Privacy Policy

Privacy policy of our company and the website at slavis.net, effective from May 25, 2016, compliant with GDPR, constituting Annex No. 1 to the Terms and Conditions.

1. General Provisions

1. The administrator of personal data collected through the website slavis.net is SLAVIS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, KRS number: 0000619547, business address: Kielce, ul. Jeleniowska 177, correspondence address: Kielce, ul. Jeleniowska 177, NIP: 9591972632, REGON: 364495560, email address: admin@slavis.net, hereinafter referred to as the "Administrator".
2. Personal data collected by the Administrator via the website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, and the Personal Data Protection Act of 10 May 2018.

2. Types of Personal Data Processed, Purpose and Scope of Data Collection

1. PURPOSE OF PROCESSING AND LEGAL BASIS – The Administrator processes personal data via the https://slavis.net website in the following case:
   1. when the user uses the contact / quote request form. Personal data is processed under Article 6(1)(f) of the GDPR as a legitimate interest of the Administrator.
2. TYPES OF PERSONAL DATA PROCESSED – The Administrator processes the following categories of user personal data:
   1. Full name,
   2. Email address,
3. DATA RETENTION PERIOD – Users’ personal data is retained by the Administrator:
   1. if the legal basis for processing is the performance of a contract, for as long as necessary to fulfill the contract, and thereafter for a period corresponding to the statute of limitations for claims. Unless otherwise specified by law, the limitation period is six years, and for periodic benefits and claims related to business activity – three years.
   2. if the legal basis is user consent, for as long as the consent is not withdrawn, and after withdrawal, for a period corresponding to the limitation period for claims that may be raised by or against the Administrator. Unless otherwise specified by law, the limitation period is six years, and for periodic benefits and business-related claims – three years.
4. While using the website, additional information may be collected, in particular: the IP address assigned to the user’s computer or external IP address of the Internet provider, domain name, browser type, access time, and type of operating system.
5. Navigation data may also be collected from users, including information on links and references clicked or other actions taken on the website. The legal basis for these actions is the legitimate interest of the Administrator (Article 6(1)(f) GDPR), which consists of facilitating electronic services and improving their functionality.
6. Providing personal data is voluntary.
7. Personal data may also be processed automatically through profiling, if the user consents under Article 6(1)(a) GDPR. The result of profiling will be assigning a profile to a person in order to make decisions regarding them, or to analyze or predict their preferences, behaviors, and attitudes.
8. The Administrator takes special care to protect the interests of data subjects and ensures that the data collected is:
   1. processed lawfully,
   2. collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes,
   3. factually accurate and adequate in relation to the purposes for which they are processed, and stored in a form that permits identification of data subjects for no longer than necessary to achieve the processing purposes.

3. Right to Control, Access, and Rectify Personal Data

1. The data subject has the right to access their personal data, as well as the right to rectify, delete, restrict processing, transfer data, object to processing, and withdraw consent at any time without affecting the legality of processing carried out on the basis of consent before its withdrawal.
2. Legal basis for the user's requests:
   1. Access to data – Article 15 GDPR
   2. Rectification of data – Article 16 GDPR
   3. Erasure of data (the right to be forgotten) – Article 17 GDPR
   4. Restriction of processing – Article 18 GDPR
   5. Data portability – Article 20 GDPR
   6. Objection – Article 21 GDPR
   7. Withdrawal of consent – Article 7(3) GDPR
3. To exercise the rights referred to in point 2, a relevant email can be sent to: admin@slavis.net.
4. If a user exercises any of the rights mentioned above, the Administrator shall fulfill or deny the request without undue delay, no later than one month after receiving it. However, if the request is complex or if multiple requests are received, the Administrator may extend the deadline by an additional two months, informing the user within one month of receipt about the intended extension and reasons for it.
5. If it is determined that the processing of personal data violates GDPR regulations, the data subject has the right to file a complaint with the President of the Personal Data Protection Office.

4. "Cookies" Files

1. The Administrator's website uses "cookies".
2. The installation of "cookies" is necessary for the proper delivery of services on the website. These files contain essential information for the correct operation of the website and allow for the compilation of general visit statistics.
3. The website uses the following types of "cookies": session and persistent
   1. Session cookies are temporary files stored on the user’s end device until logging out (leaving the website).
   2. Persistent cookies are stored on the user's end device for a period defined in the cookie parameters or until they are deleted by the user.
4. The Administrator uses its own cookies to better understand how users interact with the website content. These cookies collect information on how the website is used, the type of site from which the user was redirected, the number of visits, and the duration of the user’s session. This data does not record specific personal information and is used solely for generating usage statistics.
5. Users have the right to manage the access of cookies to their computer by selecting appropriate settings in their web browser. Detailed information on the options and methods of handling "cookies" is available in the browser software settings.

5. Google Analytics

1. This website uses features of the web analytics service Google Analytics. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
2. Google Analytics uses so-called "cookies." These are text files stored on your computer that enable analysis of how you use the website. The information generated by cookies about your use of this website is typically transmitted to and stored on a Google server in the USA.
3. The storage of Google Analytics cookies is based on Article 6(1)(f) of the GDPR. The website owner has a legitimate interest in analyzing user behavior to optimize the website and its advertising.

6. Final Provisions

1. The Administrator applies technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of protected data, particularly safeguarding the data against unauthorized access, acquisition by unauthorized persons, processing in violation of applicable regulations, and alteration, loss, damage, or destruction.
2. The Administrator provides appropriate technical measures to prevent the acquisition and modification of personal data sent electronically by unauthorized individuals.
3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant Polish legal regulations shall apply.
4. This Privacy Policy may be subject to change, of which users will be informed at least 7 days in advance.
5. Last updated: 01.07.2021.