PRIVACY POLICY

PERSONAL DATA PRIVACY POLICY

ONLINE SERVICE: https://redspottech.pl

effective from 01.12.2022

§1

Definitions used:

1. Personal Data Privacy Policy - this Policy, defining the purposes and scope of data processing, the entities to whom the data will be transferred, as well as the rights of the persons whose data is processed, in connection with the use of the services of the website.
2. Administrator of personal data, Operator - the entity deciding on the purposes and means of data processing. The administrator of the personal data of the Users of the Service is:
   RED SPOT TECHNOLOGY Sp. z o.o., (KRS: 0000853114, NIP: 9492244119, REGON: 386674481)
   registered office address: ul. Juliusza Słowackiego 24, 42-231 Kokawa 
   correspondence address: ul. Juliusza Słowackiego 24, 42-231 Kokawa 
   
3. Data subject - a natural person who, while using the Service, provides personal data in order to subscribe to the newsletter or make contact via the contact form.
   
4. Service - the service available at https://redspottech.pl, through which the User may browse the content of blog posts, subscribe to the newsletter or contact the administrator of personal data.
   
5. User - a person who voluntarily uses the services and content available in the Service, i.e. browses the pages of the Service, registers, subscribes to the free newsletter or contacts the owner of the Service via the contact form.
   
6. Newsletter - one of the services provided electronically in the Service, consisting of sending marketing information electronically to the e-mail address provided by the User, with his/her prior consent.
7. Contact form - one of the services provided electronically in the Shop by the Seller, enabling the Buyer to send an enquiry to the Seller using the dedicated form on the Shop’s website.
   
8. Personal data - all information which, without excessive time and cost, may lead to the identification of a natural person, including his/her identification, address and contact details.
9. Data processing - performing operations on personal data, such as collecting data, modifying data, archiving data or deleting data.
   

§2

General provisions:

1. This policy applies to the website operating at the URL: https://redspottech.pl/. The operator of the website and the administrator of personal data is: RED SPOT TECHNOLOGY Sp. z o.o. The operator is the administrator of your personal data in relation to the data provided voluntarily in the Service.
   
   
2. Having regard to the protection of the privacy of natural persons whose data may be processed by the administrator of personal data, in connection with the use of the services provided in the Service, this privacy policy has been introduced.
   
   
3. The data subject will learn the most important information concerning the rules for the processing of his/her personal data and the rights to which he/she is entitled in connection with the processing.
   
   
4. Personal data is processed in accordance with the applicable provisions of law; i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter GDPR), the Act of 10 May 2018 on data protection, as well as the Act of 18 July 2002 on the provision of electronic services.
   
   
5. The administrator of data applies adequate technical and organisational measures to ensure the protection of the processed data, appropriate to the threats and the category of data covered by protection, and in particular secures the data against disclosure to unauthorised persons, being collected by an unauthorised person, processing in violation of the law and alteration, loss, damage or destruction.
   
   
6. The administrator of data has developed and implemented internal data security policies, which all employees and associates are obliged to follow.
   
   
7. Access to personal data is limited solely to authorised persons, who are obliged to keep the data and the methods of securing it confidential.
   
   
8. This privacy policy applies to all persons using and services provided in the Service, in particular:
   1. persons browsing the content of the Service,
   2. persons ordering the free subscription service (Newsletter),
   3. persons contacting the administrator of data via the contact form, by telephone or e-mail.

 

§3

Purposes and scope of data processing:

1. Personal data is collected directly from the data subjects, in particular through:
   1. completing the form with contact details when submitting an enquiry via the form on the Service website,
   2. completing the newsletter subscription form,
   3. providing data by telephone,
   4. providing data by sending an e-mail message,
   5. saving cookies in end devices, in accordance with the Cookies Policy.
      
      
2. The administrator of personal data processes personal data for the following purposes:
   1. responding to a question submitted via the contact form available on the Service website - processing is carried out on the basis of Article 6(1)(b) GDPR - it is necessary to take steps at the request of the data subject prior to entering into a contract.
      
      The data provided in the form is processed for the purpose resulting from the function of the specific form, e.g. in order to carry out the process of handling a service request or business contact, registration of services, etc. Each time, the context and description of the form clearly informs what it is used for.
      
      
   2. sending the Newsletter and related commercial and marketing information electronically - processing is carried out on the basis of Article 6(1)(a) GDPR - when the data subject has given his/her voluntary consent. The Service sends the newsletter only to persons who have confirmed their subscription and expressed their wish to receive commercial and marketing information.
      
      
   3. marketing of own products and services of the Shop - processing is carried out on the basis of Article 6(1)(f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the administrator of data.
      
      
3. The scope of the processed personal data has been limited to the minimum necessary for the provision of the Services:
   1. in the case of an enquiry via the Contact Form: identification data, telephone number, e-mail address, any other data voluntarily provided by the person in the content of the message,
      
   2. in the case of ordering the newsletter: first name and e-mail address.
      
      
4. Providing data is necessary in order to receive a response from the Service. Failure to provide the required data makes it impossible to fulfil the order and make contact.
   
   
5. In the case of ordering the Newsletter, providing data is voluntary but necessary for its delivery.
   
   
6. The Service, in certain cases, may save information facilitating the linking of the data in the form with the e-mail address of the user completing the form. In such a case, the user’s e-mail address appears within the URL of the page containing the form.
   
   
7. The Service may save information on connection parameters (time indication, IP address).

 

§4

Selected methods of data protection applied by the administrator of personal data:

1. Login and entry points for personal data are protected at the transmission layer (SSL certificate). Thanks to this, personal data and login data entered on the website are encrypted in the user’s computer and can only be read on the target server.
   
   
2. Personal data stored in the database is encrypted in such a way that only the administrator of personal data, who has the key, can read it. Thanks to this, the data is protected in the event of the database being stolen from the server.
   
   
3. In order to protect the data, the administrator of personal data regularly makes backup copies.
   
   
4. An important element of data protection is the regular updating of all software used by the administrator of personal data to process personal data, which in particular means regular updates of programming components.
   

§5

Period of data processing:

1. Personal data is processed for the period necessary to achieve the purpose for which it was collected, i.e.:
   1. for the period resulting from other provisions of law, such as tax settlement or issuing an invoice at the request of the data subject - data is stored for 5 years, counting from the end of the calendar year in which the tax payment deadline expired,
      
      
   2. until consent is withdrawn, if the processing of data is based on the consent of the data subject.

 

§6

Recipients of data:

1. Data may be entrusted to other entities in order to perform specific services commissioned by the administrator of data, in particular to entities carrying out on its behalf:
   
   1. website hosting services, servicing and maintenance of IT systems in which data is processed,
      
   2. automation - newsletter (e-mail, first name),
      
   3. marketing services for the administrator.

 

§7

Rights of data subjects:

1. The data subject has the right to:
   
   1. access and rectify the data - for this purpose, please contact the administrator of personal data,
      
      
   2. withdraw consent to the processing of personal data at any time, if the basis for data processing was the consent of the data subject - in the case of the Newsletter. Withdrawal of consent does not affect the lawfulness of processing carried out on its basis before its withdrawal,
      
      
   3. erase the data (to be forgotten), unless other provisions of law apply obliging the administrator of data to archive the data for a specific period, e.g. tax law,
      
      
   4. data portability, if the basis for processing the data is a contract or the consent of the data subject and the data is processed in an automated manner,
      
      
   5. object to the processing of data for direct marketing purposes carried out by the administrator of data under a legitimate legal interest, as well as restriction of processing,
      
      
   6. not to be subject to automated profiling, if the administrator of data were to make decisions based solely on automated profiling and bringing legal effects for the data subject or similarly significantly affecting him/her,
      
      
   7. control the processing of data and obtain information on whether who is the administrator of data, as well as obtaining information on the purpose, scope and manner of processing of data, the content of such data, the source of the data, as well as the method of disclosure, including the recipients or categories of recipients of the data.
      
      
   8. The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), if he/she considers that the processing of his/her data is not in compliance with the currently applicable regulations in this respect.
      
      
   9. In order to exercise the right to control data, access to the content of data, its rectification, as well as other rights, you may contact the administrator of data via the contact form on the Service website.

 

§8

Final provisions:

1. The administrator of data reserves the right to amend this Privacy Policy, in the event that technical solutions used or changes in the provisions of law concerning the privacy of persons using the Service require it.
   
   
2. In the event of changes to the applicable privacy policy, the relevant modifications will be made to the above record. The current version of the privacy policy will always be posted on the Service website, therefore it is recommended to familiarise yourself each time with the currently applicable document.