Braniborska10.pl Privacy Policy

§ 1 GENERAL INFORMATION

The Website’s Privacy Policy does not impose any obligations on the Website User. It is provided for informational purposes only and does not constitute a contract or terms of service.

All terms and words capitalized (e.g., Website, User, etc.) shall be understood in accordance with the definitions set forth in the Website Terms of Use.

In the event of any inconsistencies between this Privacy Policy and the consents to the processing of personal data granted by an individual, the legal basis for determining the scope of the Controller’s activities shall be the voluntarily given consents or the provisions of law applicable to the specific factual situation.

§ 2 PERSONAL DATA CONTROLLER

The controller of your personal data is BRANIBORSKA 10 S.A., with its registered office in Wrocław at ul. Stanisława Dubois 41, 50-207 Wrocław, registered with the District Court for Wrocław Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, under KRS number: 0000967550, NIP: 8992925371, REGON: 52200677700000, share capital: 100,000.00 PLN, fully paid up (hereinafter: the Controller).

For any questions regarding the protection of personal data, please contact the Data Controller at the address provided above or via email at rodo@braniborska10.pl.

You may also send a request to the address provided to obtain information about what personal data we hold about you and for what purposes we process it.

The administrator hereby informs you that it retains correspondence for statistical purposes and to improve the GDPR support system, as well as for the resolution of complaints and any decisions regarding administrative interventions in the specified matters made on the basis of such reports. The addresses and data collected in this manner will not be used for communication for any purpose other than processing the report; in particular, they will not be used for marketing purposes.

If you contact the Administrator to perform specific actions, the Administrator may again ask you to provide certain information, including personal data, such as your first name, email address, a phone number, in order to verify their identity, enable the Administrator to contact them regarding the matter, and carry out the requested action. Providing this information is not mandatory, but it may be necessary to carry out the action or obtain the information that is of interest to the individual.

If you have provided additional consent for us to use cookies, our trusted partners may also act as data controllers for the data collected based on your online activity.

§ 3 DATA COLLECTION AND THE PURPOSE OF DATA PROCESSING

We process personal data in accordance with Regulation (EU) (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, (hereinafter: GDPR) and other data protection laws currently in force at the time of processing the specific data.

In accordance with the provisions of the aforementioned legal acts, personal data is defined as information relating to an identified or identifiable natural person. An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of a natural person.

We assure you that the data we collect from you is kept confidential and secure, and is processed only when necessary. We process data in accordance with the law, in a fair and transparent manner for the data subject. We process only the data and only the information that is necessary for a legitimate purpose, i.e., the reason for processing. Personal data is collected with due diligence and adequately protected against access by unauthorized persons. We implement appropriate and adequate security measures and utilize the latest technical knowledge to protect personal data against accidental loss and unauthorized access, use, alteration, or disclosure. We store personal data in a manner that allows for the identification of the data subject for no longer than is necessary for the purposes for which the data is processed.

The administrator collects personal data in the following ways:
through information voluntarily provided in an email or via the contact form;
by submitting a complaint, request, inquiry, or other correspondence;
by voluntarily subscribing to the newsletter;
through information voluntarily provided in an email sent in connection with a request to establish a business relationship;
through cookies, web beacons, or similar online technologies.

Please be advised that the purpose and scope of the data processed by the Controller are based on the User’s consent or applicable law, and in certain cases are further specified as a result of actions taken by these individuals on the Website or through other communication channels.

The provision of personal data by a Website User is voluntary, but necessary in order to use certain features of the Website (e.g., contact forms).

In each case, the scope of data required to enter into the relevant agreement is specified in advance on the Website (we indicate which data must be provided to enter into the agreement or use a specific feature). Failure to provide personal data may result in the inability to effectively use the features of the Website.

Your personal data is collected by the Data Controller for the following purpose:

Purpose of Processing	Legal Basis	A legitimate purpose, if any
Maintaining statistics.	Article 6(1)(f) of the GDPR.	Having access to statistics on our activities allows us to improve our business operations.
Conducting marketing activities for one’s own products and services without using electronic means of communication.	Article 6(1)(f) of the GDPR.	Conducting marketing activities to promote the business.
Conducting marketing activities for our own products and services using electronic means of communication, including profiling.	Art. 6(1)(f) of the GDPR; however, due to other applicable regulations—in particular, the Telecommunications Law and the Act on the Provision of Electronic Services—these activities are conducted solely on the basis of consent (Article 6(1)(a) of the GDPR).	Conducting marketing activities to promote our business using email addresses and/or phone numbers. Displaying personalized ads.
Handling inquiries submitted via the contact form, email, complaints, and other requests.	Article 6(1)(a) of the GDPR; Article 6(1)(c) of the GDPR.	Responding to submissions and inquiries sent via the contact form or in any other form, including the storage of sensitive requests and responses provided to ensure accountability.Processing requests and responding to consumer complaints. Pursuing claims, including those against third parties, and defending against them.
Entering into and performing Service Agreements or taking action at the request of a prospective User prior to the conclusion of such an agreement.	Article 6(1)(b) of the GDPR.	The conclusion and performance of a Service Agreement or the undertaking of actions at the request of a prospective User prior to the conclusion of the agreement.
Document Archiving.	Article 6(1)(c) of the GDPR.	Compliance with legal obligations arising from regulations, such as tax and accounting laws, and the GDPR.

In the case of an adult User, with the User’s additional consent, Personal Data may also be processed for the purpose of presenting, creating, targeting, and delivering advertisements and offers regarding the products or services of the Administrator and its partners that are tailored to the User’s preferences to the greatest extent possible (profiling), as a result of automated decision-making that may produce legal effects concerning the User or similarly significantly affect him or her.

Email contact, contact form. When you contact us via email, you provide us with your email address as the sender’s address. In addition, you may also include other personal information in the body of the message. Providing this information is voluntary, but necessary to contact us.

When you contact us via the contact form, you provide us with your email address, phone number, first name, and last name. In addition, you may include other personal information in the body of your message. Providing this information is voluntary, but necessary to contact us.

In this case, your data is processed for the purpose of contacting you, and the legal basis for the processing is Article 6(1)(a) of the GDPR, i.e., your consent resulting from your desire to contact us. The legal basis for processing after the contact has ended is a legitimate interest in archiving correspondence for internal purposes (Article 6(1)(c) of the GDPR).

The content of your correspondence may be archived, and while we cannot specify exactly when it will be deleted, it will be no later than 5 years. You have the right to request a copy of your correspondence with us (if it has been archived), as well as to request its deletion, unless its archiving is justified by our legitimate interests.

Newsletter.These provisions apply only if the Administrator enables the option to subscribe to the Newsletter on the Website.

If you would like to subscribe to our newsletter, you must provide us with your email address or contact number (depending on the information required in the subscription form). Providing this information is voluntary, but necessary to use the newsletter service.

The data you provide when subscribing to the newsletter is used to send you the newsletter, in which we inform you about the Administrator’s activities, current offers, promotions, and discounts. The legal basis for processing in this case is your voluntary consent given when you subscribe to the newsletter.

In this case, your data is processed for the purpose of sending the newsletter, and the legal basis for the processing is Article 6(1)(a) of the GDPR, i.e., your consent resulting from your desire to receive this service.

Your data will be processed for as long as the newsletter is active, unless you unsubscribe earlier, in which case your data will be permanently deleted from the database. In addition, you may at any time correct your data stored in the newsletter database, as well as request its deletion by unsubscribing from the newsletter. You also have the right to data portability, as provided for in Article 20 of the GDPR.

The newsletter database is properly secured by the Administrator.

The newsletter database is managed by a third-party provider. The emails we send contain links to hidden images (so-called tracking pixels). In addition to its primary function of counting email opens, it can also be used, optionally, to identify customers and conduct marketing activities.

§ 4 CATEGORIES OF PERSONAL DATA

The personal data controller may process the following categories of personal data:
personal data provided when using the contact form, as well as data sent via email; or data provided when submitting complaints, claims, or requests, in particular: first and last name; email address; contact phone number; address [street, house number, apartment number, ZIP code, city, country];
other data, in particular data obtained based on the User’s online activity, including data obtained through the Website or other channels of communication with the User, using cookies and similar technologies, in particular: user log data, information about the User’s device used to browse the Website.

§ 5 RECIPIENTS OF PERSONAL DATA

Your personal data may be processed by our partners and subcontractors—that is, entities whose services we use to process data and provide services to you. To the best of our knowledge, all entities to which we entrust the processing of personal data guarantee the implementation of appropriate measures to protect and secure personal data as required by law.

Users’ personal data may also be disclosed to:
to government agencies or other entities authorized by law, for the purpose of fulfilling our legal obligations;
the Administrator’s partners, in particular those partners who provide technical assistance to ensure the smooth operation of the Website (e.g., assist us in sending emails, and, in the case of advertising activities, also in marketing campaigns), hosting or ICT service providers, companies that maintain the software and support the Administrator in marketing campaigns, as well as providers of legal, consulting, and accounting services;
In addition, we may share fully anonymized data (data that cannot be used to identify you) with entities with which we collaborate.

As part of its marketing (advertising) activities, the Administrator uses the services of third parties that employ cookies, pixels, or features similar to cookies on the Website. A list of these entities is provided in detail in the Cookie Policy.

§ 6 ARCHIVING OF PERSONAL DATA

The Administrator will retain Users’ personal data for as long as necessary for the purposes specified in this Privacy Policy and/or to fulfill the Administrator’s legal obligations. After this period, the Administrator will securely delete your personal data.

We retain the data for the periods specified below:

Data for marketing purposes.	If data is processed based on consent, the data will be retained until consent is withdrawn. If data is processed based on a legitimate interest, the data will be retained until an objection is raised.
Data submitted via the contact form or email.	For a period not exceeding 10 years, in order to uphold the principle of accountability.
Personal information associated with cookies and similar features.	Until these files are deleted via the website’s, browser’s, or device’s settings (note that deleting these files does not always mean that the Personal Data obtained through them has been deleted—in such cases, the personal data will be deleted once an objection is filed).
Data provided during the complaint process and other procedures related to the User’s claims.	8 years.
Other categories of data (excluding data from cookies; for more information, see our Cookie Policy).	5 years.

In any case, personal data will also be retained if the Controller is required by law to process it; we will retain personal data for a longer period in the event that the User has any claims against the Controller, for the purpose of the Controller asserting claims, or for the purpose of asserting or defending against claims by third parties, for the period of the statute of limitations specified by law, in particular the Civil Code.

Depending on the scope of the personal data and the purposes for which it is processed, it may be retained for varying periods of time. In each case, the longer retention period for personal data applies.

§ 7 RIGHTS, ACCESS TO AND UPDATE OF PERSONAL DATA, COMPLAINTS

Pursuant to Article 15 of the GDPR, you have the right to request information from the Data Controller as to whether your personal data is being processed.

If the Administrator processes your personal data, you have the right to:

access to personal data;
to obtain information about the purposes of processing, the categories of personal data being processed, the recipients or categories of recipients of such data, the planned retention period for your data or the criteria used to determine that period, your rights under the GDPR, and your right to lodge a complaint with a supervisory authority, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
to obtain a copy of your personal data.

In addition, you may request that your personal data be corrected (Article 16 of the GDPR), that your personal data be erased (Article 17 of the GDPR), object to the processing of your personal data (Article 21 of the GDPR), and, where technically feasible, request that your personal data be transferred to another organization (Article 20 of the GDPR).

In connection with the right to be forgotten, the Controller will update or delete your data, unless it has a legal obligation to retain it for business purposes or to comply with the law. In certain cases, you have the right to request the restriction of the processing of your personal data (Article 18 of the GDPR). You may also contact the Data Controller if you have any concerns regarding how your personal data is collected, stored, or used.

The Administrator strives to process all requests regarding the aforementioned operations on your personal data without delay, but no later than 30 days from the date of receipt of the request. Due to the complex nature of the request, the Controller reserves the right to process your requests within a period exceeding 30 days, in which case the User will be notified in advance.

The controller strives to resolve complaints definitively, but if you remain dissatisfied with the response you receive, you may file a complaint with the supervisory authority responsible for personal data protection—the local data protection authority. In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office. The President of the Personal Data Protection Office is located at ul. Stawki 2, 00-193 Warsaw.

§ 8 AUTOMATED PROCESSING OF PERSONAL DATA,
COOKIE POLICY

Our Website, like almost all other websites, uses cookies. This Cookie Policy applies to everyone who browses the Website.https://braniborska10.pl/polityka-cookies/

The Cookie Policy is a document that forms an integral part of this Privacy Policy. The text of the Cookie Policy can be found here.

The Website also uses technologies similar to cookies. Therefore, the specific provisions of the Cookie Policy should also apply to these technologies as appropriate.

Certain cookies process your personal data. The processing of personal data derived from cookies or similar technologies on our Website is carried out to ensure the Website functions properly, to tailor the Website to your preferences, or for analytical purposes. This processing is based on our legitimate interest. The legal basis for processing personal data for advertising purposes will be your additional consent, expressed by selecting and checking the checkbox during the cookie consent process.

When a User visits the Website, cookies are used to identify the User’s browser and/or device—cookies collect various types of information that, as a general rule, do not constitute personal data. However, depending on their content and how they are used, certain information may be linked to a specific individual and, consequently, will constitute personal data under the GDPR in such a situation.

With regard to information collected through cookies that may be linked to a specific individual, the provisions of the Website’s Privacy Policy relating to personal data apply, in particular those concerning the rights of the data subject.

The Website uses profiling. Thanks to the cookies used on the Website, the Administrator can learn about the User’s preferences—for example, by analyzing how often the User visits the Website or what content the User views. Analyzing online behavior helps us better understand Users’ habits and expectations and allows us to tailor the Website to the needs and interests of specific Users. Thanks to this technology, we can present Users with ads tailored to their needs and interests.

§ 9 CHANGES TO THE PRIVACY POLICY

This Privacy Policy 1.0 is effective as of July 16, 2024.

The administrator declares that he or she has the right to amend this document for valid reasons, including:
changes to applicable laws, in particular those relating to the GDPR, telecommunications law, electronic services, and consumer rights, if such changes affect the rights and obligations of the Controller or the rights and obligations of the User;
the development of electronic features or services resulting from advances in Internet technology, including the implementation of new IT, technological, or technical solutions on the Website that affect how the Website’s Users’ data is processed.

The Administrator undertakes to notify Users of any changes to this document with sufficient advance notice to allow them to review the content of the amended document, e.g., by posting the consolidated text of the Privacy Policy on the Website’s home page.