Privacy Policy

I. General Provisions

1. The Privacy Policy sets out how the User’s personal data necessary for the
   provision of electronic services through the website https://tdm-projekt.pl
   (hereinafter: Website).
2. The Website only collects personal data necessary for the provision and
   development of the services offered therein.
3. Personal data collected through the Website shall be processed in
   accordance with the provisions of Regulation (EU) 2016/679, f the European
   Parliament and of the Council of 27 April 2016 on the protection of individuals
   with regard to the processing of personal data and on the free movement of
   data and repealing Directive 95/46/EC (General Data Protection Regulation
   hereinafter GDPR) and the Personal Data Protection Act of 10 May 2018.

II. Data Controller

1. The controller of the personal data collected by the Service is TDM PROJEKT
   SP. Z O. O. ul. 17, 30-720 Kraków, KRS number: 0000909336 District
   Court for Kraków Śródmieście, XI Economic Division, Tax Identification
   Number (NIP): 6793129340, REGON: 364578270, email address: biuro@tdm-
   projekt.pl (hereinafter: Controller).

III. Purpose of the Personal data collection

1. Personal data shall be used for:
   ○ account registration and verification of the User’s identity,
   ○ to enable you to log in to the Website,
   ○ implementation of the services and e-services contract,
   ○ communication with the user (livechat, contact form, etc.).
   ○ the dispatch of a newsletter (with the User’s consent to receive it),
   ○ running a commentary system,
   ○ the provision of community services,
   ○ promotion of the Controller’s offer,
   ○ marketing, remarketing, affiliation,
   ○ personalise the Service for Users,
   ○ analytical and statistical activities,
   ○ debt recovery,
   ○ establish, assert or defend against claims.
2. The provision of data is voluntary, but necessary in order to conclude a
   contract or make use of other functionalities of the Website.

IV. Type of personal data processed

The Controller may process the User’s personal data: name and surname, date of
birth, residential address, e-mail address, telephone number, VAT number.

V. Period of the personal data processing

Users’s personal data shall be processed for a period of time:

• where the basis of the processing is the performance of a contract – until the
  statute of limitations for claims after performance,
• where processing is based on consent – until revocation of consent, and after
  revocation of consent until the statute of limitations for claims.
  In both cases, the limitation period is six years, and for periodic benefit claims and
  claims relating to the conduct of business, three years (unless a specific provision
  provides otherwise).

VI. Sharing of personal data

1. User’s personal data may be transferred to: entities related to the Controller,
   its subcontractors, entities cooperating with the Controller e.g. e-payment
   companies, courier/postal services companies, law firms.
2. User’s personal data shall not/will not be transferred outside the European
   Economic Area (EEA).

VII. Rights of Users

1. The Website User has the right to: access to the content of their personal
   data, rectification, erasure, restriction of processing, portability, to object to
   processing, to withdraw consent at any time (which does not affect the
   lawfulness of processing carried out on the basis of consent before its
   withdrawal).
2. Notification of the User’s entitlement under the aforementioned rights shall be
   sent to [email address].
3. The Controller shall comply or refuse to comply with the request immediately –
   within a maximum of one month of receipt.
4. The User has the right to lodge a complaint with the President of the Data
   Protection Authority if he/she considers that the processing violates his/her
   rights and freedoms (GDPR).

VIII. Cookies

1. The Website collects information by means of cookies – session cookies,
   permanent cookies and third-party cookies.
2. The collection of cookies supports the correct provision of services on the
   Website and serves statistical purposes.
3. The User can specify the extent to which cookies can be accessed on his/her
   device in the browser settings.

IX. Automated decision-making and profiling

1. The User’s data shall not be processed in an automated manner in such a way
   that any decisions can be taken against them as a result.
2. The User’s data may be profiled in order to adapt the content and personalise
   the offer once they have given their consent.

X. Final provisions

1. The Controller has the right to make changes to the Privacy Policy, but User’s
   rights will not be restricted.
2. Information on the changes made will appear in the form of a message
   available on the Website.
3. In matters not regulated in this Privacy Policy, the provisions of the GDPR and
   Polish law shall apply.