Privacy policy

As the Data Controller, I process your personal data. I take care of it and ensure that it is properly protected in accordance with applicable laws and regulations. Find out what happens to your data.

I. GENERAL INFORMATION

The use of the website www.centrumjasna.com.pl, hereinafter referred to as the “Website”, constitutes acceptance of the terms of this Privacy Policy.

This Privacy Policy sets out the principles governing the processing and protection of personal data provided by Users, as well as the use of other technologies employed on the website www.centrumjasna.com.pl.

The Website and the personal data controller is Centrum Jasna Sp. z o.o., with its registered office in Warsaw at ul. Puławska 95/4, 02-595 Warsaw, entered in the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, 20th Commercial Division of the National Court Register (KRS), under KRS number 0000004259, Tax Identification Number (NIP) 5213129950, REGON 017199586, represented by Michał Cichocki, President of the Management Board, hereinafter referred to as the “Data Controller”.

Should you have any questions or concerns regarding the provisions of this Privacy Policy, please contact the Data Controller at the following e-mail address:

or through the data processor:

Any personal and address data provided by the User on the website www.centrumjasna.com.pl will not be resold or otherwise disclosed to third parties for such purposes.

The Data Controller reserves the right to amend this Privacy Policy. Each User of the Website is responsible for familiarising themselves with the current version of the Privacy Policy. Changes may be made due to developments in Internet technology, changes in applicable law, or further development of the Website. The date of publication of the current Privacy Policy is provided at the bottom of the Website.

II. PERSONAL DATA PROTECTION

Zgodnie z art. 13 ust. 1 i 2 Rozporządzenia Parlamentu Europejskiego i Rady (UE) 2016/679 z dnia 27 kwietnia 2016 r. w sprawie ochrony osób fizycznych w związku z przetwarzaniem danych osobowych i w sprawie swobodnego przepływu takich danych oraz uchylenia dyrektywy 95/46/WE (ogólne rozporządzenie o ochronie danych, dalej jako „RODO”) informuję, że:

I. Data Controller

As the Data Controller, I have not appointed a Data Protection Officer (DPO) and perform the duties related to the processing of personal data myself.

II. Purposes and legal bases for processing

Your personal data will be processed for the following purposes and on the following legal bases:

a) performance of a service or an agreement, or sending an offer (e.g. a marketing offer) at your request — pursuant to Article 6(1)(b) GDPR (necessity for entering into or performing a contract or taking steps at the data subject’s request);

b) issuing invoices, bills and fulfilling other obligations arising from tax legislation — pursuant to Article 6(1)(c) GDPR (compliance with a legal obligation);

c) handling complaints or claims related to an agreement — pursuant to Article 6(1)(b) GDPR (necessity for entering into or performing a contract) and Article 6(1)(c) GDPR (compliance with a legal obligation);

d) establishing, pursuing or defending against claims — pursuant to Article 6(1)(f) GDPR (legitimate interest of the Data Controller);

e) conducting recruitment processes — for the period and purposes necessary to take steps prior to entering into an agreement, pursuant to Article 6(1)(b) GDPR; in the case of data provided voluntarily by a candidate, pursuant to Article 6(1)(a) GDPR; and, in the case of special categories of personal data provided by the candidate, pursuant to Article 9(2)(a) GDPR; as well as for the purposes of future recruitment processes, based on consent pursuant to Article 6(1)(a) GDPR;

f) telephone contact regarding the performance of a service — pursuant to Article 6(1)(b) GDPR (necessity for entering into or performing a contract);

g) telephone contact for the purpose of presenting offers and direct marketing — pursuant to Article 6(1)(a) GDPR (consent) and Article 6(1)(f) GDPR (legitimate interest of the Data Controller), where you are already a customer;

h) maintaining records related to the GDPR and other applicable regulations — pursuant to Article 6(1)(c) GDPR (compliance with a legal obligation) and Article 6(1)(f) GDPR (legitimate interest of the Data Controller);

i) archival and evidentiary purposes, including securing information that may be used to establish facts — pursuant to Article 6(1)(f) GDPR (legitimate interest of the Data Controller);

j) managing the Website and the Data Controller’s pages on other platforms — pursuant to Article 6(1)(f) GDPR (legitimate interest of the Data Controller);

k) conducting customer satisfaction surveys regarding the services offered — pursuant to Article 6(1)(f) GDPR (legitimate interest of the Data Controller);

l) publishing reviews provided by you concerning the services provided by the Data Controller — pursuant to Article 6(1)(a) GDPR (consent);

m) internal administrative purposes of the Data Controller related to managing contact with the User, which constitutes a legitimate interest of the Data Controller pursuant to Article 6(1)(f) GDPR;

n) tailoring the content displayed on the Data Controller’s websites to individual needs and continuously improving the quality of the services offered — pursuant to Article 6(1)(f) GDPR (legitimate interest of the Data Controller);

o) direct marketing of the Data Controller’s own products or services or products recommended by third parties — pursuant to Article 6(1)(f) GDPR (legitimate interest of the Data Controller);

p) creating and maintaining databases of existing and potential customers — pursuant to Article 6(1)(f) GDPR (legitimate interest of the Data Controller).

III. DATA RETENTION PERIOD

Your data will be stored:

a) for the duration of the service and business relationship, as well as for the period of limitation of claims in accordance with applicable law — with regard to data provided by contractors and customers;

b) for the duration of discussions and negotiations preceding the conclusion of an agreement or performance of a service — with regard to data provided in an enquiry for an offer;

c) for the period required by applicable law, including tax law — with regard to personal data related to the fulfilment of statutory obligations;

d) until an effective objection is lodged pursuant to Article 21 GDPR — with regard to personal data processed on the basis of the legitimate interest of the Data Controller, including for direct marketing purposes;

e) until consent is withdrawn or the purpose of processing or the relevant business purpose has been achieved — with regard to personal data processed on the basis of consent. Following withdrawal of consent, the data may continue to be processed for the purpose of defending against potential claims, in accordance with the applicable limitation period or a shorter period communicated to the User;

f) until the data becomes outdated or loses its usefulness — with regard to personal data processed primarily for analytical and statistical purposes, the use of cookies, and administration of the Data Controller’s websites.

IV. DATA RECIPIENTS

Personal data may be disclosed to the following recipients: accountants or accounting firms, law firms, the Social Insurance Institution (ZUS), tax authorities, insurers, contractors and customers who may receive your data to the extent necessary to enable communication with you, other entities with which or on whose behalf we provide services, to the extent necessary and in accordance with our cooperation with such entities, as well as payment system providers.

We may also be required to disclose your personal data to private or public entities where such disclosure is required by applicable law.

V. TRANSFERS TO THIRD COUNTRIES

Your personal data will not be transferred to third countries, such as the United States.

VI. RIGHTS OF DATA SUBJECTS

You have the right to access your personal data, obtain a copy thereof, and request its rectification or erasure (if you believe that there are no grounds for us to continue processing your data). You also have the right to restrict processing, the right to data portability, and the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You also have the right to object to the processing of your personal data where such processing is based on the legitimate interests of the Data Controller.

The Data Controller will cease processing your data for such purposes unless the Data Controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the data is necessary for the establishment, exercise or defence of legal claims.

VII. RIGHT TO LODGE A COMPLAINT

You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe that the processing of your personal data infringes the provisions of the GDPR.

VIII. REQUIREMENT TO PROVIDE DATA AND CONSEQUENCES OF FAILURE TO PROVIDE DATA

Providing personal data is voluntary; however, certain data may be necessary to conclude an agreement, perform a service, process a complaint, issue a refund, issue an invoice, fulfil tax obligations, or send you a newsletter.

Failure to provide such data may result in the inability to carry out the aforementioned activities.

IX. PROFILING

Your personal data will not be processed in an automated manner, including for the purposes of profiling.

X. COOKIE POLICY

The Data Controller’s Website uses cookies (“cookies”) solely for the purpose of ensuring the proper functioning and presentation of the Website www.centrumjasna.com.pl