Privacy Policy
We do not take your trust for granted so we have developed a Privacy Policy that covers how we collect, use, disclose, transfer, and store your personal data.
Who We Are
The Controller of your personal data is Izabela Maźnicka PROMOCARE, which has its principal place of business at ul. Pawia 9, 31-503 Kraków, Poland, NIP [taxpayer ID]: 8131768036 REGON: 121018041.
Personal Data We Process
Personal data refers to any information relating to an identified or identifiable individual person (“Personal Data”).
We may collect data or ask you to provide certain data when you visit our website, and use our products and services. The sources from which we collect Personal Data include data collected directly from you or your device and may include direct identifiers such as name, e-mail address, phone number, individual message (if you provide one) and online or indirect identifiers such as IP address.
Why We Process Your Personal Data
We use your Personal Data on the basis of your consent, in order to:
-
To update you on the status of your inquiries;
-
To subscribe you to a newsletter;
-
To manage your subscriptions and
-
To provide you with technical and customer support.
How We Process Your Personal Data
We use your answers from contact forms and relevant product data to personalize communication and recommend our relevant products for you.
We do not take any decisions solely based on algorithms, including profiling, that would significantly affect you.
We use analytical tools, including third-party analytical tools such as Google Analytics (link to privacy policy https://support.google.com/analytics/answer/6004245), which allow us to, among other things, to identify potential performance or security issues and to understand how you use our website so that we can optimize and improve your user experience, and to evaluate and improve our campaigns. We use service and device data for analytics.
We will hold your Personal Data on our systems only as long as necessary for the purposes of a particular product or service.
How We Protect Your Personal Data
We maintain administrative, technical, and physical safeguards for the protection of your Personal Data.
Administrative Safeguards
Access to the Personal Data of our users is limited to authorized personnel who have a legitimate need to know based on their job descriptions, for example, employees who provide technical support or who service users. In the case of third-party contractors who process personal information on our behalf, similar requirements are imposed. These third parties are contractually bound by confidentiality clauses, even when they leave the company. Where an individual employee no longer requires access, that individual's credentials are revoked.
Technical Safeguards
We store your personal information in our database using the protections described above. In addition, we utilize technical safeguards such as up-to-date firewall protection for an additional layer of security, high-quality anti-virus software, and we regularly update our virus definitions. Third parties who we hire to provide services and who have access to our users' data are required to adopt appropriate measures if we deem them necessary.
Physical Safeguards
Access to user information in our database by Internet requires using an encrypted VPN, except for email which requires user authentication. Third-party contractors who process Personal Data on our behalf agree to provide reasonable physical safeguards.
Proportionality
We strive to collect no more Personal Data from you than is required by the purpose for which we collect it. This, in turn, helps reduce the total risk of harm should data loss or a breach in security occur: the less data we collect, the smaller the overall risk.
Your Privacy Rights
You have the following rights regarding the processing of your Personal Data:
- Right to information - right to receive information about the processing of your Personal Data, prior to processing as well as during the processing, upon request.
- Right of access - aside from the information about the processing of your Personal Data, you have the right to receive a copy of your Personal Data undergoing processing.
- Right to rectification - we should process accurate Personal Data; if you discover inaccuracy, you have the right to seek correction of inaccurate Personal Data.
- Right to erasure ("right to be forgotten") - you have the right to erasure of your Personal Data, but only in specific cases stipulated by law, e.g., if there is no legally recognized title on our part for further processing of your Personal Data..
- Right to data portability - the right to receive Personal Data which you have provided and is being processed on the basis of consent or where it is necessary for the purpose of conclusion and performance of a contract, in machine-readable format. This right applies exclusively to Personal Data where processing is carried out by automated means.
- Right to object - applies to cases of processing carried out in legitimate interest. You have the right to object to such processing, on grounds relating to your particular situation, and we are required to assess the processing in order to ensure compliance with all legally binding rules and applicable regulations. In case of direct marketing, we shall cease processing Personal Data for such purposes after the objection.
- Right to withdraw consent - in the case of processing based on your consent you can withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on your consent before its withdrawal.
- Right to restriction of processing - you have the right to restriction of processing of your Personal Data if: you are contesting the accuracy of your Personal Data, for a period enabling us to verify the accuracy of your Personal Data; the processing is unlawful and you oppose the erasure of the Personal Data and request the restriction of its use instead; we no longer need the Personal Data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; or you have objected to processing of your Personal Data, and there is a pending verification whether our legitimate grounds override your interests.
- Right to contact a supervisory authority - you may contact and lodge a complaint with the supervisory authority – President of the Personal Data Protection Office (https://www.uodo.gov.pl/en).
We will action your request within one month of receiving a request from you concerning any one of your rights as a Data Subject. When we are faced with an unusually large number of requests or particularly complicated requests, the time limit may be extended to a maximum of another two months.
Cookies Policy
Contact Us
Please contact us to exercise any of your rights, or if you have any other questions or complaints about our use of your Personal Data and its privacy. As required under the GDPR, we have a data protection officer (DPO) to monitor our compliance with the GDPR, provide advice where requested and cooperate with supervisory authorities.
You can always reach us by e-mail at b2b@promocaregroup.pl or you can send paper mail to PROMOCARE, ul. Pawia 9, 31-503 Kraków, Polska.
Changes to this Privacy Policy and Cookies Policy
We reserve the right to revise or modify this Privacy Policy and Cookies Policy. In addition, we may update this Privacy Policy and Cookies Policy to reflect changes to our data practices. We encourage you to periodically review this page for the latest information on our privacy practices.
