Privacy Policy

/ Privacy Policy

Privacy and cookies policy

Good morning!

If you have arrived here, it is a reliable sign that you value your privacy. We understand this very well, which is why we are putting a document into your hands that provides a one-stop shop for the rules on the processing of personal data and the use of cookies and other tracking technologies.

Formal information to start with: the administrator of your personal data is Elantris Sp. z o.o. with its registered office in Bydgoszcz, ul. Długa 16, 85-034 Bydgoszcz, entered into the National Court Register under KRS number: 0000813535 whose registration documentation is kept by the District Court in Bydgoszcz, XIII Economic Division of the National Court Register, using TAX number: 9532772601 and REGON number: 384851430, share capital: PLN 120,800.

We process your personal data primarily for purposes related to your use of our application, such as maintaining your user account, placing orders and handling contracts, processing complaints and withdrawals, fulfilling legal tax obligations, sending newsletters, claims cases, analysis, statistics, marketing, etc. We process your personal data for the period of time necessary for the respective purpose. You have the right to access, rectify, erase or restrict the processing of your personal data, to object to the processing, as well as the right to data portability. In addition, you can lodge a complaint with the President of the Data Protection Authority.

Please refer to the following section of the Privacy Policy for details of how your personal data will be processed.

If you have any concerns about the Privacy Policy, you can contact us at any time by sending an email to [email protected].

1. Who is the controller of personal data?

The administrator of your personal data is Elantris Sp. z o.o. with its registered office in Bydgoszcz, ul. Długa 16, 85-034 Bydgoszcz, entered into the National Court Register under KRS number: 0000813535 whose registration documentation is kept by the District Court in Bydgoszcz, XIII Economic Division of the National Court Register, using NIP number: 9532772601 and REGON number: 384851430, share capital: PLN 120,800.

This Privacy Policy applies to the application under the name Plantis, which belongs to the administrator.

With regard to the social media profiles associated with our website, according to the case law of the Court of Justice of the European Union, the social media provider is a joint controller of personal data together with the controller of the respective profile. Details of the processing of personal data by the individual social media providers can be found here:

● Facebook,

● LinkedIN,

● Instagram,

● YouTube,

● TikTok,

● Twitter.

2 Who can you contact about the processing of your personal data?

As part of the implementation of a data protection system in our organisation, we have decided not to appoint a Data Protection Officer due to the fact that it is not mandatory in our situation.

In matters relating to data protection and privacy more broadly, you can contact [email protected] by e-mail. In terms of social media, you can additionally contact directly the administrators of the social networks on which we maintain our profiles.

3 For what purposes do we process personal data?

There are more than one of these objectives. Below is a list of them, together with a more detailed discussion. We have also assigned the respective legal bases for processing to the various purposes:

Purpose and Discussion of the Purpose of Processing

Legal basis

User account handling

When you create a user account, you must provide the data necessary to set up your account as specified in the registration form.

The provision of data is a prerequisite for creating an account.

As part of editing your account details, you can enter your further details in accordance with the options available within your account.

If you create an account through integration with a social media account, we will gain access to certain data stored within the social media account (name, email address, profile picture) on the basis of your prior authorisation.

In addition, our system used for user accounts records your IP number, which you used when registering your user account.

The data is processed for the purpose of providing the user account service to you. After deletion of your user account, the data is archived for the possible establishment, investigation or defence of claims related to the user account service.

Article 6(1)(b) RODO

Conclusion and operation of the contract

When you start using our services, you must provide the data necessary to conclude a contract for a specific service, as stated in the application.

The provision of data is a condition for the provision of services.

In addition, the IT system records your IP number, which you used when using our application.

In connection with the conclusion of the contract, we may also process your other personal data in order to perform the services provided for in the contract that has been concluded. The extent of this data depends on which personal data are needed to perform the contract.

Where we receive your data in the performance of a contract, e.g. from an entity that employs you, we base such processing on a legitimate interest, which in this case is to ensure the efficient and effective handling of the contract concluded. In this case, we may process your identifying and contact data.

The data are processed for the purpose of concluding and performing the contract. Once the contract has been performed, the data goes into the archives for the purpose of possibly establishing, asserting or defending claims related to the contract. Data also goes into the accounting records for the purpose of complying with tax obligations.

Article 6(1)(b) RODO, Article 6(1)(f) RODO

Actions taken to complete orders by customers

As some customers start placing an order but do not complete it (do not validate the order and do not enter into a contract with us), we may take steps to ensure that our customers complete the purchase process.

To this end, we can, for example, send emails containing information about an unfinished order and an incentive to complete the transaction.

For the purposes of the activities described above, we may process personal data such as the information provided during the ordering process, in particular your name and e-mail address, as well as information about the contents of your shopping cart, the date on which the transaction was initiated and other data left in connection with the purchase process.

The legal basis for the processing of your personal data is Article 6(1)(b) of the RODO, as these activities are aimed at the conclusion of a contract. Furthermore, we see the basis for the processing as our legitimate interest, which in this case is to increase sales.

Article 6(1)(b) RODO, Article 6(1)(f) RODO

Handling complaints or withdrawals

If you make a complaint or withdraw from the contract, you provide the personal data contained in the content of the complaint or withdrawal statement.

The provision of data is a condition for the submission of a declaration of withdrawal or complaint.

The data are processed for the purpose of handling the withdrawal or complaint process. Once such a process has been carried out, the data goes into an archive for the purpose of possibly establishing, asserting or defending claims related to the handling of the withdrawal or complaints process. The data also goes into accounting records for the purpose of complying with tax obligations.

Article 6(1)(c) of the RODO in connection with the relevant provisions on the right of withdrawal and liability for compliance with the contract, Article 6(1)(b) of the RODO

Handling the newsletter

When subscribing to the newsletter, you must provide the necessary data to receive the newsletter as specified in the subscription form.

Provision of data is a condition of receiving the newsletter.

In addition, the mailing system records your IP number, which you used when signing up for the newsletter, determines your approximate location, the mail client you use for email, and tracks your actions taken in relation to the messages sent to you. Accordingly, we also have information about which messages you have opened, within which messages you have clicked on links, etc.

In the mailing system, we may also define, on the basis of various criteria related to your activities, interests or other preferences, specific groups or segments of newsletter recipients that influence what kind of messages you receive within the newsletter.

The data you provide in connection with subscribing to the newsletter is used for the purpose of sending you the newsletter, and the legal basis for its processing is the performance of the contract for the provision of electronic services, as well as our legitimate interest, which in this case is the fulfilment of marketing purposes.

With regard to the processing of information that does not come from you, but is collected automatically by the mailing system, we rely in this respect on our legitimate interest to analyse the behaviour of newsletter subscribers in order to optimise mailing activities.

You can unsubscribe from the newsletter at any time by clicking on the dedicated link included in each message sent as part of the newsletter, or by simply contacting us.

Opting out of the newsletter does not lead to the deletion of your data from the mailing system. The data is archived for the possible establishment, assertion or defence of claims relating to the newsletter, as well as to ensure that it can be demonstrated that the newsletter activities were carried out in accordance with the law.

Article 6(1)(b) RODO, Article 6(1)(f) RODO

Handling comments/feedback

When you add a comment/feedback, you must provide the data necessary to publish the comment/feedback you receive as set out in the comment/feedback form.

The provision of data is a prerequisite for the publication of the comment / opinion.

In addition, the comment/feedback system records your IP number, which you used when submitting your comment/feedback.

The comment/feedback system may be operated by an external provider. If this is the case, your use of the system is subject to the terms and conditions and privacy policy of the external provider. For details of the third-party provider's tools, please see the section on the tools we use.

The data is processed for the purpose of publishing a comment / opinion, which is our legitimate interest.

The comment or opinion you have added, together with your data made public within the settings, will be visible on the website. You can modify or delete your comment or opinion at any time. A deleted comment/opinion, together with your data, will be archived for the purpose of establishing, asserting or defending claims related to the comment/opinion.

Article 6(1)(f) RODO

Support for added user content

When adding user content, including posts or comments, you must provide the data necessary to publish the content in question, as specified in a dedicated form.

The provision of data is a condition for the publication of user content.

In addition, the IT system records your IP number, which you used when uploading user content.

The IT system may be operated by an external provider. If this is the case, your use of the system is subject to the terms and conditions and privacy policy of the external provider. Please see the section on the tools we use for details on the tools of external providers.

The data is processed for the purpose of publishing user content, which is our legitimate interest.

The user content you have added, together with your data made public as part of the settings, will be visible on the website. You can modify and delete user content at any time. Deleted user content, together with your data, will be archived for the possible establishment, investigation or defence of claims related to user content.

Article 6(1)(f) RODO

Verification of added user content

In connection with our hosting activities, we may process your personal data, in particular your name, email address, nickname and the content you add, in order to verify the user content you add - in accordance with the terms and conditions of our application.

We may verify your activity both with the help of people employed to moderate content and in an automated manner through the use of appropriate IT tools to verify content.

The data is processed for the purpose of verifying the content available on the application, which is our legitimate interest. In addition, the verification may take place in order to comply with our obligations as a host provider under the Electronic Services Act.

Article 6(1)(f) RODO,

Article 6(1)(c) RODO

Anti-abuse within the application

We may process your personal data for the purposes of ensuring user security and the correct operation of the app, as well as to counteract behaviour that may be in breach of applicable law.

The extent of personal data processed depends on the type of activities we undertake, but could potentially be any personal data we hold about you.

If we receive a request from a competent authority, service or court to share your personal data, we may be obliged to transmit your personal data to these entities, in particular for the purposes of ongoing civil or criminal proceedings. We will then process your personal data in order to comply with the legal obligation.

For the rest, we base the processing of such personal data on our legitimate interest, which in this case is to ensure the lawful functioning of our application.

Article 6(1)(f) RODO,

Article 6(1)(c) RODO

Contact and correspondence handling

When you contact us via the available means of communication, e.g. email, social messaging, chat rooms, etc., you naturally provide your personal data contained in the content of your correspondence.

The provision of data is a condition of contact.

In addition, the communication system records your IP number, which you used when sending the message.

A communication system (e.g. chat, instant messaging) may be operated by an external provider. In such a situation, the use of the system is subject to the terms and conditions and privacy policy of the external provider. For details on the tools of external providers, please see the section on the tools we use.

The data is processed for the purpose of carrying out the communication, which is our legitimate interest. Once the communication has ended, the data is archived for the possible establishment, investigation or defence of claims related to the communication.

Article 6(1)(f) RODO

Fulfilment of tax and accounting obligations

In connection with the performance of the contract, we also fulfil various tax and accounting obligations, in particular the issuing of an invoice, the inclusion of the invoice in our accounting records, the retention of records, etc.

In order to issue an invoice, we process data such as name, company, business address, TIN, among others.

The provision of data required by tax law is necessary to fulfil the obligations indicated.

Article 6(1)(c) of the RODO in connection with the relevant provisions of tax law

Creation of an archive

We may create archives for the purposes of our business: both in traditional and digital form. The archives include personal data that we have processed in connection with you, and the extent of this may vary depending on what data has come to us and the extent of the data justified in terms of archiving. In this case, we rely on our legitimate interest in organising and structuring the personal data carriers.

Article 6(1)(f) RODO

Defence, establishment or enforcement of claims

The use of our application, including the conclusion of a contract with us, may give rise to certain claims on our side or yours in the future. Accordingly, we are entitled to process your personal data for the purpose of defending, establishing or pursuing a claim. For this purpose, we may process any personal data that relates to the claim in question, so the extent of the processing may vary depending on what the claim relates to. In this case, we rely on our legitimate interest to protect our interests in this regard.

Article 6(1)(f) RODO

Creation of ad groups

Your e-mail address stored in our database may be sent to a specific advertising system (e.g. Facebook Ads, LinkedIN Ads) in order to create an audience for advertisements using this e-mail address.

When using this function, the email address is hashed before being sent to the relevant system to create a recipient group.

The e-mail address will be used in the matching process conducted by the advertising system concerned.

The advertising system does not share the e-mail address with third parties or other advertisers and deletes the e-mail address immediately after the matching process is completed.

The advertising system implements processes and procedures to ensure the confidentiality and security of the e-mail address sent to it and the set of user identifiers forming the group of recipients created using the e-mail address by, among other things, applying technical and physical safeguards.

The creation of an audience for advertisements using your e-mail address constitutes our legitimate interest, which in this case is the fulfilment of our marketing objectives.

Article 6(1)(f) RODO

Social media handling

If you follow our social media profiles or interact with content that we publish on social media, we naturally see your data that is publicly available in your social media profile. We process this data only within the respective social network and only for the purpose of operating the respective social network, which is our legitimate interest.

If you contact us by private message, you naturally provide us with your personal data contained in the content of the correspondence, in particular your image and your name. Your data is processed in this case for the purpose of contacting you, and the basis of the processing is our legitimate interest.

It may be the case that we are the party initiating contact with you via social media in order to offer cooperation, in which case your data will be processed for the purpose of seeking potential contractors, offering and establishing cooperation, which is our legitimate interest.

Messages sent to us via social media are subject to automatic archiving via tools available within the individual social networks and are available to us until you delete them. You have access to all messages exchanged with us in the private messages tab.

Your use of social media sites is subject to the rules and privacy policies of the administrators of those sites, and those administrators provide electronic services to you, fully independently and autonomously of us.

Article 6(1)(f) RODO

Analysis and statistics using only Anonymous Information

We carry out analytical and statistical activities using tools provided by external providers. As part of the analytical tools, we only have access to Anonymous Information. We base the processing of Anonymous Information on our legitimate interest in creating, viewing and analysing statistics related to user activity on the website in order to draw conclusions for the subsequent optimisation of our activities.

From within the tools, we only have access to a set of statistics and information not assigned to specific individuals.

For details on third-party supplier tools, please see the section on the tools we use.

Article 6(1)(f) RODO

Marketing activities

We carry out marketing activities using tools provided by external providers. Within the marketing tools we mainly have access to Anonymous Information. We base the processing of Anonymous Information on our legitimate interest, which is to create marketing leads based on Anonymous Information and to target advertisements within external systems based on Anonymous Information, for the purpose of marketing our own products and services. From within the tools, we only have access to a set of statistics and information not attributed to specific individuals.

For details on third-party supplier tools, please see the section on the tools we use.

Article 6(1)(f) RODO

Organisation of promotional activities

In order to increase sales of products / services, we may run various promotional campaigns, including in cooperation with external partners. Rules related to the organisation of promotional campaigns are set out in separate regulations. The scope of personal data we will process in connection with the organisation of a promotional action may vary depending on the type of promotional action.

The legal basis for processing your personal data is our legitimate interest, which in this case is marketing and increasing sales of our own products.

Article 6(1)(b) RODO, Article 6(1)(f) RODO

Provision of additional functions using only Anonymous Information

On our pages, we may embed video or audio players, social widgets, a comment module, chat, newsletter forms or other tools provided by third parties. All of these tools process Anonymous Information. We base the processing of Anonymous Information on our legitimate interest, which in this case is to provide you with additional functions on the website. The tools do not give us access to other information, nor do we need this information for anything - Anonymous Information is only processed so that additional functions can function. For details on the tools of external providers, please see the section on the tools we use.

Article 6(1)(f) RODO

Implementation of data protection obligations

As a data controller, we are obliged to comply with data protection obligations. Accordingly, we may process your personal data insofar as this is necessary to comply with these obligations (e.g. when processing your request for your personal data). The extent of the data depends on what data we need to fulfil the obligation and prove compliance with the DPA. In addition, in this case we also rely on our legitimate interest in securing the data necessary to demonstrate accountability.

Article 6(1)(c) RODO, Article 6(1)(f) RODO

4 What information do we have about you?

We have described the scope of the processing for each purpose of processing. Information in this regard can be found above, in section 3 of the Privacy Policy. Among the data are information such as:

● name,

● e-mail address,

● telephone number,

● IP address,

● address for service,

● invoice details,

● bank account number,

● details of the order placed,

● data collected in the mailing system,

● data related to the comment / opinion added,

● information visible on social media profiles,

● information contained in correspondence,

● Anonymous Information.

5 What is "Anonymous Information"?

We use tools that collect a range of information about you related to your use of our website. This includes, in particular, the following information:

● information about the operating system and web browser,

● sub-pages viewed,

● time spent on the site,

● transitions between sub-pages,

● clicks on individual links,

● mouse movements,

● page scrolling,

● the source from which you go to the site,

● the age range you are in,

● Your gender,

● Your approximate location limited to localities.

● Your interests or other preferences as determined by your online activity,

● video recordings of your sessions on our websites,

● heat maps illustrating your behaviour on our sites.

This information is referred to in this Privacy Policy as "Anonymous Information".

Anonymous Information in itself does not, in our view, have the character of personal data, as it does not allow us to identify you and we do not collate it with the typical personal data we collect about you. Nevertheless, given the strict jurisprudence of the Court of Justice of the European Union and the divided opinions among lawyers, as a precaution, in case Anonymous Information is attributed the character of personal data, we have also included detailed explanations in the Privacy Policy regarding the processing of this information.

We are not able to provide you with access to Anonymous Information about you, as we are not able to attribute any of the Anonymous Information to any specific user. From the Anonymous Information collection tools, we only have access to a set of statistics and information that is not attributed to specific individuals.

The processing of Anonymous Information allows us to provide you with the functionality available on the website. In addition, Anonymous Information is used for analytical and statistical purposes as well as for marketing purposes, such as setting and targeting advertisements.

Anonymous information is also processed by tool providers under the terms of their terms of service and privacy policies. It may be used by these providers to provide, improve and manage services, develop new services, measure the effectiveness of advertisements, protect against fraud and abuse, and personalise the content and advertisements displayed on individual services, websites and applications. Please see the section on the tools we use for more detailed information related to this.

6 Where do we get your personal data from?

In most cases, you provide them to us yourself. For example, this is the case when you register a user account, place an order for services, send a complaint or withdraw from a contract, contact us via email or chat, or use the functionalities available on our Site or on external services (e.g. social networks).

In addition, some information about you may be automatically collected by tools we use. Please see the section on the tools we use for details on the tools of third party providers.

In exceptional cases, we may also obtain your personal data from other sources, e.g. when the entity that employs you indicates your data to us as contact persons for contractual matters, or when you represent an entity that enters into a contract with us.

7. Is the data secure?

We care about the security of your personal data. We analyse the risks involved in the various processes of processing your data and then implement appropriate security and personal data protection measures. We monitor the state of the technical infrastructure on an ongoing basis, train our staff, look at the procedures in place and make the necessary improvements.

8 How long will we keep personal data?

We process your personal data for as long as it is justified within the framework of a given purpose for processing your personal data, and therefore processing periods vary depending on the purpose. Please note that the termination of the processing of your data for one purpose does not necessarily lead to the complete erasure or destruction of your personal data, as the same set of data may be processed for another purpose, for the period of time indicated for that purpose. Complete erasure or destruction of data occurs when we have completed all purposes and in other cases indicated in the RODO.

Below you will find a description of the processing periods:

● User account - data related to the user account is processed for the duration of the user account;

● Fulfilment of orders and the concluded contract - contract-related data are processed for the time necessary for the conclusion and performance of the contract;

● Actions taken to complete orders by customers - data relating to unfinished orders will be processed for a maximum of 6 months from the date you placed the order;

● Complaints and withdrawals - data related to complaints and withdrawals are processed for the time necessary to handle the complaint or withdrawal;

● Newsletter - data related to the newsletter will be processed for the duration of your use of the newsletter;

● Comments/feedback - data related to the posting of a comment/feedback will be processed until you delete the comment or feedback;

● User content - data related to the posting of user content will be processed until you delete the user content;

● Verification of added user content - data related to the verification of user content will be processed for the duration of the verification;

● Anti-fraud within the application - data related to anti-fraud will be processed for the duration of certain activities;

● Contact and correspondence handling - data relating to correspondence handling will be processed for the duration of contact between us;

● Tax and accounting obligations - data related to the fulfilment of tax and accounting obligations will be processed for the time prescribed by tax law, usually 5 years after the end of the tax year;

● Archive - data related to the archive will be processed until the information contained in the archive is no longer relevant;

● Determination, investigation and defence of claims - data related to claims will be processed until the statute of limitations for claims, whereby the period of limitation for claims may vary according to the applicable law (e.g. for businesses it may be 3 years and for consumers 6 years);

● Recipient groups - data related to recipient groups will be processed until they are no longer relevant or you successfully object;

● Social media - in general, I have no control over the retention period of your personal data on social media. They are available on Facebook, Instagram, YouTube or LinkedIN under the terms of the terms and conditions and privacy policies of those sites. We are not able to remove your data from Facebook, Instagram, YouTube or LinkedIN - only you can do this;

● Analytics and statistics - data related to analytics and statistics will be processed until it is no longer relevant or you successfully object;

● Marketing activities - data related to self-marketing will be processed until it is no longer relevant or you successfully object;

● Organisation of promotional activities - we process data related to the organisation of promotional activities for the time necessary to carry out the promotional activity;

● Ancillary tools - data related to ancillary tools will be processed until it is no longer useful or you successfully object;

● Data Protection Obligations - Data protection related data will be processed until it is no longer relevant, you have successfully lodged an objection or the expiry of the limitation period of our liability as data controller.

Where we process your personal data on the basis of consent you have given, you may withdraw such consent at any time: either by your action or by contacting us at the contact details provided. Please note that withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of consent prior to its withdrawal.

9 Who are the recipients of personal data?

We would venture to say that modern business cannot do without services provided by third parties. We also make use of such services. Some of these services involve the processing of your personal data. Third-party service providers that are involved in the processing of your personal data are:

● hosting provider - for the purpose of storing data on the server;

● mailing system provider - for the use of the mailing system;

● invoicing system provider - for the purpose of invoicing;

● CRM system provider - for work streamlining;

● chat provider - for contact via chat;

● provider of a pop-up display system - for the purpose of displaying pop-ups;

● customer service system provider - for the purpose of improving the customer service process;

● payment operators - for the purpose of accepting customer payments;

● provider of a landing page management tool - for data collection via landing pages;

● cloud provider - for the use of cloud solutions;

● accounting office - for the use of accounting services;

● law firm - for the purpose of providing legal services to us;

● maintenance - for the purpose of carrying out technical work on those areas where data is processed;

● other subcontractors, in particular IT solution providers - for the purposes of working with various subcontractors who may have access to your personal data if they provide services in relation to such access.

If the need arises, your data may be shared with a legal advisor or lawyer bound by professional secrecy. The need may arise from a legal need requiring access to your personal data.

Your personal data may also be forwarded to the tax authorities to the extent necessary for the fulfilment of tax and accounting obligations. This includes, in particular, all declarations, reports, statements and other accounting documents containing your personal data.

In addition, if necessary, your personal data may be made available to entities, authorities or institutions entitled to access the data under the law, such as police, security services, courts, public prosecutors' offices.

When it comes to Anonymous Information, the providers of the tools or plug-ins that collect Anonymous Information have access to it. The providers of these tools are their own controllers of the data collected in them and may share this data under the terms of their own terms of use and privacy policies, which are beyond our control.

10. Do we transfer data to third countries or international organisations?

Yes, part of the processing of your personal data may involve transfers to third countries.

We transfer your personal data to third countries in connection with the use of tools using resources located in third countries, in particular in the USA. The providers of these tools guarantee an adequate level of personal data protection through the relevant compliance mechanisms provided for by the RODO, in particular through the use of standard contractual clauses.

Currently, your personal data is transferred to third countries in connection with our use of the following solutions:

Type of solution	Solution provider	Third country
UXcam analytical system	UXCam / Amazon Web Services	USA
Display of pop-ups	Claspo	USA
Analytical System	Amplitude	USA
Google Analytics	Google	USA

In addition, Anonymous Information collected in connection with the use of the tools indicated in the annex to this privacy policy may be transferred to third countries, in particular the USA.

11. do we use profiling?

We do not make decisions to you that are based solely on automated processing, including profiling, that would produce legal effects or similarly materially affect you. Yes, we do use tools that may take certain actions depending on the information collected through tracking mechanisms, but we consider that these actions do not materially affect you as they do not differentiate your situation as a customer, do not affect the terms of the contract you may enter into with us, etc.

Using certain tools, we can, for example, target you with personalised advertising based on your previous activities on the Site or suggest products that may be of interest to you. This is known as behavioural advertising. We encourage you to learn more about behavioural advertising, particularly with regard to privacy issues. You will find detailed information, including the possibility of managing your settings with regard to behavioural advertising, here.

12. What rights do you have?

The RODO grants you the following potential rights in relation to the processing of your personal data:

● the right to access your data and to receive a copy of it;

● the right to rectify (amend) your data;

● the right to erasure (if, in your opinion, there are no grounds for us to process your data, you can request that we erase it);

● the right to restrict processing (you can request that we restrict processing to only storing your data or carrying out activities agreed with you if, in your opinion, we have inaccurate data or are processing it unduly);

● the right to object to processing (you have the right to object to processing on the basis of a legitimate interest; you should indicate the particular situation which you think justifies us stopping the processing covered by the objection; we will stop processing your data for these purposes unless we can demonstrate that the grounds for our processing override your rights or that your data is necessary for us to establish, assert or defend our claims);

● the right to data portability (you have the right to receive from us in a structured, commonly used, machine-readable format the personal data you have provided to us under the contract or your consent; you can have this data sent directly to another entity);

● the right to withdraw your consent to the processing of personal data if you have previously given such consent;

● the right to lodge a complaint with a supervisory authority (if you find that we are processing your data unlawfully, you may lodge a complaint about this with the President of the Office for Personal Data Protection or any other competent supervisory authority).

The rules related to the exercise of the rights indicated above are described in detail in Articles 15-21 of the RODO. We encourage you to familiarise yourself with these provisions. For our part, we consider it necessary to explain to you that the rights indicated above are not absolute and you will not be entitled to them in relation to all processing activities of your personal data.

We emphasise that one of the rights indicated above is always available to you: if you consider that we have violated data protection regulations in the processing of your personal data, you have the possibility to lodge a complaint with a supervisory authority (the President of the Office for Personal Data Protection).

13. Do we use cookies and what are they?

Our app, like almost all other websites, uses cookies.

Cookies are small textual information stored on your terminal device (e.g. computer, tablet, smartphone) that can be read by our ICT system (our own cookies) or by third-party ICT systems (third-party cookies). Specific information can be recorded and stored in cookies, which can then be accessed by ICT systems for specific purposes.

Some of the cookies we use are deleted at the end of the session, i.e. when the session is closed (so-called session cookies). Other cookies are stored on your terminal device and enable recognition of your device the next time you access the application (persistent cookies).

If you would like to learn more about cookies as such, you can read, for example, this material.

14 On what basis do we use cookies?

We use cookies on the basis of your consent, except where cookies are necessary for the proper provision of an electronic service to you.

Cookies that are not necessary for the correct provision of the electronic service remain blocked until you have given your consent to the use of cookies. During your first visit to the Website in question, we display a message asking you for your consent, together with the option of managing cookies, i.e. deciding which cookies you agree to and which you wish to block.

15. Can you disable cookies?

Yes, you can manage your cookie settings within your device. You can block all or selected cookies. You can also block cookies for specific sites. You can also delete previously saved cookies and other site and plug-in data at any time.

Web browsers also offer the option of incognito mode. You can use this if you do not want information about pages visited and files downloaded to be saved in your browsing and download history. Cookies created in incognito mode are deleted when you close all windows in this mode.

Browser plug-ins are also available to control cookies, such as Ghostery. The option to control cookies may also be provided by additional software, in particular anti-virus packages, etc.

In addition, there are tools available on the internet to control certain types of cookies, in particular to collectively manage behavioural advertising settings.

We also give you the possibility to control your cookies directly from within our application. We have implemented a special mechanism for managing cookies that allows you to block those cookies that you do not wish. Please note that disabling or restricting cookies may prevent you from using some of the features available in the application and may cause difficulties in using the Sites, as well as many other websites that use cookies. For example, if you block the cookies of social networking plug-ins, the buttons, widgets, social features implemented in the application may not be available to you.

16 For what purposes do we use our own cookies?

Custom cookies are used to ensure the correct functioning of the various mechanisms of the application, such as remembering the contents of the shopping cart for a specific period of time after adding selected products to it, the correct transmission of forms visible in the application, the handling of newsletter forms, etc. Proprietary cookies also store information about the cookie settings you have defined through the cookie management mechanism.

17. What third-party cookies are used?

A list of tools that require the use of cookies and a description of the cookies used can be found in the appendix to this Privacy Policy.

18. do we track your behaviour on the website?

Yes, we use tools from third-party providers that involve the collection of information about your activities on our websites. These tools are described in detail in the appendix to this Privacy Policy.

19. Are we targeting you with targeted advertising?

Yes, we use third-party vendor tools where we can target advertising to specific target groups defined based on various criteria such as age, gender, interests, profession, job, activities previously undertaken on our sites. These tools are described in detail in the appendix to this Privacy Policy.

20. How can you manage your privacy?

The answer to this question can be found in many places in this Privacy Policy when describing individual tools, behavioural advertising, consent to cookies, etc. Nevertheless, we have once again gathered this information in one place for your convenience. Below you will find a list of options for managing your privacy.

● the cookie settings within the application;

● browser plug-ins to support cookie management, e.g. Ghostery;

● additional cookie management software;

● incognito mode in the web browser;

● behavioural advertising settings, e.g. youronlinechoices.com;

● a mechanism for managing cookies from within our application;

● Google Analytics Opt-out;

● Google Ads Settings;

● Facebook Ads Settings;

● LinkedIN Privacy Settings.

21: Is there anything else you should know?

As you can see, the topics of personal data processing, the use of cookies and the management of privacy in general are quite complex. We have done our best to ensure that this document provides you with as much knowledge as possible on the issues that are important to you. If anything is unclear to you, you would like to find out more or simply discuss your privacy, please email us at [email protected].

22: Is this Privacy Policy subject to change?

Yes, we may modify this Privacy Policy, in particular due to technological changes and changes in legislation. If you are a registered user, you will receive a message about any change to the Privacy Policy. Changes to the Privacy Policy will become effective after 7 days at the earliest. All archived versions of the Privacy Policy are linked below.

Annex to the Privacy Policy

LIST OF TOOLS THAT USE COOKIES

Google Tag Manager

We use the Google Tag Manager tool provided by the US company Google LLC to manage tags and script loading within the application.

Google Tag Manager, as a tool in itself, does not collect any information beyond that necessary for its proper operation, but is responsible for loading the other scripts described below.

Hotjar

We use the Hotjar tool to better understand your needs and to optimise our app for your experience of using it. The tool is provided by Hotjar Limited.

Hotjar records every visitor to our application and enables us to play a video recording of their movement around our site, as well as to generate so-called heat maps. Within the Hotjar tool, we do not have access to information that allows us to identify you, as Hotjar does not record the process of filling in forms intended to provide personal data.

In order to use Hotjar, we have implemented a special Hotjar tracking code in the code of our application. The tracking code uses cookies from Hotjar Limited. The information collected through cookies is stored by Hotjar as part of a pseudonymous user profile. Neither Hotjar nor we use this information to identify you.

You can object to Hotjar's creation of your user profile, Hotjar's storage of information about your use of our application and Hotjar's use of cookies here.

If you are interested in the details related to Hotjar's data processing, we encourage you to read Hotjar's privacy policy.

UXCam

We use the Uxcam tool to better understand your needs and to optimise our application for your user experience. The tool is provided by UXCam Inc.

UXCam registers every visitor to our application and makes it possible to play a video recording of their movement through the application, as well as to generate so-called heat maps. As part of the UXCam tool, we do not have access to information that allows us to identify you, as UXCam does not record the process of filling in forms intended for the provision of personal data.

In order to use UXCam, we have implemented a special UXCam tracking code in the code of our website. The tracking code uses cookies from UXCam Inc. The information collected in the cookies is stored by UXCam as part of a pseudonymous user profile. Neither UXCam nor we use this information to identify you.

You can object to UXCam's creation of your user profile, UXCam's storage of information about your use of our application and UXCam's use of cookies here.

If you are interested in the details related to data processing within UXCam, we encourage you to read UXCam's privacy policy.

Google Analytics

If you are interested in the details related to Google's use of data from sites and applications that use Google services, I encourage you to read this information.

Google Ads

We use remarketing features available within the Google advertising system provided by the US company Google LLC. When you visit our app, a remarketing cookie from Google is automatically left on your device to collect information about your activity on the app.

With the information collected in this way, we are able to display advertisements to you within the Google network depending on your behaviour on our website.

For example, if you display a product, this information will be noted by a remarketing cookie, so that we can target you with advertising about that product or any other we deem appropriate.

This advertising will be displayed to you within the Google network when you use the Internet, browse other websites, etc. We emphasise that when using Google Ads, we only use Anonymous Information.

Using Google Ads, we are only able to define the audience groups we would like our ads to reach. On this basis, Google decides when and how it will present our ad to you.

If you do not wish to receive personalised ads, you can manage your ad settings directly on the Google website: https://adssettings.google.com/. If you are interested in details related to Google's use of data from sites and applications that use Google services, we encourage you to read this information.

YouTube

YouTube widgets are embedded in our app, allowing you to play videos available on YouTube directly from our app. YouTube is operated by the US company Google LLC.

When you play a video, YouTube saves cookies on your device, including the DoubleClick cookie, and is informed that you have played the video from a specific website, even if you do not have a Google account or are not currently logged in. If you are logged into your Google account, this service provider will be able to directly associate your visit to our application with your account. The purpose and scope of data collection and further processing and use of data by Google, as well as your rights in this respect and the possibility to make settings to protect your privacy are described in the Google privacy policy.

If you do not want Google to attribute the data collected during video playback directly to your profile, you must log out of your account before playing the video. You can also completely prevent plug-ins from loading on the site by using the appropriate extensions for your browser, such as script blocking.

The information collected in the cookies associated with the YouTube videos embedded in our app is used by Google to ensure the correct and secure functioning of the widget, to analyse and optimise the services provided by YouTube, as well as for personalisation and advertising purposes. We do not have access to this information. For us, it is only important that the player works properly.

Please note that by playing the videos available on YouTube, you are using services provided electronically by Google LLC. Google LLC is an independent, third-party provider of electronic services to you. For details on YouTube's terms of use, including privacy, you may wish to consult the documents provided directly by YouTube: Terms of Use and Privacy Policy.

Vimeo

Vimeo widgets are embedded in our application, allowing you to play the recordings available on our pages. Vimeo is operated by the US company Vimeo.com Inc.

When you play back a recording, Vimeo saves cookies on your device and receives information that you have played back the recording from a specific application. The purpose and scope of data collection and their further processing and use by Vimeo, as well as the possibility to contact us and your rights in this respect and the possibility to make settings to ensure your privacy are described in Vimeo's privacy policy.

The information collected through cookies related to embedded videos in our app is used by Vimeo to ensure the correct and secure functioning of the widget, to analyse and optimise the services provided by Vimeo, as well as for personalisation and advertising purposes. We do not have access to this information. For us, it is only important that the player works properly.

Please note that by playing the recordings available 2 the app, you are using the services provided electronically by Vimeo. Vimeo is a stand-alone entity, independent of us, that provides electronic services to you. For details on Vimeo's terms of use, including privacy protection, you can refer to the documents provided directly by Vimeo: terms of use and privacy policy.

Meta Pixel

We use the Meta advertising system provided by the US company Meta Platform Inc. In order to target you with advertisements personalised to your behaviour in our app, we have implemented the Meta Pixel within the app, which automatically sends information about your activity in the app to the Meta advertising system.

Within the Meta advertising system, we only have access to Anonymous Information.

With the information gathered in this way, we are able to display advertisements to you within the Meta advertising system according to your behaviour in our application and to measure the effectiveness of the advertising campaigns you run in order to draw conclusions that allow us to optimise these campaigns for effectiveness.

Meta Platform Inc. may combine information collected using Pixel Meta with other information about you collected as part of your use of services operated by the company (including but not limited to Facebook, Instagram) and use for its own purposes, including marketing. Such activities of Meta are no longer dependent on us, and you can look for information about them directly in Meta's privacy policy. From your Facebook account, you can also manage your privacy settings. You will find useful information in this regard here.

Facebook Connect

Our website uses plug-ins, buttons and other social media tools, collectively referred to as "plug-ins", associated with social media services managed by the US company Meta Platform Inc.

This gives you the opportunity to use selected social features in our app, e.g. like button, share, etc.

The plugins collect information about your activity within our application. We do not have access to this information. It is only important to us that the plug-ins work properly.

The information collected by the plugins may be used by Meta Platform Inc. for its own purposes, such as, for example, improving its own products, creating user profiles, analysing and optimising its own activities, targeting advertisements, over which, however, we have no real influence. You can refer to Meta's privacy policy for details in this regard.

FreshMail

We use the FreshMail mailing system provided by the Polish companyFreshMail Sp. z o.o. Mailing list sign-up forms embedded on our websites may use cookie technology for the purpose of ensuring the proper functioning of these forms and measuring their conversion. We do not have access to the information collected in FreshMail's cookies for the proper functioning of the forms - we are only interested in making sure the form works properly. When it comes to measuring the conversion of sign-up forms, we only have access to anonymous statistical information.

In addition, we use an additional feature of the FreshMail system which is the tracking of in-app behaviour of people who are in our mailing databases.

Embedded in the code of our app is the FreshMail tracking code, which collects information about your activity within the app. If you are in our mailing database, the information collected by the tracking code is available to us as part of your user profile. Otherwise, the information collected remains anonymous.

With the information we collect in this way, we are able to send you emails tailored to your needs or interests inferred from your activities within our app.

If you are interested in the details related to privacy within FreshMail, we encourage you to read this privacy policy.

Claspo

On our website, we use the Claspo tool provided by the US company Ardas International Inc. This allows us to display pop-ups to you prompting you to take a specific action (e.g. purchase, newsletter sign-up).

The pop-up mechanism uses Claspo cookies in order to ensure that pop-ups work properly, to control how often a pop-up is shown to you and to build anonymous statistics on pop-up conversions. In terms of the information collected through these cookies, we only have access to anonymous conversion statistics.

If the pop-up is designed to obtain some information from you (e.g. email address, telephone number, etc.), this information is also stored in the Claspo database.

For more information on the information collected by Claspo, click here.

RevenueCat

As our application is based on a subscription model (you can use the free options or purchase a paid subscription that allows you to use paid functionalities), we use a tool that allows us to manage our users' subscriptions called Revenue Cat. This is a tool provided by the US company RevenueCat Inc.

According to the information provided by the provider, RevenueCat may collect data about end users, i.e. you. This may include information such as, technical information related to your mobile device or computer (device type, operating system) or information about your transactions in relation to our app (time when you last used the app, Apple receipt file, Google purchase token. In addition to this, we have the option to collect optional information about you, such as an end-user ID within the app or or additional attribution or metadata associated with the end-user.

If you would like to find out more about the processing of personal data in connection with the tool we use, we invite you to read RevenueCat's privacy policy.

Amplitude

In order to improve the quality of the service we provide within the app, we use a tool called Amplitude, which is provided by the American company Amplitude Inc. Amplitude is used for our analytical activities - based on the data collected about the users of our application, we are able to draw conclusions about their behaviour and adapt the application to their needs in order to make it as user-friendly and accessible as possible. By collecting data with the help of Amplitude, we are able to solve problems that users of our app may encounter.

Amplitude may collect information about the users of our application (e.g. names, email addresses and phone numbers) and their web browsing and application activity, session replays, login history, location and device information (e.g. device IDs (not Apple ID), operating system and IP addresses).

If you would like to learn more about Aplitude's privacy protection, we encourage you to read this privacy policy.