General Provisions
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the "GDPR"), the Personal Data Controller hereby provides information on the processing of personal data entered via the form available on the website www.smarduch.com, related to matters reported by the Reporting Party.
Purposes of processing personal data of website users (hereinafter referred to as "Users")
Users' personal data provided in the "Report a matter" form may be processed:
1. for the purpose of submitting a report to the appropriate institution indicated in the report – legal basis: Article 6 paragraph 1 letters a and e of the GDPR;
2. for the purpose of providing information electronically or by telephone about the status of a task carried out in the public interest or in the exercise of public authority vested in the Controller – legal basis: Article 6 paragraph 1 letters a and e of the GDPR; Article 6, paragraph 1, letter e of the GDPR;
3. for the Controller to electronically deliver messages containing information about the case review process, the results of the case report, and other important issues related to the subject matter of the case – legal basis: Article 6, paragraph 1, letters a and e of the GDPR;
4. for the Controller to inform the User about initiatives undertaken by the Controller, including sending a newsletter containing information about the Controller's current activities, petitions formulated by the Controller, social campaigns undertaken, and actions taken, as well as sending invitations to events in which the Controller is an organizer or participant, as well as thanks and declarations relating to events of significant importance to the public and social activities conducted by the Controller – legal basis: Article 6, paragraph 1, letters a, d, and e of the GDPR.
Providing the data required in the form is voluntary, but necessary to report the case. Consent to the processing of personal data for the purposes referred to in point 2, letter a) is granted. c and d of the Privacy Policy is voluntary.
Data Retention Period, Data Recipients
The Administrator will store and process the personal data provided in the form only for the period necessary to resolve the matter and inform the User about the status of the matter to which the report pertains, until its completion. In the event of consent to the processing of personal data for the purposes referred to in point 2 letter d of the Privacy Policy, the Administrator will store and process the User's personal data until the User withdraws their consent to the storage or processing of their personal data.
Personal data is collected directly from the data subjects and may be transferred to the entities referred to in the report, as well as to entities providing IT services and IT systems to the Administrator.
The personal data controller is Weronika Smarduch. Contact can be made via email: biuro@smarduch.com.
Information about cookies
The website at https://smarduch.com/ uses cookies to optimize the use of the website and for statistical purposes. Cookies are IT data, including text files, that are stored on the end device of a website user (computer, phone, etc.). Cookies typically contain the name of the website they originate from, the duration of their storage on the end device, and a unique number.
We use cookies to identify the user's browser or device. Cookies collect various types of information that do not constitute personal data (they do not allow for the identification of the user). However, some information, depending on its content and use, may be associated with a specific individual and thus be considered personal data. This data will be processed by the Controller for the purposes indicated above, pursuant to Article 6(1)(f) of the GDPR – i.e., based on the Controller's legitimate interest in enabling the proper operation and monitoring of website traffic. The data will be processed only for the duration of the Controller's legitimate interest.
Each user can manage cookies in their web browser settings, including blocking the storage of cookies on their end device. Some changes made by the user regarding cookie management may affect the operation and display of all content on the website.
Rights related to personal data processing
Each Participant has the right to access their personal data, request its rectification, erasure, or restriction of processing, the right to object to such processing, the right to data portability, and the right to withdraw consent to data processing.
To the extent that your data is processed based on consent, you have the right to withdraw consent to data processing at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Consent may be withdrawn by sending a relevant statement to the Administrator's email address: biuro@smarduch.com.
The Participant has the right to object at any time – for reasons related to their particular situation – to processing of their personal data other than the aforementioned. In such a case, the Administrator will not process your data unless they demonstrate compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject, or grounds for establishing, pursuing, or defending legal claims.
Your personal data will be processed in IT systems, but will not be subject to automated decision-making, including profiling, nor will it be transferred to third countries or international organizations.
You have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).