menuclose

GDPR Information

In accordance with Art. 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”), we inform you about the principles of processing your personal data and your related rights.

DATA CONTROLLER

The controller of your data processed in connection with the use of the website at is Codelane Sp. z o.o. with its registered office in Kraków, ul. Św. Filipa 23/4, 31-150 Kraków, entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0000775920, NIP 6762569245, REGON 38281072600000 (hereinafter: “Controller”).

PURPOSES AND LEGAL BASES FOR DATA PROCESSING IN THE SERVICE

USE OF PHOTONESTO.COM (hereinafter: the Service)

Personal data of all persons using the Service, hereinafter referred to as: Users (including IP address or other identifiers and information collected via cookies or other similar technologies), is processed by the Controller:

  1. for the purpose of providing electronic services in terms of making content collected in the Service available to Users, providing a contact form, and for statistical purposes – the legal basis for processing is the necessity of processing for the performance of a contract (Art. 6(1)(b) GDPR) and the legitimate interest of the Controller (Art. 6(1)(f) GDPR) consisting in maintaining query statistics to improve the functionality of the Service;

  2. for the purpose of handling complaints – the legal basis for processing is the necessity of processing for the performance of a contract (Art. 6(1)(b) GDPR);

  3. for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), consisting in analyzing the activity of Users and their preferences in order to improve the functionalities and services provided;

  4. for the possible establishment and pursuit of claims or defense against them – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR).

PLACING ORDERS

  1. Persons who register in the Service are asked to provide data necessary to create and manage an account. Providing data is required to create and manage the account, and failure to provide it results in the inability to create an account.

  2. Personal data is processed:

  3. If the User places any personal data of other persons (including their first and last names, addresses, phone numbers, or email addresses) in the Service, they may do so only provided they do not violate applicable law and the personal rights of those persons.

The period of data processing by the Controller depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the service or order fulfillment.

  1. Placing an order (purchasing a service) by a User involves the processing of their personal data. Providing data is required to accept and process the order, and failure to provide it results in the inability to fulfill it.

  2. 2.6. Personal data is processed:

Right to erasure – on this basis, one may request the deletion of data whose processing is no longer necessary for any of the purposes for which it was collected.

  1. The Controller provides the possibility of contact using an electronic contact form. Using the form requires providing personal data necessary to contact the User and respond to the inquiry.

  2. Personal data is processed:

DATA RECIPIENTS

The Controller processes personal data of Users visiting the Controller’s profiles on social media (Facebook, Instagram). This data is processed solely in connection with maintaining the profile, for the purpose of informing about the Controller’s activity and communicating with Users through social media functionalities. The legal basis is the legitimate interest of the Controller (Art. 6(1)(f) GDPR) consisting in promoting their own brand.

PERSONAL DATA SECURITY

  1. The period of data processing by the Controller depends on the type of service and the purpose of processing. As a rule, data is processed for the duration of the service or order fulfillment.

  2. The data processing period may be extended when processing is necessary to establish and pursue any claims or to defend against them.

Additional information regarding the processing of Users’ personal data can be found in the

  1. Privacy Policy

  2. A request regarding the exercise of data subject rights may be submitted:

  3. The request should, as far as possible, precisely indicate what it concerns, i.e. in particular:

  4. If the Controller is unable to determine the content of the request or identify the person submitting the request based on the information provided, it will ask the requester for additional information.

  5. A response to the submission will be provided within one month of receipt. If necessary, the deadline may be extended by a further two months, of which the data subject will be informed.

  6. The response will be sent to the email address from which the request was sent, and in the case of requests sent by regular mail, by registered mail to the address indicated by the requester.

ODBIORCY DANYCH

The Controller reserves the right to disclose selected information concerning the User to relevant authorities or third parties who request such information, based on an appropriate legal basis and in accordance with applicable law.

BEZPIECZEŃSTWO DANYCH OSOBOWYCH

  1. The Controller continuously conducts risk analysis to ensure that personal data is processed securely – ensuring above all that only authorized persons have access to the data and only to the extent necessary for the tasks they perform. The Controller ensures that all operations on personal data are recorded and performed only by authorized employees and associates.

  2. The Controller takes all necessary measures to ensure that its subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process personal data on behalf of the Controller.

POLITYKA PRYWATNOŚCI

Dodatkowe informacje dotyczące przetwarzania danych osobowych Użytkowników znajdują się w , która jest na bieżąco weryfikowana i w razie potrzeby aktualizowana.