The Controller’s Privacy Policy means information concerning the processing of personal data and other information concerning the users of the www.dedra.pl website (hereinafter referred to as the “Website”). In this privacy policy, the controller has included all the information which the data subjects should receive in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L of 2016, No. 119, page 1, as amended) (hereinafter referred to as the “GDPR”).

We reserve the right to change this Privacy Policy, in particular due to a change in the law, technology or functioning of the Website. You will always find the current text of the Privacy Policy on the Website.

 

I Data Controller

The Controller of your personal data is DEDRA-EXIM sp. z o.o. with its registered office in Pruszków, at ul. 3 Maja 8, 05-800 Pruszków, Poland, entered into the Register of Entrepreneurs in the National Court Register under KRS number 0000062517, kept by the District Court for the capital city of Warsaw, 14th Division of the National Court Register, NIP: PL5270204933

II Data retention purposes and period

In order to provide the Website-related services, the service provider processes the following information regarding your device in order to ensure the correct functioning of the services: computer’s IP address, information contained in cookies or other similar technologies, session data, data of the Internet browser, data regarding the device, data regarding activity on the Website, including on individual subpages;

This data shall be processed in accordance with Article 6(1)(a) of the GDPR in connection with the consent to the use of specific cookies or other similar technologies, expressed by the relevant settings of the web browser in accordance with the law.

As a user of the Website, you may discontinue providing this information to the Website at any time by deleting the cookies stored on your terminal devices by the Website. In order to do this, you need to change the settings of the currently used web browser.

You can also configure your browser in a manner which will block the installation of cookies for certain websites you have selected or for all websites. These settings may cause loss of some of the Website’s functionalities which require the installation of cookies.

Your data will not be processed automatically including in the form of profiling.

III Data recipients

Personal data contained in the online contact form may be disclosed only to entities processing data for the benefit of the controller on the basis of a written agreement to outsource the processing of personal data to providers of hosting or website services, IT support.

The Website uses Google Analytics, a website analysis service provided by Google, Inc. (“Google”). The information generated by the cookies about the users’ activity on the Website (including their IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating the users’ activity on the Website, compiling reports on website traffic for website operators and providing other services related to website traffic and Internet use. By using the Website, the users give their consent to Google processing their data in the manner and for the purposes set out above. 

IV Rights of data subjects

Every data subject has the right:

1) to access – obtain confirmation from the controller, whether or not their personal data is being processed. If personal data is processed, it shall be entitled to have access to them and to receive the following information: on the purposes of the processing, personal data categories, the recipients or categories of recipients to whom the data has been or will be disclosed, the retention period of the data or the criteria for determining it, the right to demand a rectification, deletion or limitation of the processing of personal data to which the data subject is entitled, and to object to such processing (Article 15 of the GDPR); 2) to receive a copy of the data – to obtain a copy of the data subject to processing, whereas the first copy is free of charge, and the controller may charge a reasonable fee for subsequent copies, resulting from administrative costs (Article 15(3) of the GDPR); 3) to rectify – request the rectification of incorrect personal data concerning them, or supplementation of incomplete data (Article 16 of the GDPR); 4) to delete data – demand deletion of their personal data, if the controller no longer has a legal basis for the processing or the data is no longer necessary for the purposes of the processing (Article 17 of the GDPR); 5) to limit the processing – demand the limitation of processing of personal data (Article 18 of the GDPR), if: a) the data subject questions the correctness of personal data – for a period allowing the controller to verify the correctness of such data; b) the processing is unlawful and the data subject opposes its removal, demanding that its use be restricted; c) the controller no longer needs the data, but it is needed by the data subject to establish, exercise or defend claims; d) the data subject has objected to the processing until it has been established whether the legitimate grounds on the part of the controller take precedence over the grounds for objection of the data subject; 6) to transfer data – receive the personal data relating to it in a structured, commonly used, machine-readable format, which data it has provided to the controller, and request that this data be sent to another controller, if the data is processed on the basis of the consent of the data subject or an agreement concluded with it and if the data is processed automatically (Article 20 of the GDPR); 7) to object – raise an objection to the processing of their personal data for legally justified purposes of the controller, for reasons connected with their particular situation, including profiling. In such a case, the controller shall assess the existence of important legitimate grounds for processing which are superior to the interests, rights and freedoms of the data subjects, or the grounds for establishing, exercising or defending claims. If, according to the assessment, the interests of the data subject take precedence over those of the controller, the controller will be obliged to stop processing the data for these purposes (Article 21 of the GDPR); In order to exercise these rights, the data subject should contact the controller at the e-mail address: daneosobowe@dedra.pl and inform them which rights they wish to exercise and to what extent.

V President of the Office for the Protection of Personal Data

The data subject has the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Office for the Protection of Personal Data with its registered office in Warsaw, ul. Stawki 2, Poland, https://www.uodo.gov.pl/pl/p/kontakt; +48 22 531 03 00.