Privacy Policy of „Katalogkapsli.pl” Website

§ 1
Privacy Policy

1. The following Policy of Privacy is to clarify the rules and scope of the User’s personal data processing by the Service Provider and the Website as well as the Service Provider obligations as the Data Controller.
2. The terms used in the Terms and Conditions of “Katalogkapsli.pl” website shall apply to this Privacy Policy. The words referring to Terms, used in § 1 of the Terms and Conditions of “Katalogkapsli.pl” Website shall be understood as stated therein, providing that they were written with capital letters.

§ 2
Data Controller

is the Data controller of User’s data.

§ 3
Purpose of the processing

Service Provider processes the personal data of the Users to properly perform the Services available on the Website. The aforementioned means that such User’s data is needed in particular for:
- registration of the Account on the Website,
- the use of the Services, including the Extended type of Services,
- the use of the complaint procedure, enclosed in § 7 of Terms and Conditions.

§ 4
Type of data

Service Provider processes the following personal data, necessary for:

1. Logging on the Website:
   - first and last name,
   - e-mail address,
   - account name,
   - place of residence,
2. Using the Services:
   - first and last name,
   - e-mail address,
   - account name,
   - place of residence,
3. Data provided by the User during the Complaint procedure:
   - first and last name,
   - e-mail address,
   - account name,
   - place of residence,
   - data regarding the purchase of the access to Extended version of the Services,
4. Data optionally provided by the User:
   - the website

§ 5
Legal basis for data processing

1. Users personal data are processed in accordance with Regulation 2016/679 of the European Parliament and of the Council (EU) of 27 April 2016.
2. User’s personal data are processed and made available to the recipients at the consent of the User, expressed at the moment of registering an Account on the Website.
3. The consent for the processing of personal data is completely voluntary but failure to give the consent makes it impossible to register the Account on the Website and limits the access to part of the Services.
4. In connection with the processing of User’s personal data, the User shall have the following rights:
   1. At any time the User may, without stating any reason, withdraw the consent for data processing. The withdrawal may refer either to a selected purpose of processing or to all purposes of processing. Withdraw of the consent to all purposes of processing will result in the User’s Account on the Website being deleted and User’s data will no longer be processed by the Service Provider. Withdrawal of the consent will not affect any activities performed prior to such withdrawal.
   2. At any time the User may request, without stating any reason, to erase user’s personal data. A request to erase the data will not affect any activities performed prior to such request. Data erasure means that User’s Account on the Website will be deleted and User’s data will no longer be processed by the Service Provider.
   3. At any time the User may object to the processing of User’s personal data, whether completely or in reference to a chosen purpose. Such objection will not affect any activities performed prior to such objection. Lodging an objection means that the User’s Account on the Website will be deleted and User’s data will no longer be processed by the Service Provider.
   4. The User may request the Service Provider to limit the processing user’s personal data in regard to either time or scope and the Service Provider is obliged to act accordingly to such request. The request will not affect any activities performed before prior to it.
   5. At any time, the User may require the Service Provider to correct or rectify User’s personal data. The User is able to correct and rectify the data independently, under the “PROFILE” bookmark.
   6. The User may require the Service Provider to transfer any of User’s data to any third party. For this purpose the User shall contact the Service Provider via the email address stated in § 7 below, state the name and address of the entity to which the Service Provider is to transfer the User’s personal data, as well as the scope thereof. The transfer will take place electronically once the request is confirmed by the User. The aforementioned confirmation is required for the purpose of ensuring the security of User’s personal data and to ascertain that the request comes from an authorised person.
   7. The User may at any time request the Service Provider to provide information on the scope of processing of User’s personal data.
5. The Service Provider is to inform the User of receiving each of requests about the actions taken by the Service Provider, no later than within a month from receiving each of requests.

§ 6
Personal data retention period

1. User’s personal data are retained until the User’s Account on the Website is deleted. The deletion of the User Account may be deleted by the User, as well as due to the withdrawal of the consent for data processing, filing the objection to personal data processing or the User request to erase the data.
2. After the deletion of the Account, Service Provider and the Website will only retain such scope of information as allowed by the law.

§ 7
Communications related to personal data

The User can send to the Service Provider any notices or requests regarding the personal data by e-mail to: kontakt@katalogkapsli.pl.

§ 8
Entrusting data processing and Data Recipients

1. The Service Provider may entrust personal data processing to entities remaining in cooperation with the Service Provider, within the scope necessary for providing the Services.
2. Upon the User's consent given at the moment of creating the Account, for the performance of Services, including Services related to enabling Users to contact other logged Users, the Service Provider makes available the User's data in the form of name, name of the account and e-mail address of logged Users. Lack of consent for the above shall result in limitation of the scope of Services available to the User, resulting in the possibility of some of the Services being unavailable to the User.
3. Users’ personal data, with the exception for the purposes specified in this Privacy Policy, will not be in any way made available to third parties, including but not limited to other entities, for marketing and advertising purposes of any third-party.
4. The Users’ personal data are not transferred outside the European Union.

§ 9
Cookies

1. The website uses "cookie" files. Cookies are small files that allow the Web-browsing device (e.g. computer, smartphone, etc.) to store particular information of itself while being used. Information recorded in cookie files is used, in particular, for advertising and statistical purposes, as well as to adapt the Website to the individual needs of the Users.
2. Cookie files are used by the Website in order to:
   1. adjust the content of the Website to Users' preferences and optimise the use of the Website; in particular, these files allow to recognize the User's device and properly display the Website, adapted to the individual needs of the User;
   2. create statistics that help understand how the User uses the Website, allowing for the improvement of its structure and content.
3. The Service Provider uses two types of cookies: ‘session cookies’ and ‘persistent cookies’. Session cookies are temporary files that are stored on the end device until the User leaves the Website or turns off the software (web browser). Persistent cookies are stored on the end device for the time specified in the cookie file parameters or until they are deleted.
4. Local Storage and Session Storage variables (collectively referred to as Web Storage) are similar to cookies, with the exception that they are not send to the each time Website by the web browser. Both cookies and Web Storage variables can be deleted after closing the User's browser (session cookies and Session Storage variables) or stored longer (Local Storage variables).
5. The Website uses the following types of cookies:
   1. "necessary" cookie files, allowing the User to use the services available on the Site, e.g. authentication cookies used for services that require authentication on the Website;
   2. cookies for security purposes, e.g. used to detect fraud in the scope of authentication within the Website;
   3. "performance" cookie files, enabling the collection of information about the use of the Website;
   4. "functional" cookie files, allowing "to store" settings selected by the User and personalise the interface, e.g. the selected language or region which the User is connecting from, font size, page appearance, etc.
6. In case of the User not willing to have the cookie files installed on the device, the User may refuse to install cookies in the following way:<
   1. In Microsoft Edge browser: select option: "Settings" from the main menu, then option: "Display advanced settings" and specify the level of privacy in the "Privacy and services" section,
   2. In Mozilla Firefox browser: select option: "Tools" from the menu, then option: "Options" and specify the level of privacy in the "Privacy" section,
   3. In Opera browser: select option: "Tools" from the menu, then from option: "Preferences" select option: "Advanced" and then option: "Cookies",
   4. In Google Chrome browser: from the menu on the right select "Options", then select option: " Advanced" and option: "Cookie settings",
   5. In Safari browser: select "Safari" in the Settings menu and then select option: "Block cookies" in the Privacy and Protection section.

The above-mentioned ways to deny consent may vary. These are examples of typical browser types. In most browsers, this type of cookie information can be found in the "Tools" or "Options" menu.

Restrictions on the use of cookies may affect some of the functionalities available on the Website.

§ 10
Declaration on data protection by Google Analytics

The Website use the web service analysis mechanisms of Google Inc. (”Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA “): Google Analytics, Google Double Click and Google Tag Manger. Google Analytics, Google Double Click and Google Tag Manger use cookies to analyse how websites are used. The information collected by cookies is transmitted to Google servers in the USA and archived.

If the IP anonymisation function is activated while using the Website, User’s IP is abbreviated by Google. This applies to European Union member states and other states listed in the Agreement on the European Economic Area. Only in special cases is a full IP address sent to the Google server in the USA, where it is abbreviated. In this way the IP address anonymisation function will be active on Website. At the request of the Website operator, Google uses the collected information to analyse the Website use by the Users and to prepare reports on the use of the website and of other services connected with Internet use. The IP address communicated by the User’s browser within Google Analytics is not kept together with other Google data.

The User may block the saving of cookies in the web browser. However, this will render taking full advantage of all the website functions impossible. In addition, the User may block the saving of the website use data (IP address included) collected by the cookies and their transmission to Google as well as their sharing by Google by downloading and installing the plugin available on: https://tools.google.com/dlpage/gaoptout?hl=pl.

Last modified: 20.01.2019