Privacy and Cookie Policy for this website https://kamikon.pl

I. General Provisions

Niniejsza polityka określa zasady przetwarzania danych osobowych w związku z korzystaniem z serwisu internetowego https://kamikon.pl, zwanego dalej „Serwisem”, kontaktem z Administratorem oraz zawieraniem i wykonywaniem umów. Opisuje również zasady wykorzystywania plików cookie i podobnych technologii oraz zarządzania zgodami.

Administrator przetwarza dane osobowe w zakresie niezbędnym do realizacji określonych celów, na właściwych podstawach prawnych i przez okres uzasadniony tymi celami lub wymagany przepisami prawa.

Dane osobowe zbierane za pośrednictwem Serwisu są przetwarzane zgodnie z Rozporządzeniem Parlamentu Europejskiego i Rady (UE) 2016/679 z dnia 27 kwietnia 2016 r. (ogólne rozporządzenie o ochronie danych, dalej RODO) oraz ustawą o ochronie danych osobowych z dnia 10 maja 2018 r.

II. Data controller

The data controller for the personal data collected via the Website is Kamikon Łukasz Kamiński, address: ul. Powstańców Śląskich 32A/1, 45-087 Opole, email address: biuro@kamikon.pl (hereinafter: Data Controller).

III. Data processing

Purposes and Legal Basis for Processing:

• Processing of other enquiries and correspondence: to respond to enquiries and for communication purposes. The legal basis is Article 6(1)(f) of the GDPR, and the controller’s legitimate interest lies in processing correspondence and maintaining contact with individuals who are interested in its activities.
• Contact with representatives of clients and business partners: for the purpose of agreeing the terms of cooperation and fulfilling contracts concluded with the entities they represent. The legal basis is Article 6(1)(f) of the GDPR, and the Controller’s legitimate interest is the organisation and conduct of business cooperation.
• Compliance with legal obligations, in particular accounting and tax obligations: the legal basis is Article 6(1)(c) of the GDPR, in conjunction with the relevant provisions imposing these obligations.
• Establishing, exercising or defending against claims: the legal basis is Article 6(1)(f) of the GDPR, and the Controller’s legitimate interest is the protection of its rights.

The provision of data in connection with contact is voluntary; however, failure to provide the data necessary to respond may prevent us from processing your enquiry. The provision of data necessary for the conclusion and performance of a contract is a condition for its conclusion or performance. With regard to accounting and tax records, the obligation to provide certain data may arise from statutory provisions.

Data Processing Period:

The data retention period depends on the purpose of the processing:

• data relating to the preparation and performance of the contract are retained for the period necessary for its conclusion and performance;
• data relating to enquiries and correspondence is retained for the period necessary to handle the matter and the associated communication;
• accounting and tax records are retained for the period required by the relevant legislation;
• data necessary for establishing, pursuing or defending against claims may be retained until the expiry of the relevant limitation periods, taking into account events affecting the running of those periods;
• The retention periods for information relating to cookies and consent management are set out in Section V.

Once the relevant retention period has expired, the data is deleted or anonymised, unless there is another legal basis for its further processing.

IV. Rights of the Data Subject

Every User has the right to:

• The right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if the User considers that the processing infringes their rights and freedoms under the GDPR.
• Right of access to your data (Article 15 of the GDPR).
• The right to rectify (correct) your personal data (Article 16 of the GDPR).
• The right to erasure of data (‘the right to be forgotten’) (Article 17 of the GDPR), unless there is another legal obligation requiring the data to be retained.
• The right to restrict processing (Article 18 of the GDPR).
• Right to data portability: in the cases specified in Article 20 of the GDPR, where processing is carried out on the basis of consent or a contract and is carried out by automated means.
• The right to object to the processing of data (Article 21 of the GDPR), where the processing is carried out on the basis of the Controller’s legitimate interests.
• The right to withdraw consent at any time, without this affecting the lawfulness of any processing carried out on the basis of consent prior to its withdrawal.

To exercise your rights, please contact the Data Controller at biuro@kamikon.pl. The scope and conditions for exercising each right are set out in the provisions of the GDPR.

V. Cookies, similar technologies and consent management

1. What are cookies and similar technologies?

Cookies are small pieces of data stored on a user’s device and read when they use a website. Other data storage technologies, such as local storage and session storage, may perform similar functions.

In this section, the term ‘cookies’ also covers similar technologies that store or retrieve information on the user’s device. A detailed list of the technologies used on the Website is provided below.

2. Policy on the use of cookies

The storage of information on a user’s device or the access to information already stored on it is carried out in accordance with Article 399 of the Electronic Communications Act of 12 July 2024.

Consent is not required in the cases specified in Article 399(3) of this Act, in particular where the recording or retrieval is necessary to provide an electronic service requested by the user.

Other technologies requiring consent may only be used once consent has been given. The user may refuse to give consent or choose the scope of permitted services.

If the use of a particular technology involves the processing of personal data, the provisions of the GDPR also apply. For processing based on consent, the legal basis is Article 6(1)(a) of the GDPR.

3. Objectives and a detailed list of technologies

Cookies may be used to ensure the functioning and security of the Website, to remember the user’s preferences and, where the relevant services are used, to provide additional features, to analyse the use of the Website or for marketing purposes.

The detailed list below sets out the technologies actually used, their suppliers, their purposes, their retention periods and their assignment to service categories.

Real Cookie Banner: consent management

This tool is used to remember the user’s choices regarding cookies and similar technologies and to record those decisions.

The asterisk indicates a variable part of the name, relating, amongst other things, to the context of the website and the language version.

4. Changing settings and withdrawing consent

You may change your settings or withdraw your consent at any time by using the functions below. Withdrawing your consent does not affect the lawfulness of any processing carried out prior to its withdrawal.

• Changing your privacy settings
• Checking the history of decisions
• Withdrawal of authorisations granted

5. Browser settings

Users can also manage cookies and other website data via their browser settings; in particular, they can delete stored data and restrict its storage. The options available depend on the browser being used.

Restricting the technologies required for certain functions to work may prevent you from using those functions. Your browser settings provide an additional way of managing your data and do not replace the ‘withdraw consent’ function available on the Website.

6. Recording and documenting decisions

The Controller uses the Real Cookie Banner tool to manage consent. The tool is used to remember the user’s choices and to record decisions regarding consent.

The data necessary to demonstrate that consent has been given are processed on the basis of Article 6(1)(c) in conjunction with Article 7(1) of the GDPR.

The scope of the data recorded includes:

• Information is also recorded that enables the decision-making process to be reconstructed: the webpage address, the linguistic context, the button used, the size of the browser window, and the sequence of interactions with the banner or content blocker, such as clicks and scrolling. The recording of these interactions does not extend to other elements of the webpage.
• To safeguard the decision-documentation mechanism, cryptographic hashes generated from the truncated IP address are also processed.
• Records of decisions are stored in the Service’s database.
• The recording of the full IP address in the decision documentation is disabled. This does not preclude the processing of the IP address in other systems supporting the Website, in particular in server logs.

Retention periods

The user’s consent choices are stored on the device for up to 365 days. The user may change their mind at any time or delete the relevant browser data. Changes to services or terms and conditions requiring consent may mean that consent must be obtained again at an earlier stage.

Records of decisions in the Service’s database are automatically deleted after 120 months, in accordance with the tool’s current configuration.

The period for which records are stored on the server is separate from the duration for which cookies are stored on the device. Deleting cookies from your browser or withdrawing your consent does not, in itself, result in the deletion of records of decisions made previously.