General Information
This document defines the privacy policy rules on the website www.csmiwum.pl (hereinafter referred to as the “Website”). The Administrator of the Website is CSMI WUM PRIVATE LIMITED COMPANY with its registered office at Żwirki i Wigury 61, 02-091 Warsaw, registered in the National Court Register by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under KRS number: 0000706395, NIP: 7010780339, REGON: 368854493, share capital: 1,400,000.00 PLN.
Personal data collected by the Administrator of the Website are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (EU Official Journal L 119, p. 1), hereinafter referred to as GDPR.
The Administrator of the Website makes every effort to protect the privacy and information provided by Users of the Website. The Administrator carefully selects and applies appropriate technical measures, including programming and organizational ones, to ensure the protection of processed data, in particular securing data against unauthorized access, disclosure, loss, destruction, unauthorized modification, and processing in violation of applicable law.
The Services available on the website are not intended for children under the age of 16. The Administrator of personal data does not intentionally collect data concerning children under the age of 16.
Personal Data
Administrator of Personal Data
The Administrator of your personal data is:
CSMI WUM PRIVATE LIMITED COMPANY with its registered office in Warsaw
Żwirki i Wigury 61, 02-091 Warsaw
For issues related to your personal data, you can contact the Administrator of personal data via:
email: biuro@csmiwum.pl; traditional mail: Żwirki i Wigury 61, 02-091 Warsaw; phone: +48 22 572 03 15. Purposes and legal bases of processing personal data collected by us in connection with your use of the www website
The Administrator of personal data processes your personal data for the following purposes and scope:
for the purpose of providing services such as browsing the www Website, searching for content or Services, we process personal data concerning your activity on the Website, i.e., data concerning the content or services viewed by you, data concerning the session of your device, operating system, browser, location, and unique ID, IP address; for statistics on the use of individual features available on the Website, facilitating the use of the Website, and ensuring the cybersecurity of the Website, we process personal data concerning your activity on the Website, the amount of time spent on each subpage on the Website, your search history, location, IP address, device ID, data concerning your web browser, and operating system; for authenticating the browser session, remembering your settings on the Website, and optimizing and increasing the performance of the services provided by us, the CSMI WUM website also collects cookies files.
What is a “Cookie” file?
Cookies are single, small text files sent by visited websites and downloaded to the user’s computer. The information contained in these files allows the information contained in them to be read only by the website that created them. Therefore, the website cannot access other files on the user’s computer.
What types of “cookies” files do we use?
Two types of cookies files may be used on our Website:
session cookies – remain on your device until you leave the Website or disable the software (web browser), permanent cookies – remain on your device for the period specified in the file parameters, or until manually deleted by you. Can you opt out of accepting cookies?
You can independently and at any time change the settings regarding cookies, specifying the conditions for their storage and access by cookies files to your device. You can make changes to the settings using the settings of the web browser or the service configuration. These settings may be changed, in particular, to block the automatic handling of cookies files in the web browser settings or to be informed about each placement of cookies files on your device. Detailed information on the possibilities and methods of handling cookies files is available in the software settings (web browser).
What does refusing to use cookies entail?
Some functions of the service may not work properly or may be unavailable because cookies files allow for the verification of the authenticity of a browser session and affect the optimization and performance increase of the services provided by our Website.
Categories of relevant personal data
We process the following categories of relevant personal data:
data concerning activity on the Website; data collected using cookies files, including: identification carried out by the HTTP protocol, if possible, the time of the request, the first line of the HTTP request, the HTTP response code, the URL of the page previously visited by the user (referer link) – if the transition to our site was through a link, information about the user’s web browser, information about errors encountered in the execution of http transactions; data collected using Google Analytics code – more information about the rules of processing data by Google is available on the website: https://policies.google.com/technologies/partner-sites?hl=pl.
Voluntary provision of personal data
The provision of required personal data by you is voluntary and is a condition for using our Website.
Data processing period
Personal data will be processed for the period necessary to perform the services. The logs collected by us are kept for an unspecified period as auxiliary material for administering the service. The information contained therein is not disclosed to anyone other than persons authorized to administer the server and the website https://csmiwum.pl/. Aggregate summaries in the form of such statistics do not contain any identifying characteristics of individuals.
Recipients of personal data
We provide your personal data to the following categories of recipients:
entities providing website positioning services for us, entity providing hosting services for us for the www service.
Rights of the data subject
In connection with processing your personal data, you have the following rights:
request access to your personal data; request correction of your personal data; request deletion of your personal data; request limitation of the processing of personal data; request the transfer of your personal data; object to the processing of personal data; withdraw consent at any time. The withdrawal of consent to the processing of personal data does not affect the lawfulness of processing carried out based on your consent before its withdrawal; request data transfer. The Administrator of personal data without undue delay – and in any case within one month of receiving the request – provides you with information on actions taken in connection with your request. If necessary, the one-month deadline may be extended by an additional two months due to the complex nature of the request or the number of requests.
In any case, the Administrator of personal data will inform you of such an extension within one month of receiving the request with the reasons of the delay.
Right of access to personal data (Art. 15 GDPR)
You have the right to obtain information from the Administrator of personal data about whether your personal data is being processed.
If the Administrator is processing your personal data, you have the right to:
access to personal data; obtain information about the purposes of processing, categories of personal data processed, and obtain a copy of your personal data.
Right to correct personal data (Art. 16 GDPR)
If your personal data is incorrect, you have the right to request the Administrator to correct your personal data without undue delay.
You also have the right to request the Administrator to supplement your personal data.
Right to erasure of personal data, the so-called “right to be forgotten” (Art. 17 GDPR)
You have the right to demand the erasure of your personal data by the Administrator of personal data when:
Your personal data is no longer necessary for the purposes for which they were collected or otherwise processed; You have withdrawn a specific consent, to the extent that personal data was processed based on your consent; Your personal data was processed unlawfully; Despite requesting the erasure of personal data, the Administrator of personal data may continue to process your data to determine, assert, or defend claims, of which you will be informed.
Right to request the restriction of processing personal data (Art. 18 GDPR)
You have the right to request the restriction of processing your personal data when:
you question the correctness of your personal data – the Administrator of personal data will limit the processing of your personal data for a period allowing to verify the accuracy of this data; when the processing of your data is unlawful, and instead of deleting personal data, you request to limit the processing of your personal data; your personal data is no longer needed for processing purposes, but is needed to establish, assert, or defend your claims; you have objected to the processing of your personal data – until it is determined whether the legitimate interests on the part of the Administrator of personal data override the bases stated in your objection.
Right to object to the processing of personal data (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data in connection with:
processing necessary to perform a task carried out in the public interest or processing necessary for the purposes arising from the legitimate interests of the Administrator of personal data or a third party;
Right to request the transfer of personal data (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used, machine-readable format from the Administrator of personal data and send it to another personal data controller.
You can also request the Administrator of personal data to directly send your personal data to another data controller (if technically feasible).
Right to withdraw consent
You can withdraw your consent to the processing of your personal data at any time.
The withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged violation.
In Poland, the supervisory authority within the meaning of the GDPR is the President of the Office for Personal Data Protection (PUODO).