Privacy Policy Page

§ 1
GENERAL INFORMATION

The controller of personal data is ELBO Sp. z o.o., with its registered office in Jelcz-Laskowice, at ul. Oleśnicka 7A, 55-220 Jelcz-Laskowice, entered in the National Court Register under KRS number 0000290164, holding NIP number 9121824839 and REGON number 020590115, hereinafter referred to as the “Controller”.

Contact regarding personal data protection is possible via the e-mail address of the Data Protection Officer appointed by the company: elbo@elbo.wroc.pl, hereinafter referred to as the “DPO”.

This Privacy Policy sets out the rules and conditions for the processing of personal data of users of the website: elbo.wroc.pl by the Controller.

The Controller exercises the utmost care to protect the privacy of data subjects. In order to protect the personal data of persons using the website, the Controller has implemented technical and organisational measures ensuring the protection of processed personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as the “GDPR”.

Personal data provided on the website is treated as confidential and is not visible to other users, except for the account owner, the Controller, or persons authorised by the Controller.

The operation of the fan page complies with the requirements set out in Facebook’s terms and conditions, in particular in the data policy available at facebook.com/about/privacy/update. All information contained in your profile and activities resulting from its use are administered directly by Facebook.

The Controller administers data obtained from the fan page solely for the purpose of responding to questions, commenting on posts, and communicating with users as part of the Controller’s business activities and the content made available by the Controller.

The elbo.wroc.pl website collects information about users of the website and their behaviour through:

voluntarily provided information entered by users in forms,

saving cookie files, so-called “cookies”, on users’ end devices,

recording logins and server logs on servers maintained by the Controller.

§ 2
PURPOSES OF PROCESSING

The Controller processes the personal data of website users for purposes resulting from the functionality of the form, i.e. for the purpose and to the extent necessary for informational contact, including preparing and providing a response to a message sent through the form available on the website, as well as for configuring an appropriate hall according to the customer’s needs.

This means that such data is required in particular for:

responding to messages sent via forms available on the website,

registering on the elbo.wroc.pl website,

sending e-mail notifications,

direct marketing of the Controller’s products and services,

creating registers and records related to GDPR obligations, including, for example, a register of customers who have objected to processing in accordance with the GDPR.

Personal data collected through communication with users of the fan page is processed by the Controller only for the purpose of providing a response, where necessary. Your activity related to the use of our fan page will not be archived outside Facebook.

§ 3
SCOPE OF PERSONAL DATA PROCESSING

Providing personal data is voluntary; however, it is necessary in order to prepare and provide responses to inquiries addressed to the Controller.

In the registration/contact form, the following data is required for contact purposes: name and surname, contact telephone number, e-mail address, telephone number, and the content of the message or inquiry.

Through the operation of the fan page, the Controller collects and processes the following types of personal data:

Facebook identifier, usually containing a name and surname, which is not verified by the Controller in any way to confirm the authenticity of the data,

profile photo, which in some cases may allow the Controller to identify your image,

other photos, which may also contain your image, resulting from the fan page-user relationship; posting photos under posts is voluntary,

the content of your comments and the content of conversations conducted through the Messenger application, which may provide us with your e-mail address, telephone number, and the description included by you in relation to the circumstances of correspondence addressed to the Controller.

§ 4
LEGAL BASIS FOR PROCESSING

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

In order to respond to inquiries submitted by you via the contact form or other forms published on the website, your data will be processed on the basis of the consent voluntarily given by you at the time of submitting the completed form — Article 6(1)(a) of the GDPR.

For the purpose of direct marketing, the legal basis for processing is Article 6(1)(f) of the GDPR, which allows personal data to be processed where the Controller pursues a legitimate interest. In this case, the Controller’s legitimate interest is to provide information about its products and services.

For the purpose of creating registers and records related to GDPR obligations, including, for example, a register of customers who have objected to processing in accordance with the GDPR, we process such personal data because, firstly, the GDPR imposes certain documentation obligations on us in order to demonstrate compliance and accountability, and secondly, if you object to the processing of your personal data for marketing purposes, we need to know to whom direct marketing should no longer be addressed.

The legal basis for such data processing is, firstly, Article 6(1)(c) of the GDPR, which allows personal data to be processed where such processing is necessary for the Controller to comply with legal obligations, and secondly, Article 6(1)(f) of the GDPR, which allows personal data to be processed where the Controller pursues a legitimate interest. In this case, the Controller’s legitimate interest is to have knowledge of persons exercising their rights under the GDPR.

By sending us an inquiry in a private message and/or by commenting on our posts, you consent to the processing of your personal data. The legal basis for processing personal data from the fan page is therefore Article 6(1)(a) of the GDPR, which allows data to be processed on the basis of consent.

If, as a fan page user, you express an interest in using the Controller’s services and wish to establish cooperation and determine its terms, the legal basis for processing your personal data will be Article 6(1)(b) of the GDPR.

Giving consent to the processing of personal data is entirely voluntary; however, failure to give consent prevents the Controller from responding to inquiries addressed to it.

§ 5
RIGHT TO WITHDRAW CONSENT

Where personal data is processed on the basis of consent, the user may withdraw such consent at any time, at their own discretion.

If the user wishes to withdraw consent to the processing of personal data, it is sufficient to send an e-mail directly to the Data Protection Officer appointed by the company at: elbo@elbo.wroc.pl.

If personal data was processed on the basis of consent, withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

§ 6
AUTOMATED DECISION-MAKING AND PROFILING

The Controller does not carry out automated decision-making, including decisions based on profiling.

§ 7
RECIPIENTS OF PERSONAL DATA

Users’ data may be transferred to entities with which we cooperate in order to properly provide services through the website, i.e. entities providing IT services and the hosting operator.

§ 8
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

The Controller does not transfer users’ personal data outside the European Economic Area.

§ 9
PERSONAL DATA RETENTION PERIOD

The Controller stores the personal data of persons using the website until you withdraw your consent to the processing of data, object to the processing of personal data, or request that your data be deleted.

In the case of information held by the Controller as part of comments made available by you on the fan page, such information will remain available on the website until it is deleted by the author. In the case of offensive, vulgar, or unlawful content, the Controller may delete comments and posts at any time.

Your personal data collected by Facebook, i.e. post history and activity history in the Messenger application, is retained in accordance with the rules set out in Facebook’s terms and conditions.

§ 10
INFORMATION ABOUT COOKIES

The elbo.wroc.pl website uses cookies.

Cookies are IT data, in particular text files, which are stored on the end device of the website user and are intended for using the website. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device, and a unique number.

Cookies perform many functions on a website, most often useful ones, which we describe below. If this information is insufficient, please contact us at: elbo@elbo.wroc.pl.

The entity placing cookies on the end device of the website user and accessing them is the Controller’s hosting operator.

Cookies are used for the following purposes:

ensuring security — cookies are used to authenticate users and prevent unauthorised use of the customer panel. They therefore help protect the user’s personal data against access by unauthorised persons;

impact on website processes and performance — cookies are used to ensure that the website operates efficiently and that the functions available on it can be used. This is possible, among other things, by remembering settings between subsequent visits to the website. Thanks to cookies, users can move efficiently around the website and its individual subpages;

session status — cookies often store information about how visitors use the website, for example which subpages they view most often. They also enable the identification of errors displayed on certain subpages. Cookies used to save the so-called “session status” therefore help improve services and increase the comfort of browsing the website;

maintaining the session — if a customer logs in to their panel, cookies enable the session to be maintained. This means that after moving to another subpage, the user does not have to re-enter their login and password each time, which improves the comfort of using the website;

creating statistics — cookies are used to analyse how users use the website, including how many users open the website, how long they stay on it, and which content attracts the most interest. This allows us to continuously improve the website and adapt its operation to users’ preferences. To track activity and create statistics, we use Google tools such as Google Analytics. In addition to reporting website usage statistics, the Google Analytics pixel may also be used, together with some of the cookies described above, to help display more relevant content to users in Google services, such as Google Search, and across the web.

Importantly, many cookies are anonymous to us — without additional information, we are unable to identify your identity on their basis.

If the user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for authentication processes, security, and maintaining user preferences may make it difficult, and in extreme cases may make it impossible, to use websites. Respecting the autonomy of all website users, we nevertheless feel obliged to inform you that disabling or limiting cookies may cause significant difficulties in using the website, for example the need to log in on each subpage, longer page loading times, or limitations in the use of certain functionalities.

The website uses two basic types of cookies: “session cookies” and “persistent cookies”. Session cookies are temporary files stored on the user’s end device until logging out, leaving the website, or closing the software/browser. Persistent cookies are stored on the user’s end device for the period specified in the cookie parameters or until they are deleted by the user.

§ 11
SERVER LOGS

Information about certain user behaviours is logged at the server level. This data is used solely for the purpose of administering the website and ensuring the best possible operation of the hosting services provided.

The viewed resources are identified by URL addresses. In addition, the following information may be recorded:

the time the request was received,

the time the response was sent,

the name of the client station — identification carried out via the HTTP or HTTPS protocol,

information about errors that occurred during the execution of an HTTP or HTTPS transaction,

the URL address of the page previously visited by the user, known as the referrer link, if the user accessed the website via a link,

information about the user’s browser,

information about the IP address.

The above data is not associated with specific persons browsing the website.

The above data is used only for server administration purposes.

§ 12
RIGHTS OF DATA SUBJECTS

We kindly inform you that every website user has the right to:

access their personal data,

rectify their personal data,

delete their personal data,

restrict the processing of their personal data,

object to the processing of their personal data,

transfer their personal data.

We respect the rights arising from personal data protection regulations and strive to facilitate their exercise to the greatest possible extent.

We point out that the above rights are not absolute, and therefore in certain situations we may lawfully refuse to comply with a user’s request. However, if we refuse to comply with a request, we do so only after careful analysis and only where refusal is necessary.

With regard to the right to object, we explain that the user has the right to object at any time to the processing of personal data based on the legitimate interest of the Controller, due to the user’s particular situation.

However, please remember that, in accordance with the law, we may refuse to accept the objection if we demonstrate that:

there are legitimate grounds for processing that override the user’s interests, rights, and freedoms, or

there are grounds for establishing, pursuing, or defending claims.

In addition, the user may object at any time to the processing of their personal data for marketing purposes. In such a case, after receiving the objection, we will stop processing the data for this purpose.

Each user may exercise their rights by sending an e-mail directly to the Data Protection Officer appointed by the company at: elbo@elbo.wroc.pl.

§ 13
RIGHT TO LODGE A COMPLAINT

If the user believes that their personal data is being processed in violation of applicable law, they may lodge a complaint with the President of the Personal Data Protection Office.

§ 14
FINAL PROVISIONS

The elbo.wroc.pl website may contain links to other websites that are not owned or administered by the Controller. In such cases, the Controller is not responsible for their content or access to them. Any links to other websites are provided solely for the convenience of users. The Controller recommends that, after moving to another website, the user should read the privacy policy established there.

Questions or concerns regarding the privacy policy and personal data security on the website may be addressed by e-mail directly to the Data Protection Officer appointed by the company at: elbo@elbo.wroc.pl.

In matters not regulated by this Privacy Policy, the provisions on personal data protection shall apply.

Users will be notified electronically of any changes made to this Privacy Policy.

This Privacy Policy has been in force since 01.01.2024.