OKNAL - Privacy Policy

Privacy Policy

 

I. GENERAL PROVISIONS

  1. The controller of personal data collected through the website www.oknal.pl  is PPHU OKNAL S.C. Iwona Pawelczyk, Jacek Pawelczyk; Nowe Kupiski 131, 18-400 Łomża, with Tax ID (NIP) 7181799570 and Business Registration Number (REGON) 450723075, represented by Iwona Pawelczyk and Jacek Pawelczyk.
  2. Personal data collected by the Controller through the website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, and the Personal Data Protection Act of 10 May 2018.

II. TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

  1. Purpose of processing and legal basis: the controller processes personal data through the website www.oknal.pl when the user uses the contact form. Personal data is processed on the basis of Article 6(1)(f) GDPR as the Controller's legitimate interest.
  2. Type of personal data processed: name and surname, email, phone number, content of inquiry.
  3. Personal data retention period: user data is stored by the Controller for the period necessary to fulfill obligations imposed by legal provisions. Personal data processed based on your consent is processed only until it is withdrawn, unless processing is based on another lawful basis permitted by the Regulation.
  4. Providing personal data by the user is voluntary but necessary to handle your inquiry.
  5. Personal data will also be processed in an automated manner through profiling, provided the user consents on the basis of Article 6(1)(a) GDPR.
  6. The Controller takes particular care to protect the interests of data subjects, and in particular ensures that the data collected is:
  7. Processed lawfully;
  8. Collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes;
  9. Accurate and adequate in relation to the purposes for which they are processed, and stored in a form which permits identification of data subjects for no longer than necessary to achieve the purpose of processing.

III. DISCLOSURE OF PERSONAL DATA

  1. Users' personal data is transferred to service providers used by the Controller in operating the website.

IV. RIGHT TO CONTROL, ACCESS AND CORRECT YOUR DATA

  1. The data subject has the right to access their personal data and the right to rectification, erasure, restriction of processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  2. Legal bases for user requests:
  3. Access to data - Article 15 GDPR
  4. Rectification of data - Article 16 GDPR
  5. Erasure of data (right to be forgotten) - Article 17 GDPR
  6. Restriction of processing - Article 18 GDPR
  7. Data portability - Article 20 GDPR
  8. Objection - Article 21 GDPR
  9. Withdrawal of consent - Article 7(3) GDPR
  10. To exercise the rights referred to in point 2, you can send an appropriate message to the email address biuro@oknal.pl
  11. If you find that the processing of personal data violates GDPR provisions, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office.

V. DATA TRANSFER OUTSIDE THE EEA

The level of personal data protection outside the European Economic Area (EEA) differs from that provided by European Union law. OKNAL does not generally transfer data outside the EEA. Transfer occurs only when necessary due to the nature of cooperation and with an appropriate level of protection, primarily through:

  • Cooperation with entities processing personal data in countries for which an appropriate decision has been issued by the European Commission;
  • Use of standard contractual clauses issued by the European Commission;
  • Other legally justified methods permitted by law, including GDPR;

VI. COOKIES

  1. The Controller's website uses cookies.
  2. Installing cookies is necessary for the proper provision of services on the website. Cookies contain information necessary for the proper functioning of the site and enable the compilation of general visit statistics.
  3. The site uses various types of cookies.
  4. The Controller uses its own cookies to better understand how users interact with the site's content. The files collect information about how the user uses the website, the type of page from which the user was redirected, and the number of visits and duration of the user's visit to the website. This information does not record specific personal data of the user but serves to compile statistics on site usage.
  5. Users have the right to decide on cookie access to their computer by making a prior selection in their browser window. Detailed information about the possibilities and methods of handling cookies is available in software settings (web browser).

VII. DATA SECURITY

OKNAL attaches the utmost importance to the security of your personal data. We continuously conduct risk analysis to ensure that personal data is processed in a manner that ensures access to data only by authorized persons and only to the extent necessary for the tasks they perform.

The Controller applies technical and organizational measures ensuring the protection of processed personal data appropriate to the risks and categories of data covered by protection, and in particular secures data against disclosure to unauthorized persons, unauthorized access, processing in violation of applicable regulations, and alteration, loss, damage or destruction.

In matters not regulated by this Privacy Policy, the provisions of GDPR and other applicable provisions of Polish law shall apply accordingly.