General information
1.1. The hereby Privacy Policy applies to the personal data of users of the website (hereinafter: "Users") available at www.jzr.pl (hereinafter: "Website"), as well as other categories of persons, as indicated herein.
1.2. The Controller of the personal data of Website Users is the Service Provider, i.e. Jastrzębskie Zakłady Remontowe Sp. z o.o. with its registered office in Jastrzębie-Zdrój (44-268) at ul. Węglowa 4, entered into the register of entrepreneurs kept by the District Court in Gliwice, 10th Commercial Division of the National Court Register under the KRS No. 0000088012 (hereinafter also referred to as the "Company").
1.3. The Service Provider processes Website Users' personal data in order to run the Website, and particularly for such purposes as:
A. ensuring the efficient functioning of the Website;
B. investigating the circumstances of any unauthorised use of the Website;
C. preparing internal reports and analyses (including viewing Website subpage statistics);
D. improving the Website's quality;
E. studying and evaluating User behaviour during the use of the Website to better adjust the Website's content to User preferences.
1.4. In matters related to personal data protection, please contact Jastrzębskie Zakłady Remontowe Sp. z o.o. ul. Węglowa 4, 44-268 Jastrzębie-Zdrój or e-mail [email protected].
1.5. Please e-mail the above address in any matters related to the protection of any personal data processed by the Service Provider.
Exercise of rights by data subjects
1.6. Any natural persons (hereinafter: "Applicant") have the right to request the Service Provider to:
A. confirm whether the Service Provider is processing personal data concerning them, and to exercise their right of access to such personal data,
B. rectify their personal data,
C. delete or restrict the processing of personal data,
D. exercise the right to data portability, which includes the right to receive the aforementioned data and send it to another controller or request – if technically possible – that the data be sent directly to another controller (insofar as the data are processed by automated means and for the performance of a contract or on a consensual basis),
E. object to the processing of personal data (to the extent that the data is processed in the Company's legitimate interests).
1.7. Any such requests shall be processed by the Service Provider pursuant to Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"). The above means that in certain cases mentioned in the GDPR provisions, the data subject shall not be entitled to exercise some of the aforementioned rights.
1.8. Applications shall be submitted in writing to Jastrzębskie Zakłady Remontowe Sp. z o.o. ul. Węglowa 4, 44-268 Jastrzębie-Zdrój or by e-mail to [email protected]. In cases where the Service Provider has not processed the Applicant's personal data (apart from processing it for the purposes of the application itself), the application shall not be processed, and the Applicant's data shall be deleted immediately.
1.9. The Service Provider shall notify the Applicant immediately upon receipt of the request and enter information about the request into its records.
1.10. The Service Provider reserves the right to verify the Applicant's identity. Failure to successfully verify the identity of the Applicant for reasons attributable to the Applicant shall result in the Service Provider's refusal to process the application submitted, of which the Applicant shall be promptly notified.
1.11. The Data Protection Officer appointed by the Service Provider, or if no DPO has been appointed – the Data Protection Coordinator acting as part of the Service Provider's organisation, shall determine how the application is to be handled and shall forward it to the designated substantive unit of the Service Provider for processing. The application shall be processed without undue delay and in any case no later than within 10 days from the date of its receipt by the Service Provider.
1.12. The Service Provider shall reply to the Applicant no later than three (3) weeks from the date of receipt of the request. In objectively complex cases (i.e. where a significant amount of work on the part of the Company is required), the above deadline shall be extended to two (2) months, of which the Applicant shall be promptly notified. At the same time, the Service Provider shall make every effort to ensure that the deadline is not extended.
1.13. As part of the exercise of the right of access, Applicants shall be informed of their data to the extent specified in the request submitted. The scope of such information is as follows:
- purpose of processing,
- categories of personal data subject to processing,
- recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organisations,
- the intended personal data retention period, and if this is not possible, the method of calculating this period,
- if the personal data was not collected from the data subject – all available information about their source,
- automated decision-making, including profiling, and relevant information about the modalities of such decision-making, as well as the significance and foreseeable consequences of such processing for the data subject,
- the right to request the Company to rectify, erase or restrict the processing of personal data, as well as to object to such processing (where such right exists),
- submit a complaint to the supervisory body.
1.14. Where the right of access and the right to data portability are exercised, a copy of the personal data concerning the applicant – provided in commonly known and accessible machine-readable formats – shall be attached to the reply given to the Applicant.
1.15. Any complaints related to the implementation of the procedure for the exercise of the rights of personal data subjects shall be submitted to the Service Provider's Data Protection Officer (DPO) or Data Protection Coordinator (if no DPO has been appointed) at [email protected]. Complaints shall be reviewed promptly and in any case no later than within 7 days of its receipt, of which the Applicant shall be promptly notified. Applicants shall also be informed of the fact that their complaints have been received. Information about complaints shall be entered into the records kept by the DPO/Data Protection Coordinator of the Company.
Other provisions
1.16. In cases where the Service Provider requests consent to send commercial information electronically (e.g. via e-mail, SMS, Bluetooth or otherwise), any individual who has granted such consent shall have the right to withdraw it by sending an e-mail to the address indicated in section 1.4. above, entering the word "withdrawal" in the subject line. The foregoing shall also apply to any other consent obtained by the Service Provider through the Website.
1.17. The Service Provider declares that it shall endeavour to provide Users with a high level of security during their use of the Website. Any incidents affecting information transmission security should be reported to the address indicated in Section 1.4. above.
1.18. The Service Provider reserves the right to disclose selected information concerning the User to competent authorities or third parties who request such information on an appropriate legal basis and in accordance with the applicable laws and regulations.
1.19. User information shall not be disclosed to any third party or authority without the consent of the data subject, except as set out in item 1.18. above.
Cookies and system logs
1.20. The Service Provider would like to inform Users that upon connecting to the Website, information on the number (including IP) and type of their terminal equipment used to connect to the Website appears in the Website's system logs. The Service Provider represents that per the applicable laws and regulations, it shall also process data concerning the number (including IP) and type of the User's terminal equipment, as well as the time of connection of any such Users with the Website and other usage data pertaining to User activity. Such data are processed particularly for technical purposes and to collect general statistical information.
1.21. The Service Provider uses cookies (i.e. small text files sent to User devices to identify them in a way necessary to simplify or cancel specific operations) to collect information on the way Users use the Website. Cookies enable such things as maintaining User sessions, adapting the Website to User needs, as well as generating statistics on Website subpage views.
1.22. Users may change their cookie settings at any time. To do so, they must access and modify their web browser's cookie settings. These settings may be changed in such a way as to block the automatic handling of cookies via the web browser settings or inform about each installation of cookies on the User's device. Detailed information on the options and ways of handling cookies is available in the software (browser) settings.
1.23. Some subpages of the Website and other means of communication with Users may contain the so-called "web beacons" (so-called "tracking pixels" or "clear gifs"). Web beacons allow the Service Provider to receive such information as the IP (Internet Protocol) address of any computer that loads the page on which a web beacon has been embedded, as well as the page URL, the time the page was loaded, and browser type information and information contained in cookies, to evaluate the effectiveness of the Service Provider's advertisements.
Hosting
1.24. Based on a written contract, the Service Provider entrusts the processing of all personal data provided by the User and other data referred to herein to JSW IT SYSTEMS Sp. z o.o. to ensure that any activities related to hosting, administration, maintenance and management of the Website are performed properly.
1.25. DThe hereby Privacy Policy was last updated on: 17 December 2018.