In accordance with the requirements of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) hereinafter referred to as the „Regulation”, we inform you that:
(1) Personal data controller
The controller of personal data, hereinafter referred to as the „Administrator” is
Nanores Sp. z o.o. Sp. k. with its registered office at 57-59 Bierutowska Street, 51-317 Wrocław, VAT EU: 8982212066, REGON: 361709380, KRS: 0000561342
Contact with the Administrator:
e-mail:info@nanores.pl
Correspondence address: 57-59 Bierutowska Street, 51-317 Wrocław.
The Administrator is responsible for the use of personal data in a secure manner, consistent with the purposes for which they were collected and in accordance with applicable laws.
(2) General provisions We use the personal data obtained only for the specific, legitimate purposes for which the data were collected. The scope of the personal data, the purpose of processing, the legal basis for such processing, the period of processing and the categories of recipients of the data are determined by the legal requirements incumbent on the Administrator and the nature and scope of the activities undertaken by the data subject.
(3) The purpose of data processing by the Administrator, the legal basis for processing and the period for which personal data will be kept:
(a) Purpose of data processing: To take action at the request of the data subject prior to entering into a contract (e.g., preparation of an offer). legal basis for processing: Article 6(1)(b) of the Regulation („performance of a contract”).
Storage period: The data shall be stored for the period necessary for the performance, termination or expiration of the contract and for the period after which any claims shall be barred.
(b) Purpose of data processing: To conclude and perform the contract (including ensuring the quality of services) legal basis for processing: Article 6(1)(b) of the Regulation („performance of the contract”)
Storage period: Data shall be retained for the period necessary for the performance, termination or expiration of the contract and settlements, and for the period after which any claims will be barred.
(c) Purpose of data processing: To carry out direct marketing (directing communications to carefully selected, individual customers, on a one-to-one basis, with the aim of obtaining a direct response (reply)) Legal basis for processing: Article 6 (1) (f) of the Regulation („legitimate interests of the Administrator”)
Storage period: Data shall be retained for the period of existence of the legitimate interest pursued by the Administrator and for the period after which any claims will be barred. If the data subject successfully objects to the use of his/her personal data, the Controller will no longer process the data for direct marketing purposes.
(d) Purpose of data processing: To carry out marketing legal basis for processing: Article 6(1)(a) of the Regulation („consent of the data subject”).
Storage period: Data shall be stored until the data subject withdraws his consent to further processing of his data for marketing purposes.
(e) Purpose of data processing: Issuing, collecting and storing invoices and accounting documents, and maintaining accounting records legal basis for processing: Article 6(1)(c) of the Ordinance („fulfillment of a legal obligation”) in connection with Article 74(2) of the Accounting Act and in connection with Article 86 § 1 of the Tax Ordinance Act.
Storage period: The data shall be stored for the period in which regulations mandate the retention of accounting books and accounting evidence (i.e., for 5 years, counting from the beginning of the year following the fiscal year to which the data pertains) and for the period after which any tax liabilities become statute-barred
(f) Purpose of data processing: To respond to complaints within the time and form prescribed by law legal basis for processing: Article 6(1)(c) of the Ordinance („fulfillment of a legal obligation”).
Storage period: Data are stored for a period of 1 year after the expiration of the warranty or settlement of the complaint, and thereafter for the period after which any claims become time-barred
(g) Purpose of data processing: Customer’s expression of opinion legal basis for processing: Art. 6(1)(a) of the Regulation („consent of the data subject”)
Storage period: Data shall be stored until the data subject withdraws his consent to further processing of his data for this purpose.
(h) Purpose of data processing: Detection and prevention of fraud Legal basis for processing: Article 6(1)(c) of the Regulation („fulfillment of a legal obligation”).
Storage period: Data shall be stored for the duration of the contract and thereafter for the period after which claims under the contract become time-barred. In the case of the Administrator’s assertion of claims or notification of competent authorities – for the duration of such proceedings and „for 5 years from the beginning of the year following the fiscal year in which operations, transactions and proceedings are finally completed, paid off, settled or barred.”
(i) Purpose of data processing: To establish, defend and enforce claims raised by or against the Administrator (including the sale of claims to another entity) legal basis for processing: Article 6(1)(f) of the Regulation („legitimate interest of the Administrator”) in conjunction with Article 74(2) of the Accounting Act.
Storage period: Data are stored for a period:
after which the statute of limitations for contractual claims expires,
in the case of the Administrator’s pursuit of claims in civil proceedings or covered by criminal or tax proceedings, accounting evidence (which may contain personal data) must be kept „for 5 years from the beginning of the year following the fiscal year in which operations, transactions and proceedings are finally completed, paid off, settled or barred.”
for a period of time during which the Administrator may face legal consequences for failing to comply with the obligation, such as receiving an administrative fine.
(4) Recipients of data
In order to perform the contract and to ensure the proper operation of the Administrator’s websites, the Administrator uses the services of cooperating third parties (for example: mail, couriers, payment processors). Personal data is transferred to external entities only when and to the extent that it is necessary to achieve the purpose of processing. The transferred personal data may be used by external entities only for the purpose of carrying out the task ordered by the Administrator. Personal data may be transferred to the following recipients who cooperate with the Administrator:
entities engaged in postal, courier and similar activities (e.g. courier brokers) – to the extent necessary to carry out delivery and correspondence,
selected entities acting on behalf of the Administrator in handling accounting, tax, consulting, legal and debt collection matters (including entities acquiring receivables) – to the extent necessary to realize the specific purpose of processing,
entities providing technical support services to the Administrator and providers of IT solutions that enable the Administrator to conduct its business (for example, software providers, email providers and hosting) – the Administrator shall make personal data available to a trusted provider acting on its behalf only in the case and to the extent necessary for the fulfillment of the specified purpose of processing,
providers of solutions for the expression/publication of customer opinions – to the extent necessary for the expression of opinions.
(5) Transfer of data outside the European Economic Area
Personal data may be transferred outside the European Economic Area (which includes the European Union, Iceland, Liechtenstein and Norway) to Google LLC based on appropriate legal safeguards, which are standard contractual clauses for the protection of personal data approved by the European Commission. see also Section 9 Web analytics.
(6) Rights of the person whose data is processed by the Administrator
The processing of personal data does not require consent if, among other things: the processing is necessary for the performance of a contract or to take action prior to entering into a contract, it results from a legal obligation incumbent on the Administrator, or it is necessary for the fulfillment of the Administrator’s legitimate interest. Where consent is necessary to be able to process personal data for a specific purpose, the Administrator asks for such consent. The consent granted can be withdrawn at any time.
If consent is withdrawn, the data will no longer be processed to the extent to which the consent was given, but the withdrawal of consent will not affect the legality of the processing that was carried out on the basis of consent before its withdrawal.
Under the terms of the Ordinance, the data subject also has the right to request from the Controller access to, rectification, erasure („to be forgotten”) or restriction of processing of personal data concerning him or her, the right to object to processing, and the right to data portability.
If your personal data are processed for direct marketing purposes, you may object at any time to the processing of such data for marketing purposes, including profiling, to the extent that the processing is related to direct marketing.
In order to exercise the above rights, you must submit a request to the Administrator by email, letter or by submitting the request in person at the Administrator’s office, , The Administrator’s contact information is provided at the outset. In order to be sure that the person submitting the village is authorized to submit it, the Administrator may ask for additional information confirming the identity of the submitter.
The provisions of the Ordinance indicate to what extent each of these rights can be exercised. This will depend, in particular, on the legal basis and purpose of the Administrator’s processing of personal data. The above rights can be exercised free of charge no more than once every 6 months. According to Article 12 of the Ordinance, if the data subject’s requests are manifestly unreasonable or excessive, in particular due to their continuing nature, the Controller may charge a fee.
The data subject has the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection.
(7) Obligation or no obligation to provide personal data
The use of the Administrator’s services and the provision of personal data to the Administrator is voluntary. However, the data subject is obliged to provide such data in connection with:
entering into a contract with the Administrator – in this case, the provision of personal data is a contractual condition and the data subject is obliged to provide the required data if he or she wishes to enter into a contract with the Administrator. Each time the scope of data required to conclude a contract is communicated, the data subject is informed. The consequence of failing to provide the data is the inability to conclude a contract.
fulfillment of the Administrator’s legal obligations – in this case, providing personal data is a statutory condition resulting from regulations imposing on the Administrator obligations to process personal data (e.g. in connection with the obligation to issue, collect and store invoices and accounting documents and to keep accounting books). Failure to provide such data will make it impossible for the Administrator to perform the indicated duties with the consequence that it will not be possible to conclude a contract.
(8) Use of data for advertising purposes
8.1 Newsletter
The Newsletter is sent only to those Users who have agreed to it and provided their e-mail address. At any time, consent to receive the newsletter may be withdrawn by contacting the Administrator at the above address.
8.2 Banner advertising
A banner advertisement is an advertisement that, when clicked on, takes the User to another page. Banner advertising, for example, presents the User with products that he/she has viewed or similar products. We may also present ads from our partners. Banner advertising uses cookies or pixels. Direct User Information is not recorded. Only pseudonymized data is used. Additional information about cookies, pixels and retargeting/remarketing is provided below.
8.3 Cookies
The Administrator’s websites use cookies („cookies”), which are text files stored on the User’s device. These files make it possible to analyze the use of the website and identify the User’s browser. By making the appropriate browser settings, you can block the installation of cookies – this may result in a limitation of the website’s functionality.
The Administrator may process the data contained in the cookies to anonymously analyze the activities of visitors, study their behavior (e.g. opening certain pages) in order to provide them with advertisements tailored to their anticipated interests, also when they visit other websites that are partners in the advertising network of Google Inc. and Facebook Ireland Ltd. and to improve the administration of the Administrator’s websites.
8.4 Onsite Targeting
The Administrator uses cookie technology to conduct analysis of visitors’ activities (e.g., opening of certain subpages) and may present the User with advertisements and/or special offers. The purpose of these activities is to present the User with content most relevant to the User’s search area.
8.5 Retargeting, third-party cookies and third-party data collection for the purposes of banner advertising
The Administrator’s websites use retargeting (remarketing) technology.
The Administrator uses third parties that apply cookies on the Administrator’s website, these are:
Google Analytics, Universal Analytics and Google Remarketing provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Detailed information on the operation of the above services is available at https://policies.google.com/technologies/partner-sites?hl=pl see also https://policies.google.com/privacy/update?hl=pl&gl=pl
and from the Facebook Pixel service provided by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Detailed information available at https://www.facebook.com/about/privacy
You can disable cookies by changing the settings of your web browser.
8.6 How can you block the saving of cookies?
In order to block the saving of cookies, the User should enable settings in his/her Internet browser to accept the saving of cookies only if he/she agrees to it.(see 8.3) To accept the use of the Administrator’s cookies, while blocking the use of third-party cookies, select the „Block third-party cookies” option in the browser settings.
8.7 Contests, market research and opinion polls
Each contest and promotional action has separate Regulations. In order to participate in them, the User is asked to provide the personal data listed in the given Regulations and by giving his/her consent including the use of telecommunication devices (telephone number, e-mail address) by the organizer of the contest, market research or opinion poll in order for the Administrator to carry out direct marketing. The personal data provided will be processed for the purpose of conducting the contest, notifying the winner and for the purpose of market research or user opinion research.
The answers provided in the market survey or opinion poll are not shared with third parties or published.
(9) Web analytics
The administrator uses the Google Analytics web analytics service provided by Google. Google Analytics analyzes user behavior on the website through the use of cookies. The information generated by the cookies regarding your use of the website (including your IP address) is transmitted to and stored by Google on servers in the United States. Google will use this information to analyze your use of the website, create reports for sites using Google Analytics and provide other services. Google may also transfer this information to third parties where required to do so by law, or where third parties process the information on Google’s behalf.
By using the website, you consent to the processing of data concerning you by Google in the manner and for the purposes specified above.
The website is analyzed by Google Analytics with the extension „_anonymizeIp()” and, therefore, IP addresses are processed only in abbreviated form, which makes it impossible to directly associate the address with the User in question.
The User may opt out of cookies by making the appropriate browser settings. This may result in a limitation of the site’s functionality and the use of all its functions may not be possible.
Consent to the collection and collection of personal data can be withdrawn at any time with effect for the future.
In order to prevent the transfer of data, generated by the cookie, relating to your use of the website (including your IP address) to Google and the processing of this data by Google, simply download and install the blocking plug-ins available on your browser at the following address: https://tools.google.com/dlpage/gaoptout?hl=en
(10) Server log files
Your web browser provides data about your activities on the Administrator’s websites, which are stored in server log files. The data records saved in this way contain the following data: date and time of the download, name of the page opened, amount of data downloaded, as well as information about the product version of the web browser used, IP address, URL of the reference page (address of the page from which the user was redirected).
The server log file data records are analyzed for troubleshooting, server performance management, protection against DDoS attacks, and customization of offerings.
(11) Automated decision-making and profiling
Personal data will not be used for automated decision-making that produces legal effects on the data subject, including profiling.
(12) Final provisions
The Administrator’s websites may contain links (references) to other websites. Such websites operate independently of the Administrator and are not supervised by the Administrator in any way. The Administrator recommends that when you go to other sites, you should read their own privacy policies. The Administrator is not responsible for the data handling policies of such websites.