INFORMATION OBLIGATION

Home > Privacy policy

This document sets out terms and conditions of processing of personal data (hereinafter also referred to as “the Data”) and cookies on progress-screens.com website, run via website, available at the following URL address: progress-screens.com, hereinafter referred to as “the Website.”

TABLE OF CONTENTS

Article 1. HOW TO CONTACT DATA CONTROLLER

Article 2. ON WHAT BASIS DO WE PROCESS YOUR DATA?

Article 3. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF CONCLUDING AND PERFORMING CONTRACTS, POSSIBLE PURSUANCE OF CLAIMS AND DEFENCE AGAINST THEM

Article 4. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF SENDING A NEWSLETTER

Article 5. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF DIRECT MARKETING

Article 6. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF ENSURING SAFETY

Article 7. INFORMATION ON DATA RECIPIENTS

Article 8. INFORMATION ON TRANSFER OF DATA TO THIRD COUNTRIES

Article 9. UNCONDITIONAL RIGHTS OF DATA SUBJECTS

Article 10. CONDITIONAL RIGHTS OF DATA SUBJECTS

Article 11. COOKIES – INTRODUCTION

Article 12. DATA CONTROLLER’S COOKIES

Article 13. THIRD-PARTY COOKIES

Article 14. CONSENT FOR USING AND MANAGING COOKIES

Article 15. CACHE

Article 16. LINKS TO OTHER WEBSITES OR SOFTWARE

Article 17. CHANGES OF PRIVACY AND COOKIES POLICY

Article 1. HOW TO CONTACT DATA CONTROLLER

Progress Eco S.A. with its registered office in Dobrów 7, Tuczępy (28-142), entered into the Register of Entrepreneurs of the National Court Register [KRS] under KRS number: 0000934920, NIP [Tax ID No.]: PL9482597879 and REGON: [Business ID No.] 146269016 shall be the controller of data processed within the Website.

The Data Controller may be contacted by e-mail (ado@progress-screens.com).

Article 2. ON WHAT BASIS DO WE PROCESS YOUR DATA?

While collecting personal data, we always inform of the legal basis for their processing. It results from the provisions of the GDPR (the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – General Data Protection Regulation). If we inform of:

Article 6(1)(a) of the GDPR – it shall mean that we process personal data on the basis of the obtained consent,
Article 6(1)(b) of the GDPR – it shall mean that we process personal data since they are necessary for the performance of a contract or for undertaking actions prior to its conclusion, at request,
Article 6(1)(c) of the GDPR – it shall mean that we process personal data in order to fulfil legal obligation,
Article 6(1)(f) of the GDPR – it shall mean that we process personal data in order to pursue legitimate interests.

Article 3. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF CONCLUDING AND PERFORMING CONTRACTS, POSSIBLE PURSUANCE OF CLAIMS AND DEFENCE AGAINST THEM

1. We may process personal data necessary for the performance of the contract concluded with you. However, prior to its conclusion, we may transfer personal data necessary for undertaking actions at your request. Those data shall be processed pursuant to Article 6(1)(b) of the GDPR.

2. In the course of the performance of the contract and after it has been performed, we process personal data of the party thereto in order to consider and pursue possible claims. Our legitimate interest shall be, for example, the possibility to reply to a possible complaint, which is our obligation resulting from separate provisions of the civil law. In such a case, we shall transfer personal data on the basis of legitimate interest consisting in defending against or pursuing possible claims. Those data shall be processed pursuant to Article 6(1)(f) of the GDPR.

3. We shall store those data for a period necessary for the achievement of specific goals, not later than until the limitation of claims resulting from separate provision of law.

4. You shall have the right to access, rectify, erase and restrict the processing of your data, the right to transfer data, as well as the right to lodge a complaint with a supervisory authority. In the case of processing of data for the purpose specified in Clause 3, you shall have the right to object to their processing.

5. Providing those data is voluntary, yet failure to do so shall prevent you from concluding or performing a contract.

6. The recipients of those data shall be: our web hosting provider, IT services provider, advertising services provider, communicator provider, e-mail service provider, legal, consulting, and debt collection services, as well as other service providers providing services to us for the specific goal.

Article 4. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF SENDING A NEWSLETTER

1. We allow you to subscribe to our newsletter. If you have used this functionality, we shall process your personal data exactly for the purpose of sending a newsletter. The newsletter may include advertising, commercial or marketing content.

2. Those data shall be processed on the basis of your consent, thus pursuant to Article 6(1)(a) of the GDPR.

3. You shall have the right to withdraw your consent at any time. However, the withdrawal of consent shall not affect the legitimacy of previous data processing.

4. We shall store your data until the withdrawal of consent. If you do not withdraw your consent, we shall process your data until we stop sending the newsletter.

5. You shall have the right to access, rectify, erase and restrict the processing of your data, the right to transfer data, as well as the right to lodge a complaint with a supervisory authority.

6. Providing those data is voluntary, yet failure to do so shall prevent us from sending the newsletter.

7. The recipients of those data shall be: our web hosting provider and e-mail service provider.

Article 5. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF DIRECT MARKETING

1. We may process your data for the purpose of direct marketing. It takes place, for example, when we reply to your message, setting out our offer.

2. Those data shall be processed pursuant to Article 6(1)(f) of the GDPR.

3. We shall store your data for a period necessary for the purpose of performance.

4. You shall have the right to access, rectify, erase and restrict the processing of your data, the right to transfer data, the right to object to data processing, as well as the right to lodge a complaint with a supervisory authority.

5. Providing those data is voluntary, yet failure to do so shall prevent us from performing direct marketing activities.

6. The recipients of those data shall be: our web hosting provider, IT services provider, advertising services provider and e-mail service provider.

Article 6. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF ENSURING SAFETY

1. Every time you visit our website, we process the following data for the purpose of ensuring the safety of services:

public IP address of a device from which an enquiry has been sent,
web browser type and language,
enquiry date and time,
number of bytes sent by the server,
URL address of previously visited website if you have visited our website with the use of this link,
information on enquiry errors.

2. Our legitimate interest in this processing shall be keeping the server logs and securing the Website against possible hacker attack and other malpractice. Including the possibility to determine the IP address of a person taking illegitimate action on the Website, such as an attempt to breach security, publication of prohibited content or an attempt to take illegitimate action with the use of our servers.

3. Those data shall be processed pursuant to Article 6(1)(f) of the GDPR.

4. We shall store those data for a period necessary for the achievement of specific goals, not later than until the limitation of claims resulting from separate provision of law.

5. You shall have the right to access, rectify and erase your data, restrict and object to their processing, as well as the right to lodge a complaint with a supervisory authority.

6. Providing those data is necessary for using the Website. Failure to provide those data shall prevent you from using the Website.

7. The recipients of those data shall be our web hosting provider and IT services provider.

Article 7. INFORMATION ON DATA RECIPIENTS

While processing personal data, we use external services. Therefore, third parties may be the recipients of your personal data. While collecting personal data, we always inform of those recipients, however for the sake of message’s clarity the information we provide is brief. Therefore, we hereby explain that if we inform of particular categories of recipients, those entities are:

Web hosting provider: nazwa.pl Sp. z o.o., ul. Mieczysława Medweckiego 17, 31-870 Kraków.
IT services provider.
E-mail service provider: Microsoft Corporation, One Microsoft Way, Redmond, Washington, United States of America.
Communicator provider: Microsoft Corporation, One Microsoft Way, Redmond, Washington, United States of America.
Advertising services provider.
Legal / consulting / debt collection services provider – those service providers are determined individually as needed.
Newsletter service provider: SENDINBLUE – 55 rue d’Amsterdam, 75008 Paris, France; Microsoft Corporation, One Microsoft Way, Redmond, Washington, United States of America.

Article 8. INFORMATION ON TRANSFER OF DATA TO THIRD COUNTRIES

1. Since we use the services of other suppliers, your personal data may be transferred outside the European Economic Area, namely to: United States of America (USA).

2. The European Commission has determined that some countries outside the European Economic Area (EEA) protect personal data with due care and diligence.

3. Since the country to which we transfer personal data has not been considered safe, the data are transferred under a contract containing standard data protection provisions adopted by the European Commission.

Article 9. UNCONDITIONAL RIGHTS OF DATA SUBJECTS

If we mention the rights related to the processing of your personal data, we shall refer to the following rights. The possibility to exercise the following rights is independent from the legal basis for personal data processing.

Right of access

You shall have the right to obtain from us confirmation as to whether or not your personal data are being processed, and, where that is the case, access to the personal data and the following information:

the purposes of the processing,
the categories of personal data concerned,
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations,
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,
the existence of the right to request from us rectification or erasure of personal data or restriction of processing of your personal data or to object to such processing, as well as the right to lodge a complaint with a supervisory authority,
where the personal data are not collected from you, any available information as to their source,
the existence of automated decision-making, including profiling and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Once we have received such a request, we shall have the obligation to provide you with a copy of personal data subject to processing. If such a request is made by e-mail and if there are no other objections, we shall reply by e-mail as well.

Right to rectification

You shall have the right to obtain from us without undue delay the rectification of your inaccurate personal data. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (“right to be forgotten”)

You shall have the right to obtain from us the erasure of your personal data without undue delay and we shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

you have withdrawn consent on which the processing is based, and we do not have any other legal ground for the processing,
you have stressfully objected to the processing of your personal data,
your personal data have been unlawfully processed,
your personal data have to be erased for compliance with a legal obligation,
your personal data have been collected in relation to the offer of information society services.

Right to restriction of processing

You shall have the right to obtain from us restriction of processing where one of the following applies:

you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data,
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead,
we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims,
you have objected to the processing of your data pending the verification whether our legitimate grounds override yours.
Automated decisions, including profiling
You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

The right shall not apply if the decision:

is necessary for entering into, or performance of, a contract between you and us,
is authorised by the European Union or Polish law which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
is based on your explicit consent.
Right to lodge a complaint

You shall have the right to lodge a complaint in relation to the processing of your personal data with the following supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, telephone number: 22 531 03 00, fax: 22 531 03 01,
e-mail: kancelaria@uodo.gov.pl.

Article 10. CONDITIONAL RIGHTS OF DATA SUBJECTS

If we mention the rights related to the processing of your personal data, we shall refer to the following rights. The possibility to exercise the following rights is dependent on the legal basis for personal data processing.

Right to withdraw consent for processing

If we process your personal data on the basis of your consent, you shall have the right to withdraw it at any time. Of course, the withdrawal of consent shall not affect the legitimacy of previous data processing.

Right to data portability

You shall have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format. You shall also have the right to transmit those data to another controller without hindrance from us, where:

the processing is based on consent or a contract, and
the processing is carried out by automated means.
In exercising your right to data portability, you shall have the right to have the personal data transmitted directly from us to another controller, where technically feasible. This right shall not adversely affect the rights and freedoms of others.

Right to object

If we process your personal data on the basis of Article 6(1)(f) of the GDPR, you shall have the right to object, on grounds relating to your particular situation, at any time to the processing of those data.

We shall no longer process the personal data then, unless we demonstrate:

compelling legitimate grounds for the processing which override your interests, rights and freedoms or
grounds for the establishment, exercise or defence of legal claims.
If you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.

Article 11. COOKIES – INTRODUCTION

The Website uses cookies. They are commonly used, small files containing character string which are sent and saved on terminal equipment (e.g. computer, laptop, tablet, smartphone) used while visiting the Website. This information is sent to the memory of your web browser which sends it back when you visit a website again. Cookies may be categorised according to three methods of division.

In terms of the purpose of cookies, three categories are distinguished:

Necessary cookies – they allow for a proper operation of a website and their functionalities, e.g. authentication or secure cookies. Without saving them on your device, you shall not be able to use a website.
Analytical cookies – they allow for the monitoring of the opened websites, traffic sources, time spent on a website. Without saving them, the functionalities of a website shall be limited.
Advertising cookies – they allow for displaying personalised advertisements on and outside website. Without saving them, the functionalities of a website shall be limited.
Social media cookies – they allow for displaying and liking a fanpage on a website. Without saving them, the functionalities of a website shall be limited.
In terms of validity period, two categories are distinguished:
session cookies – existing until the end of a given session,
persistent cookies – existing after the end of a given session.

In terms of entities administering cookies, the following categories are distinguished:

our cookies,
third-party cookies.

Article 12. DATA CONTROLLER’S COOKIES

Cookies administered by us allow for securing the Website against hacker attacks.

Article 13. THIRD-PARTY COOKIES

GOOGLE

We use cookies administered by Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States of America under the following services:

Google Ads – advertising cookies used for organising and assessing the quality of advertising campaigns conducted with the use of Google Ads service,
Google Analytics – analytical cookies used for researching the behaviour and traffic of users and preparing traffic statistics.

Cookies collected by Google Inc. are of anonymous and collective nature. In particular, they do not contain identifying features (understood as personal data) of the Website’s users. While using the abovementioned services, we collect such data as the sources of obtaining users visiting the Website, as well as the manner of their behaviour on the Website, information on their devices and web browsers, IP address, domain, demographics (age, gender), interests and geographical data.

You can learn more about this at: https://policies.google.com/technologies/cookies?hl=pl

FACEBOOK

We use cookies administered by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, United States of America:

Advertising pixel tags used by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, United States of America. They are the elements published in digital contents which allow for registering information, e.g. on the activity on a website, as well as for assessing the efficiency of advertising. A pixel tag of Facebook Inc. may be managed via Facebook, in the user panel.

You can learn more about this at: https://www.facebook.com/policies/cookies/

SMARTLOOK

We use cookies administered by Smartsupp.com, s.r.o., Company reg. no.: 03668681, VAT ID: CZ03668681, Lidicka 20, Brno, 602 00, Czech Republic. Thanks to the Smartlook tool, we analyse your activity on our website, including: information about your device and web browser and its language, location, as well as anonymised IP address. We carry out this analysis to optimise our website in terms of its usefulness. If you want to object to the processing of your data for those purposes, use the following link: https://www.smartlook.com/opt-out

LinkedIn

We use cookies administered by LinkedIn Corporation, 1000 West Maude Avenue Sunnyvale, CA 94085, United States of America. Those cookies may be used to process your activity on LinkedIn. The processing of this activity may be of public nature.

Article 14. CONSENT FOR USING AND MANAGING COOKIES

Except for necessary cookies, cookies shall be processed on the basis of the consent of a user.

Consent for processing cookies is voluntary and may be withdrawn at any time. However, it should be noted that failure to give consent for using some cookies may result in limiting the use of the Website and its functionalities, and even prevent you from using the Website.

You may give your consent for the processing of cookies by means of:

settings of software installed on your ITC terminal equipment,
a button containing a statement of consent to the processing of cookies or a confirmation that you have read its terms and conditions,
settings available on a website.

Article 15. CACHE

When you use the Website, we may automatically use cache installed on your device. It is possible to store data between sessions, i.e. between subsequent visits of the Website, under local storage. Cache is used to accelerate the Website’s operation by eliminating a situation in which the same data would be repeatedly downloaded from the Website, thus overloading the User’s internet connection. Cache may also store such data as login password.

Article 16. LINKS TO OTHER WEBSITES OR SOFTWARE

The Website may contain links to other websites or software. We shall not be liable for the terms and conditions of privacy and cookies processing policy applicable at those websites or in that software. We recommend learning about the privacy and cookies policy of those websites or software upon visiting them or before their installation.

Article 17. CHANGES OF PRIVACY AND COOKIES POLICY

1. The Privacy and Cookies Policy shall enter into force upon its publication on the Website.

2. The Privacy and Cookies Policy shall be changed by publishing its new version on the Website.

3. We shall publish the information on the change of the Privacy and Cookies Policy on the Website, not later than 3 days before the date on which its new version becomes effective.