Privacy Policy

PRIVACY POLICY AND COOKIES POLICY

As the Administrator, I process your personal data. I care for and protect it appropriately and in accordance with applicable regulations. Find out what happens to your data with me.

In the privacy policy you will find the rules for the processing of personal data and the use of cookies in connection with the use of the anadiag.pl website.

GENERAL INFORMATION

By using the website anadiag.pl, hereinafter referred to as the Website, you accept the following terms of the Privacy Policy.

This Privacy Policy sets out the principles of processing and protecting personal data provided by Users and cookies, as well as other technologies appearing on the anadiag.pl website.

The administrator of the website and personal data is ANADIAG SAS Oddział w Polsce, conducting business activity under the name ANADIAG SAS Oddział w Polsce, ul. Sadowa 16/22, 95-100 Zgierz, NIP: 105 000 04 97, hereinafter referred to as the Administrator.

In case of any doubts regarding the provisions of this Privacy Policy, please contact the Administrator via e-mail:

Info-polska@anadiag.pl.

The Administrator reserves the right to make changes to the privacy policy, and each website user is obligated to be familiar with the current privacy policy. Changes may be due to the development of internet technology, changes in generally applicable law, or website development. The date of publication of the current Privacy Policy is listed at the bottom of the page.

PERSONAL DATA PROTECTION

In accordance with Article 13 paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”), I hereby inform you that:

I. As the Personal Data Controller

I have not appointed a Personal Data Protection Officer (DPO) and I perform the duties related to the processing of personal data independently.

II. Purposes and basis of processing

Your personal data will be processed for the following purposes, based on the indicated legal bases:

a) to perform a service or a concluded contract, to send an offer (e.g. advertising) at your request – pursuant to Article 6(1)(b) of the GDPR (necessity to conclude and/or perform a contract or to take action at your request);

b) issuing an invoice, bill and fulfilling other obligations arising from the provisions of tax law – pursuant to Article 6 paragraph 1 letter c of the GDPR (obligation arising from the provisions of law);

c) providing a discount or informing about promotions and interesting offers of the Controller or entities recommended by it – pursuant to Article 6 paragraph 1 letter a of the GDPR (consent);

d) consideration of complaints or claims related to the contract – pursuant to Article 6 paragraph 1 letter b of the GDPR (necessity for the conclusion and/or performance of the contract) and pursuant to Article 6 paragraph 1 letter c of the GDPR (obligation arising from legal provisions);

e) establishing, pursuing or defending against claims – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);

f) conducting the recruitment process – for the purpose and for the time necessary to take the steps necessary before concluding the contract – Article 6 paragraph 1 letter b of the GDPR, and in the case of data provided voluntarily by the candidate – on the basis of Article 6 paragraph 1 letter a of the GDPR, and Article 9 paragraph 2 letter a – in the case of sensitive data provided by the candidate, as well as for the purposes of future recruitment – on the basis of the expressed consent based on Article 6 paragraph 1 letter a of the GDPR;

g) telephone and/or e-mail contact in matters related to the provision of the service – pursuant to Article 6 paragraph 1 letter b of the GDPR (necessity for the conclusion and/or performance of the contract);

h) telephone and/or e-mail contact for the purpose of presenting an offer and direct marketing – pursuant to Article 6(1)(a) of the GDPR (consent) and Article 6(1)(f) of the GDPR (legitimate interest of the controller), if you are already my client;

i) creating registers related to the GDPR and other provisions – pursuant to Article 6(1)(c) of the GDPR (obligation resulting from legal provisions) and Article 6(1)(f) of the GDPR (legitimate interest of the controller);

j) archival and evidentiary purposes, for the purpose of securing information that may be used to prove facts – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);

k) analytical, consisting, among others, in the analysis of data collected automatically when using the website, including cookies, e.g. Google Analytics cookies, Facebook Pixel – pursuant to Article 6 paragraph 1 letter f of the GDPR (legitimate interest of the controller);

l) use of cookies on the Website and its subpages – pursuant to Article 6(1)(a) of the GDPR (consent) and Article 6(1)(f) of the GDPR (legitimate interest of the controller);

m) managing the Controller’s website and websites on other platforms – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the Controller);

n) for the purpose of processing, recording and disseminating your image, if you have given your consent – pursuant to Article 6(1)(a) of the GDPR (consent);

o) for the Controller’s internal administrative purposes related to managing contact with the User, which is the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);

p) in order to tailor the content displayed on the Controller’s websites to individual needs and to continuously improve the quality of the services offered – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the Controller);

q) for the purpose of direct marketing of the User’s own products or services or recommended third-party products – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);

r) in order to create our own databases of customers and potential customers – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);

s) in order to operate the fanpage under the name ANADIAG Polska on Facebook and interact with users – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);

t) for the purpose of conducting remarketing in social media on the Facebook platform – pursuant to Article 6 paragraph 1 letter f of the GDPR (legitimate interest of the controller, consisting in the promotion and advertising of the Controller’s services through remarketing directed to persons subscribed to mailings or visitors to a given website).

III. Data storage period

Your data will be stored:

for the period of service provision and cooperation, as well as for the limitation period for claims in accordance with legal provisions – in relation to data provided by contractors and customers,

for the period of talks and negotiations preceding the conclusion of the contract or the provision of the service – in relation to the data provided in the request for quotation,

for the period required by law, including tax law – in relation to personal data related to the fulfillment of obligations arising from applicable provisions,

until an effective objection is lodged pursuant to Article 21 of the GDPR – in relation to personal data processed on the basis of the legitimate interest of the controller, including for direct marketing purposes,

until consent is withdrawn or the purpose of processing, or the business purpose, is achieved – in relation to personal data processed on the basis of consent. After consent is withdrawn, the data may still be processed to defend against potential claims in accordance with the limitation period for such claims or a (shorter) period indicated to the User,

until they become outdated or no longer useful – in relation to personal data processed mainly for analytical and statistical purposes, the use of cookies and the administration of the Administrator’s websites.

IV. Data recipients

We may share your personal data with the following recipients: HR and payroll employees, accounting offices, law firms, the Social Insurance Institution, the Tax Office, insurers, contractors and clients who receive your data to the extent necessary to enable contractors and clients to communicate with you; other entities with whom or on whose behalf we provide services to the extent necessary and with whom we cooperate; IT system maintenance and hosting services; email service providers; occupational health and safety services; banks; and suppliers. We may also be required to share your data with private and public entities under applicable law.

V. Transfer to third countries

Due to the fact that we use the services of external providers of various services, e.g. Facebook, Google, Microsoft, etc., your data may be transferred to third countries, e.g. to the United States – if such a situation occurs, it will be transferred only to recipients who guarantee the highest level of data protection and security, including through:

a) cooperation with entities processing personal data in countries for which an appropriate decision of the European Commission has been issued,

b) the use of standard contractual clauses issued by the European Commission (as is the case with Google, for example),

c) the application of binding corporate rules approved by the relevant supervisory authority,

or those to which the User has consented.

Google and Facebook use compliance mechanisms provided for by the GDPR (e.g. certificates) or standard contractual clauses.

Facebook https://www.facebook.com/privacy/policy/

Google https://policies.google.com/privacy?hl=pl

Microsoft https://privacy.microsoft.com/pl-pl/privacy

VI. Rights of data subjects

You have the right to access your data, receive a copy, and the right to rectify or erase it (if, in your opinion, there is no basis for us to process it, you can request its erasure), restrict processing, the right to data portability, and the right to withdraw consent at any time, which, however, will not affect the lawfulness of processing based on consent before its withdrawal. You also have the right to object to the processing of your data based on the legitimate interests of the Data Controller. The Data Controller will cease processing your data for these purposes unless they can demonstrate that the Data Controller has compelling legitimate grounds for processing the data that override your interests, rights, and freedoms, or that the Data Controller requires the data to establish, pursue, or defend legal claims.

VII. Right to file a complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the provisions of the GDPR.

VIII. Requirement to provide data and consequences of failure to provide data

Providing personal data is voluntary, but some data may be necessary to conclude a contract, perform a service, process a complaint, issue a refund, issue an invoice or tax return, or send you an email. Failure to provide this data will result in the inability to perform the aforementioned activities.

IX. Profiling

Your data will not be processed in an automated manner, including in the form of profiling.

X. COOKIE POLICY

Like most websites, the Administrator’s Website uses so-called tracking technologies, i.e. cookies, which enable the website to be improved to meet the needs of its visitors.

The website does not automatically collect any information, except for information contained in cookies.

Cookies are IT data, small text files that are stored on your end device, e.g. computer, tablet, smartphone, when you use my Website.

These may be first-party cookies (originating directly from my website) and third-party cookies (originating from websites other than my website).

Cookies allow me to tailor the content of my website to your individual needs and the needs of other users visiting it. They also enable the creation of statistics that show how users use the site and how they navigate it. This allows me to improve my website, its content, structure, and appearance.

The Administrator uses the following third-party cookies on the Website:

a) Facebook Conversion Pixel – for the purpose of managing Facebook ads and conducting remarketing activities, which is the legitimate interest of the Administrator.

This tool is provided by Facebook Inc. and its affiliates. It is an analytical tool that helps measure the effectiveness of ads, shows what actions Website Users are taking, and helps reach specific groups of people (Facebook Ads, Facebook Insights).

The information collected through the use of the Facebook Pixel is anonymous and does not identify you. It displays general user data: location, age, gender, and interests. The provider may combine this information with the information you provide through your Facebook account and then use it for its own purposes.

The Administrator recommends that you familiarize yourself with the details related to the use of the Facebook Pixel tool and, if necessary, ask the tool provider questions, as well as manage your privacy settings on Facebook. More information can be found at: https://www.facebook.com/privacy/explanation .

b) Embedded Google Analytics code – for the analysis of website statistics. Google Analytics uses its own cookies to analyze the actions and behavior of website users. These cookies store information, such as which website brought the user to the current page. These cookies help improve the website.

This tool is provided by Google LLC. Activities undertaken in connection with the use of the Google Analytics code are based on the Controller’s legitimate interest in creating and using statistics, which in turn enables the Controller to improve its services and optimize the Website.

When using the Google Analytics tool, the Administrator does not process any User data that would enable his or her identification.

The Administrator recommends that you familiarize yourself with the details related to the use of the Google Analytics tool, the possibility of disabling the tracking code and, if necessary, ask the provider of this tool any questions at the following link: https://support.google.com/analytics#topic=3544906 .

c) Plugins linking to social media such as Facebook, Instagram, and X (formerly Twitter). After clicking on the plug-in icon, the User is redirected to the website of an external provider, in this case the owner of the given social networking site, e.g., Facebook. They can then click “Like” or “Share” and like the Administrator’s Facebook fan page or directly share its content (post, article, video, etc.).

The Administrator recommends reviewing Facebook’s privacy policy before creating an account on this site. The Administrator has no influence on the data processed by Facebook. From the moment the User clicks on the social media plugin button, personal data is processed by the social media platform, e.g., Facebook, which becomes the controller and determines the purposes and scope of their processing. Cookies left by the Facebook plugin (or other third parties) may also be installed on the User’s device after entering the Site and then associated with data collected on Facebook. By using the Site, the User accepts this fact. The Administrator has no influence on the processing of data by third parties in this manner.

d) Content from portals and websites of external providers.

The Administrator may embed content from portals, services, blogs, and other third-party websites on the Website. In particular, this may include videos from YouTube or Vimeo.

These third parties may record certain data about the content playbacks made by the User.

If you don’t want this to happen, log out of the website (if you have an account there and are logged in) before visiting my Website or refrain from viewing the content on the Website. You can also change your browser settings to block certain content from being displayed to you.

Always review the privacy policies of individual providers of external services and tools.

The Administrator once again recommends that you read the privacy policy of each of the providers of the above services in order to learn about the possibilities of making changes and settings that ensure the protection of the User’s rights.

The website uses two types of cookies: session cookies, which are deleted when you close your browser, log out or leave the website, and persistent cookies, which are stored on your end device, which allows your browser to be recognized the next time you visit the website, for the time specified in the cookie parameters or until you delete them.

In many cases, web browsing software (web browser) allows cookies to be stored on the user’s end device by default. Website users can change their cookie settings at any time. These settings can be changed, in particular, to block the automatic handling of cookies in the web browser settings or to notify the user each time they are placed on the device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.

The Administrator informs that restrictions on the use of cookies (disabling them, limiting them) may affect some functionalities available on the Website and hinder its operation.

More information about cookies is available at http://wszystkoociasteczkach.pl/ or in the “Help” section of the web browser menu.

COOKIES CONSENT

When you first access the Site, you must consent to cookies or take other possible actions indicated in the message to continue using the Site’s content. By using the Site, you consent. If you do not wish to consent, please leave the Site. You can also change your browser settings at any time, disable or delete cookies. You will find the necessary information in the “Help” section of your browser.

XI. SERVER LOGS

Using the Website involves sending queries to the server on which the Website is stored.

Every query sent to the server is recorded in server logs. The logs include, among other things, the User’s IP address, server date and time, and information about the web browser and operating system used by the User.

Logs are saved and stored on the server.

Server logs are used to administer the Website, and their content is not disclosed to anyone other than persons and entities authorized to administer the server.

The Administrator does not use server logs in any way to identify the User.

Published on: February 5, 2024