1. GENERAL PROVISIONS
1.1. This Website Privacy Policy is of informative nature, which means that it is not a source of obligations for the Users. The Privacy Policy contains, above all, the principles concerning the processing of data by the Controller on the Website, including the basis, purpose, scope and period of personal data processing and the rights of data subjects as well as information regarding the use of cookies and analytical tools on the Website.
1.2. The Controller of the personal data collected via Website is EuroLinux Sp z o.o. with the registered office in Cracow, ul. Kątowa 6/5, 31-404 Kraków; entered in the National Court Register of Poland under the KRS number 0000507774; share capital of: 806 600,00 zł; NIP: 6762475638; REGON: 123104833 – hereinafter referred to as “Controller”.
1.3. Personal data on the Website shall be processed by the Controller in accordance with the binding legal regulations, in particular the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter referred to as “GDPR” or “GDPR Regulation”. The official text of the GDPR Regulation: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679.
1.4. Using the Website is voluntary. Similarly, providing personal data by the User in the contact form is voluntary, subject to one exception: statutory obligations of the Controller – specifying the personal data is a statutory requirement resulting from the commonly binding legal regulations obligating the Controller to process the personal data (e.g. processing data to fiscal books and ledgers) and failure to specify the data will render it impossible for the Controller to perform the obligations.
1.5. The Controller assures due diligence to protect the interest of persons being data subjects, in particular being responsible and liable for and assuring that the data collected are: (1) processed in accordance with the law; (2) collected for specific, legal purposes and not subject to further processing inconsistent with the purposes; (3) correct as regards the subject matter and adequate as regards the purpose of the processing; (4) stored in a form making it possible to identify the people they apply to, no longer than it proves necessary to attain the purpose of processing, and (5) processed in a manner ensuring security of the personal data, including the protection against illicit or illegal processing or accidental loss, damage or destruction, with the use of appropriate technical and organisational measures.
1.6. Taking into account the nature, scope, context and purpose of processing as well as the risk of breaching the rights or freedoms of natural persons with varied likelihood and degree of threat, the Controller is implementing appropriate technical and organisational measures so that the processing takes place pursuant to the GDPR Regulation and it is possible to show it. The measures are reviewed and updated, as necessary. The Controller applies technical measures preventing the acquisition and modification of personal data sent electronically by unauthorised persons.
1.7. Any words, phrases and acronyms used in this privacy policy starting with a capital letter (e.g. User, Controller, Website) shall be understood in accordance with the definition contained in this Privacy Policy.
1.8. Definitions:
1.8.1. WEBSITE – strona www Administratora dostępna pod adresem internetowym: www.euro-linux.com.
1.8.2. CONTROLLER – EuroLinux Sp z o.o. with the registered office in Cracow, ul. Kątowa 6/5, 31-404 Kraków; entered in the National Court Register under the KRS number 0000507774; initial share capital of: 806 600,00 zł; NIP: 6762475638; REGON: 123104833, email [email protected].
1.8.3. USER – (1) a natural person with full legal capacity, and in the cases provided for by the generally applicable regulations also a natural person with limited legal capacity; (2) a legal person; or (3) an organizational unit without legal personality for which the law grants legal capacity – visiting the Controller's Website.
1.8.4. CONTACT FORM – a form available on the Website enabling contact with the Controller.
1.9. Personal data will be securely stored until the withdrawal of consent to the processing of personal data for the purpose of receiving technical and marketing information — in which case they will be deleted.
1.10. User has the right to request access to his personal data from the controller, rectification, erasure, restriction of processing, cessation of processing and the free transfer of such data.
1.11. User has the right to withdraw his consent to receive technical and marketing information at any time.
1.12. User has the right to file a complaint with the competent supervisory authority (GIODO or its legal successor).
1.13. Providing data, including the Uder's e-mail address, is voluntary, but necessary to store his data in the Controller's IT systems. Failure to provide basic data prevents the Administrator from e.g. saving the User on the list of newsletter recipients or handling the inquiry sent via the contact form.
2. BASIS FOR THE PROCESSING OF DATA
2.1. The Controller is authorised to process the personal data in cases, and to the extent, when at least one of the following conditions is met: (1) the data subject consented to the processing of their data to one or more specified ends; (2) processing is necessary for contract performance the data subject is a party to, or to take actions to the request of the data subject, prior to contract conclusion; (3) processing is necessary to meet the legal obligation of the Controller; or (4) processing is necessary for the needs resulting from the legally justified interests of the Controller or third party, except for situations when the interests or basic rights and freedoms of the data subject override such interests and they require personal data protection, especially when the data subject is a child.
2.2. The processing of personal data by the Controller each time requires having at least one basis indicated in item 2.1 of the privacy policy.
3. PROFILING
3.1. The Controller does not excessively interfere with User's privacy and Controller's actions will not have any significant effects, including legal ones. Preferences and interests can be profiled in order to better match communication. In this way Controller only increase the attractiveness of information and marketing communication. This will take place based on data from Controller's systems and data collected automatically through cookies on Controller's Website based on a legitimate interest related to marketing communications
3.2 The GDPR Regulation obligates the Controller to inform about the automated decision-making process, including profiling referred to in Article 22, par. 1 and 4 of the GDPR Regulation, and – at least in those cases – the vital information concerning the decision-making process as well as the meaning and foreseeable consequences of processing for the person being the data subject. Bearing in mind the above, the Controller specifies in this point of the privacy policy the information concerning the possible profiling
3.3. The Controller may use profiling on the Website for direct marketing purposes.
3.4. Profiling on the Website consists in automatic analysis or forecast of the conduct of a given person on the Website, e.g. by browsing the page of a given product on the Website, or the analysis of the history of visits to the Website.
3.5. The data subject shall have the right not to depend on the decision, which is only based on automated processing, including profiling, and has some legal effects on the person or similarly affects them.
4. THE RIGHTS OF THE DATA SUBJECT
4.1. The right to access, rectify, restrict, erase or transmit – the data subject shall have the right to demand the Controller to have access to their personal data, rectify, erase (“the right to be forgotten”) or restrict the processing and shall have the right to object to the processing and transmit their data. Detailed conditions of the above rights shall be indicated in Articles 15-22 of the GDPR Regulation.
4.2. The right to withdraw the consent at any time – the person whose data are being processed by the Controller on the basis of the consent given (pursuant to Article 6, par. 1, point a) or Article 9, par. 2, point a) of the GDPR Regulation), they shall have the right to withdraw their consent at any time without any impact on the compatibility with the right to process made based on the consent prior to the withdrawal.
4.3. The right to lodge a complaint with a supervisory body – the person whose data are being processed by the Controller shall have the right to lodge a complaint with a supervisory body in a manner and mode specified in the provisions of the GDPR Regulation and the Polish law, in particular the Personal Data Protection Act. The supervisory body in Poland shall be the President of the Office for Personal Data Protection.
4.4. The right to object – the data subject shall have the right, at any time, to lodge a complaint – for reasons related to their particular situation – as regards the processing of their personal data based on Article 6, par. 1, point e) (public interest or official authority) or f) (legitimate interest of the controller) in the case of profiling based on the provisions. The Controller in such a case must stop processing the personal data, unless they show the existence of legally significant and justified bases for the processing, overriding the interests, rights and freedoms of the data subject, or the bases for determining, pursuing or defending the claims.
4.5. The right to object as regards direct marketing – in the case the personal data are being processed for the needs of direct marketing, the data subject shall have the right, at any time, to lodge a complaint as regards the processing of their personal data for the needs of such marketing, including profiling, to the extent to which the processing is related to direct marketing.
4.6. To perform the rights mentioned in this point of the privacy policy, one may contact the Controller by sending them an appropriate message in writing or via e-mail to the address of the Controller indicated at the beginning of the privacy policy or using the Contact form available on the Website.
5. COOKIES ON THE WEBSITE AND ANALYTICS
5.1. Cookies are small pieces of text files sent by the server and saved at the User’s of the Website (e.g. on the hard disk of a computer, laptop, or smartphone’s memory card – depending on the type of device used by the Website's User). Detailed information on Cookies as well as the history of their origin can be found e.g. at: https://en.wikipedia.org/wiki/HTTP_cookie.
5.2. Cookies, which can be sent via the Website, can be divided into various types, according to the following criteria:
- With regard to the provider:
1) own (created by the Controller’s Website) and
2) belonging to other persons/third parties (other than the Controller) - With regard to the period of their retention on the appliance of the Website’s User:
1) session cookies (stored till the moment of closing of the Website or a browser) and
2) persistent cookies (having some expiration period, defined by parameters of each file or until they are removed by hand) - With regard to the purpose of their usage:
1) strictly necessary cookies (enabling proper functioning of the Website),
2) functional/preferential cookies (enabling adjustment of the Website to the User’s preferences),
3) analytical and performance cookies (collecting information on the use of the Website),
4) targeting, advertising or social cookies (collecting information on the User of the Website to display personalised advertisements to such a person and for other marketing activities, including those performed on sites different from the Website, such as social networks).
5.3. The Controller may process information contained in Cookies during visiting the Website for the following specific purposes:
- Identification of the Users on the Website (strictly necessary Cookies)
- Saving data from the filled-in Forms or questionnaires (strictly necessary Cookies and/or functional/preferential Cookies)
- Adjustment of the Website contents to individual preferences of the User (e.g. colours, font size, layout) and optimisation of the use of the Website (functional/preferential Cookies)
- Keeping anonymous statistics presenting the User’s behaviours on the Website (statistical Cookies).
5.4. It is possible to check which Cookie files are being sent in a given moment by the Website (including the expiry period of Cookies and their provider). In the most popular web browsers, it can be done in the following ways:
- In Chrome browser:
in the address bar, click the ’locked’ icon on the left, (2) go to the benchmark „Cookie files”. - In Firefox browser:
(1) in the address bar, click the ’shield’ icon on the left, (2) go to the benchmark „Allowed” or „Blocked”, (3) click the button „Tracking cookies between websites”, „Tracing elements of social networks or „Content with tracing elements” - In Internet Explorer browser:
(1) Click „Tools” menu, (2) go to „Internet options” benchmark, (3) go to „General” benchmark, (4) then go to „Settings”, (5) click the button „Display files” - In Opera browser:
(1) in the address bar, click the ’locked’ icon on the left, (2) go to the benchmark „Cookie files”. - In Safari browser:
(1) click menu „Preferences”, (2) go to „Privacy” benchmark, (3) click the button „Manage website data” - Independent of the browser used, you can apply tools available e.g. at: https://www.cookiemetrix.com/ or: https://www.cookie-checker.com/
5.5. As a standard, most internet browsers on the market accept saving Cookies by default. Every person has the possibility to specify the conditions of using Cookies in the browser settings. It means that one may, e.g. partially restrict (e.g. temporarily) or fully disable saving Cookies – in the latter case it may have an impact on some functionalities of the Website.
5.6. The browser settings concerning Cookies are essential as regards the consent to use Cookies by our Website – in accordance with the law, such consent may also be expressed in the browser settings. In view of lack of such consent, change the browser setting accordingly as regards Cookies. Detailed information concerning the change in Cookies settings and their individual removal in the most common browsers is available in the help section of the browser and the following websites (click the link):
Chrome
Firefox
Explorer
Opera
Safari
Microsoft Edge
6. CONTACT VIA CONTACT FORM
6.1 The User, by submitting an inquiry through the Contact Form located on the Website, agrees to the Controller's processing of the personal data provided in the submitted Form for the purpose of handling the inquiry.
6.2. The User acknowledges receipt of the following information: EuroLinux Sp z o.o. with the registered office in Cracow, ul. Kątowa 6/5, 31-404 Kraków (KRS number 0000507774) as the Controller of the received personal data, which can be contacted via the e-mail address [email protected] will process them in order to handle the sent inquiry.
6.3. In the absence of consent to the processing of personal data, activities related to the handling of the submitted inquiry will not be able to be carried out.
6.4. Personal data will be processed for the time necessary to undertake and carry out activities related to the handling of the inquiry sent, as well as for the period prescribed by law for the establishment, investigation, record-keeping, defense of civil claims or public-legal obligations specified by law.
6.5. Personal data of individuals, including individuals acting for customers who are not natural persons, provided in the inquiry, may be transferred to employees and business partners of the Controller (hereinafter collectively referred to as "Partners") who are involved in the procedure of handling the inquiry. Personal data are processed in the information systems used by the Controller and Partners, including: systems for communication, systems for handling communication systems, servers on which data are stored, CRM systems.
6.6. The transferred data may be accessed by trusted partners of the Controller and Partners who participate in the performance of the aforementioned activities, such as: administrators of systems for telecommunications services, administrators of servers on which the data are stored.
6.7. Personal data processed includes, but is not limited to: name, company of the customer, positions of contact persons, telephone numbers, email addresses or other business contact data.
6.8 Personal data will not be transferred to entities outside the European Economic Area.
6.9 The person providing the data has the right to access the data provided, to rectify, erase or restrict processing, to object to processing, to data portability, to withdraw consent to data processing at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal; and the right to lodge a complaint with a supervisory authority.
6.10. In order to handle an inquiry sent through the Contact Form, the User's data, as well as the inquiry, may be sent to the official distributor of the Controller's solutions, the company Linux Polska Sp. z o.o. with its seat in Warsaw (00-807), 100 Jerozolimskie Avenue.
7. FINAL PROVISIONS
7.1. The Website may contain links to other websites. The Controller encourages that at the time of being transferred to other websites, become familiar with the privacy policy. This privacy policy shall apply only to the website of the Controller.