+48 600 233 525
GET IN TOUCH
+48 600 233 525
GET IN TOUCH

Privacy policy

I. General Provisions

  • The privacy policy outlines how users' personal data is collected, processed, and stored, necessary for providing services electronically via the upbrand.pl website (hereinafter: the Service).
  • The Service collects only the personal data necessary for providing and developing the services offered.
  • Personal data collected through the Service is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), and the Personal Data Protection Act of May 10, 2018.

II. Data Controller

The controller of personal data collected through the Service is Upbrand Paweł Ławniczak, address: Basztowa 2/4, 58-316 Wałbrzych, NIP: 8862881882, REGON: 367024051, email: [email protected] (hereinafter: the Administrator).

III. Purpose of Collecting Personal Data

  • Personal data is used for:
    • Registering an account and verifying the user's identity,
    • Enabling login to the Service,
    • Executing the agreement regarding services and e-services,
    • Communicating with the user (live chat, contact form, etc.)
    • Sending newsletters (with the user's consent),
    • Running a comment system,
    • Providing social networking services,
    • Promoting the Administrator's offers,
    • Marketing, remarketing, and affiliation,
    • Personalizing the Service for users,
    • Conducting analytical and statistical activities,
    • Collecting receivables,
    • Establishing and pursuing claims or defending against them,
  • Providing data is voluntary but necessary to conclude an agreement or use other functionalities of the Service.

IV. Types of Personal Data Processed

The Administrator may process the following personal data of the user: name, date of birth, residential address, email address, phone number, NIP.

V. Period of Processing Personal Data

Users' personal data will be processed for the period:

  • When the basis for processing data is the execution of an agreement – until the claims under the agreement expire,
  • When the basis for processing data is consent – until it is withdrawn, and after withdrawal, until the claims expire.

In both cases, the limitation period is 6 years, and for claims for periodic services and claims related to running a business – 3 years (unless a special provision states otherwise).

VI. Sharing Personal Data

  • Users' personal data may be transferred to: entities associated with the Administrator, subcontractors and entities cooperating with the Administrator, e.g., e-payment service providers, courier/postal service providers, law firms
  • Users' personal data will not be transferred outside the European Economic Area (EEA).

VII. Users' Rights

  • Users of the Service have the right to: access their personal data, correct their data, delete their data, restrict the processing of their data, transfer their data, object to data processing, withdraw consent at any time (which does not affect the legality of processing based on consent before its withdrawal)
  • Requests to exercise these rights should be sent to [email protected].
  • The Administrator will fulfill or refuse to fulfill the request immediately – no later than within a month of receiving it.
  • Users have the right to lodge a complaint with the President of the Office for Personal Data Protection if they believe that the processing violates their rights and freedoms (GDPR).

VIII. Cookies

  • The Service collects information using cookies – session, persistent, and third-party cookies.
  • Collecting cookies supports the correct provision of services in the Service and serves statistical purposes.
  • Users can define the scope of cookies access to their device in the browser settings.

IX. Automated Decision-Making and Profiling

  • Users' data cannot be processed in an automated way such that decisions could be made about them as a result.
  • Users' data may be profiled to adjust content and personalize offers with their consent.

X. Final Provisions

  • The Administrator has the right to introduce changes to the Privacy Policy, provided that users' rights will not be limited.
  • Information about the introduced changes will appear in the form of a notice available in the Service.
  • In matters not covered by this Privacy Policy, the provisions of the GDPR and Polish law apply.