Privacy and Cookie Policy

This Privacy and Cookie Policy sets out the principles for processing personal data obtained through the website www.jednosc-grojec.pl (hereinafter referred to as the “Website”).

The personal data of Website Users collected automatically are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”). Users are entitled to the rights granted to them under the respective GDPR provisions.

§1 Data Controller

The owner of the Website and the Data Controller is Cukiernicza Spółdzielnia Inwalidów “Jedność”
NIP: 797 00 00 062
KRS: 0000030525

§2 Types of Processed Data, Purposes, and Legal Basis

Personal data of Users are collected via the Website for the purpose of the contact form.

Your data are processed based on Article 6(1)(b) of the GDPR – i.e., for the performance of services provided through the Website. When filling in the contact form, Users are required to provide the following personal data: full name, email address, message content, and confirm acceptance of this Privacy Policy.

§3 Data Sharing and Processing

Users’ personal data are shared with service providers used by the Controller to operate the Website. These providers process the data solely based on the Controller’s instructions (data processors). In the event of a lawful request, the Controller may disclose the data to authorized public authorities, including in particular: common courts, prosecutors, the police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications.

§4 User Rights

Right to Erasure (“Right to be Forgotten”) – Article 17 GDPR

The User has the right to request the deletion of all or some personal data if:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

  • the personal data were processed unlawfully;

  • the personal data must be erased to comply with a legal obligation under EU or Member State law to which the Controller is subject;

  • the personal data were collected in connection with the offer of information society services.

Despite a request for erasure, the Controller may retain certain personal data to the extent necessary for the establishment, exercise, or defense of legal claims or for compliance with legal obligations under EU or Member State law. This particularly applies to the retention of the User’s full name and email address for complaint or claim-handling purposes.

Right to Restriction of Processing – Article 18 GDPR

The User has the right to request the restriction of the processing of their personal data. While such a request is being considered, the User may be unable to use certain functionalities or services that involve processing the restricted data.

Restriction of processing applies in the following cases:

  • when the accuracy of the data is contested – restriction applies for a period to verify the accuracy (not longer than 7 days);

  • when processing is unlawful and the User objects to the erasure, requesting restriction instead;

  • when the data are no longer needed for processing but are required by the User for legal claims;

  • when an objection is filed under Article 21 GDPR – the restriction applies until the legitimate interests of the Controller are balanced against the User’s rights.

Right of Access – Article 15 GDPR

The User has the right to obtain confirmation from the Controller whether their personal data are being processed and, if so, to:

  • access their personal data;

  • receive information about: purposes of processing, categories of processed data, recipients or categories of recipients, the planned retention period or the criteria used to determine it, rights under GDPR, the right to lodge a complaint with a supervisory authority, the source of the data, any automated decision-making including profiling, and safeguards used for data transfers outside the EU;

  • receive a copy of their personal data.

Right to Rectification – Article 16 GDPR

The User has the right to request immediate rectification of inaccurate personal data. Taking into account the purposes of processing, the User has the right to have incomplete personal data completed, including by submitting an additional statement via email as indicated in §8.

If a User exercises one of the above rights, the Controller will fulfill or refuse the request without undue delay and in any event within one month. In the event of complex requests or a large number of them, the Controller may extend the deadline by a further two months, informing the User within the first month and providing the reason for the delay.

The User may submit complaints, inquiries, or requests regarding their data and rights to the Controller. The User also has the right to request a copy of standard contractual clauses by contacting the Controller as indicated in §6.

The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe their rights under the GDPR have been violated.

Cookies Policy

§5 Cookies Mechanism

The Website uses cookies. These are stored on the User’s device if the web browser settings allow it. A cookie typically contains the domain name it came from, its “expiry time,” and a randomly generated unique identifier.

Cookies are used to:

  • adapt the Website content to User preferences and optimize usage;

  • identify the User’s device and display the Website accordingly to ensure optimal experience;

  • maintain user sessions;

  • generate statistics, including enabling the Controller to analyze how users interact with the Website.

During use of www.jednosc-grojec.pl, additional technical data may be collected, such as:

  • IP address assigned to the User’s computer or ISP,

  • domain name,

  • browser type,

  • time of access,

  • operating system type.

The Website may request access to permissions such as location, contacts, and phone functionalities.

The Website uses analytical cookies, including tools from Google such as Google Analytics. For more details, visit Google Analytics Privacy & Security Policies.

§6 Final Provisions

Users may address any questions or concerns regarding this Privacy and Cookie Policy to the Controller via email:
sekretariat@jednosc-grojec.pl

Should any changes be made to the current Privacy and Cookie Policy, updated terms will be made available on the Website.