Each time a website page is requested, meaning each visit to our website, the server automatically records technical log data, such as the name of the requested file, IP address, date and time of the request and the amount of data transferred, and also records the page request.

Personal data of all people using the Website (including IP addresses or other identifiers and information collected through cookies or similar technologies) is processed by the Controller in order to provide electronic services consisting in making the content collected on the Website available to Users. In this case, the legal basis for processing is that it is necessary for the performance of a contract (Article 6(1)(b) GDPR). Data is also processed for technical and administrative purposes, to ensure the security of the IT system and to manage that system. In this case, the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR).

• Email and contact forms

The Controller enables contact by email and through contact forms. Using these forms of contact requires providing the personal data necessary to correspond with the User and reply to the enquiry sent. The User may also provide other data to make handling the enquiry easier. Providing data is voluntary, but refusal to provide it will make correspondence impossible. Personal data provided in an email message/contact form will be processed for the purposes of conducting correspondence, providing information and answering questions, which constitutes the Controller’s legitimate interest (Article 6(1)(f) GDPR).

• Social media platforms

The Website contains links to external websites: Facebook, Instagram and YouTube, where the Controller maintains its profiles, the so-called “fan pages”. Personal data processed through these websites is controlled by third parties. The processing of your personal data by these entities is governed by the laws applicable to the administrators of those services and by their internal regulations, such as privacy policies. This Privacy Policy does not regulate personal data processing by those entities.

However, the Controller may also be an independent controller of personal data processed as part of operating fan pages, processing personal data under the rules described below and for the following purposes:

• carrying out marketing activities consisting in informing people about the Company’s activities and services through fan pages, including by publishing posts, which constitutes the Controller’s legitimate interest (Article 6(1)(f) GDPR);
• replying to private messages sent through social media platform functionality; in this case, the basis for data processing is the Controller’s legitimate interest in conducting correspondence (Article 6(1)(f) GDPR);
• conducting discussions under posts published on fan pages, on social media platforms or on websites that allow discussion through accounts created on social media platforms, which constitutes the Controller’s legitimate interest (Article 6(1)(f) GDPR);
• obtaining statistical data – the Controller may obtain statistical data about fan pages from social media platform operators. This data is created on the basis of monitoring your activity on fan pages by the operators of those social media platforms. In this situation, the Controller’s legitimate interest is the analysis of statistical data concerning fan pages (Article 6(1)(f) GDPR).

Providing personal data is voluntary. If you communicate with the Controller through social media platforms in any form, the Controller will automatically receive the data indicated in your account details (first name, surname or nickname, as well as your photo and other publicly available information). You may stop following the Controller’s fan pages and delete comments you have posted at any time.