Privacy Policy for the zymetria.pl Website

This document fulfils the information obligation pursuant to Article 13 of the General Data Protection Regulation (GDPR).

Please read the following Privacy Policy to understand how your personal data will be processed when using our website (https://www.zymetria.pl/). We inform you about the obligations of Zymetria Sp. z o.o. regarding the protection of personal data, as well as the rights and responsibilities of Users in relation to privacy and personal data protection. These provisions may be updated from time to time; therefore, we encourage you to review them periodically.

The data controller is Zymetria Sp. z o.o., ul. Dobra 11 lok. 12/14, 00-384 Warsaw, Poland. The Controller may be contacted by e-mail at: [email protected] or by post at the registered office address.

The Controller has appointed a Data Protection Officer – Piotr Piekarski. In matters relating to personal data protection, you may contact the Data Protection Officer via e-mail at [email protected] or by post at the registered office address.

  1. PROCESSING OF PERSONAL DATA

Depending on the purpose of processing, your personal data may be processed by the Controller to different extents and on the following legal bases under the GDPR:

– Article 6(1)(a) GDPR – where consent has been given to receive a report and to receive commercial and marketing information at the provided e-mail address;

– Article 6(1)(f) GDPR – in relation to submitted inquiries (e.g. via e-mail), where the purpose is to respond or establish requested contact;

– Article 6(1)(f) GDPR – in relation to the use of cookies, for the purpose of improving functionalities and services provided;

– Article 6(1)(f) GDPR – for the purposes of establishing, pursuing or defending potential claims.

When completing a form in order to receive a report, marketing communication, or to initiate contact, the categories of personal data processed include contact details and any other data optionally provided in the message content. Providing contact data, at least an e-mail address, is voluntary but necessary to achieve the intended purpose. The Controller obtains such data from you when submitting the form or sending an e-mail. If the data is not provided, the Controller may not be able to fulfil the intended purpose of processing.

The Controller will process your personal data for the period necessary to achieve all processing purposes, in compliance with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. Where processing is based on consent, data will be processed until such consent is withdrawn.

In order to achieve the purposes of processing, the Controller may share your personal data with entities providing services to the Controller, such as advisory firms, hosting and website maintenance providers, or correspondence handling service providers. As a rule, apart from such cases, the Controller will not disclose your personal data to other entities without your prior explicit consent.

The Controller does not transfer your personal data outside the European Economic Area and does not carry out automated decision-making, including profiling, that would produce legal effects or otherwise significantly affect you.

  1. USERS’ RIGHTS

In accordance with Chapter III of the GDPR, the Controller ensures the exercise of all rights arising from the GDPR, including: the right of access, rectification and erasure, restriction of processing, data portability, not being subject to automated decision-making, including profiling, and the right to object.

Where the legal basis for processing is consent, you have the right to withdraw such consent at any time by contacting the Controller. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (UODO).

  1. USE OF THE WEBSITE BY CHILDREN

The content published on the Website is intended for adults. The Controller does not knowingly contact children directly for any purposes such as inviting them to participate in surveys or promotions.

  1. COOKIES

To improve the quality of services provided, the Website uses cookies. Cookies are IT data, in particular text files, stored on users’ end devices and intended for use of websites. These files allow recognition of the user’s device and proper display of a website tailored to individual preferences.

The Controller uses cookies to adapt the content of the Website to user preferences and optimise website use.

The Controller uses session cookies and persistent cookies. Session cookies are temporary files stored until logout or browser closure. Persistent cookies remain stored for a specified time or until deleted by the user.

Most web browsers accept cookies by default. Users can manage cookie settings through their browser, including limiting or disabling cookies, which may affect website functionality.

  1. FINAL PROVISIONS

This Privacy Policy is governed by Polish law.

This Privacy Policy may be updated.