General Information

This document defines the rules for the processing and protection of personal data provided by Users in connection with the use of the adenta.pl website (also referred to as the Service) and applies to all cases in which ADENTA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (ADENTA) is the Personal Data Administrator. The Privacy Policy was created to ensure full and transparent implementation of the information obligation resulting from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR). The document contains the rules for collecting and using data about Users that are in force on the Service. The Administrator takes all necessary actions to ensure that its subcontractors and other cooperating entities also guarantee the application of appropriate security measures in every case when they process personal data on behalf of the Administrator.

Personal Data Administrator

The Administrator of Personal Data of the Users of the adenta.pl Service is ADENTA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (ADENTA) with its registered office at ul. Kośnego 24/1a in Opole. The contact details of the Data Administrator are available at adenta.pl in the Contact tab.

Scope of processed data

Personal data is any information that identifies or allows the identification of the data subject. The processing of personal data is basically any operation on personal data, regardless of whether it is carried out in an automated or non-automated manner, e.g. collecting, storing, recording, organizing, modifying, viewing, using, sharing, restricting, deleting or destroying. Personal data is processed only in cases where the data subject has consented to it, or when the Service has another legal basis allowing the processing of personal data.

The purposes of processing personal data collected in connection with the functioning of the services are listed below, along with the legal bases:

Purposes of processing personal data collected by ADENTA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (ADENTA):

The period of storage of personal data depends on the purpose of data processing for which they were collected. The criteria used to determine the appropriate retention period include:

• the need to achieve a given goal;
• the period necessary for the provision of our services;
• the period for which consent was granted;
• legal provisions.

Storage of personal data

Personal data is stored for the time necessary to achieve the purpose of processing. Personal data is stored:

• in the case of correspondence, the data will be stored for a period of 6 years until the completion of the cases, until the claims cease or our obligations under the law cease;
• in the case of using our Fanpage on Facebook, the data will be stored for the period of running the Fanpage or until you stop following it. The data being the content of the correspondence may be processed for a period of 6 years from the end of the cases or until the claims cease;
• in the case of using the contact form, the data will be stored for a period of 6 years until the completion of the cases, until the claims cease or our obligations under the law cease;
• in the case of publishing Customer opinions about our services, the data will be stored for the period for which we will run our website or until an objection or withdrawal of consent for such processing is submitted.

ADENTA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (ADENTA) applies the principle of limiting the storage of personal data, which protects the data against processing for a period longer than is necessary for the purposes for which the data are processed. When ADENTA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (ADENTA) achieves the purpose of processing, it deletes or anonymizes the data, which occurs in particular when:

• the data subject withdraws consent to the processing of personal data (if consent was the basis for processing);
• the data subject effectively objects to further processing (if the basis for processing was the legitimate interest of the Administrator);
• the statute of limitations for any claims has expired (if the Administrator processed the data to perform a contract);
• the deadlines resulting from other provisions have expired.

Recipients of personal data

In connection with conducting activities that require the processing of personal data, the data may be disclosed to our subcontractors who help us perform specific tasks and provide selected services. The data may be disclosed only to the extent of the services provided to us, in particular to entities performing maintenance, advisory, consulting, legal and accounting services, IT service and hosting service providers.

Rights of data subjects

Each User of the Service has the option to choose the extent to which they want to use our services and what information about themselves they want to share. We also inform you that the User has the right at any time to demand from the Administrator the implementation of their rights under the applicable provisions of the General Data Protection Regulation. Data subjects have the following rights:

• The right to obtain access to personal data concerning them - on this basis, the Administrator provides the natural person submitting the request with information about the data processing, including in particular the purposes and legal bases for processing, the scope of the data held, the entities to which they are disclosed, and the planned date of data deletion. The right of access also allows you to receive a copy of your data;
• The right to rectify data - the Administrator is obliged to remove any inconsistencies or errors in the processed personal data and to supplement them if they are incomplete;
• The right to delete data - on this basis, you can request the deletion of data whose processing is no longer necessary to achieve any of the purposes for which they were collected;
• The right to limit processing - if such a request is submitted, the Administrator ceases to perform operations on Personal Data - with the exception of operations to which the Data Subject has consented - and their storage, in accordance with the adopted retention rules;
• The right to data portability - the data subject has the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning them that they have provided to the Administrator, and has the right to send this data to another Administrator. This right applies to data that is processed on the basis of the consent expressed by the data subject or a contract concluded with such a person;
• The right to object to data processing - the Data Subject may at any time object - for reasons related to their particular situation - to the processing of personal data that takes place on the basis of the legitimate interest of the Administrator, the objection in this regard should contain a justification;
• The right to withdraw consent - if the data is processed on the basis of expressed consent, the Data Subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before its withdrawal;
• The right to lodge a complaint - if it is considered that the processing of Personal Data violates the provisions of the GDPR or other provisions on the protection of Personal Data, the Data Subject may lodge a complaint with the supervisory authority for the processing of Personal Data, competent for the place of habitual residence of the Data Subject, their place of work or the place where the alleged infringement was committed.

Where we use the services of contractors, your personal data remains under our control and we have procedures in place to ensure that your personal data is properly protected.

We make every effort to ensure that your personal data is processed securely and in accordance with the provisions of this Policy.

Transfer of personal data to a third country or international organization

Your personal data is not transferred to a third country or international organization.

However, we use services, tools and technologies provided by companies that have their headquarters outside the European Union (in particular Facebook and Google). As part of using the services and tools provided by these entities, your data may be collected and stored on servers located outside the EEA. The providers of these services guarantee an adequate level of personal data protection through the use of compliance mechanisms provided for in the GDPR, in particular through the use of so-called standard contractual clauses.

Detailed information on the processing of data by these entities is included in their own privacy policies.

Information about cookies

As part of the Service, we use information saved and stored on Users' end devices in the form of cookies. These files allow you to adjust the display of the website to the User's preferences and allow the Administrator to access data on the use of the Service. They usually contain information about the name of the website, the storage time on the end device and a unique number.

We use the following cookies on the Service:

• Session 'cookies', necessary cookies - cookies necessary for the proper functioning of the website.
• Third-party 'cookies' - (English: third parties cookies) - cookies provided by other entities, such as Facebook or Google. They can be used to conduct analysis and statistics on the use of the Service and to conduct marketing activities and customize advertisements.

The Service User has the option to manage cookies independently, e.g. through web browser settings. Detailed information on how to handle and disable cookies is available in the browser settings.

Changes to the Privacy Policy

The Administrator has the right to change the provisions of the Privacy Policy, e.g. in the event of a new processing purpose or a change in the technologies used.