Privacy Policy

PRIVACY AND COOKIES POLICY ON THE WEBSITE http://aniakuczynska.live

§ 1. General provisions

1. The privacy and cookies policy on the website http://aniakuczynska.live (hereinafter: "Policy") has been created and adopted by the Owner.

2. Terms used in the Policy mean:

1) Service: the website http://aniakuczynska.live;

2) User: an entity using the Service;

3) Owner: Paradisenow Anna Kuczyńska, ROZBRAT 28/30, 00-429 WARSZAWA, NIP: 5261095114, REGON: 015590990.

4) Cookies: text files sent by the Service and stored on the User's end device, which the User uses when using the Service.

3. The purpose of the Policy is, in particular:

1) to provide Users with information regarding the use of Cookies in the Service, required by law;

2) to ensure Users' privacy protection in a manner consistent with the standards and requirements set out in applicable legal provisions.

4. The Owner limits the collection and use of information about Users to the necessary minimum.

5. To gain full access to the content and services offered by the Owner through the Service, it is advisable to accept Cookies. Acceptance can be made through the settings of the software installed on the User's device or the service configuration.

6. The following legal provisions apply, among others:

1) the Act of July 12, 2024, on electronic communications law (Journal of Laws 2024.1221);

2) the Act of July 18, 2002, on the provision of services by electronic means (Journal of Laws 2024.1513, as amended);

3) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal L 119 of 4.5.2016) (hereinafter: "Regulation");

4) the Act of May 10, 2018, on personal data protection (Journal of Laws 2019.1781, as amended).

§ 2. Privacy and personal data protection

1. The Owner is the personal data administrator. User data is processed by the Owner in accordance with legal provisions. Personal data obtained by the Owner from Users is processed based on the User's consent or other legal grounds entitling to data processing according to regulations.

2. The Owner takes special care to protect the interests of data subjects, and in particular ensures that such data is:

1) processed lawfully, fairly, and transparently for Users and other data subjects;

2) collected for specific, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;

3) adequate, relevant, and limited to what is necessary for the purposes for which they are processed;

4) accurate and, where necessary, kept up to date;

5) stored in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;

6) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures,

3. The Owner applies appropriate technical and organizational measures, ensuring the security of personal data processing and the protection of processed personal data appropriate to the nature, scope, context, and purposes of processing and the risk of infringement of the rights or freedoms of natural persons.

4. The Owner strives to systematically modernize the IT, technical, and organizational means of data protection used, in particular, the Owner ensures updates of IT protection measures allowing for protection against unauthorized access, loss, alteration, or destruction, and other threats arising from the operation of the IT system and telecommunication networks.

5. To every User who has provided their data to the Owner in any way, the Owner ensures access to data and the exercise of other rights for data subjects, in accordance with applicable legal provisions, including the right to:

1) withdraw consent for personal data processing;

2) information regarding their personal data;

3) access personal data;

4) rectify incorrect User personal data, including the right to request completion of incomplete personal data;

5) erase personal data ("right to be forgotten");

6) restrict processing;

7) data portability;

8) object to processing;

9) lodge a complaint with a supervisory authority and use other legal remedies to protect their rights.

6. A person having access to personal data processes them only based on the Owner's authorization or a personal data processing entrustment agreement and only on the Owner's instruction.

7. In connection with the operation of the Service, the Owner uses the services of other entities, including for the purpose of performing services for the User. User's personal data may be transferred to:

1) a hosting company;

2) a software provider for the Service;

3) an internet service provider;

4) a marketing or advertising service provider;

5) courier or postal service companies;

6) an electronic payment platform provider;

7) an accounting or invoicing solution provider, including software providers, entities supporting the operation of the National e-Invoice System;

8) entities providing accounting or legal services,

8. The Owner indicates that within the Service, personal data may be processed for the following purposes:

1) contacting Users or responding to their inquiries (Article 6(1)(b) GDPR or Article 6(1)(f) GDPR) as a legitimate interest of the administrator, which is to ensure proper User service;

2) receiving, examining, and processing complaints (details in § 4);

3) pursuing claims or defending against claims (Article 6(1)(f) GDPR);

4) administrator's accounting, issuing invoices and documents, fulfilling statutory obligations, including within the scope of the National e-Invoice System (Article 6(1)(c) GDPR);

5) sending, receiving, and recording correspondence (Article 6(1)(b) GDPR or Article 6(1)(f) GDPR as a legitimate interest of the administrator, which is to ensure proper User service).

6) own marketing purposes (Article 6(1)(f) GDPR);

7) communications sent to Users (Article 6(1)(b) GDPR or Article 6(1)(f) GDPR as a legitimate interest of the administrator, which is to ensure proper User service).

9. Personal data will not be processed for a purpose other than that for which it was collected.

10. The use of the Service and the provision of User personal data is entirely voluntary. The provision of personal data may be a statutory obligation or a contractual condition, e.g., for accounting or tax reasons, the Owner has a legal obligation to process User data, which means that in this case, providing data is a statutory requirement.