Privacy Policy

Data Processing Rules in Connection with the Use of the Service

In order to ensure the safety of Users and to explain the necessity, purpose, and manner of processing and protecting personal data, as well as other information regarding Users, the Service introduces a privacy policy (hereinafter: “Privacy Policy”) with the following content:

§ 1

General Provisions

1. The administrator of personal data processed in the Service for the purpose of providing the services of the Administrator is Michał Ganobczyk Film Production, with its registered office at ul. Kamieniarzy 11, 43-300, Bielsko-Biała, Poland, registered in the Central Register and Information on Economic Activity under the tax identification number NIP: 9372754042.
2. The Administrator makes every effort to maintain the confidentiality and privacy of the provided information. This Privacy Policy formulates the current principles and policies regarding the protection and processing of personal data received directly or indirectly from Customers, to the extent protected by the applicable law within the European Union.
3. For the purposes of the Privacy Policy, “Personal Data” refers to any information about an identified or identifiable natural person, in particular based on data such as: name and surname, identification number, location data, internet identifier, or one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural, or social identity of a natural person.

§ 2

Collection and Processing of Personal Data. Security

1. In connection with the provision of the Service, the Administrator may collect the following personal data:
   1. Personal data of Users collected for the purpose of Account registration and Order fulfillment: first name, last name, e-mail address, ID number or PESEL, current correspondence address or place of residence, contact telephone number;
   2. Personal data of the User provided in connection with asking a question about the Administrator’s Offer (contact form or e-mail address): first and last name, e-mail address, telephone number.
2. All personal data provided to us will be processed in accordance with the Regulation of the European Parliament and of the Council EU 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC – that is GDPR and in accordance with other applicable laws for the following purposes:
   1.Proper execution of the contract – by contract execution we mean in this case maintaining an Account on our Service, enabling the placement of Orders and in certain cases intermediating in their fulfillment. For this purpose, we will process data for as long as you have an Account with us, and in the case of paid services, also until their complete settlement.
   2.If you have given us consent – we will also process your data for marketing purposes – thanks to this you can receive information about promotions and marketing campaigns carried out by us to the e-mail address provided to us;
   3.Fulfillment of obligations under legal provisions – some of your data we must keep for purposes arising from the accounting law or tax laws – for this purpose, necessary data related to completed orders will be stored for 5 years from the end of the year in which the order was completed, and in case of initiation of proceedings or control by the appropriate authorities – until their completion.
3. Data provided for the purpose of contract execution (Account creation and Order fulfillment) are provided voluntarily, however, failure to provide them prevents the conclusion and proper execution of the contract (registration in the Service and placing orders).
4.  We may transfer personal data only to the following recipients: entities providing services for the Administrator in the field of accounting and bookkeeping, IT services, services in the field of promotion and marketing, employees of the Administrator within the scope of authorization to process personal data for a specific purpose and within the framework of a specific processing activity.
5. The personal data of Users will be stored for the entire period of the contract (having an Account in the Service), and after its termination or expiration to the extent necessary for the performance of legal obligations incumbent on the Administrator of data.
6. Data referred to in paragraph 1 letter a) will be stored only for the purpose of order fulfillment and until the expiration of claims related to their fulfillment.
7. Data provided only for contact purposes (through the form placed on the Service or by sending an e-mail) will be stored only for the purpose of responding to the query and for the purpose of its archiving for a period of 6 months from the date of directing the query.
8. Due to the legitimate legal interest of the Administrator, the data provided to us may be processed for direct marketing purposes for the duration of the Contract, and after its termination or expiration – with your consent until its withdrawal, but no longer than for a period of two years from the date of termination or expiration of the Contract.
9. If you have provided us with your data for purposes other than direct marketing, the data provided to us will be processed for this purpose with your consent until its withdrawal, but no longer than for a period of two years from the date of termination or expiration of the Contract.
10. At any time, you can withdraw the consent given to us for the use of your data such as telephone or e-mail address for marketing purposes. You can do this also by email or by sending us a request by regular correspondence.
11. At any time, you also have the right to access the content of your data and their correction and rectification, and – to the extent resulting from the provisions – to deletion (the right to be forgotten), restriction of processing, object to their processing, you also have the right to request the transfer of your data to another administrator. You also have the right to lodge a complaint with the supervisory authority competent for processing – the President of the Personal Data Protection Office.
12. The Administrator undertakes to:
    1.Take all reasonable actions to ensure that Personal Data that is incorrect in light of the purposes of their processing are promptly deleted or corrected;
    2. Store Personal Data in a form that allows identification of the person to whom the data relates for a period no longer than is necessary for the purposes for which the data are processed; unless they are processed exclusively for public interest archival purposes, scientific or historical research purposes, or statistical purposes;
    3. Process Personal Data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organizational measures.
13. The Administrator processes Personal Data and Confidential Information in the manner mentioned in paragraph 12 point c) above, in particular by:
    Applying technical and organizational measures ensuring the protection of the processed Personal Data appropriate to the risks and the category of data covered by protection;
    1. Securing Personal Data against disclosure to unauthorized persons, taking by unauthorized persons, processing in violation of the regulations, and against change, loss, damage, or destruction;
    2. Maintaining documentation describing the way of processing Personal Data and the protective measures mentioned above;
    3. Allowing the processing of Personal Data only to persons who have the appropriate authorization;
    4. Ensuring control over what Personal Data, when and by whom were introduced into the collection and to whom they are transferred;
14. Maintaining a register of persons authorized to process Personal Data.Personal Data and Confidential Information are processed and used also in the legally justified interest of the Administrator, namely for:
    1. Market research and statistical studies conducted for the needs of the functioning of the Service;
    2. Administering the Service, improving its functionality and raising the quality of services provided;
    3. Contacting Users in matters concerning the account, resolving problems, resolving disputes, recovering debts, and undertaking other customer service activities through available communication channels;
    4. Enforcing compliance with the Customer Regulations, combating fraud and abuse;
    5.Improving the security of processing Personal Data; whereby processing for these purposes occurs exclusively during the period in which Personal Data are also processed for one of the purposes indicated in paragraph 1.