PRIVACY POLICY

Privacy policy of 25 May 2018
Dear Sirs,
We respect your right to privacy. In this document we describe the principles we apply regarding the collection, processing and use of information about our users – your personal data. If you have any questions or concerns, please do not hesitate to contact us.

1. Definitions used
   For the purposes of this policy, the meaning of the following expressions is set out below:
   • Personal Data Administrator – VIDOK sp. z o.o. with its registered office in Rudna Mała 75, 36-54 Mrowla.
   • Partner – an entity providing services to the administrator.
   • User – a natural person who is at least 18 years of age and who is at least 13 years of age but under 18 years of age to the extent that he/she is able to acquire rights and assume obligations in accordance with generally applicable laws, a legal person or an organisational unit which is not a legal person and to which legal capacity is granted by law,
   • Website, Internet Site, Service or Internet Service – an Internet platform operated by the Administrator enabling the viewing of the information made available and communication with the Administrator.
2. Privacy Principles
   The following are the key privacy principles we apply
   • As a personal data administrator, we are committed to protecting the privacy and confidentiality of personal data provided by Users directly to the Administrator or entered into electronic forms.
   • The data protection officer of Vidok sp. z o.o. is Mr Mariusz Marć, who can be contacted e.g. by e-mail at iod@zuzmak.com.
   • Our company and the companies cooperating with us select and apply with due diligence appropriate technical and organisational measures to ensure the protection of the processed personal data. Only persons duly authorised by the Administrator have full access to the databases.
   • We collect only the data necessary to handle the case, we do not collect or process excessive data.
   • The data we collect is protected against being made available to unauthorised persons, as well as against being processed in violation of applicable laws. The information is stored and processed by our company with appropriate security measures.
   • We may process your personal data on the basis of the contract concluded with you because it is necessary for the fulfilment of the sales contract concluded with you or for the provision of installation services to you. In addition, we are required by law to process your data for tax and accounting purposes.
   • If a contract is concluded, the purpose of processing your Personal Data is the proper fulfilment of the concluded sales or service contract.
   • Your personal data as defined above may also be processed by us on the basis of our legitimate interest in properly resolving any disputes concerning the services we provide and in pursuing claims.
   • We may also process your data on the basis of your consent, in which case, however, we only process your data to the extent of your name, surname, address, and email address. You give your consent by submitting your data to us via electronic forms on our website under the Contact section.
   • Please note that your data may be disclosed to other entities, but only if this is necessary for us to provide our services.
   • We would like to emphasise that the provision of your personal data is always voluntary, but necessary for the purposes of communication with you and, in the event that you choose to receive services from us, it is also necessary for the conclusion and proper performance of the contract by us.
   • The user is obliged to provide data that is current and true.
   • The Administrator may process the data of third parties provided by the Users, for the purpose of or in connection with the provision of services by the Administrator In this case, the User of the service, by providing us with the data of third parties, each time declares that he/she has the relevant consent of the third parties for the provision of their data.
   • The provision of personal data by you is a condition for the provision of the contract and our services. If you do not provide your personal data, the services we provide will unfortunately not be possible.
   • Your consent to the processing of your personal data for marketing and contact purposes is completely voluntary and in no way affects the provision of our services, however, if you do not consent, we will not be able to contact you or send you our offer.
   • Your personal data provided in connection with the contract will be stored for the period necessary for the proper performance of the concluded contract and also after its termination due to the statute of limitations.
   • If a VAT invoice is issued, your personal data will be stored for no less than 5 years due to tax and accounting requirements.
   • If you have given your consent, your personal data will be processed until the date you withdraw your consent.
   • We will process your personal data until you withdraw your consent or object to the processing.
3. Article 3 Collection and processing of personal data
   Please see below for information on what personal data we collect and how we process it.
   • We collect personal data of our users using various communication channels. Data may be provided directly (during a telephone call) or via electronic forms. All data collected is processed in accordance with the provisions governing the processing of personal data, in particular the provisions of the Personal Data Protection Act of 10 May 2018 and the Regulation of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: “General Data Protection Regulation”).
   • We collect the following personal data via the website or the hotline (in the case of telephone calls): your name, surname, telephone and email address, as well as, where applicable, your country of origin, your postal address and company name and the information necessary to make or refund your payment (for example, your bank account number or credit/other payment card number)
   • Your personal data is collected for:
     • The performance of the concluded contract,
     • Confirmation of payment or refund (bank account/payment card number),
     • Communicating with you and the Affiliate, including answering your questions (telephone number – if you request to be contacted by telephone, and email address – for email correspondence)
     • invoicing (company name, VAT number) and fulfilment of other legal obligations,
     • to send you marketing information by e-mail (i.e. a newsletter containing information about our services),
     • and also for statistical purposes.
   • We wish to emphasise that the personal data provided to us are processed within the scope and purpose of the consent given.
   • The administrator may additionally use IP addresses collected during Internet connections for technical purposes related to server administration. In addition, IP addresses are used to collect general, statistical demographic information.
4. Article 4. Controlling the processing of personal data
   Below we provide you with information on how you can control the processing of your personal data by us.
   • We would like to clearly emphasise that each User of our website whose personal data is processed by the Controller, i.e. VIDOK, has the right:
     • to request information on whether we are storing their personal data,
     • to access and inspect their data, to complete, update, rectify their data,
     • to temporarily or permanently suspend processing
     • to request their data to be transferred or deleted
     • to object to or restrict the processing,
     • to withdraw any consents given.
   • To exercise any of the above rights, please send an email to the address provided in the “Contact Us” section.
   • After receiving the request to stop processing, delete the data or modify them, and before carrying out the operation in question, it will confirm the request by contacting the User through one of the available communication channels. Only confirmed operations will be carried out (this does not apply to newsletter services, where the user can unsubscribe without confirmation).
   • The Partner’s personal data may be supplemented, updated or deleted after logging into the Partner’s account or, in the case of unregistered Users, the User may modify or delete their data by sending the relevant request to the Administrator at the address given in the “Contact” tab.
   • The User may at any time request to stop the processing of his/her personal data. The Administrator will cease processing the personal data unless the law or the Administrator’s legitimate interests make it necessary to continue processing them.
   • If you consider that the processing of personal data concerning you violates the provisions of the Data Protection Act (RODO), you have the right to lodge a complaint with the President of the Data Protection Office.
5. Article 5. Sharing and entrusting personal data
   In this section we provide you with information regarding who we entrust your personal data to and for what reasons.
   • Without your express consent, our company does not share your personal data with companies or third parties in order to use it for our own purposes. We would like to point out that, in accordance with current legislation, your personal data may be made available to entities entitled to receive them under applicable law, including the competent judicial authorities.
   • On the other hand, the personal data provided to us may be entrusted to third parties who cooperate with our company. In particular, these include:
     • providers of maintenance and development services for our website
     • E-mail providers
     • Companies providing an electronic information service (newsletter) on behalf of the Administrator,
     • customer service providers, and
     • financial and accounting service providers.
     • external installation companies,
     • external transport companies,
   • The third parties referred to above are obliged under the relevant contracts to use the data entrusted to them exclusively for the purpose indicated by our company. These entities are also obliged to appropriately secure the personal data and keep it confidential.

   • Within the scope of the Administrator’s use of tools supporting its current operations provided, for example, by Google, the Personal Data processed by us may be transferred to a country outside the European Economic Area, in particular to the United States of America (USA) or another country in which an entity cooperating with it maintains tools for the processing of Personal Data in cooperation with the Administrator. In this case, adequate safeguards for the transferred Personal Data have been ensured through the Controller by applying standard data protection clauses adopted under the European Commission Decision and data entrustment agreements for processing that meet the requirements of the Data Protection Regulation (RODO). In the case of data transfers from Europe to the USA, certain entities located there may additionally provide an adequate level of data protection under the so-called Privacy Shield programme (more information is available at: https://www.privacyshield.gov/).