PRIVACY POLICY
- This Privacy Policy specifies the principles of processing personal data collected through the volumetric.pl website (henceforth “the Website”).
- The Website owner and data administrator is Volumetric Polska sp. z o.o. with its registered office in Warsaw (00-121), ul. Sienna 39, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS No. 000245576, NIP (Tax ID): 5272489354, REGON (Business Register Number): 140326612, further referred to as VOLUMETRIC.
- Personal data collected by VOLUMETRIC by means of the Website are processed in line with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), further referred to as GDPR.
- VOLUMETRIC shall use due diligence to respect the privacy of Users visiting the Website.
§1
Type of processed data, purposes and legal basis
- Users’ personal data are collected in the event of:
- using the contact form service on the Website for the purpose of performing an agreement concluded by electronic means. Legal basis: necessary condition for performing an agreement for the provision of a contact form service (Article 6(1)(b) of the GDPR);
- using the ‘leave a message’ service, in order to perform an agreement whose object is to provide a service by electronic means. Legal basis: necessary condition for performing an agreement for the provision of a ‘leave a message’ service (Article 6(1)(b) of the GDPR).
- The User taking advantage of the contact form service shall state the following data:
- e-mail address;
- name and surname;
- phone number;
- The User taking advantage of the ‘leave a message’ service shall state the following data:
- e-mail address;
- name and surname;
- phone number.
- In the course of its operation, the Website may collect additional information, in particular the IP number assigned to the User’s computer or the Internet provider’s external IP number, domain name, type of browser, access time and type of operating system.
- Navigation data may also be collected from Users, including tracking of selected links and hypertext and other Website activities. Legal basis – lawful interest (Article 6(1)(f) of the GDPR) in facilitating access to services provided by electronic means and improving the functionality of such services.
- The determination, pursuit and enforcement of claims may require processing of some personal data stated by the User when visiting the Website, such as name, surname and data concerning the use of the Services, as long as the claim relates to the manner in which the User used the services, and any other data required to substantiate the claim and the extent of damage. Legal basis – lawful interest (Article 6(1)(f) of the GDPR) in the determination, pursuit and enforcement of claims and in defence against claims in litigation and proceedings before other state authorities.
- The disclosure of personal data to VOLUMETRIC in connection with service agreements concluded through the Website is voluntary; however, failure to provide the data required by forms shall prevent services from being provided free of charge by electronic means.
§2
To whom are the data disclosed or entrusted and what is the retention period?
- The User’s personal data are disclosed to service providers operating the Website for VOLUMETRIC. The service providers to whom personal data are disclosed may – depending on the contractual provisions or circumstances – either be obliged to comply with VOLUMETRIC instructions regarding the purposes and methods of processing of such data (processors) or themselves specify the purposes and methods of such processing (administrators).
- Processors - VOLUMETRIC cooperates with suppliers processing personal data solely at the request of VOLUMETRIC. These include providers of hosting services, accounting services, marketing systems, systems for tracking traffic through the Website, and systems for analysing marketing campaign efficiency;
- Administrators - VOLUMETRIC cooperates with suppliers acting not only on request, and who themselves specify the purposes and methods of use of the Users’ personal data. These suppliers provide electronic payment and banking services
- Location - Service providers are headquartered mainly in Poland and other countries of the European Economic Area (EEA).
- Users’ personal data are stored:
- where personal data processing is based on User consent, the personal data shall be processed by VOLUMETRIC until the consent is withdrawn and, after withdrawing consent, for a period corresponding to the limitations period on claims filed by or against VOLUMETRIC. Unless otherwise specified by special regulations, the limitations period shall be six years. The limitations period for claims for periodic performances and claims relating to business activities shall be three years.
- where personal data processing is based on a contractual relationship, the User’s personal data shall be processed by VOLUMETRIC for as long as necessary to perform the agreement and thereafter for a period corresponding to the limitations period on claims. Unless otherwise specified by special regulations, the limitations period shall be six years. The limitations period for claims for periodic performances and claims relating to business activities shall be three years.
- Navigation data may be used to provide Users with better service, statistical data analysis, as well as tailor the Website to User preferences and administer the Website.
- VOLUMETRIC shall disclose personal data on request to authorized state agencies, in particular the Public Prosecutor’s Office, the Police, the Chairman of the Personal Data Protection Office, the Chairman of the Competition and Consumer Protection Office and the Chairman of the Electronic Communications Office.
§3
Cookies mechanism, IP address
- The Website uses cookie files recorded by VOLUMETRIC on the Website visitor’s end device if permitted by the Internet browser. A cookie file usually contains the name of its domain of origin, its expiry time and a unique randomized identification number. The information collected through such files helps to tailor VOLUMETRIC products to the preferences and needs of Website visitors, while also allowing insight into visitor statistics relating to the products offered on the Website.
- VOLUMETRIC uses two types of cookie files:
- Session cookies: information is deleted from the device’s memory when the browser session is terminated or the computer powered off. Session cookies are not allowed to collect any personal data or confidential information from the Users’ computers.
- Permanent cookies are stored on the User’s end device and remain there until deleted or expired. Permanent cookies are not allowed to collect any personal data or confidential information from the Users’ computers.
- VOLUMETRIC uses proprietary cookies for:
- analysis, research and viewership auditing, as well as – in particular – to develop anonymous statistics to help understand how the Users use the Website, in order to improve its structure and contents.
- VOLUMETRIC uses external cookies:
- to promote the Website through social media – facebook.com (external cookies administrator: Facebook Inc headquartered in the USA or Facebook Ireland headquartered in Ireland);
- to collect general and anonymous statistical data through analytic tools – Google Analytics (external cookies administrator: Google Inc headquartered in the USA);
- to present the Fair Dealing Certificate on the rzetelnyregulamin.pl website (external cookies administrator: Rzetelna Grupa sp. z o.o. headquartered in Warsaw).
- The cookies mechanism is safe for User computers accessing the Website and does not lead to User computers being infected with viruses, malware or other undesirable software. However, Users have the option to restrict or disable cookies in their browsers. Where this option is activated, the Website will continue to be available, except for those functionalities which by their nature require cookies.
- The following explains how to change cookie settings in certain browsers:
- Internet Explorer;
- Microsoft EDGE;
- Mozilla Firefox;
- Chrome;
- Safari;
- Opera.
- VOLUMETRIC may collect Users’ IP addresses. An IP address is a number assigned by an Internet provider to the computer of a Website visitor. The IP number allows Internet access. In most cases, the number is assigned dynamically, i.e. it changes on each access to the Internet and is therefore treated as non-personal identification information. The IP address is used by VOLUMETRIC to diagnose technical problems with the server, for statistical analytics (e.g. to identify the region from which most visitors come), for administration and streamlining purposes, security, as well as to identify the server’s background load from unwanted software that views the Website content.
- The Website features links and hypertext to other websites. VOLUMETRIC shall not be responsible for the level of protection such other websites provide.
§4
The rights of concerned persons
- The right to withdraw consent – legal basis: Article 7(3) of the GDPR.
- The user has the right to withdraw any consent given to VOLUMETRIC.
- The withdrawal of consent is effective on withdrawal.
- The withdrawal of consent shall not affect any data processing carried out by VOLUMETRIC prior to withdrawal.
- The withdrawal of consent shall not produce any negative consequences for the User, but may prevent the continued enjoyment of services and functionalities that VOLUMETRIC can provide only by consent.
- The right of objection to data processing – legal basis: Article 21 of the GDPR.
- The User has the right at any time and for reasons related to his/her special situation to object to processing his/her data, including to profiling, if VOLUMETRIC processes his/her data based on a lawful interest, such as marketing of VOLUMETRIC products and services, keeping statistics on the use of the Website and customer satisfaction measurement.
- Sending an e-mail note to unsubscribe from products and services marketing mailing shall be taken as objection to personal data processing, including profiling for purposes stated above.
- If the User’s objection is valid and VOLUMETRIC has no other legal basis for personal data processing, the relevant part of the User’s personal data shall be removed.
- The right to remove data (“the right to be forgotten”) – legal basis: Article 17 of the GDPR.
- The User has the right to demand removal of all or some of his/her personal data.
- The User has the right to demand removal his/her personal data if:
- such personal data is no longer necessary for the purposes for which they were collected or processed;
- the User has withdrawn the relevant consent and to the extent that such data were processed based on such consent;
- the User has objected to his data being used for marketing purposes;
- the User’s personal data are processed unlawfully;
- the User’s personal data must be removed for compliance with a legal obligation set out in the Community law or the law of a Member State having jurisdiction over VOLUMETRIC;
- the User’s personal data have been collected in relation to offering information society services.
- Even when the removal of personal data is requested as a result of filing an objection or withdrawal of consent, VOLUMETRIC may retain certain personal data to the extent that their processing is necessary to determine, pursue or defend against claims and ensure compliance with the Community or Member State laws applicable to VOLUMETRIC, requiring personal data processing. This applies to data stored for complaints/claims processing related to services provided by VOLUMETRIC such as name, surname and e-mail address, and data stored for complaints/claims processing related to agreements or delivery of services, such as address of residence/address for deliveries.
- The right to limit data processing – legal basis: Article 18 of the GDPR.
- The User may request to limit the processing of his/her personal data. Filing such request, until such request is reviewed, will restrict specific functionalities or services that require the processing of data covered by the request. VOLUMETRIC will also refrain from sending any, including marketing, communication.
- The User may request limiting the use of his/her personal data in the following cases:
- when he/she calls into question the correctness of his/her personal data –VOLUMETRIC should then limit its use to the time needed to check their correctness, but at any rate no longer than 7 days;
- when data processing is unlawful and the User has demanded to limit their use rather than removal;
- when the personal data have ceased to be necessary for the purpose for which they were collected or used but the User needs them to determine, seek or defend against claims;
- when he/she has objected to his/her data being used – the limited use shall continue for a period needed to consider whether, in view of the special situation, the User’s protected interest, rights and freedoms outweigh the Administrator’s interest pursued by processing the User’s data.
- The right to access the data – legal basis: Article 15 of the GDPR.
- The User has the right to have the Administrator confirm whether he/she is processing the User’s personal data, and if this is the case, then the User has the right to:
- access such personal data;
- be notified of the purpose of processing, categories of processed data, recipients and types of recipients of such data, planned period of retention of the User’s data or the criteria for establishing such period (where determining the planned period of retention is not possible), the rights available to the User under GDPR and the right to file complaints with a supervisory authority, of the source of such data, of automated decision-making, including profiling, and any safeguards applied in connection with such data being transferred outside the European Union;
- obtain a copy of his/her personal data.
- The User has the right to have the Administrator confirm whether he/she is processing the User’s personal data, and if this is the case, then the User has the right to:
- The right to rectify personal data – legal basis: Article 16 of the GDPR.
- The User has the right to require the Administrator to immediately rectify personal data concerning him/her whenever such data are incorrect. Bearing in mind the purposes of processing, the User whom the data concern may require that incomplete data be completed, including by sending an additional statement to the e-mail address, as set out in §5 of the Privacy Policy.
- The right to transfer data – legal basis: Article 20 of the GDPR.
- The User has the right to receive his/her personal data that he/she has provided to the Administrator and subsequently transmit them to another personal data administrator of his/her own choice. The User is further entitled to require that personal data be transmitted by the Administrator directly to such other administrator in so far as this is technically possible. In such a case, the Administrator shall transmit the User’s personal data in a csv file, a commonly used format suitable for machine reading and allowing personal data to be transmitted to another personal data administrator.
- Where the User exercises his/her right under the above provisions, VOLUMETRIC shall immediately, but no later than a month from being notified thereof, comply with or refuse the request. However, if – due to the complicated nature of the request or a great number of requests – VOLUMETRIC is unable to comply with the request within a month, VOLUMETRIC shall comply therewith within two months, having notified the User, no later than a month from receipt of such request, of the extension of the time-limit and reasons for such extension.
- The User may lodge complains, queries and requests with the Administrator, with respect to processing his/her personal data and compliance with the User’s rights.
- The User may request VOLUMETRIC to provide a copy of standardized contractual clauses by procedure set out in §5 of the Privacy Policy.
- The User may file a complaint with the Chairman of the Personal Data Protection Office, regarding a breach of his/her right to personal data protection or other rights granted under GDPR.
§5
Amendments to the Privacy Policy
- The Privacy Policy may be amended. VOLUMETRIC shall notify User of any such amendments 7 days in advance.
- Questions regarding the Privacy Policy may be sent to: biuro@volumetric.pl
- Last modified on 9 July 2018.