Privacy Policy
- GENERAL PROVISIONS
- This Privacy Policy of the Service is informative in nature and aims to specify the rules and define the basic rights related to the processing of personal data.
- The User's personal data is processed in accordance with the principles laid down in data protection regulations, in particular in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) („GDPR”).
- The Administrator exercises particular care to protect the interests of the data subjects.
- Pursuant to Article 13 of the General Data Protection Regulation (hereinafter: GDPR), SILAMAR informs that the personal data controller collecting data through the Service is SILAMAR Spółka z ograniczoną odpowiedzialnością Spółka jawna, with its registered office at ul. Seweryna Mielżyńskiego 18/8, 61-725 Poznań, NIP: 7812004084 Regon: 385029258 KRS: 0000874127, email address: kontakt@silarent.pl, phone number: +48 575 570 990 – hereinafter referred to as the "Administrator." In case of questions related to personal data processing, contact the Administrator directly by email: biuro@silamar.pl or via traditional mail to the Administrator's registered office.
- PURPOSE AND SCOPE OF DATA COLLECTION
- Each time, the purpose, scope, and recipients of the data processed by the Administrator result from actions taken by the User on the Service.
- Possible purposes of collecting Users' personal data by the Administrator:
- pursuant to Article 6(1)(a) in connection with Article 22(2)(c) of the GDPR – User's consent to one or more specified purposes (e.g., sending commercial and marketing information, newsletter); consent can be expressed as a result of User's action (e.g., submitting data and sending a form) or by the necessity to check checkboxes, until the consent is withdrawn;
- pursuant to Article 6(1)(b) of the GDPR in order to perform a contract to which the User is or will be a party – for the duration of the contract;
- pursuant to Article 6(1)(c) of the GDPR to fulfill legal obligations imposed on the Administrator – until the obligations are fulfilled or claims expire;
- pursuant to Article 6(1)(f) of the GDPR to pursue claims related to the contract concluded, conduct statistics, handle inquiries submitted via contact forms, and conduct marketing activities promoting the Administrator's operations, including using email addresses and phone numbers – until objection to such data processing is raised.
- The Administrator may process the following personal data of Users using the Service: name and surname (company name), email address, contact phone number.
- The Administrator processes User data during the term of the contract concluded with the User for the provision of electronic services in accordance with the Act of 18 July 2002 on Providing Electronic Services and also after its termination when fulfilling relevant legal obligations, pursuing claims related to contract performance, for archival and statistical purposes, and at the request of competent public authorities; after this period, only if required by law. Personal data collected based on User consent, e.g., for marketing purposes, is processed by the Administrator until the User raises an effective objection or withdraws consent, no longer than 20 years.
- Personal data provided by the User is encrypted and protected using an SSL certificate.
- DATA RECIPIENTS
- Possible recipients of Users' personal data of the Service include:
- other entities cooperating with SILAMAR in carrying out processing purposes referred to in section II;
- additionally, recipients may be entities indirectly or directly related to the Administrator, in particular organizationally or personally, as well as external service providers (e.g., entities providing IT services, entities providing marketing and promotional services, other entities processing data on behalf of the Administrator based on data processing agreements), lawyers, administrative authorities, state services, and courts;
- Users' personal data are not transferred to countries outside the European Union, and if transferred to third countries outside the EU (e.g., USA), the Administrator will apply appropriate instruments to ensure personal data security.
- With the User's consent, depending on the processing purpose and content of the consent, personal data may be shared with entities indicated in the consent.
- If data recipients independently and on their own behalf process Users' personal data, e.g., offer products and services via their own channels without the Administrator’s involvement or provide services on their own behalf, they become separate data controllers and bear responsibility for data processing in this regard, not subject to this Privacy Policy.
- The Service may contain links to other websites, social media portals, or websites of entities cooperating with the Administrator.
- Accessing a third party's website subjects the User to that website's privacy policy and data protection rules. The Administrator recommends reviewing the privacy policies of those websites.
- The Administrator provides personal data to service providers used in operating the Service and handling orders. Depending on the situation, these providers act as processors or controllers. Controllers are entities that do not act exclusively on behalf of the Administrator and also pursue their own goals and purposes of data use. Providers are located within the EEA and outside (e.g., USA). These include in particular:
- Facebook Ireland Limited, Purpose: Advertising campaigns (including remarketing) and measuring their effectiveness, Role: Controller, Location: Ireland;
- Google Inc. (Google Analytics and Gmail.com), Purpose: Analytical services – measuring site traffic, email, Role: Controller, Location: USA;
- Google Ireland Limited (Google AdWords), Purpose: Advertising campaigns (including remarketing) and measuring their effectiveness, Role: Controller, Location: Ireland;
- Pipedrive Inc. (CRM), Purpose: handling inquiries and orders, Role: Processor;
- OVH Sp. z o.o. (hosting), Purpose: data server, Role: Processor, Location: Poland;
- home.pl S.A., Purpose: data server, Role: Processor, Location: Poland.
- PROFILE BUILDING
- One of the methods of processing personal data by https://silarent.pl/ is profiling. Profiling is a form of automatic data processing to deliver individualized marketing messages to the User on the Service website. The legal basis for this personal data processing is the legitimate interest of the Administrator consisting in marketing services offered on the Service.
- Profiling is based on data collected during registration for the newsletter and the content of cookies files, which include:
- user identifier,
- session identifier,
- server identifier,
- information about time spent on the website.
- Product recommendations (profiling results) will appear based on information previously collected in cookies, even before registering for the newsletter.
- Correlation of data collected from cookies with personal data occurs upon newsletter registration and consent to profiling.
- LEGAL BASIS FOR DATA PROCESSING
- Providing personal data by the User is voluntary, but failure to provide personal data necessary to conclude an electronic services contract as indicated on the Service website results in the inability to conclude the contract.
- The legal basis for processing the User's personal data is the necessity to perform the contract to which the User is a party or to take actions at the User's request before entering into the contract.
- In the case of data processing for direct marketing of the Administrator’s own products or services, the legal basis also includes:
- prior consent of the User, as referred to in section II point 2(a);
- the legitimate interest of the Administrator – pursuant to Article 6(1)(f) GDPR.
- In some cases, the legal basis for processing may also be the protection of the User’s interests or compliance with a legal obligation imposed on the Administrator to fulfill a legal duty.
- COOKIES
- The Administrator informs that the Service automatically collects only information contained in cookies files. The Administrator informs that Cookies (so-called "cookies") are IT data, in particular text files, stored on the User's end device of the Service. Cookies usually contain the name of the website they come from, their storage time on the end device, and a unique number.
- These files allow recognition of basic information about the User's device (such as device type, screen resolution, country from which the entry comes) and thus the appropriate display of the website.
- The Administrator informs that the following types of cookies are used within the Service:
- "necessary" cookies enabling the use of services available within the Service, e.g., authentication cookies used for services requiring authentication within the Service; cookies used to ensure security, e.g., used to detect authentication abuses within the Service;
- "performance" cookies allowing collection of information about how the Service's websites are used;
- "functional" cookies allowing "remembering" selected by the User settings and personalization of the User interface, e.g., regarding chosen language or User region, font size, website appearance, etc.;
- "advertising" cookies allowing delivering Users advertising content better matched to their interests.
- For analytical and marketing purposes, the Administrator uses cookies from the following solution providers:
- Google Analytics (traffic analysis) (Administrator: Google Inc located in the USA);
- Google AdWords (remarketing advertising) (Administrator: Google Ireland Limited located in Ireland);
- Facebook (remarketing advertising and post display) (Administrator: Facebook Ireland Ltd. located in Ireland).
- Users can independently and at any time change their cookie preferences, specifying conditions of their storage and access by cookies to the User's device.
- The Administrator informs that web browsers (Service User's software) by default allow storage of cookies on the User's end device. The Service User can always change browser settings deciding on usage of cookies.
- Limitations on the use of cookies may affect the Service's functionality. Cookies stored on the User's end device may also be used by advertisers and partners cooperating with the Service operator. The entity responsible for placing cookies on the User's end device and having access to them is SILAMAR.
- Information on how to manage cookies is available in the software settings (web browser).
- RIGHT TO CONTROL, ACCESS TO CONTENT OF OWN DATA AND THEIR CORRECTION
- The User has, in particular, the right to:
- withdraw consent to processing of personal data at any time (if consent is the legal basis for data processing) by sending a message to the email address: biuro@silamar.pl; in the case of newsletter subscription, consent may be withdrawn via an unsubscribe link;
- correct inaccurate, incomplete, or incorrect personal data;
- object to personal data processing if the Administrator processes data based on legitimate interest, whereby in case of objection the Administrator will cease data processing unless it demonstrates the existence of important, legitimate grounds for processing which should override the interests of the User or are necessary for establishing, pursuing, or defending claims;
- access their personal data;
- request data portability;
- request restriction of personal data processing;
- request deletion of personal data by the Administrator, however, pursuant to Article 17 GDPR, this right has exceptions – e.g., data processed for establishing, pursuing, or defending claims;
- file a complaint related to the processing of personal data by the Administrator with the supervisory authority – the President of the Personal Data Protection Office.
- Requests regarding processed personal data may be sent by the User to the email address: biuro@silamar.pl or in writing to the Administrator's registered office.
- When submitting a request to the Administrator, please include: name and surname/company name and contact details (phone number or email address, in case of written requests also address of residence or registered office), information about the service provided through the Administrator’s website, and briefly justify the submitted request (if possible and only to facilitate its handling).
- The User's request will be handled without undue delay, but no later than within one month from receipt. This period may be extended due to the complexity or number of requests by another two months, about which the User will be informed. Until the request is fulfilled, the User may continue receiving information from which they unsubscribed by withdrawing consent.
- FINAL PROVISIONS
- The website to which this document relates is accessible at silamar-niechorze.pl and silamar.pl. Whenever the document refers to any of the listed domains, this should be understood as a reference to the same website.
- The Administrator applies technical and organizational measures ensuring protection of processed personal data appropriate to the risks, in particular securing data against unauthorized disclosure, removal by unauthorized persons, processing contrary to applicable regulations, and alteration, loss, damage, or destruction.
- The Administrator uses technical measures preventing unauthorized acquisition and modification of personal data transmitted electronically by securing data sets against unauthorized access.
- The Administrator reserves the right to introduce changes to this Privacy Policy, which may result from the need to adapt to changes in legal regulations or applicable privacy standards or to expand the offer. Accordingly, the Administrator will inform about any changes with an appropriate message on the Service.