The administrator of the website and personal data is Małgorzata Ryś running a business under the name MAŁGORZATA RYŚ - Your Virtual Assistant
All personal and address data provided by the User on the website www.malgorzatarys.com they will not be sold to third parties or entities in any way.
Administrator - Małgorzata Ryś, operating under the name MAŁGORZATA RYŚ - Your Virtual Assistant
User - every entity staying on the website and using it.
Site - website located at www.malgorzatarys.com
The Administrator of your personal data within the meaning of the provisions on the protection of personal data is the Administrator.
User voluntarily provides personal data using the contact forms on the Website. Providing data is voluntary, however, failure to provide certain information, generally marked on the Administrator's website as mandatory, will result in the inability to perform a given service and achieve a specific goal.
Only the data that the user provides himself is collected and processed (except - in certain situations - data collected automatically by cookies.
When visiting the website, data about the visit itself is automatically collected, e.g. the user's IP address, domain name, browser type, operating system type, etc. Data collected automatically can be used to analyze user behavior on the website, and to collect demographic data about users , or to personalize the content of the website in order to improve it. However, these data are processed only for the purposes of website administration and ensuring efficient hosting service and are not associated with the data of individual Users.
Purposes, legal bases and period of personal data processing are indicated separately for each purpose of data processing (see the provisions below for a detailed description of various purposes of data processing).
Rights. RODO przyznaje Ci następujące potencjalne uprawnienia związane z przetwarzaniem Twoich danych osobowych:
- the right to access personal data (Article 15 of the GDPR),
- the right to rectify personal data (Article 16 of the GDPR),
- the right to delete personal data (Article 17 of the GDPR),
- the right to limit the processing of personal data (Article 18 of the GDPR),
- the right to object to the processing of personal data (Article 21 of the GDPR),
- the right to transfer data (Article 20 of the GDPR),
- the right to lodge a complaint with a supervisory authority (Article 77 GDPR),
- the right to withdraw consent to the processing of personal data, if you have given such consent (Article 7 of the GDPR).
You can execute the above rights in accordance with the principles described in detail in art. 16 - 21 of the GDPR, I encourage you to familiarize yourself with these provisions.
I emphasize that you always have one of the rights indicated above - if you believe that I have breached the provisions on the protection of personal data while processing your personal data, you have the option to lodge a complaint with the supervisory authority (the President of the Office for Personal Data Protection).
You can also always contact the Administrator via the e-mail address: email@example.com with a request to provide you with information about what data it has about you and for what purposes it processes it. You can also use the e-mail address provided above if you have any questions related to the processing of your personal data.
The User's consent may be revoked or withdrawn at any time, which will result in the removal of the e-mail address from the Administrator's mailing list. Withdrawal of consent does not affect the processing of data which was carried out on the basis of consent before its withdrawal.
Confidentiality. I guarantee the security of all personal data provided to me. I ensure that all security and personal data protection measures required by the provisions on the protection of personal data are taken. Personal data is collected with due diligence and adequately protected against access by unauthorized persons.
The User's data will not be transferred outside the European Union to third countries, and if such a situation occurs, they will be transferred only to recipients who have joined the "Privacy Shield" agreement.
Data recipients. Your data is processed by the following external entities whose services I use when providing services to you or fulfilling orders:
- LH.pl Sp. z o.o., Pamiatkowa 2/56, 61-512 Poznan, NIP: 7831711517 and REGON: 302693647 - in order to store personal data on the server, including the mailbox server,
- Google Ireland Limited - in order to use Google services, including e-mail based on Google servers,
- persons who may potentially gain access to your personal data when providing website technical support services to me,
- subcontractors who may be involved in the provision of legal services to you and respond to your e-mails.
All entities entrusted with the processing of personal data guarantee the application of appropriate measures for the protection and security of personal data required by law.
Due to the use of Google services, your data may be transferred to the United States of America (USA) in connection with its storage on American servers. Do not be afraid, Google, joined the Privacy Shield program and thus they guarantee an adequate level of personal data protection required by European regulations.
The Personal Data Administrator hereby informs that he has not appointed the Personal Data Protection Inspector (IODO) and performs his own duties related to the processing of personal data.
The user acknowledges that his personal data may be transferred to authorized state authorities in connection with their proceedings, at their request and after meeting the conditions confirming the necessity to obtain such data from us.
Purposes and activities of personal data processing on the following legal grounds:
Orders. When placing an order, you must provide the data necessary to complete the order, such as name and surname, billing address, e-mail address. If you place an order as part of your business activity, you must provide the company name, registered office address and tax identification number. Providing data is voluntary, but necessary to place an order.
The data provided in connection with the order are processed in order to fulfill the order (Article 6 (1) (b) of the GDPR), issue an invoice (Article 6 (1) (c) of the GDPR), include the invoice in the accounting documentation (Article 6 (1) (c) of the GDPR) and for archival and statistical purposes (Article 6 (1) (f) of the GDPR).
Data about orders will be processed for the time necessary to perform the order, and then until the expiry of the limitation period for claims under the contract. Moreover, after this deadline, the data may still be processed for statistical purposes. Also remember that I am obliged to keep invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose.
In the case of order data, you cannot rectify this data after the order has been processed. You also cannot object to the processing of data and request the deletion of data until the expiry of the limitation period for claims under the contract. Similarly, you cannot object to the processing of data and request the deletion of data contained in invoices. After the expiry of the limitation period for claims under the contract, you can object to the processing of your data for statistical purposes, as well as request the removal of your data from my database.
In relation to data about orders, you also have the right to transfer the data referred to in art. 20 GDPR.
Complaints and withdrawal from the contract. If you submit a complaint or withdraw from the contract, you provide personal data contained in the content of the complaint or the statement of withdrawal from the contract, which includes your name and surname, address, telephone number, e-mail address, bank account number.
The data provided in connection with the submission of a complaint or withdrawal from the contract are used to implement the complaint procedure or the procedure for withdrawing from the contract (Article 6 (1) (c) of the GDPR). The data will be processed for the time necessary to implement the complaint procedure or the withdrawal procedure. Complaints and statements of withdrawal from the contract may also be archived for statistical purposes.
In the case of data contained in complaints and statements of withdrawal from the contract, you cannot rectify this data. You also cannot object to the processing of data and request the deletion of data until the expiry of the limitation period for claims under the contract. After the expiry of the limitation period for claims under the contract, you can object to our processing of your data for statistical purposes, as well as request the removal of your data from our database.
Contact. By contacting me via e-mail, including contact forms, you naturally provide me with your e-mail address as the sender's address. In addition, you can also include other personal data in the message. Providing data is voluntary, but necessary to make contact.
In this case, your data is processed in order to contact you, and the basis for processing is art. 6 sec. 1 lit. a GDPR, i.e. your consent resulting from initiating contact. The legal basis for processing after the end of contact is the legitimate purpose of archiving correspondence for the purpose of showing its course in the future (Article 6 (1) (f) of the GDPR).
The content of the correspondence may be archived, and I am not able to clearly determine when it will be deleted. You have the right to request a history of correspondence with me (if it was subject to archiving), as well as request its removal, unless its archiving is justified due to my overriding interest, e.g. defense against potential claims on your part.
COOKIES AND OTHER TRACKING TECHNOLOGIES.
Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone), which can be read by my IT system (own cookies) or the IT system of third parties (third party cookies).
The Website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User's end device until logging out, leaving the website or turning off the software (web browser). Persistent cookies are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.
Cookies allow me to:
- ensure the proper functioning of the website, as you expect,
- improve the speed and security of using the website,
- improve the functions available to you on the website,
- use analytical tools,
- use marketing tools,
- provide social features.
See below for more details.
Own cookies. I use my own cookies to ensure the proper functioning of the website, in particular the ordering process.
Analysis and statistics. Cookies are used to track website statistics, such as the number of visitors, type of operating system and web browser used to browse the website, time spent on the website, subpages visited, etc. We use Google Analytics in this regard, which involves the use of Google LLC cookies.
Due to the fact that Google LLC is based in the USA and uses technical infrastructure located in the USA, it joined the EU-US-Privacy Shield program in order to ensure an adequate level of personal data protection required by the European law. Under the agreement between the US and the European Commission, the latter has established an adequate level of data protection in the case of companies certified by the Privacy Shield.
If you are interested in details related to data processing as part of Google Analytics, I encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.
Server logs. Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server logs.
Logs include i.e. your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server.
The data stored in the server logs are not associated with specific people using the website and are not used by me to identify you.
The server logs are only auxiliary material used to administer the website, and their content is not disclosed to anyone except those authorized to administer the server.