§3 Personal Data and the Principles of their Processing
WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?
The Administrator of the User’s Personal Data is Miś Holding Sp. z o.o. based in Wroclaw 50-202, at ul. Księcia Witolda 49, lok. 15, entered in the Register of Entrepreneurs of the National Court Register under KRS: 0001120406, NIP: 8982310610, REGON: 529351684 , share capital in the amount of PLN 5000, in accordance with the information corresponding to the current extract from the Register of Entrepreneurs contained in the Central Information of the National Court Register, represented by Szymon Miś – President of the Board. The Administrator co-administers data with providers of social media platforms, e.g. Facebook, TikTok, etc., indicated herein with respect to Data of persons using social media and following the Administrator’s profile on a given social media platform and interacting with the Administrator. The principles of co-administration are indicated below with respect to each social media platform on which the Administrator has a profile.
IS THE PROVISION OF DATA VOLUNTARY? WHAT ARE THE CONSEQUENCES OF NOT PROVIDING THEM?
Provision of Data is voluntary, however, failure to provide certain information, as a rule marked as mandatory on the Administrator’s pages, will be associated with the impossibility of performing a given service and achieving a certain goal or taking certain actions. Provision by the User of Data that is not mandatory or excess data that the Administrator does not need to process occurs based on the User’s own decision, and then the processing takes place on the basis of the premise contained in Article 6(1)(a) of the RODO (Consent). The User grants Consent to process such data and to anonymize data that the Administrator does not require and does not want to process, but the User has nevertheless provided to the Administrator.
FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DOES THE CONTROLLER PROCESS YOUR PERSONAL DATA PROVIDED IN THE COURSE OF USING THE WEBSITE?
The User’s personal data on the Administrator’s Site may be processed for the following purposes and on the following legal grounds:
Lp. |
Purpose of data processing |
Legal basis for processing |
Processing time |
1. |
Performing a service or executing a concluded contract, sending an offer (e.g. advertising) at the request of the User |
Article 6(1)(b) of the DPA (necessary to enter into and/or perform a contract or to take action on a request) |
Data is processed for the duration of the contract/ time necessary to send the offer and the User’s response, and then the time until the expiration of the statute of limitations for claims
2 years or 6 years from the execution of the contract, depending on whether the User is an entrepreneur |
2. |
Issuing an invoice, bill and fulfilling other obligations under the tax law in case of making orders from the Online Store or other products and services |
Article 6(1)(c) of the RODO (legal obligation) |
Data is processed for 5 years from the end of the tax year in which the tax event occurred |
3. |
giving a discount or informing about promotions and interesting offers of the Administrator or entities recommended by the Administrator, including sending a Newsletter |
Article 6(1)(a) RODO (consent) |
Data is processed until consent is withdrawn, then for a period of 2 years for those who have withdrawn Consent or after a period of 6 months of no activity by the recipient |
4. |
storage of unpaid orders |
Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until expiration
14 days after ordering |
5. |
handling complaints or claims related to the contract |
Article 6(1)(b) of the DPA (necessary for the conclusion and/or performance of the contract) and under Article 6(1)(c) of the DPA (legal obligation) |
Data is processed for the duration of the procedure or claim
1 year from the expiry of the claim deadline or 5 years from the end of the fiscal year for Data stored under tax legislation
|
6. |
establishing, asserting or defending against claims |
Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until the basis for processing ceases
2 years or 6 years from the execution of the contract, depending on whether the User is an entrepreneur |
7. |
Telephone contact on matters related to the implementation of the service, contract |
Article 6(1)(b) of the RODO (necessary for the conclusion and/or performance of the contract) |
The data is processed for the duration of the contract/ time necessary to send the offer and the User’s response, and then the time until the expiration of the statute of limitations for claims
2 years or 6 years from the execution of the contract, depending on whether the User is an entrepreneur |
8. |
telephone contact for the purpose of providing offers and direct marketing |
Article 6(1)(a) RODO (consent) |
Data is processed until Consent is withdrawn |
9. |
Creation of records related to RODO and other regulations |
Article 6(1)(c) RODO (legal obligation) and Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until the basis for processing ceases or is no longer useful to the Administrator |
10. |
Archiving for the purpose of securing information that can be used to prove facts |
Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data are processed until you object or are no longer useful to the Administrator
2 years or 6 years from the execution of the contract, depending on whether you are a business owner
|
11. |
Analytical purpose, consisting, among other things, of analyzing Data collected automatically when using the website, including cookies such as Google Analytics cookies and Meta Pixel cookies. |
Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until the user deletes cookies from the browser |
12. |
use of cookies on the Site and its subpages |
Article 6(1)(a) RODO (consent) |
Data is processed until the user deletes cookies from the browser |
13. |
Management of the Website and the Administrator’s pages on other platforms |
Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until an objection is lodged or the data is no longer useful to the Administrator |
14. |
satisfaction survey on services offered |
Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until an objection is lodged or the data is no longer useful to the Administrator |
15. |
posting by the User of an opinion about services provided by the Administrator |
Article 6(1)(a) RODO (consent) |
Data is processed until consent is withdrawn or is no longer useful to the Administrator, unless withdrawal of Consent occurs earlier |
16. |
Administrator’s internal administrative purposes related to managing contact with the User |
6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until the basis for processing ceases
2 years or 6 years from the execution of the contract, depending on whether the User is an entrepreneur
|
17. |
matching the content displayed on the Administrator’s websites to individual needs and continuous improvement of the quality of services offered |
Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until an objection is made or the Data is no longer useful to the Administrator |
18. |
Direct marketing to you of products or Services or recommended third parties |
Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until an objection is made or the Data is no longer useful to the Administrator |
19. |
Operating a Facebook fanpage and interacting with Users |
Article 6(1)(f) RODO (legitimate interest of the administrator) and Article 6(1)(a) RODO (consent) |
Data is processed until the Consent is withdrawn or an objection is made or the Data is no longer useful to the Administrator |
20. |
Operating a profile on the Instagram platform and interacting with Users |
Article 6(1)(f) RODO (legitimate interest of the administrator) and Article 6(1)(a) RODO (consent) |
Data is processed until the Consent is withdrawn or an objection is made or the Data is no longer useful to the Administrator |
21. |
Operating a profile on the LinkedIn platform and interacting with Users |
Article 6(1)(f) RODO (legitimate interest of the administrator) and Article 6(1)(a) RODO (consent) |
Data is processed until the Consent is withdrawn or an objection is made or the Data is no longer useful to the Administrator |
22. |
operating a profile on the Twitter platform and interacting with Users |
Article 6(1)(f) RODO (legitimate interest of the administrator) and Article 6(1)(a) RODO (consent) |
Data is processed until the Consent is withdrawn or an objection is made or the Data is no longer useful to the Administrator |
23. |
operating a profile on the YouTube platform and interacting with Users |
Article 6(1)(f) RODO (legitimate interest of the administrator) and Article 6(1)(a) RODO (consent) |
Data is processed until the Consent is withdrawn or an objection is made or the Data is no longer useful to the Administrator |
24. |
operating a profile on the TikTok platform and interacting with Users |
Article 6(1)(f) RODO (legitimate interest of the administrator) and Article 6(1)(a) RODO (consent) |
Data is processed until the Consent is withdrawn or an objection is made or the Data is no longer useful to the Administrator |
25. |
Targeting advertising on social media and websites, the type of ads created with Facebook’s Ad Manager, and remarketing targeting |
Article 6(1)(a) of the RODO (consent) and based on Article 6(1)(f) of the RODO (legitimate interest of the Administrator) consisting of the promotion and advertising of the Administrator’s services through remarketing directed to those subscribed to the mailing or visiting the website in question) |
Data is processed until the Consent is withdrawn or an objection is made or the Data is no longer useful to the Administrator |
26. |
Contact with the Administrator via chatbot |
Article 6(1)(a) of the RODO (consent) or Article 6(1)(b) of the RODO (consent) data is processed to answer a question from a user of the website |
Data is processed until the Consent is withdrawn or an objection is made or the Data is no longer useful to the Administrator |
27. |
posting of comments by the User |
Article 6(1)(a) RODO (consent) |
Data is processed until Consent is withdrawn or is no longer useful to the Administrator |
28. |
posting an opinion by the user |
Article 6(1)(a) RODO (consent) |
Data is processed until Consent is withdrawn or is no longer useful to the Administrator |
29. |
recruitment
|
for the purpose of and for the time necessary to take the steps necessary prior to the conclusion of the contract- Article 6(1)(b) RODO, and up to 6-months after the end of recruitment, and in the case of data provided voluntarily by the candidate or redundant data – based on Article 6(1)(a) RODO (consent), and Article 9(2)(a) RODO (consent) – in the case of sensitive data provided by the candidate, for future recruitment – based on the consent given under Art. 6(1)(a) RODO, for the purpose and for the period of time necessary for the realization of the legitimate interests pursued by the Administrator, such as the assertion of claims and defense against claims, marketing of the Administrator’s own products and services (to the extent that the processing is necessary for this purpose) – based on Article 6(1)(f) RODO.
|
Until the conclusion of the contract or withdrawal of Consent. No longer than 6 months from the end of recruitment.
For a maximum period of 1 year (this period is calculated from the end of the year in which the Data was collected) Until you file an objection.
|
30. |
creation of own User Databases |
Article 6(1)(f) RODO (legitimate interest of the administrator) |
Data is processed until an objection is made or the Data is no longer useful to the Administrator |
Provision by the User of Data that is not mandatory or excess Data that the Administrator does not need to process is based on the User’s own decision, in which case the processing takes place on the basis of the premise contained in Article 6(1)(a) of the RODO (Consent). The User grants Consent to process such Data and to anonymize Data that the Administrator does not require and does not want to process, but the User has nevertheless provided to the Administrator.
RECRUITMENT
The Administrator provides a Recruitment Form on its Website for the User to submit his or her Data in the form of a resume in order to participate in the recruitment process. Submitting one’s CV means taking part in the recruitment process and signifies Consent to the processing of Special Category Data and Excess Data contained in the submitted recruitment documents also for the purposes of future recruitment processes conducted by the Administrator, if the person has given his/her Consent. Your Personal Data will be processed for the following purposes, based on the indicated legal grounds:
- for the purpose of recruitment in connection with employment based on an employment contract – on the basis of the entitlement arising from Article 22 (1) § 1 of the Act of
26 June 1974 Labour Code (Journal of Laws of 2023, item 1465) – on the basis of Article 6 (1) (c) RODO and in connection with the processing of other data than that indicated in Article 22 (1) § 1 of the Labour Code, i.e. Data voluntarily provided by the User, included in the resume and application documents on the basis of the User’s Consent – Article 6 (1) (a) RODO and Article 9 (2) (a) RODO – in the case of Sensitive Data, for the time necessary to take the steps necessary before concluding the contract and up to 6 months after the end of the recruitment,
- for the purpose of recruitment in connection with employment under a civil law contract – on the basis of Article 6(1)(b) RODO, i.e. the processing is necessary for the performance of a contract to which the User is a party or to take action at the request of the User, prior to the conclusion of the contract, for the time necessary to take the necessary steps before the conclusion of the contract and up to 6 months after the end of the recruitment,
- for future recruitment purposes – on the basis of the User’s Consent under Article 6(1)(a) of the RODO, for a maximum period of 3 years (this period is calculated from the end of the year in which the data was obtained),
- for the purpose and for the period necessary for the realization of the legitimate interests pursued by the Administrator, e.g. the assertion and defense against claims, marketing of the Administrator’s own products and services (to the extent that the processing is necessary for this purpose) – on the basis of Article 6(1)(f) RODO.
After the expiration of the processing periods indicated above, the Personal Data is either permanently deleted or anonymized. At any time, the User may withdraw the Consent given, with the withdrawal not affecting the compatibility with the processing performed on the basis of the Consent given before its withdrawal. The User also has the right to object to the processing of Data on the basis of the Administrator’s legitimate interests. The Administrator will stop processing the User’s Data for these purposes unless the User can demonstrate that, with respect to this Data, there are valid legitimate grounds for the Administrator that override the User’s interests, rights and freedoms, or this Data will be necessary for the Administrator to possibly establish, assert or defend claims. Personal Data processed by the Administrator under the contract between it and the User may also be entrusted to other entities. The Administrator may share Personal Data with the following recipients: entities with whom or for whom it performs services to the extent that it is necessary and with whom it cooperates in the execution of orders, law firm, accounting offices, entities providing human resources services, companies providing postal and courier services, other services providing IT system maintenance and hosting, email service provider, cloud services. It may also be required to share User Data with private and public entities under the law. Data related to the recruitment process will not be transferred to third countries. The User has the right to access the content of his Data, to receive a copy of it, and the right to rectify, delete, limit processing, the right to data portability, the right to object, the right to withdraw Consent at any time, which, however, will then not affect the lawfulness of the processing carried out on the basis of Consent before its withdrawal. You also have the right to lodge a complaint with the President of the Office for Personal Data Protection if you consider that the processing of your Personal Data violates the provisions of the RODO. Provision of Personal Data is voluntary, except that the provision of certain Data may be necessary to fulfill the purposes of processing. The consequence of failing to provide such Data will be the lack of realization of the aforementioned activities and the inability to participate in the recruitment process or future recruitments. User Data is not profiled as part of the Administrator’s recruitment activities.
HOW IS THE DATA COLLECTED?
Only the Data that the User himself/herself provides is collected and processed (with the exception, in certain situations, of Data collected automatically through cookies and login data, as discussed below). During a visit to the site, Data concerning the visit itself, such as the User’s IP address, domain name, browser type, operating system type, etc., are automatically collected. (login data). Data collected automatically may be used to analyze the behavior of Users on the Website, to collect demographic data about Users or to personalize the content of the Website in order to improve it. However, this data is processed only for the purposes of administering the Site, providing efficient hosting services, or targeting marketing content, and is not associated with the Data of individual Users. You can read more about cookies later in this Policy. Data may also be collected for the purpose of filling out forms on the Site, which is mentioned later in the Privacy Policy.
Information society services
The Administrator does not collect Children’s Data. The User should be at least 16 years old in order to give his/her own Consent to the processing of Personal Data for the purpose of providing information society services, among others, for marketing purposes, or obtain the Consent of a legal guardian (e.g. a parent) for this purpose. If the User is under 16 years of age, he/she should not use the Site and misweb.pl and store.misweb.pl . The Administrator shall be entitled to make reasonable efforts to verify whether the User meets the age requirement referred to above, or whether the person who has parental authority or custody over the User who is under 16 years of age has given or approved the Consent.
WHAT ARE THE USER RIGHTS?
The user is entitled at any time to the rights contained in Articles 15- 21 of the RODO, i.e.:
- The right to access the content of his Data,
- The right to portability of Data,
- The right to correct the Data,
- The right to rectify the Data,
- The right to delete Data if there is no basis for processing,
- The right to limit the processing if it has been done incorrectly or without legal basis,
- The right to object to the processing of Data on the basis of a legitimate interest of the controller,
- The right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection (under the terms of the Personal Data Protection Act), if he/she considers that the processing of his/her data is incompatible with the current legal provisions on data protection.
- The right to be forgotten, if further processing is not provided for by currently applicable laws.
The Administrator notes that these rights are not absolute and do not apply to all processing activities of the User’s Personal Data. This applies, for example, to the right to obtain a copy of the data. This entitlement must not adversely affect the rights and freedoms of others, such as, for example, copyright, professional secrecy. We refer you to the contents of the RODO to learn about the limitations on the User’s rights. However, the User always has the right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw, tel. 22 531-03-00, e-mail: kancelaria@uodo.gov.pl, if he/she considers that the processing of personal data violates the provisions of RODO or other applicable regulations, concerning the processing of Personal Data. The Administrator notes that these rights are not absolute and do not apply to all processing activities of the User’s Personal Data. This applies, for example, to the right to obtain a copy of the data. This entitlement must not adversely affect the rights and freedoms of others, such as, for example, copyright, professional secrecy. We refer you to the contents of the RODO to learn about the limitations on the User’s rights. However, the User always has the right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw, tel. 22 531-03-00, e-mail: kancelaria@uodo.gov.pl, if he/she considers that the processing of personal data violates the provisions of RODO or other applicable regulations, concerning the processing of Personal Data. In order to exercise his/her rights, the User may contact the Administrator via e-mail address: rodo@misweb.pl or by letter to the Administrator’s place of business address, if provided in this Privacy Policy, indicating the scope of his/her requests. A response will be provided no later than 30 days from the date of receipt of the request and its justification, unless an extension of this period is justified in accordance with the RODO.
CAN A USER REVOKE HIS/HER CONSENT?
If the User has expressed Consent for a certain action, such Consent may be withdrawn at any time, which will result in removal of the email address from the Administrator’s mailing list and cessation of the indicated actions (in the case of subscription based on Consent). The User may withdraw the Consent expressed by clicking on the “unsubscribe” link in the content of the Newsletter, after clicking on which the User will be taken to a page where the User will be asked to confirm the withdrawal of the Consent. The User also has the option to revoke Consent by directing a statement to the Administrator’s email address or to the Administrator’s place of business address, if provided in this Privacy Policy. Withdrawal of Consent shall not affect the processing that was performed on the basis of Consent prior to its withdrawal. In some cases, the Data may not be completely deleted and will be retained to defend against possible claims for a period of time in accordance with the provisions of the Civil Code Act or, for example, to comply with legal obligations imposed on the Administrator. Each time, the Administrator will refer to the User’s request, adequately justifying further actions arising from legal obligations.
DOES THE CONTROLLER TRANSFER USER DATA TO THIRD COUNTRIES?
User data may be transferred outside the European Union – to third countries. Due to the fact that the Administrator uses external providers of various services, e.g. Meta Platforms Ireland Limited (Facebook and subsidiaries) hereinafter as Meta or Facebook, Google, Microsoft, etc., the User Data may be transferred to the United States of America (USA). User Data may be transferred to the United States of America (USA) in connection with its storage on American servers (in whole or in part). Google and Facebook, based on the European Commission’s implementing decision of July 10, 2023, issued under Regulation (EU) 2016/679 of the European Parliament and of the Council, stating the adequate level of protection of personal data under the EU-U.S. data protection framework, have undergone a certification system and have been certified to ensure the protection of Personal Data at the European Union level. Users’ Personal Data will be transferred only to recipients who guarantee the highest protection and security of the Data, including but not limited to:
- Cooperation with processors of Personal Data in countries for which a relevant decision of the European Commission has been issued,
- Use of standard contractual clauses issued by the European Commission,
- application of binding corporate rules approved by the relevant supervisory authority,
or to those to whom the User has given Consent for the transfer of Personal Data. Detailed information is available in the content of the privacy policy of each provider of these services, available on their websites. For example: Google Ireland Limited : https://policies.google.com/privacy?hl=pl Meta Platforms Ireland Limited .: https://www.facebook.com/privacy/explanation UAB MailerLite: https://www.mailerlite.com/legal/privacy-policy Currently, the services offered by Google Ireland Limited and Meta Platforms Ireland Limited are mainly provided by entities located in the European Union. You should, however, each time read the privacy policies of these providers in order to receive up-to-date information regarding the protection of Personal Data. MailerLite may store some Data in the United States or use service providers in the United States; however, Data is primarily processed in the European Union.
HOW LONG DOES THE ADMINISTRATOR KEEP USER DATA?
The User’s data will be kept by the Administrator for the duration of the performance of the individual services/achievement of the purposes indicated in the table above, and:
- for the period of performance of the service and cooperation, as well as for the period of limitation of claims under the law – with respect to Data provided by contractors and customers or Users,
- for the period of discussions and negotiations preceding the conclusion of the contract or the performance of the service – with regard to the Data provided in the request for proposal,
- for the period required by law, including tax law – with respect to Personal Data involving compliance with obligations under applicable laws,
- until such time as an effective objection is lodged pursuant to Article 21 RODO – with respect to Personal Data processed on the basis of the controller’s legitimate interests, including for direct marketing purposes,
- until the withdrawal of Consent or the achievement of the purpose of processing, business purpose – with respect to Personal Data processed pursuant to Consent. After withdrawal of Consent, the Data may still be processed for the purpose of defending against possible claims in accordance with the statute of limitations for such claims or the period (shorter) indicated to the User,
- Until obsolete or no longer useful – with respect to Personal Data processed primarily for analytical, statistical, cookie usage and administration of the Administrator’s Sites,
- for a period of up to 2 years in the case of persons who have unsubscribed from the Newsletter for the purpose of defense against possible claims (e.g. information about the date of subscription and the date of unsubscribing from the Newsletter, the number of Newsletters received, actions taken and activity related to the messages received), or after a period of 6 months of lack of any activity by the subscriber in question, such as failure to create any message from the Administrator .
Data retention periods indicated in years are calculated at the end of each year in which Data processing began. This is to streamline the processing and management of Data. Detailed processing periods for Personal Data, pertaining to individual processing activities, are found in the Administrator’s register of processing activities.
LINKS TO OTHER SITES
Links referring to other websites may appear on the Site. They will open in a new browser window or in the same window. The Administrator is not responsible for the content provided by these sites. The user is obliged to read the privacy policy or terms and conditions of these sites.
SOCIAL MEDIA ACTIVITY – FACEBOOK
The Administrator administers User Data on the fanpage under the name miswebpl on Facebook (hereinafter referred to as Fanpage). The User’s Personal Data provided on Fanpage will be processed for the purpose of administering and managing Fanpage, communicating with the User, interacting with the User, directing marketing content to the User and creating Fanpage community. The basis for their processing is the User’s Consent and the Administrator’s legitimate interest in interacting with Users and Fanpage Observers. The User voluntarily decides to like/observe Fanpage. The rules of Fanpage are set by the Administrator, however, the rules of being on the social network Facebook are based on Facebook’s regulations. At any time, the User may stop observing the Fanpage. However, the Administrator will not then display to the User any content originating from the Administrator and related to the Fanpage. The Administrator sees the User’s Personal Data, such as, for example, first name, last name or general information, which the User posts on his/her profiles as public. Processing of other Personal Data is carried out by the Facebook social network and under the terms of its regulations. The User’s Personal Data will be processed for the period of running/existence of the Fanpage based on the Consent expressed by liking/clicking “Observe” the Fanpage or interacting, e.g. leaving a comment, sending a message, and for the purpose of realizing the Administrator’s legitimate interests, i.e. marketing its own products or services or defending against claims. The User’s personal data may be shared with other recipients of the Data, such as Facebook, cooperating advertising agencies or other subcontractors operating the Administrator’s Fanpage, IT service, virtual assistant, if there is contact outside Facebook. Other rights of the User are described in this Privacy Policy. User data may be transferred to third countries in accordance with Facebook regulations. The data may also be profiled, which helps to better personalize the advertising offer directed to the User. However, they will not be processed in an automated manner within the meaning of the RODO (having a negative impact on the User’s rights and freedoms). Facebook privacy policy: https://www.facebook.com/privacy/explanation.
SOCIAL MEDIA ACTIVITY – INSTAGRAM
The Administrator administers the User Data on the Profile page under the name misweb.co.uk available at URL: https://www.instagram.com/misweb.pl/ on Instagram (hereinafter referred to as Profile). The User’s Personal Data provided on the Profile will be processed for the purpose of administering and managing the Profile, communicating with the User, interacting with the User, directing marketing content to the User and creating the Profile community. The basis for their processing is the User’s Consent and the Administrator’s legitimate interest in interacting with Users and Profile Observers. The User voluntarily decides to like/observe the Profile. The rules of the Profile are set by the Administrator, however, the rules of staying on the Instagram social network are derived from the Instagram rules. At any time, the User may stop observing the Profile. However, the Administrator will not then display to the User any content coming from the Administrator and related to the Profile. The Administrator sees the User’s Personal Data, such as, for example, first name, last name or general information, which the User posts on his/her Profile as public. Processing of other Personal Data is carried out by the Instagram social network and under the terms of its rules and regulations. The User’s Personal Data will be processed for the period of running/existence of the Profile on the basis of the Consent expressed by liking/clicking “Observe” the Profile or interacting, e.g. leaving a comment, sending a message, and for the purpose of realizing the Administrator’s legitimate interests, i.e. marketing its own products or services or defending against claims. The User’s personal data may be shared with other data recipients, such as cooperating advertising agencies or other subcontractors servicing the Administrator’s Profile, IT service, virtual assistant, if contact is made outside of Instagram. Other rights of the User are described in this Privacy Policy. User data may be transferred to third countries in accordance with Instagram’s regulations. The data may also be profiled, which helps to better personalize the advertising offer directed to the User. However, they will not be processed in an automated manner within the meaning of the RODO (having a negative impact on the User’s rights and freedoms). Instagram portal privacy policy:
https://help.instagram.com/519522125107875
SOCIAL MEDIA ACTIVITY – TIC TOC
The Administrator administers the User Data on the Profile page under the name misweb.pl available at URL: https://www.tiktok.com/@misweb.pl on the TikTok website (hereinafter referred to as Profile). The User’s Personal Data provided on the Profile on the Tik Tok website will be processed for the purpose of administering and managing the account, communicating with the User, interacting with the User, targeting the User with marketing content and creating the Profile community. The basis for their processing is the User’s Consent and the Administrator’s legitimate interest in interacting with Users and Profile Observers on Tik Tok. The User voluntarily chooses to like content/observe the Profile. The rules of the Profile on the Tik Tok site are set by the Administrator, however, the rules of being on the Tik Tok social network are derived from the rules of Tik Tok. At any time, the User may stop observing the Profile on the Tik Tok site belonging to the Administrator. However, the Administrator will not then display to the User any content originating from the Administrator and related to the Profile. The Administrator sees the User’s Personal Data, such as, for example, first name, last name or general information, which the User posts on his/her Profile as public. Processing of other Personal Data is carried out by the Tik Tok social network and under the terms and conditions of its regulations. Tik Tok and the Administrator have the status of Joint Administrators with respect to activities related to the realization of common business purposes in the processing of Personal Data, among others, in the use of the Tik Tok portal plug-in on the Site, the processing of Profile Visitors’ Data. The User’s Personal Data will be processed for the period of maintenance/existence of the Tik Tok account on the basis of the Consent expressed by liking the content/clicking “Observe” or interacting, e.g. leaving a comment, sending a message, and for the purpose of realizing the legitimate interests of the Administrator, i.e. marketing of its own products or services or defense against claims. The User’s personal data may be shared with other data recipients, such as the Tik Tok portal, cooperating advertising agencies or other subcontractors operating the Administrator’s Tik Tok account, IT service, virtual assistants, if contact is made outside the Tik Tok portal. Other rights of the User are described in this Privacy Policy. User data may be transferred to third countries in accordance with Tik Tok’s regulations, located outside the European Economic Area. The Tik Tok portal uses compliance mechanisms in the form of standard contractual clauses adopted by the European Commission. As part of the use of the Tik Tok portal, data will not be profiled and will not be processed in an automated manner within the meaning of the RODO (having a negative impact on the User’s rights and freedoms). The Administrator recommends reading the privacy policy of the Tik Tok portal: https://www.tiktok.com/legal/privacy-policy?lang=pl.
SOCIAL MEDIA ACTIVITY – LINKEDIN
The Administrator administers the User Data on the profile page under the name of Web Teddy accessible at URL: https://www.linkedin.com/company/misweb/ on LinkedIn (hereinafter referred to as Profile). The User’s Personal Data provided on the Profile will be processed for the purposes of administering and managing the Profile, communicating with the User, interacting with the User, targeting the User with marketing content and creating a Profile community. The basis for their processing is the User’s Consent and the Administrator’s legitimate interest in interacting with Users and Profile Observers. The User voluntarily decides to like/observe the Profile. The rules of the Profile are set by the Administrator; however, the rules of being on the LinkedIn social network are derived from LinkedIn’s rules and regulations. At any time, the User may stop observing the Profile. However, the Administrator will not then display to the User any content originating from the Administrator and related to the Profile. The Administrator sees the User’s Personal Data, such as, for example, first name, last name or general information, which the User posts on his/her Profile as public. The processing of other Personal Data is carried out by the LinkedIn social network and under the terms of its regulations. The User’s Personal Data will be processed for the period of running/existence of the Profile on the basis of Consent expressed by liking/clicking “Observe” the Profile or interacting, e.g. leaving a comment, sending a message, and for the purpose of realizing the Administrator’s legitimate interests, i.e. marketing its own products or services or defending against claims. The User’s Personal Data may be shared with other recipients of the Data, such as the LinkedIn portal cooperating advertising agencies or other subcontractors servicing the Administrator’s Profile, IT service, virtual assistant, if contact is made outside the LinkedIn portal. Other rights of the User are described in this Privacy Policy. User data may be transferred to third countries in accordance with LinkedIn’s regulations. The data may also be profiled, which helps to better personalize the advertising offer directed to the User. However, they will not be processed in an automated manner within the meaning of the RODO (having a negative impact on the User’s rights and freedoms). LinkedIn Privacy Policy:
https://pl.linkedin.com/legal/privacy-policy
SOCIAL MEDIA ACTIVITY – YOU TUBE
The Administrator administers the User Data on the profile page under the name Teddy Web available at URL: https://www.youtube.com/@miswebpl on You Tube (hereinafter referred to as Profile). The User’s Personal Data provided on the Profile will be processed for the purpose of administering and managing the Profile, communicating with the User, interacting with the User, targeting the User with marketing content and creating the Profile community. The basis for their processing is the User’s Consent and the Administrator’s legitimate interest in interacting with Users and Profile Observers. The User voluntarily decides to like/observe the Profile. The rules of the Profile are set by the Administrator, however, the rules of staying on the You Tube portal are derived from the rules of You Tube (Google). At any time, the User may stop observing the Profile. However, the Administrator will not then display to the User any content originating from the Administrator and related to the Profile. The Administrator sees the User’s Personal Data, such as, for example, first name, last name or general information, which the User posts on his/her Profile as public. Processing of other Personal Data is carried out by You Tube and under the terms of its regulations. The User’s Personal Data will be processed for the duration of the running/existence of the Profile based on the Consent expressed by liking/clicking “Observe” the Profile or interacting, e.g., leaving a comment, sending a message, and for the purpose of realizing the Administrator’s legitimate interests, i.e., marketing its own products or services or defending against claims. The User’s Personal Data may be shared with other recipients of the Data, such as You Tube, cooperating advertising agencies or other subcontractors servicing the Administrator’s Profile, IT service, virtual assistant, if contact is made outside of You Tube. Other rights of the User are described in this Privacy Policy. User data may be transferred to third countries in accordance with You Tube (Google) regulations. The data may also be profiled, which helps to better personalize the advertising offer directed to the User. However, they will not be processed in an automated manner within the meaning of the RODO (having a negative impact on the User’s rights and freedoms). You Tube portal privacy policy:
https://www.youtube.com/intl/ALL_pl/howyoutubeworks/user-settings/privacy/
DATA SECURITY
The User’s personal information is stored and protected with due care, in accordance with the Administrator’s implemented internal procedures. The Administrator processes User information using appropriate technical and organizational measures that meet the requirements of generally applicable laws, in particular the provisions of the Personal Data Protection Act and the RODO. These measures are primarily aimed at securing the Users’ Personal Data from access by unauthorized persons. In particular, access to the Users’ Personal Data is allowed only to authorized persons who are obliged to keep such Data confidential, or to entities entrusted with the processing of Personal Data under a separate Data entrustment agreement. At the same time, the User should be diligent in securing his/her Personal Data transmitted over the Internet, in particular, not to disclose his/her login data to third parties, use anti-virus protection and keep the software up-to-date.
WHO MAY BE THE RECIPIENTS OF PERSONAL DATA?
The Administrator informs that it uses the services of external entities. Entities to which it entrusts the processing of Personal Data (such as, for example, courier companies, companies mediating electronic payments, companies offering accounting services, companies enabling the sending of newsletters) guarantee the application of appropriate measures for the protection and security of Personal Data required by law, in particular by the RODO. The Administrator informs the User that it entrusts the processing of Personal Data to, among others, the following entities:
- MailerLite Limited, an Irish registered company at Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593 – for the purpose of sending the Newsletter and using the mailing system
- cyber_Folks S.A. (KRS 0000685595, NIP 7792467259)- to store Personal Data on the server,
- HubSpot, Inc. an U.S. company at 25 First Street, 2nd Floor, Cambridge, Massachusetts, 02141 – to create landing pages and collect leads,
- BrainSHARE IT Ltd. (NIP: 513 023 18 12, KRS: 0000408077) – for the purpose of issuing accounting documents,
- National Payment Integrator S.A. (NIP: 7773061579, KRS: 0000412357) – to operate the payment system and electronic transactions,
- Miś Holding Sp. z o.o. (KRS: 0001120406, NIP: 8982310610) – to manage the company,
- Google LLC – for the use of Google services, including email,
- OVH Ltd. ( KRS: 0000220286, NIP: 899-25-20-556) – to operate the domain and mail server,
- Miś Holding Sp. z o.o. (KRS: 0001120406, NIP: 8982310610) – for IT support or management of the Site from the IT side,
- Other contractors or subcontractors engaged to provide technical, administrative, or legal assistance to the Administrator and its clients, e.g., accounting, human resources, IT, graphic design, copywriting, collection agencies, lawyers, etc.
Personal Data may also be shared with other recipients such as authorities, e.g. the tax office – in order to fulfill legal and tax obligations related to billing and accounting. Entities that process Personal Data, like the Administrator, ensure compliance with European standards for the protection of Personal Data, including standards set by legal acts and decisions of the European Commission and apply compliance mechanisms also when transferring Data outside the EEA in the form of, among others, standard contractual clauses adopted by the European Commission Decision 2021/915 of June 4, 2021. on standard contractual clauses between controllers and processors pursuant to Article 28(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council and Article 29(7) of Regulation (EU) 2018/1725 of the European Parliament and of the Council https://eur-lex.europa.eu/legal-content/PL/TXT/PDF/?uri=CELEX:32021D0915&from=PL .
HAS THE CONTROLLER APPOINTED A DATA PROTECTION OFFICER?
The Personal Data Administrator hereby informs you that it has not appointed a Personal Data Protection Officer (DPO) and performs the duties related to the processing of Personal Data independently. The User acknowledges that his/her Personal Data may be transferred to authorized state authorities in connection with their proceedings, at their request and upon fulfillment of the prerequisites confirming the necessity of obtaining such Data from the Administrator.
DOES THE CONTROLLER PROFILE USER DATA?
The User’s Personal Data will not be used for automated decision-making affecting the User’s rights and obligations or freedoms within the meaning of the RODO. As part of the Website and tracking technologies, User Data may be profiled, which helps to better personalize the company’s offer that the Administrator directs to the User (mainly through so-called behavioral advertising). However, this should not have any impact on the User’s legal situation, especially on the terms and conditions of the contracts he or she has concluded or intends to conclude. It can only help to better match the content and targeted advertising to the User’s interests. The information used is anonymous and is not associated with Personal Data provided by the User, e.g. during the purchase process. They are derived from statistical data e.g. gender, age, interests, approximate location, behavior on the Site. Each User has the right to object to profiling if it would adversely affect the User’s rights and obligations. Read more about behavioral advertising here: https://www.youronlinechoices.com/pl/o-reklamie-behawioralnej