on the basis of a given legal basis expires, the said personal data may still be processed pursuant to a different legal basis. Upon expiry of the processing period and exhaustion of all bases for processing, personal data shall be permanently deleted or rendered anonymous.

Entry into force and changes to the Privacy Policy:

The Privacy Policy and changes thereto apply from the moment they are published on the Website. 

The Controller reserves the right to amend this Privacy Policy in order to ensure the Privacy Policy satisfies the requirements stemming from applicable legal regulations. Amendments shall be published on the Website.

Let me know

If you like anything

Contact Us
Preloader