Last updated: March 15, 2024

PRIVACY POLICY

We publish this document to explain why we gather and process personal data during our business activities.

1. What is personal data?

This is all data, which allows without much effort distinguish one person from another. Such data can apply directly to a given person (e.g. name, surname, identification number, e-mail address or internet account); or describe a person indirectly for instance they describe a person’s characteristics, health condition, his or her beliefs or judgments, place of living, addictions, race or religion.

2. What personal data is used by ITS Poland?

We process data that is given to us by our clients which are necessary to use our services or cooperate with our company.

3. What does processing of the data mean?

Processing means all the activities that we may perform with personal data – they are connected with their active use, such as gathering, downloading, saving, joining, modifying or making them available; or passive use such as storing, limiting, reducing and deleting.

4. Who is the data administrator (in other words who is responsible for the data usage and safety)?

Your personal data administrator is Inesa Tarazevich, Taxpayer Identification Number 6793245709, tel no. +48 572197422, e-mail for correspondence: iness.britain@gmail.com.

5. What is the legal background underlaying our gathering and processing of your data?

All instances of processing your data have to be grounded in a proper, up to date, legal background. The legal background can be your consent for gathering and processing of your personal data or other bequest allowing for such actions and contained in the Act of 29 August 1997 on the protection of personal data or in the Regulation of the European Parliament and of the European Union Council 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free processing of such data and repealing of Directive 95/46 / EC (referred to as the "GDPR").

Your personal data can be gathered and processed by us in a few instances, e.g.:

  • You can bestow your data on us by sending an e-mail to us or using our contact form on our website. In this situation we process your data based on your consent, which you express automatically when you send your data to us (e.g. email address). Your consent is voluntary - remember that you can withdraw it at any time. In such instance we will immediately delete all the data provided by you unless you have become our client.
  • If you are our client or a person that is interested in purchasing our service we process your data on the basis of our mutual agreement or in the process leading to conclusion of the agreement between us. This is always done with your knowledge and will. Expressing your intention to conclude a contract, you know what personal data will be needed to sign it, and after concluding it you have the knowledge of what data you have given for this purpose or you will pass to us in a later stage of your order preparation.
  • We can also process your data when there is a need to ensure the security of our information network and information. This will happen when you use or connect to our information infrastructure, for example by entering our website or by sending us a message. This is our legitimate interest.

6. Who may we share your personal data with?

According to legally binding law, we may transfer your data to entities that process it at our behalf. We also have an obligation to provide your personal data at the request of entities authorized to do so under other law, e.g. courts or law enforcement agencies. However, we will grant them access to you data only if they make official request, indicating the legal basis on which they may demand such access.

In order to perform the contract, your data may be transferred to third countries or international organizations, that is, outside the economic territory of the European Union, where they may be protected to a lesser extent than in the EU. Inesa Tarazevich confirms that the transfer takes place in a safe, controlled manner and is protected by appropriate security clauses in contracts with their recipients. A detailed list of the degree of protection in individual countries can be found at:

https://giodo.gov.pl/163/id_art/1519/j/pl

Within the European Union, thanks to the RODO, you have an identical level of protection of your data in all member countries.

GDPR text that ensures personal data protection is available at this link: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG

7. How long will we process your data?

We pay a lot of attention to minimize the scope of data collected by us, as well as the processing time. For this purpose, we perform systematic reviews of paper and electronic documents, removing expired ones. Please remember that the processing time of your data, depending on the basis on which we have obtained it, can be decided by separate, independent from us legal provisions that may impose on us the obligation to store your data, regardless of your will. Among many examples there are various accounting regulations.

If you have personally used our services, in accordance with the accounting regulations, we will store your data in prepared financial and accounting documentation concerning your order and we will have to process it for a period of 5 consecutive calendar years from the date of purchase. After this time, we will immediately destroy your information and we will not use it for any other purpose; for example, to advertise our business, unless you give us your consent clearly and explicitly.

If the data we own were to be used for a different purpose than it had been obtained for, you will always be informed by us and you will be able to object that.

8. What are your rights when your personal data is concerned?

If we process your personal data you always have right to:

  • request access to your data,
  • request your personal data change,
  • a removal request,
  • request limiting of processing,
  • ask us to stop processing your data,
  • transfer data, include copying.

All these rights have been explicitly explained in article 15 of GDPR which is available at:

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG

You can also withdraw your permission to process your personal data. In such case we will delete your personal data if only there won’t be an imperative law which makes us process them for a longer period.

If you believe that in any way - which we obviously do not want - we have violated your rights or did not ensure the security of your personal data, you have the right to lodge a complaint with the supervisory body, which is currently the Inspector General for Personal Data Protection.

9. Automatic decision making and profile creation

Based on your data, we do not make any decisions that would be automated, that is, taken without human intervention. We also do not take any action to make any kind of your profile.

10. How do we protect your data?

In order to ensure security of your data, we utilize organizational and technical means required by law. We have installed the necessary physical security in our headquarters to prevent unauthorized access to these data.

11. Protection of privacy of underage users

Our website does not monitor and does not verify information about the age of users, senders and recipients of messages or people interested in receiving notifications about our services. Contact information from visitors (such as telephone numbers and e-mail addresses of users) is used only to carry out orders, send information about our company and commercial offers.

Underage users should not send any information or place orders or subscribe any services provided by our company without the consent of their parents or legal guardians. We will require such consent in every case when we know that the user is underage ("a child") in understanding of the national provisions on the protection of personal data.