This privacy notice explains what kind of personal data we collect and how we use it. The processing of data is based on the principles of correctness, legality, transparency, protection of confidentiality and respect for your rights.
Your personal data (i.e. name, address, telephone number, e-mail address, instant messenger address) are only collected when you provide them on your own initiative, for example via the contact form of this website (https://lejapolska.com/, the contact form shows which data is collected when filling in such a form) and in the e-mail correspondence addressed to us.
The provision of data is voluntary, but necessary in order to obtain a product offer and to conclude and perform a contract (sales contract, service contract).
In addition, we record the IP address assigned by your internet service provider to the computer system you used to fill in the contact form, as well as the date and time of filling it in. The collection of this data is necessary in order to be able to trace the (possible) misuse of your e-mail address at a later stage, i.e. for our legal protection. This personal data will not be passed on to third parties.
I. Controllers of personal data
In accordance with Articles 13, 26 and 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the “General Data Protection Regulation”) (“GDPR”), we inform you about the fact that we jointly process your personal data and inform you about the main content of the joint arrangements of the Co-Handlers.
The co-handlers of your personal data are:
- Leya Vissers limited partnership with its registered office in loc. Studzieniec (KRS 0000934872), hereinafter referred to as the Executive Administrator.
- Leja Spółka z ograniczoną odpowiedzialnością spółka komandytowa with its registered office in loc. Studzieniec (KRS 0000589056), hereinafter referred to as Co-Administrator.
The co-handlers jointly administer your personal data for the following purposes:
- for the conclusion of a contract and its subsequent performance (basis under Article 6(1)(b) of the GDPR);
- for the purpose of us offering you products directly (direct marketing), which is the exercise of our legitimate interest in doing so (basis of Article 6(1)(f) GDPR);
- for analytical purposes [general optimisation of our products, optimisation of our service processes, building up knowledge about our customers, financial analysis of our company, etc.], which is the exercise of our legitimate interest in doing so (basis of Article 6(1)(f) of the GDPR);
- for the possible establishment, investigation or defence against claims in pursuance of our legitimate interest in this regard (basis of Article 6(1)(f) of the GDPR);
- for archiving (evidence) purposes, in pursuit of our legitimate interest in preserving information in the event of a legal need to prove the facts (Article 6(1)(f) GDPR);
- for customer satisfaction surveys in pursuit of our legitimate interest in determining the quality of our service and the level of satisfaction of our customers with our products and services (basis of Article 6(1)(f) GDPR);
II. Common arrangements between the Administrators
As part of the Co-Administration Agreement, we and the Co-Handler have agreed on our respective responsibilities regarding the fulfilment of our obligations under the GDPR, in particular we have agreed that:
- We, as the Executive Administrator, are responsible for performing the information obligation towards you.
- Leja Spółka z ograniczoną odpowiedzialnością spółka komandytowa, as Co-Administrator is responsible to you for enabling you to exercise your rights. Notwithstanding this arrangement, you may also exercise your rights against us. In this case, we will forward your request to the Co-Administrator, who will fulfil your request.
III. Contact point
Together with the Co-Handler, we have decided to establish a common point of contact, which you can contact regarding the protection of your personal data by email at info@lejapolska.com or in writing to our registered office address: Studzieniec 28, 64-610 Rogoźno.
IV. Your rights. Right to object
In accordance with the GDPR, you have:
- The right to access your data and to receive a copy of it;
- The right to rectify (amend) your data;
- The right to erasure, restriction of data processing;
- The right to data portability;
- The right to lodge a complaint with a supervisory authority,
- The right to object to the processing of your data.
You have the right to object to the processing of your data on the basis of point I(2) to (6) (i.e. where we cite a legitimate interest, but excluding direct marketing) described above. We will stop processing your data for these purposes unless we can demonstrate that there are compelling legitimate grounds for us to process your data which override your interests, rights and freedoms or your data is necessary for us to possibly establish, assert or defend claims.
You have the right to object to the processing of your data for direct marketing purposes at any time. If you exercise this right – we will stop processing your data for this purpose.
V. Data retention period
Your personal data resulting from the conclusion of a contract of sale or provision of services will be processed for the period during which claims related to the contract may arise, i.e. 3+1 years from the end of the year in which the contract expired, of which the period of 3 years is the longest possible limitation period for claims, an additional year is for last-minute claims and problems with delivery, and the counting from the end of the year serves to determine a single data deletion date for contracts ending in a given year.
If a contract is not concluded within 3 months after we have made you an offer / after we have received your offer, your personal data related to the contractual arrangements will be deleted immediately with the exception of data needed for direct marketing.
We may process data processed for direct marketing of our products and services until you object to its processing for this purpose or we determine that it has become obsolete.
VI. Recipients of data
Your personal data may be disclosed to our subcontractors (processors), including the commercial broker “SAVIA” WILLEM VISSERS, based in Kicin, 6 Makowa Street, 62-004 Kicin, and to transport, accounting, legal, tax, IT companies, loss adjusters, loss adjustment contractors, marketing agencies.
VII. Website data
The joint controllers process and store the collected data (which are always anonymous) in order to ensure the proper functioning of the website, to optimise its content, to carry out statistical analysis on the basis of aggregated data on how the website is viewed, to analyse the technical functioning of the website, and to ensure the security of our IT systems. The fulfilment of these purposes constitutes our legitimate interest in processing the data in accordance with Article 6(1)(f) GDPR.
Each time you access our website, and more specifically each time information is retrieved (or an attempt is made to retrieve it) from a cookie, data relating to this operation is stored in a log file.
The following data record is stored for each download:
- IP address;
- the region (not the address) from which the IP address accesses the website;
- browser language, browser type (e.g. Chrome, Firefox, Safari) and operating system;
- the type of device (e.g. mobile phone, computer, tablet);
- how the website was used (e.g. when the website was visited, what parts of the website were clicked on, how long the website was used)
- the website from which you came to our site.
The legal basis for the use of cookies and other techniques in the field of web tracking and the use of the information obtained through them is, in accordance with Article 6(1)(f) GDPR, the protection of our legitimate interests as regards the best possible functionality of the website and the user-friendly preparation of visits to the website. In accordance with Article 6(1)(a) of the GDPR, we obtain your consent to the use of functional and marketing cookies through the settings under “Cookies and other similar techniques” on this website.
Cookies are stored for as long as necessary for the purpose in question.
You may be redirected from our website to external websites via links. We are not the administrators of these sites and are not responsible for the content displayed on them or for the data protection standards applied by these external companies. We recommend that you carefully review the data protection policies available on such external websites.
VIII. Security of stored data
The transmission and storage of data is never completely secure. However, the Executive Administrator and the Co-Hanlder make every effort to ensure the highest level of protection of personal data and to safeguard it against unauthorised access and abuse.
The Executive Administrator and the Co-Handler undertake to limit access to your personal data only to those persons whose access to the personal data is necessary for the purposes mentioned above. In addition, the Executive Administrator and the Co-Handler shall ensure that only persons who have a personal authorisation granted by the Executive Administrator and the Co-Handler are allowed to process personal data, and that persons allowed to process personal data have undertaken an obligation to keep personal data confidential, and that persons have been previously trained in the principles and regulations of personal data protection. The Executive Administrator and the Co-Handler shall ensure an adequate level of personal data security.
IX. Changes in the privacy policy
We reserve the right to change this Privacy Policy at any time. We therefore recommend that you check the Privacy Policy regularly.
Status as of: May 2022.