2. what data do we collect/use?
Among the data obtained when using the website/service may be:
Data collected automatically – during your visit to our website, data concerning your visit is collected automatically, e.g. your IP address, domain name, browser type, operating system type, etc. Data collected when you contact us – when you contact us via website, phone, email, etc. you provide us with your personal data, e.g. name, surname, email address, etc. All data is collected therein using appropriate measures to protect the confidentiality, integrity and security of the information.
4 How do we use your data?
The data collected is used to provide specific services to our users/customers. Under no circumstances will we sell the data collected about you to third parties. Data collected automatically may be used to analyse user behaviour on our website. Data collected in the course of correspondence between you and our service will be used solely to respond to your enquiry. In the event of inspection by the General Inspectorate for Personal Data Protection, your data may be made available to the Inspectorate staff in accordance with the Personal Data Protection Act. In case of violation of the Rules of our service, violation of law, or when it is required by law, we may make your data available to the judicial authorities.
5. how do we secure your personal data?
The owner of the website and data administrator is FIT BY NATURE company, Address: Zwoleńska 40a/16, 04-761 Warsaw Phone: 507 088 820
For what purpose and on what basis do we process your personal data?
Your personal data will be processed in order to ensure the provision of certain services, to perform the civil law contract concluded between you and the Entities, to contact you and to answer your questions. The legal basis for the processing of your personal data is Article 6(1)(b) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the DPA. The provision of personal data is not mandatory but necessary for the performance of our services, including the conclusion of a contract between you and the Entities.
Where will your personal data be processed?
The Entities will share your personal data with other recipients entrusted with the processing of personal data on behalf and for the benefit of the Entities. Your personal data will also be made available, to the extent necessary, to public authorities, in particular to the relevant Tax Office, Social Insurance Institution. Furthermore, the Entities will share your personal data with other recipients, if such an obligation arises from the provisions of law, or the sharing results from the relationship between you and the Entities.
How long will we process your personal data?
Your personal data will be processed for the duration of the performance of our services, including the execution of the contract of mandate concluded between you and the Entities, as well as for archiving purposes, but no longer than for 5 years from the end of the calendar year of the performance of the contract/service.
What rights do you have?
You have the right to
access to your personal data and to receive a copy of the personal data being processed;
To have inaccurate personal data corrected
request the erasure of your personal data (right to be forgotten) in the event of the circumstances provided for in Article 17 of the RODO, i.e. when:
Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
Your data will be processed unlawfully;
Your data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which the controller is subject;
You have raised an objection under Article 21(1) ROOD to the processing and there are no overriding legitimate grounds for the processing or an objection under Article 21(2) RODO to the processing;
You have withdrawn the consent on which the processing is based pursuant to Article 6(1)(a) ROOD or Article 9(2)(a) ROOD and there is no other legal basis for the processing;
The request for erasure of your personal data shall not apply in the occurrence of the circumstances referred to in Article 17(3)(a) – (e) of the RODO, i.e. in particular where the processing is necessary for compliance with a legal obligation requiring processing under Union or Member State law, or for the establishment, exercise or defence of claims.
request the restriction of the processing of your personal data in the cases indicated in Article 18 RODO, i.e. you have the right to request the restriction of the processing of your data, inter alia, in cases where:
you question the correctness of your personal data – for a period allowing the controller to verify the correctness of the data;
the processing is unlawful and you object to the erasure of your personal data demanding instead the restriction of its use
the controller no longer needs your personal data for the purposes of the processing, but your personal data are needed to establish, assert or defend a claim;
you have raised an objection under Article 21(1) of the RODO to the processing – until such time as it is ascertained whether the legitimate grounds on the part of the controller override the grounds of the data subject’s objection;
object to the processing of your personal data in the cases indicated in Article 21 of the RODO, i.e. you have the right to object to the processing of your data, inter alia, in cases where:
Your personal data is processed for direct marketing purposes; where my data is profiled;
your personal data are processed for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, and where the processing is necessary for purposes resulting from the legitimate interests pursued by the controller or by a third party and my situation is special; portability of data supplied, processed by automated means
portability of personal data provided by you which have been processed by automated means.
If you believe that your personal data is being processed unlawfully, you may lodge a complaint with a supervisory authority, which in Poland is the President of the Office for Personal Data Protection (abbreviated as PUODO, ul. Stawki 2, 00-193 Warsaw).