Who is the controller of your personal data?
The data controller, i.e. the entity deciding on how your personal data will be used, is Zieta Prozessdesign spółka z ograniczoną odpowiedzialnością with its registered office in Wrocław at ul. Moniuszki 29/2 (“We”, “ZIETA” or “Company”), publisher of website www.zieta.pl.
How can you contact us to obtain more information about the processing of your personal data?
Send us an e-mail to: firstname.lastname@example.org or traditional mail to: Zieta Prozessdesign Sp. z o.o., ul. Moniuszki 29/2, 51-610 Wrocław.
How did we obtain your data?
We received them from you when you subscribed for the newsletter, contacted us by e-mail to email@example.com, firstname.lastname@example.org, email@example.com, contacted the sales department or the marketing department, contacted us through the contact form on www.zieta.pl or ordered products on our online store at www.shop.zieta.pl.
What is the purpose and legal ground of the processing of your personal data by ZIETA?
We process your personal data because it is necessary to perform the contract entered into with you, including to:
- send the newsletter
- make it possible to provide services by electronic means and make full use of ZIETA, including making purchase transactions
- handle complaints if you submit any
- handle your submissions and queries
- contact you, including for purposes connected with provision of services
- In addition, the provisions of law require that we process your data for tax and accounting purposes
We process your data also for purposes stated below, on the basis of a legitimate interest of ZIETA, which is:
- marketing activities directed at you, including direct marketing of our services and goods or third-party services or goods
- contacting you for purposes connected with permissible marketing activities through available communication channels, in particular and with your consent – by e-mail and telephone
- handling payment services
- ensuring safety of services provided to you by electronic means, including enforcing compliance with internal rules of ZIETA and counteracting fraud and abuse, and ensuring traffic security
- handling your requests submitted in particular to the sales department if they are not directly connected with performance of a contract
- organising competitions and promotional campaigns in which you can participate
- chasing payments; conducting court, arbitration and mediation proceedings
- conducting statistical analyses
- storing data for archiving purposes and ensuring accountability (demonstrating that we comply with obligations arising from the provisions of law)
If you agree, we process your personal data to:
- save data in cookies, collect data from websites and mobile applications
- organise competitions and promotional campaigns in which you can participate
You can withdraw your consent to the processing of personal data at any time in the same way in which you gave it. We will process your personal data until you withdraw your consent.
Do you have to provide your personal data to us?
We require that you provide the following personal data so that we can enter into and perform a contract with you and, therefore, provide the service to you:
- e-mail address (if you subscribe for the Newsletter) or
- name and surname, e-mail address, telephone number, shipping address (if you place an order at www.shop.zieta.pl) and information about the company and its address (if you place an order of behalf of a company).
If you do not provide these personal data for any reason, you will not be able to use ZIETA’s services.
If the provisions of law so require, we can require that you provide other data that are necessary for e.g. accounting or tax reasons.
Otherwise, provision of your data is voluntary.
What are you rights in relation to the processing of data?
We guarantee that we will respect all your rights arising from the General Data Protection Regulation, i.e. the right to request access to or rectification or erasure of your data, restriction of processing, portability of data, the right not to be subject to automated decision-making, including profiling, and the right to object to processing of your personal data.
You can exercise these rights if:
- in respect of a request for rectification of data: you notice that your data are inaccurate or incomplete
- in respect of a request for erasure of data: your data are no longer necessary for the purposes for which they were collected by the Company; you withdraw your consent to the processing of data; you object to the processing of your data; your data are processed unlawfully; data should be erased in order to meet an obligation arising from a provision of law or if data was collected in connection with provision by electronic means of services offered to a child
- in respect of a request for restriction of processing of data: you notice that your data are inaccurate – you can request that the processing of your data be restricted for a period allowing us to check accuracy of those data; your data are processed unlawfully, but you do not want them to be erased; we no longer need your data, but you may need them to defend or pursue claims; or you object to the processing of data – until it is determined if our legitimate interests override the grounds for objection;
- in respect of a request for data portability: your data are processed on the basis of your consent or a contract entered into with you and if the processing is automated
You can lodge a complaint in connection with our processing of your personal data with the supervisory authority, i.e. the Inspector General for Personal Data Protection (address: Generalny Inspektor Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
In what circumstances can you object to the processing of your data?
You can object to the processing of your personal data if:
- your personal data are processed on the basis of a legitimate interest or for statistical purposes and your objection is justified by a special situation in which you found yourself,
Your personal data are processed for direct marketing purposes and they are being profiled for such purposes. Remember that you may exercise the right to object since 25 May 2018.
Who do we share your personal data with?
We share your personal data with entities which assist us in providing services by electronic means, i.e. entities which provide payment, consulting or auditing services, support services provided to ZIETA users, cooperate with us in marketing campaigns. We may share your personal data with public authorities combating fraud and abuse.
As it is necessary to prevent online robots from performing certain functions, when you subscribe for the Newsletter we apply Google reCAPTCHA mechanism in order to check if user behaviour does not appear to be robot behaviour. In such cases, we may disclose your IP address to Google LLC.
How long do we store your personal data?
We store your personal data for the term of your contract with us and after its termination for the purposes of:
- pursuing claims in connection with performance of the contract
- fulfilling obligations arising from the provisions of law, in particular tax and accounting obligations
- preventing fraud and abuse
- statistical and archiving purposes
- for up to 10 years from the date of conclusion of contract performance
We store your personal data for marketing purposes until the earlier of: expiration of the term of the contract or your objection to such processing.
In the case of competitions and promotional campaigns in which you can participate, we will process your data for their duration and a period of prize settlement.
For accountability purposes, i.e. in order to prove compliance with the provisions on personal data protection, we will store your data for a period of our obligation to store data or documents containing data to document compliance with legal requirements and to enable public authorities to check compliance.
Do we transfer your data to countries outside the European Economic Area?
Your personal data will be transferred outside the European Economic Area to Google LLC based on adequate legal safeguards in the form of standard contractual clauses on personal data protection, approved by the European Commission.
Do we process your personal data automatically (including by profiling) in a way that affects your rights?
Your personal data will not be subject to automated processing (including profiling). Profiling of personal data consists in processing (including automated processing) of your data by using them to assess certain information about you, in particular to analyse or forecast your personal preferences and interests.