privacy policy

Pursuant to Art. 13 section 1-2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Regulation on the protection GDPR data) (OJ EU L 119, p. 1) - hereinafter referred to as GDPR - I inform you that:
The administrator of your Personal Data is:
Ewa Kociuba Ceruleum, Osiedle Kolorowe 7/30, 31 – 938 Kraków

Legal basis for processing.
As the Personal Data Administrator, we will process your data based on the following legal bases and for the following purposes:
in order to implement the subject of the contract based on the consent granted - legal basis: Art. 6(1)(a) a GDPR
in order to provide the service and ensure the correct quality of services in connection with the business activity conducted on the basis of the legitimate interest of the Administrator - legal basis resulting from Art. 6 section 1 letter f GDPR;
in order to perform the subject of the contract to which the data subject is a party - pursuant to Art. 6(1)(a) b GDPR
in order to fulfill the legal obligations of the Administrator, e.g. issuing and storing accounting documents, responding to complaints within the time and form provided for by generally applicable law, archiving documents for the period of time required by law - legal basis under Art. 6 section 1 letter c GDPR
in order to establish or pursue possible claims or defend against such claims, which is the implementation of our legitimate interest in connection with our business activities - basis: Art. 6 section 1 letter f GDPR;
in order to promote own services and direct marketing, including a fun page on social networking sites (such as Facebook, Instagram, etc.) as the legitimate interest of the Administrator - legal basis: Art. 6 section 1 letter f GDPR;

Rights of data subjects. Pursuant to the GDPR, you have the following rights:
the right to access your personal data and receive a copy of the personal data being processed;
the right to rectify your incorrect data;
the right to request the deletion of data (right to be forgotten) in the event of the circumstances provided for in Art. 17 GDPR;
the right to request restriction of data processing in the cases indicated in Art. 18 GDPR;
the right to object to data processing in the cases indicated in Art. 21 GDPR;
transferring the provided data, processed in an automated manner
Providing data is an obligation arising from Art. 6 section 1 letter b of the GDPR in connection with Art. 7 section 4 GDPR. Providing data is voluntary, but necessary to conclude a contract. If you believe that your personal data is being processed unlawfully, you may lodge a complaint with the supervisory authority (UODO, ul. Stawki 2, Warsaw).
Agreement.
Pursuant to Art. 7 section 3 GDPR, a data subject who has previously consented to the processing of his or her personal data has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Data storage period
Your personal data will be processed until the end of the service, and in the case of personal data processing based on consent - until it is withdrawn. After the period of termination of the provision of services, personal data will be stored/archived in accordance with the legal provisions regarding the storage of documentation, as well as until the limitation period for any civil or tax claims. Your personal data will not be processed to the extent and at the time of your objection.
Data recipients.
1. Your personal data will be made available to other recipients entrusted with data processing, i.e. processing entities (processors) on the basis of written contracts for entrusting the processing of personal data granted by the Administrator, e.g. accounting companies, law firms, IT companies, post offices, institutions financial institutions, state authorities and institutions, as well as law enforcement and justice authorities, which is necessary to fulfill the subject of the contract.
2. Your data will not be transferred to third countries and international organizations.
3. Your data will not be processed in an automated manner, including in the form of profiling.