This document sets out the conditions for the processing of personal data (hereinafter also referred to as "data") and cookies on the website rentyourplane.com, operated via the website available at the following URL: rentyourplane.com, hereinafter referred to as the "Website".
CONTENTS
§1. HOW TO CONTACT THE DATA CONTROLLER
§2. ON WHAT BASIS DO WE PROCESS YOUR DATA
§3. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF CONCLUDING AND IMPLEMENTING CONTRACTS, POSSIBLE CLAIMS AND DEFENSE AGAINST THEM
§4. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF SENDING NEWSLETTER
§5. INFORMATION ON DATA PROCESSING FOR DIRECT MARKETING PURPOSES AND PROFILING
§6. INFORMATION ABOUT DATA PROCESSING TO ENSURE SECURITY
§7. INFORMATION ABOUT DATA RECIPIENTS
§8. INFORMATION ABOUT THE TRANSFER OF DATA TO THIRD COUNTRIES
§9. ABSOLUTE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
§10. RELATIVE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
§11. COOKIES - INTRODUCTION
§12. COOKIES OF THE DATA ADMINISTRATOR
§13. THIRD PARTY COOKIES
§14. CONSENT TO THE USE AND MANAGEMENT OF COOKIES
§15. CACHE
§16. LINKS TO OTHER WEBSITES OR SOFTWARE
§17. CHANGES TO THE PRIVACY POLICY AND COOKIES
- HOW TO CONTACT THE DATA CONTROLLER
The administrator of personal data processed within the Website is [XXX]. You can contact the Administrator by phone: +48 XXX XXX XXX and using the e-mail address: biuro@rentyourplane.com.
- ON WHAT BASIS DO WE PROCESS YOUR DATA
When collecting personal data, we always inform you about the legal basis for their processing. It results from the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data on the free movement of such data and repealing Directive 95/46/EC - General Data Protection Regulation). When we inform about:
- art.6 point 1 lit. a) GDPR - this means that we process personal data based on the consent received,
- art.6 point 1 lit. b) GDPR - this means that we process personal data because they are necessary to perform the contract or to take action before concluding it, at the request received,
- art.6 point 1 lit. c) GDPR - this means that we process personal data in order to fulfill a legal obligation,
- art.6 point 1 lit. f) GDPR - this means that we process personal data in order to pursue legitimate interests.
- §3. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF CONCLUDING AND IMPLEMENTING CONTRACTS, POSSIBLE CLAIMS AND DEFENSE AGAINST THEM
- We may process personal data necessary to perform the contract concluded with you. However, even before concluding the contract, we may process personal data necessary to take action at your request. The processing of this data is based on Art. 6 point 1 letter b) GDPR.
- In the case of execution of a contract for the provision of paid services, we may process your data in order to fulfill accounting and tax obligations. The processing of this data is based on Art. 6 point 1 letter c) GDPR.
- During and after the implementation of the contract, we process personal data of the party to the contract in order to possibly consider and pursue claims. Our legitimate interest is, for example, the ability to respond to a possible complaint, which we are obliged to do under separate provisions of civil law. In such a case, we will process personal data based on the legitimate interest of defending against possible claims or pursuing them. The processing of this data is based on Art. 6 point 1 letter f) GDPR.
- 4. We will store this data for the period necessary to achieve the specified purposes, no later than until the limitation period for claims arising from separate legal provisions expires.
- 5. You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority. If your data is processed for the purpose specified in point 3, you also have the right to object to its processing.
- Providing this data is voluntary, but failure to provide this data will prevent the conclusion of the contract or its implementation.
- The recipients of this data are: our hosting provider, e-mail service provider, IT service provider, provider of accounting services and invoice software, and provider of electronic payment services.
- INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF SENDING NEWSLETTER
- 1. We enable you to subscribe to the list of recipients of our newsletter. If you have used this functionality, we process your personal data for the purpose of sending it. The newsletter may contain advertising, commercial or marketing content.
- The processing of this data is based on Art. 6 point 1 letter f) GDPR.
- We will store your data until you unsubscribe from the newsletter subscription list.
- You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority.
- You also have the right to object to the processing of your personal data.
- 6. Providing this data is voluntary, but failure to provide this data will prevent sending the newsletter.
- The recipients of this data are: our hosting provider, IT service provider, e-mail service provider and newsletter sending service provider.
- §5. INFORMATION ON DATA PROCESSING FOR DIRECT MARKETING PURPOSES AND PROFILING
- We may process your personal data for direct marketing purposes. This happens, for example, when we reply to your message with details of our offer.
- For direct marketing purposes, we may use profiling, which involves automated decision-making about displaying advertisements to you. This decision is made on the basis of your activities on the Website, in particular on the basis of concluded contracts or pages viewed. In practice, profiling supports the usability of our Website, allowing us to present you content that may potentially interest you.
- The processing of this data is based on Art. 6 point 1 letter f) GDPR.
- We will store your data for as long as necessary for the purpose.
- You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, the right to object to data processing, and the right to lodge a complaint with the supervisory authority.
- 6. You have the right not to be profiled unless you have consented to it. However, the basis for the processing of your data will be your consent (Article 6(1)(a) of the GDPR), which you can withdraw at any time. Then, your data will also be processed until your consent is withdrawn.
- Providing this data is voluntary, and failure to provide this data will prevent the implementation of direct marketing activities.
- The recipients of this data are: our hosting provider, IT service provider, e-mail service provider, advertising service provider, and the messenger provider available on the Website.
- INFORMATION ABOUT DATA PROCESSING TO ENSURE SECURITY
- 1. From the moment you launch our website, in order to ensure the security of services, we process data such as:
- public IP address of the device from which the request came,
- browser type and language,
- date and time of the inquiry,
- number of bytes sent by the server,
- the URL of the previously visited page, if the visit was made using this link,
- information about errors that occurred during the query.
- 2. Our legitimate interest in this processing is to keep server event logs and protect the Website against potential hacker attacks and other abuses. This includes the possibility of determining the IP address of a person performing prohibited activities on the Website, such as attempting to break security, publishing prohibited content, or attempting prohibited activities using our servers.
- The processing of this data is based on Art. 6 point 1 letter f) GDPR.
- We will store this data for the period necessary to achieve the specified purposes, no later than until the limitation period for claims arising from separate legal provisions expires.
- You have the right to access your data, rectify it, delete it, limit processing, object to its processing, as well as the right to lodge a complaint with the supervisory authority.
- Providing this data is a condition for using the Website. Failure to provide this data will prevent you from using the Website.
- 7. The recipient of this data is our hosting provider, IT service provider and telecommunications service provider.
- INFORMATION ABOUT DATA RECIPIENTS
When processing personal data, we use external services. Therefore, the recipients of your personal data may be third parties. When collecting personal data, we always inform about these recipients, but due to the priority of readability of the message, we do it briefly. Therefore, we hereby clarify that when we inform about specific categories of recipients, these are the following entities:
- IT service provider: specodit.pl (WIDEBRAND Patryk Paziewski, ul. Tarnowska 36 lok.8, 43-300 Bielsko Biała, NIP 6692558074).
- Hosting provider: zenbox.pl (zenbox Sp. z o. o. Roosevelta 22, 60-829 Poznań, NIP: 7822622168).
- E-mail service provider: zenbox.pl (zenbox Sp. z o.o. Roosevelta 22, 60-829 Poznań, NIP: 7822622168.
- Messenger provider: Facebook Messenger, WhatsApp (Facebook Poland, ul. Bielańska 12, 00-085 Warszawa, NIP 5252530705).
- Advertising service provider.
- Accounting services provider.
- INFORMATION ABOUT THE TRANSFER OF DATA TO THIRD COUNTRIES
- Due to the fact that we use the services of other suppliers, your personal data will be transferred outside the European Economic Area, namely to the country: United States of America (USA).
- The European Commission has found that some countries outside the European Economic Area (EEA) adequately protect personal data.
- Since the country to which we transfer personal data has not been recognized as a safe country, the transfer of data is based on an agreement containing standard data protection clauses adopted by the European Commission.
- ABSOLUTE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
When we write about the rights related to the processing of your personal data, we refer to the rights described below. The possibility of exercising the following rights is independent of the legal basis for the processing of personal data.
The right to access data
You have the right to obtain from us confirmation as to whether we process personal data relating to you. If this is the case, you have the right to access this data as well as receive additional information about:
- categories of relevant data,
- the recipients or categories of recipients to whom the data have been or will be disclosed, in particular recipients in third countries or international organizations,
- if possible, the planned data storage period, and if this is not possible, about the criteria for determining this period,
- the right to request us to rectify, delete or limit data processing, to object to such processing, as well as the right to lodge a complaint with the supervisory authority,
- the source of the data if your data was not collected from you,
- automated decision-making, including profiling and the rules for making such decisions, as well as the importance and expected consequences of such processing for you.
After receiving such a request, we are obliged to provide a copy of the personal data being processed. If such a request is received electronically and unless we receive any other objection, we will also provide information electronically.
The right to rectify data
You have the right to request that we immediately correct any inaccurate personal data relating to you. Taking into account the purposes of processing, you have the right to request that incomplete personal data be completed, including by providing an additional statement.
The right to delete data (to be forgotten)
You have the right to request that we immediately delete your personal data. We are then obliged to delete personal data without undue delay if one of the following circumstances occurs:
- you have withdrawn your consent to the processing of your personal data and we have no other basis for processing them,
- you have successfully objected to the processing of your data,
- Your personal data was processed unlawfully,
- Your personal data must be deleted in order to comply with the legal obligation,
- Your data was collected in connection with the offering of information society services.
The right to restrict processing
You have the right to request us to restrict processing in the following cases:
- when you question the accuracy of the data - for a period enabling us to check their accuracy,
- the processing is unlawful and you oppose the deletion of the data and instead request the restriction of their use,
- we no longer need personal data for processing purposes, but you need it to establish, pursue or defend claims,
- you have objected to the processing of your data - until it is determined whether our legitimate grounds override the grounds for your objection.
Automated decisions, including profiling
You have the right not to be subject to a decision that is based solely on automated processing, including profiling, and produces legal effects concerning you or similarly significantly affects you.
The law does not apply if this decision:
- is necessary to conclude or perform a contract between you and us,
- is permitted by Union law or the law of the Republic of Poland and which provides for appropriate measures to protect your rights, freedoms and legitimate interests, or
- is based on your explicit consent.
The right to lodge a complaint
You have the right to lodge a complaint regarding the processing of your personal data to the supervisory authority: President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warszawa, tel. 22 531 03 00, fax. 22 531 03 01, e-mail: kancelaria@uodo.gov.pl.
- RELATIVE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED
When we write about the rights related to the processing of your personal data, we refer to the rights described below. The possibility of using them always depends on the legal basis for the processing of personal data.
The right to withdraw consent to processing
If we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time. Naturally, withdrawal of consent does not affect the lawfulness of previous processing of personal data.
The right to transfer data
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to send this personal data to another administrator without any hindrance from us, if the processing takes place:
- based on consent or contract, and
When exercising the right to transfer data, you have the right to request that your personal data be sent directly by us to another administrator, if technically possible. This right must not adversely affect the rights and freedoms of others.
Right to object
If we process your personal data pursuant to Art. 6 point 1 letter f) GDPR, you have the right to object to the processing of this data for reasons related to your particular situation.
We are then no longer permitted to process this personal data unless we demonstrate the existence of:
- valid, legitimate grounds for processing, and these grounds must override your interests, rights and freedoms, or
- grounds for establishing, pursuing or defending claims.
Also, if you object to the processing of your personal data for direct marketing purposes, we will not be able to process it for such purposes.
The website of the Service uses cookies. These are commonly used, small files containing a string of characters that are sent and saved on the end device (e.g. computer, laptop, tablet, smartphone) used when visiting the Website. This information is sent to the memory of the browser used, which sends it back the next time you visit the website. We can categorize cookies using three division methods.
In terms of the purposes of using cookies, we distinguish three categories:
- Necessary files - these files enable the proper operation of the website and its functionalities, e.g. authentication or security cookies. Without saving them on your device, you will not be able to use the website.
- Analytical files - these files enable monitoring of opened websites, traffic sources, and duration of stay on the website. Without saving them, the use of the website's functionality will not be limited.
In terms of distinguishing the entity administering cookies, we distinguish:
Below is a list of cookies used, with information about their suppliers and purposes of use:
- recent-views – entity providing WordPress (first party) (1) necessary files
- _ga – entity providing Google (third party) (2) analytical files
- machine_identifier – entity providing WordPress (first party) (1) necessary files
- wp-settings-time-1 – WordPress provider (first party) (1) necessary files
- _ga_SEKFWD1C9J – entity providing Google (third party) (2) analytical files
- private_machine_identifier – entity providing WordPress (first party) (1) necessary files
- __stripe_orig_props – entity providing Stripe (third party) (1) necessary files
- __stripe_sid – entity providing Stripe (third party) (1) necessary files
- wordpress_logged_in – entity providing WordPress (first party) (1) necessary files
- PHPSESSID – entity providing WordPress (first party) (1) necessary files
- wp_lang – entity providing WordPress (first party) (1) necessary files
- wordpress_test_cookie – entity providing WordPress (first party) (1) necessary files
- wordpress_sec – entity providing WordPress (first party) (1) necessary files
- __stripe_mid – entity providing Stripe (third party) (1) necessary files
- scfc – entity providing WordPress (first party) (1) necessary files
- wp-settings-1 – WordPress provider (first party) (1) necessary files
- __ssid – entity providing WordPress (first party) (1) necessary files
- COOKIES OF THE DATA ADMINISTRATOR
The cookies we administer allow for:
- maintaining the session after logging in,
- securing the Website against hacker attacks,
- "remembering" the content of completed form fields by the browser (optional),
- "remembering" the items added to the cart by the browser.
This makes using the functionality of the Website easier and more enjoyable.
The use of third-party cookies is subject to the privacy and cookies policies applied by these entities.
GOOGLE
We use cookies administered by Google Inc. 1600 Amphitheater Pkwy, Mountain View, CA 94043, United States for services:
- Google Ads – advertising files used to conduct and assess the quality of advertising campaigns implemented using the Google Ads service,
- Google Analytics – analytical files used to study user behavior and traffic and to prepare traffic statistics,
- YouTube – they allow you to display YouTube videos embedded on the website.
Collected by Google Inc., they are anonymous and aggregated. In particular, they do not contain identifying features (understood as personal data) of the Website users. By using the above-mentioned services, we collect data such as the sources of users visiting the Website, as well as their behavior on the Website, information about the devices and browsers they use, IP address, domain, demographic data (age, gender), interests and data geographical.
More information in this regard can be found here: https://policies.google.com/technologies/cookies?hl=pl
FACEBOOK
We use files administered by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, United States:
- Functional cookies used by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, United States. These files may be used to connect your account on the external social networking site Facebook with your account on the Website. These files may also be used to process your actions performed using the "Share" or "Like" buttons on Facebook. The processing of these activities may be public.
- Advertising pixel tags used by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, United States. These are elements published in digital content and enable the recording of information, e.g. about activity carried out on the website, as well as the assessment of the effectiveness of advertising. Pixel tag management Facebook Inc. is possible via Facebook, in its user panel
More information in this regard can be found here: https://www.facebook.com/policies/cookies/
The use of third-party cookies is subject to the privacy and cookies policies applied by these entities.
- CONSENT TO THE USE AND MANAGEMENT OF COOKIES
With the exception of essential cookies, their processing is based on the user's consent.
Consent to the processing of cookies is voluntary and may be withdrawn at any time. However, please remember that failure to consent to the use of certain cookies may result in limitations in the use of the Website and its functionality, or even prevent its use.
Consent to the processing of cookies may be granted:
- using software settings installed in the telecommunications end device used by the user,
- by using a button containing a declaration of consent to the processing of cookies or confirmation of reading its terms and conditions,
- using the settings available in the website area.
When you use the Website, we may automatically use the cache installed on your device. As part of the local memory, it is possible to store data between sessions, i.e. between subsequent visits to the Website. The purpose of using the cache is to speed up the use of the Website by eliminating the situation in which the same data would be repeatedly downloaded from the website, thus burdening the user's Internet connection. The cache can also store information such as your login password.
- LINKS TO OTHER WEBSITES OR SOFTWARE
The website may contain links to other websites or software. We are not responsible for the privacy policy and cookie processing principles applicable on these websites or in this software. We recommend that you read the privacy and cookie policies of these websites or software after visiting them or before installing them.
- CHANGES TO THE PRIVACY POLICY AND COOKIES
- The privacy and cookies policy comes into force on the date of publication on the Website.
- The Privacy and Cookies Policy is changed by publishing its new content on the Website.
- We publish information about changes to the Privacy and Cookies Policy on the website area of the Website, no later than 3 days before the date on which its new wording becomes effective.
