Due to the entry into force on 25 May 2018 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”, we inform you that:
- The administrator of personal data is SKY ESTATE Sp. z o.o. ul. Krucza 16/22, 00-526 Warsaw NIP 526-23-26-662 (hereinafter referred to as the “Administrator”),
- You can contact the Data Administrator in writing, by traditional mail, or by e-mail at the following address: rodo@euroholding.pl.
- The Administrator ensures appropriate physical, technical, and organizational measures to protect personal data against accidental or intentional destruction, loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable regulations.
- The Administrator processes personal data for the following purposes:
- Sale of products and services offered by the Administrator – the legal basis for data processing is the performance of the contract (Article 6, paragraph 1, letter b of the GDPR),
- Marketing – the legal basis for data processing is legally justified Administrator’s interest – marketing of own products and services (Article 6, paragraph 1, letter f of the GDPR),
- Consideration of complaints, investigation and defense in the event of mutual claims – the legal basis for data processing is the legitimate interest of the Administrator – (Article 6, paragraph 1, letter f of the GDPR),
- In order to perform binding legal obligations, e.g.: issuing and storing invoices and accounting documents, responding to complaints in the time and form provided for by the regulations – for the duration of the duties and the time in which the law requires the storage of documents (Article 6, paragraph 1, letter c of the GDPR),
- Sending commercial information by electronic means – only in the event of the User’s consent. The legal basis for data processing is consent (Article 6, paragraph 1, letter b of the GDPR).
- The Administrator processes personal data of persons visiting the Administrator’s profiles maintained in social media (Facebook, Instagram, Twitter, LinkedIn). The personal data disclosed there are processed solely and exclusively for the purposes of maintaining the profile, as well as for the purpose of promoting the Administrator’s products and activities, as well as for the purpose of active communication with profile visitors using the functions offered by social networking sites. The legal basis for the processing of personal data by the Administrator for this purpose is its legitimate interest related to the promotion of products and building a positive image (Article 6, paragraph 1, letter f of the GDPR).
- In order to conclude an agreement with the Client and its further implementation, the Administrator needs to obtain the following personal data: identification data (name, surname and possibly company and NIP number, telephone number) address data (e-mail address, street, place of residence or place of business, postal code). Failure to provide this data prevents the conclusion and performance of the contract.
- The Administrator may additionally ask the Customer to provide additional data (e.g. contact number), which data does not affect the conclusion of the contract, but facilitates contact with the Customer, and thus affects the efficient execution of the order.
- Providing personal data is voluntary, but necessary in order to conclude a contract with the Administrator and perform this contract.
- The Administrator uses cookies on its website. Cookies are text files saved on the device (computer, telephone, tablet, etc.) of the person visiting the Administrator’s website. Cookies are mainly used to maintain the session. Thanks to cookies, the user does not have to enter the same information every time they return to this page or go from one page to another.
- Cookies collect information that facilitates the use of the website – e.g. by remembering visits to the Administrator’s website and activities performed there, and also help, among other things, in:
- Maintaining the user’s session;
- Saving the state of the user’s session;
- Restoring the user’s session;
- Enabling authorization when logging in to the Administrator’s website;
- Saving information allowing anonymous user logging in;
- Saving information necessary for the operation of the shopping cart on the Administrator’s website.
- After the visitor has given their consent, the Administrator also uses service cookies to provide services electronically (online store) and improve the quality of these services. In connection with this, the Administrator uses cookies to store information or access information already stored on the device (computer, telephone, tablet, etc.) of the person visiting the Administrator’s website.
- The Administrator also uses cookies for marketing purposes related to the products and services it offers. The use of cookies and personal data collected through them for marketing purposes requires the consent of the visitor to the Administrator’s website.
- The consent indicated above may be expressed in particular through the appropriate configuration of the web browser. Consent may be withdrawn at any time, including by deleting the browser history.
- Personal data will be processed for the period necessary to perform the contract, and after this period for the purposes and for the time and to the extent required by law or to secure any claims – no longer than for a period of 6 years, or until the consent granted is withdrawn.
- The recipients of personal data will be:
- Entities providing and supporting the Administrator’s IT systems in order to operate the website and entities providing services related to the Administrator’s current activities,
- Entities providing courier and postal services,
- Entities providing tax and accounting services to the Administrator,
- Entities providing subcontracting services to the Administrator.
- Every person, to the extent resulting from the provisions of law, has the right to access their data and to rectify, delete or limit processing, the right to object to processing, the right to transfer data, as well as the right to withdraw the granted consent at any time.
- Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
- In the event of doubts related to the processing of personal data, each person may contact the Administrator with a request for information. The Administrator may ask for additional information to authenticate the person exercising the rights in question, when it is necessary to provide information.
- Everyone has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
