Privacy Policy

I. General provisions

The Privacy Policy sets out how Users' personal data necessary for the provision of services is collected, processed and stored.

Personal data collected through the Website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR), as well as the Personal Data Protection Act of 10 May 2018.

II. Data controller

The controller of the personal data collected through the Website is name of the legal entity/business/natural person, address: registered office/residential address, KRS (National Court Register) number: number, NIP (Tax Identification Number): number, REGON (Statistical Number): number, e-mail address: e-mail address (hereinafter: the Controller).

III. Purpose of collecting personal data

Personal data is used for the purposes of:

1. - marketing, remarketing and affiliation,
2. - personalizing the Website for Users,
3. - analytical and statistical activities, Providing the data is voluntary, but necessary to conclude the contract or to use other functionalities of the Website.

IV. Type of personal data processed

The Controller may process the following personal data of the User: first and last name, date of birth, residential address, e-mail address, telephone number, NIP (Tax Identification Number).

V. Period of personal data processing

Users' personal data will be processed for the following period:

1. - where the basis for processing the data is the performance of a contract – until the limitation period for claims expires after its performance,
2. - where the basis for processing the data is consent – until it is withdrawn, and after the withdrawal of consent, until the limitation period for claims expires.

In both cases, the limitation period is 6 years, and 3 years for claims relating to periodic benefits and claims related to the conduct of business activity (unless a specific provision states otherwise).

VI. Sharing of personal data

Users' personal data may be disclosed to: entities affiliated with the Controller, its subcontractors, and entities cooperating with the Controller, such as companies handling e-payments, companies providing courier/postal services, and law firms. Users' personal data will not be/will be transferred outside the European Economic Area (EEA).

VII. Users' rights

The User of the Website has the right to: access the content of their personal data, rectify it, erase it, restrict its processing, data portability, object to the processing, and withdraw consent at any time (which does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal).

A request to exercise any of the rights listed above should be sent to e-mail address. The Controller shall fulfil or refuse to fulfil the request without undue delay – within a maximum of one month of its receipt. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing infringes their rights and freedoms (GDPR).

VIII. Cookies

The Website collects information using cookies – session, persistent and third-party.

The collection of cookies supports the proper provision of services on the Website and serves statistical purposes.

The User may define the scope of access of cookies to their device in their browser settings.

IX. Automated decision-making and profiling

Users' data may not be processed in an automated manner such that any decisions could be made about them as a result. Users' data may be profiled for the purpose of tailoring content and personalizing offers, subject to the Users' consent.

X. Final provisions

The Controller has the right to introduce changes to the Privacy Policy, provided that Users' rights are not restricted. Information on the changes introduced will appear in the form of a notice available on the Website.

Matters not regulated by this Privacy Policy are governed by the provisions of the GDPR and Polish law. Information on the privacy policy and cookies can be found on WygranaOnline.