Privacy policy

Website privacy policy

GENERAL PROVISIONS
1. The administrator of the personal data collected via the https://solidexpert.com website is SOLIDEXPERT POLSKA SP. Z O.O., a jointly operated civil partnership, registered office address: G. Zapolskiej 44, Kraków 30-126, address for delivery: , NIP: PL6772380230, REGON: 123060159, e-mail address: biuro@solidexpert.com, business address: G. Zapolskiej 44 Kraków 30-126, address for delivery: G. Zapolskiej 44 Kraków 30-126, NIP: PL6772380230, REGON: 123060159, e-mail address (e-mail): biuro@solidexpert.com, hereinafter referred to as ‘Controller.’
2. The personal data collected by the Controller via the website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR and the Data Protection Act of 10 May 2018.
TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION
1. PURPOSE OF THE PROCESSING AND LEGAL BASIS The Controller processes personal data via https://solidexpert.com in the case of:
  1. the user’s use of the contact form. Personal data is processed on the basis of Article 6(1)(f) of GDPR as a legitimate interest of the Controller.
  2. the user’s subscription to the Newsletter in order to receive commercial information electronically. Personal data is processed upon separate consent, on the basis of Article 6(1)(a) of GDPR.
2. TYPE OF PERSONAL DATA PROCESSED The Controller processes the following categories of user personal data:
  1. First and last name,
  2. Address (of residence),
  3. E-mail address,
  4. Phone number,
3. ARCHIVING PERIOD FOR PERSONAL DATA Users’ personal data is maintained by the Controller:
  1. in case the processing is based on the execution of a contract, for as long as it is necessary for the execution of the contract and thereafter for a period corresponding to the period of limitation of claims. Unless provided otherwise in a specific provision, the limitation period is six years, and three years for claims for periodic benefits and claims relating to the running of a business.
  2. where processing is based on consent, for as long as the consent is not revoked and, after revocation of the consent, for a period of time corresponding to the period of limitation of claims that the Controller may bring and that may be brought against him. Unless provided otherwise in a specific provision, the limitation period is six years, and three years for claims for periodic benefits and claims relating to the running of a business.
4. When using the website, additional information may be collected, in particular: the IP address associated with your computer or the external IP address of your internet provider, domain name, browser type, access time, operating system type.
5. Users may also have navigational data collected from them, including information about the links and references they choose to click on or other actions they take on the website. The legal basis for such activities is the Controller’s legitimate interest (Article 6(1)(f) of GDPR) which consists in facilitating the use of electronically provided services and improving the functionality of these services.
6. The provision of personal data by the user is voluntary.
7. Personal data will also be processed by automated means in the form of profiling, provided that you have given your consent pursuant to Article 6(1)(a) of GDPR. Profiling will result in the attribution of a profile to a person in order to make decisions regarding that person or to analyse or predict that person’s preferences, behaviour and attitudes.
8. The Controller shall use due diligence to protect the interests of data subjects, and in particular shall ensure that the data collected by the Controller are:
  1. processed in accordance with the law,
  2. collected for specified, legitimate purposes and not subject to further processing not in accordance with those purposes,
  3. Substantially correct and adequate in relation to the purposes for which they are processed and kept in a form that makes it possible to identify the persons to whom they relate for no longer than is necessary to achieve the purpose of the processing.
DISCLOSURE OF PERSONAL DATA
1. Users’ personal data is shared with the service providers used by the Controller to run the website. Service providers to whom personal data is transferred, depending on the contractual agreements and circumstances, are either subject to the instructions of the Controller as to the purposes and means of processing such data (processors) or determine the purposes and means of processing themselves (controllers).
2. Users’ personal data is stored exclusively in the European Economic Area (EEA).
THE RIGHT TO CONTROL, ACCESS AND RECTIFY OWN DATA
1. The data subject has the right of access to the content of his personal data and the right to rectify, delete, restrict processing, the right to data transfer, the right to object, the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
2. Legal basis for the user’s request:
  1. Access to data - Article 15 of GDPR
  2. Rectification of data - Article 16 of GDPR.
  3. Deletion of data (so-called right to be forgotten) - Article 17 of GDPR.
  4. Restriction of processing - Article 18 of GDPR.
  5. Data transfer - Article 20 of GDPR.
  6. Objection - Article 21 of GDPR
  7. Withdrawal of consent - Article 7(3) of GDPR.
3. In order to exercise the rights referred to in point 2, one may send the relevant email to: biuro@solidexpert.com.
4. If the user requests an exercise of his rights under the aforementioned rights, the Controller shall either comply with the request or refuse to comply with the request immediately, but no later than one month after receiving the request. However, if - due to the complexity of the request or the number of requests - the Controller is not in a position to comply with the request within one month, the Controller shall comply with the request within a further two months by informing the user in advance - within one month of receipt of the request - of the intended extension of the deadline and the reasons thereof.
5. Should it be established that the processing of personal data violates the provisions of GDPR, the data subject has the right to file a complaint with the President of the Data Protection Office.
COOKIES
1. The Controller’s website uses cookies.
2. The installation of cookies is necessary for the correct operation of the services on the website. Cookies contain the information necessary for the proper functioning of the website, and they also make it possible to generate general statistics on website visits.
3. The following types of cookies are used on the website: session cookies and permanent cookies
  1. Session cookies are temporary files that are stored on the user’s terminal equipment until the user logs out (leaves the website).
  2. Permanent cookies are stored on the user's terminal equipment for the duration specified in the parameters of the cookies or until they are deleted by the user.
4. The Controller uses his own cookies to better understand how the user interacts with the content of the website. The cookies collect information on how the user uses the website, the type of website from which the user was redirected and the number of visits and the length of the user’s visit to the website. Such information does not record specific personal data about the user, but is used to create statistics on the use of the website.
5. The user has the right to decide on the extent to which cookies can be stored on his computer by selecting them in advance in his browser window. For detailed information on the possibilities and ways of using cookies, please refer to your software (browser) settings.
FINAL PROVISIONS
1. The Controller shall apply technical and organisational measures to ensure the protection of the processed personal data in accordance with the risks and categories of data protected, and in particular to protect the data against unauthorised access, acquisition by an unauthorised person, processing in violation of the binding provisions, and alteration, loss, damage or destruction.
2. The Controller shall provide appropriate technical measures to prevent unauthorised persons from obtaining and modifying personal data sent electronically.
3. For matters not covered by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply accordingly.