I. INTRODUCTION

At our organisation we are committed to the protection of your personal data, that is why we aim to provide you with the most important information related to its processing and storage and why some of it is required so that we can provide a high standard of service.
As a responsible organisation aware that information has a particular value and is a resource that requires being adequately protected, we are committed to keeping you duly informed on matters relating to the processing of personal data, particularly in view of the content of data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

The information contained in this Policy is intended to provide an overview of what happens to your data when you use our website and key information about the legal basis for processing your personal data, how it is collected and used, and about any related rights of data subjects. When processing personal data, we comply with the following guidelines by satisfying at least one condition for processing personal data.

II. WHEN DOES THIS POLICY APPLY?

This privacy policy applies to all cases where Projekt-Solartechnik S.A. (“Company”) is the controller of personal data and processes it. This applies equally to cases where we process personal data obtained directly from the data subject and to cases where we have obtained personal data from other sources. The Company carries out its disclosure obligations in both of the above cases, set out in Art. 13 and Art. 14 of the GDPR, respectively, in accordance with these provisions. The full details of the company are set out below:

PROJEKT-SOLARTECHNIK S.A.
ul. Barlickiego 2
97-200 Tomaszów Mazowiecki
NIP [Tax Identification Number]: 5252819771
REGON [Polish Business Registry Number]: 385870553
KRS [National Court Register Number]: 0000834759

III. CONTACT

If you have any questions about the processing of your personal data, we encourage you to contact us by email at or by writing to our registered address.

IV. PRINCIPLES REGARDING THE PROCESSING OF PERSONAL DATA

In our operations, we seek to be transparent about how and on what legal basis we process personal data, as well as the purposes for which we process it.

As the Controller, we assure you that whenever we process personal data on the basis of a legitimate interest of the Controller, we endeavour to analyse and balance our interest and the potential impact on the data subject and their rights. We do not process personal data where the impact on the data subject would outweigh our interests.

Rules for the processing of personal data;

• We process personal data lawfully, fairly and transparently.
• Personal data shall be collected for specific, explicit and legitimate purposes and not further processed in a way incompatible with those purposes.
• Personal data are collected only to the extent necessary to fulfil the purposes.
• Personal data shall be updated as necessary.
• Personal data shall be kept in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the data is processed.
• Personal data shall be processed in a way which ensures appropriate protection of personal data: protection against unauthorised or unlawful processing and accidental loss, destruction or damage by means of appropriate technical and organisational measures.

The basis for the processing of personal data:

When collecting personal data, we always inform you of the legal basis for its processing. It is a consequence of the provisions of the GDPR. When we inform about:
• Article 6(1) (a) of the GDPR, it means that we process personal data on the basis of your consent,
• Article 6(1) (b) of the GDPR, it means that we process personal data because it is necessary to perform the contract or undertake pre-contractual actions, at your request,
• Article 6(1) (c) of the GDPR, it means that we process personal data in order to comply with a legal obligation,
• Article 6(1) (f) of the GDPR, it means that we process personal data in order to pursue our legitimate interests.

Automated decision-making:

Your personal data will not be processed by automated means, including in the form of profiling.

Personal data storage period:

Your personal data storage period will depend on the purpose of its processing. The period for which your personal data will be stored depends on:

• the laws which may obligate the Company to store data for a specific period of time;
• the period which is required to protect the data controller’s interests;
• the period for which the consent has been granted.

Data recipients:

Your data may be received by:

• entities providing IT services;
• couriers;
• delivery companies;
• security companies;
• entities authorised to receive Personal Data under applicable laws;
• other PST GROUP companies on the basis of entrusting personal data.

Transfer of data outside the European Economic Area:

Your personal data will not be transferred to a third country or to an international organisation.

Rights related to the processing of data:

You have the right to:

• access your personal data;
• rectify (correct, supplement) your personal data;
• limit the processing of or delete your data;
• transfer the personal data which you have provided to us, i.e. receive the personal data in a structured, commonly used, machine-readable form and transfer the same to another controller; if technically possible, you have the right to demand that we send the personal data directly to another controller;
• object to the further processing of your personal data.

You have the right to withdraw your consent at any time. Withdrawal of the consent will not affect the legal compliance of your personal data processing carried out pursuant to the consent granted prior to its withdrawal.

In case of doubts as to the correctness of your personal data processing by the Company, you have the right to file a complaint with the President of the Office for Personal Data Protection.

V. HOW DO WE PROTECT YOUR PERSONAL DATA?

We undertake appropriate technical measures in accordance with Art. 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the different likelihood and severity of risks to the rights and freedoms of natural persons and the organisational measures in place to ensure a level of protection appropriate to the risks.

Safety measures applied to protect your personal data are compliant with legal requirements and ensure an adequate level of data confidentiality.

VI. INFORMATION ON DATA PROCESSING FOR THE CONCLUSION AND PERFORMANCE OF CONTRACTS, POSSIBLE PURSUIT OF CLAIMS AND DEFENCES

We may process the personal data necessary for the purpose of performing the contract concluded with you. However, even before the conclusion of the contract, we may process the personal data necessary to take action at your request. The processing of this data is based on Article 6(1) (b) of the GDPR.

In the case of a contract for the provision of paid services, we may process the data in order to fulfil our accounting and tax obligations. The processing of this data is based on Article 6(1) (c) of the GDPR.

During and after the performance of the contract, we process the personal data of a party to the contract for the purpose of potential processing of claims as well as their pursuit. Our legitimate interest is, among others, to be able to answer a possible complaint, which we are obliged to do on the basis of separate provisions of civil law. In this case, we will process your personal data based on the legitimate interest of defending against or pursuing possible claims. The processing of this data is based on Article 6(1) (f) of the GDPR.

We will store this data for a period necessary to fulfil the stated purposes, but not longer than until the expiry of the statute of limitations for claims under separate provisions of law.

Provision of this data is voluntary, but failure to provide it will prevent the conclusion of the contract or its performance.

VII. COOKIES/TOOLS:

The Company’s website uses cookies. These are commonly used small files containing a string of characters, which are sent to and stored on an end device (e.g. computers, laptops, tablets, smartphones) used to visit the website. This information is sent to the browser cache, and the browser sends it back on subsequent visits to the website. Cookies can be categorised using three approaches,

In terms of the purposes for which cookies are used, we can distinguish between:

• Necessary cookies – they enable proper operation of the website and its functions, e.g. authentication and security cookies. Without storing them on your device, you will not be able to use the website.
• Analytical cookies – these cookies enable the monitoring of opened websites, sources of traffic, and time of stay on the website. Without saving them, the use of the website’s functionality will not be restricted.
• Advertising cookies – these cookies enable personalised advertisements to be displayed within or outside the website. Without saving them, the use of the website’s functionality will not be restricted.
• Social media cookies – these cookies allow a fan page to be displayed on the website and also to be liked. Without saving them, the use of the website’s functionality will not be restricted.

In terms of the period of validity, the following types of cookies can be distinguished:

• session cookies – cookies which exist until the end of a given session,
• persistent cookies – cookies which exist after the session has ended.

In terms of their controller, the following categories of cookies can be distinguished:

• our cookies;
• third party cookies.

With the exception of essential cookies, their processing is based on your consent. You can change your cookie settings at any time. These settings may be changed in such a way as to block the automatic handling of cookies via the web browser settings or inform about each installation of cookies on the device. Detailed information on the options and ways of handling cookies is available in the software (browser) settings.

Detailed information on the options and ways of handling cookies is available in the software settings, i.e. your browser.

• Firefox;
• Chrome;
• Internet Explorer;
• Opera;
• Safari.

We use cookies administered by Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States, for the following services: 

Google Analytics – this service uses cookies which are stored on your computer and enable the analysis of how the website is used. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services to us relating to website activity. The IP address provided by your browser as part of Google Analytics is not merged with other Google data.

You can prevent the transfer to Google and the processing by Google of data generated by cookies and relating to your use of the website; to do so, you must load and install the browser plug-in available at the following address: https://tools.google.com/dlpage/gaoptout?hl=pl.

Google Maps – a service with which an interactive map can be displayed directly on the website, enabling you to conveniently use the map function.

To learn more, please visit:

https://policies.google.com/privacy

https://support.google.com/analytics/answer/9019185?hl=pl&ref_topic=2919631

The Company and Facebook are joint controllers of the data of Users who have liked the Company’s fan page. In view of this, the Company, as the administrator of the fan page, may obtain anonymous statistical data about visitors to the page using a function provided by Facebook. This data is collected by means of cookies, each containing a unique user code (these are active for two years and are stored by Facebook either on the hard drive of a fan page visitor’s computer or on any other media they use). The user code, which can be linked to the connection data of users registered on Facebook, is retrieved and processed when the fan page is opened. Although this data is anonymous, the Company may request Facebook to process it  in the scope of:

• demographic data;
• information on lifestyle, interests;
• geographical data;

At the same time, the data of persons who have liked the Company’s fan page may be processed on a non-anonymised basis in the case of:

• Communication via Messenger available on Facebook;
• Comments on posts shared on the fan page;
• Participation in various promotional actions and competitions – in this case, the processing will be carried out on the basis of the User’s unambiguous consent, in accordance with the rules contained in the regulations of the action.

Under no circumstances will the data of those who have liked the fan page be used for purposes other than those for which they were provided. Their processing will be carried out exclusively on Facebook and in accordance with the General Terms of Use of the website.

VIII. AMENDMENTS TO THIS POLICY

We are committed to regularly reviewing this Privacy Policy and amending it when it becomes necessary or desirable due to: new legislation, new guidelines from authorities responsible for overseeing data protection processes and best practices applied in the area of data protection.

We also reserve the right to change this Privacy Policy if there are changes to the technology by which we process personal data (to the extent that the change affects the text of this document), or if there are changes to the ways, purposes or legal basis on which we process personal data.

The Privacy Policy becomes effective on the date of publication on the Company’s website.

Changes to the Privacy Policy are made via publishing of its new text on the Company website.

We publish notices of any change to the Privacy Policy on our website, no later than 3 days before the date on which the new version takes effect.