Privacy Policy
1. This Privacy Policy sets out the principles of operation of the website www.polskakaucja.pl, owned by the company operating under the name “PolKa,” a not-for-profit deposit system operator, a joint-stock company in organization, with its registered office in Warsaw. It also governs the processing of personal data in connection with the use of the Company’s website, including electronic services provided via it.
2. The controller of personal data of users of the website: www.polskakaucja.pl is the Company operating under the name “PolKa,” a not-for-profit deposit system operator, a joint-stock company in organization, with its registered office in Warsaw.
3. The Personal Data Controller obtains users’ personal data in the following ways:
a) by using the “Establishing cooperation” form,
b) by voluntarily subscribing to the newsletter service, through which the Personal Data Controller provides information about the services provided, including those of its partners, as well as information about the activities conducted and events organized by the Personal Data Controller and its Partners, as well as legal alerts regarding changes in applicable environmental protection laws,
c) through cookies,
d) by using the Personal Data Controller’s social media profiles
(Facebook, LinkedIn, YouTube),
e) by providing information in an email or traditional correspondence,
f) by telephone.
4. The Personal Data Controller processes the following personal data:
a) if the user uses a service provided electronically, i.e.,
the “Establishing cooperation” form, the Personal Data Controller processes the following data: (1) first name and last name, (2) name/company name, (3) email address, (4) telephone number,
b) if the user uses a service provided electronically, i.e.,
newsletter subscription: the Personal Data Controller processes the following data:
(1) first name and last name, (2) email address,
c) If you contact the Personal Data Controller via email or traditional mail, the Personal Data Controller processes the personal data you provide as necessary to handle the matter.
d) If you contact the Personal Data Controller by telephone, the Personal Data Controller may ask you to provide the personal data necessary to handle or resolve the matter.
e) If you post content on the Personal Data Controller’s public profile on social media (Facebook, LinkedIn, YouTube), including contact with the Personal Data Controller or other individuals on such media, the Personal Data Controller processes the personal data you post.
5. When using the website: www.polskakaucja.pl, the Personal Data Controller automatically collects information about the user’s use of the services, such as the time of the visit, the pages displayed, the content, technical information about the user’s device and software, including device type, operating system and version, mobile network information, and IP address. This information is processed primarily for purposes related to the provision of services. The Personal Data Controller also processes it for technical purposes, to ensure the security of the IT system and its management, as well as for analytical and statistical purposes.
6. The Personal Data Controller uses cookies to ensure the proper functioning of the website, including the electronic services provided by the Personal Data Controller.
7. Furthermore, the Personal Data Controller may use cookies to:
a) increase the usability of the website and tailor its content to individual user preferences,
b) create anonymous statistics based on Google Analytics (analysis of User activities on the website and demographic data), excluding the possibility of identifying the User,
c) display advertisements via Google AdWords to users who have visited the website,
d) display personalized advertisements tailored to users’ interests and online behavior.
8. Detailed information on how to manage cookies can be found in your web browser settings. These settings allow you to specify the scope of your consent to the placement of these types of files in your browser. However, limiting or disabling the use of cookies may affect some of the website’s functionalities.
9. Providing personal data by users is voluntary but necessary to use certain functionalities of the website www.polskakaucja.pl, in particular the “Establishing cooperation” form.
10. The scope of data required to use specific functionalities or services provided by the website is indicated each time a given service or communication channel is used.
11. Users’ personal data may be processed for the following purposes and on the legal bases indicated below, as specified in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119 No. 1 of 2016), hereinafter referred to as the GDPR:
a) receiving data via the “Establishing cooperation” form regarding potential cooperation, including ongoing communication to establish the terms of potential cooperation (Article 6, paragraph 1, letter b of the GDPR),
b) handling Users’ complaints regarding services provided electronically
(Article 6, paragraph 1, letter b of the GDPR),
c) marketing communications, sending commercial information, and legal alerts when using the service: newsletter subscription – (Article 6, paragraph 1, letter f of the GDPR),
d) conducting correspondence and answering questions (via email or telephone) – (Article 6, paragraph 1, letter f of the GDPR),
e) storing data in the form of cookies – when a user first enters the website, the Personal Data Controller requests consent to the sending of analytical, statistical, and marketing cookies by clicking the “I agree” button in the window that appears after entering the website – (Article 6, paragraph 1, letter a of the GDPR),
f) maintaining a social media profile – when the user uses the personal data Controller’s social media profiles (Facebook, LinkedIn, YouTube), the User receives information about the personal data Controller’s activity on these profiles and can also use the tools available on social media to communicate with the personal data Controller – (Article 6, paragraph 1, letter f of the GDPR),
g) considering and pursuing claims, defending against claims, as well as for the purposes of implementing out-of-court complaint and redress procedures, which constitutes the legitimate interest of the personal data Controller (Article 6, paragraph 1, letters a and f of the GDPR),
h) monitoring the use of the services provided on the website in terms of compliance with the provisions of the applicable terms and conditions.
services provided, as well as developing the functionality of the website, improving the operation of the services provided via it – (Article 6, paragraph 1, letter f of the GDPR),
i) compliance with legal requirements regarding tax and accounting regulations, in particular those specified in the Act of 11 March 2004 on Value Added Tax, the Act of 15 February 1992 on Corporate Income Tax, and the Act of 29 September 1994 on Accounting (Article 6, paragraph 1, letter c of the GDPR),
j) storing data for archiving purposes and for the purpose of demonstrating compliance with legal obligations incumbent on the Personal Data Controller, which constitutes its legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
12. The personal data collected will be stored by the Personal Data Controller for as long as necessary for the purposes for which the Personal Data Controller is required to provide such data.
Personal data is stored by the Personal Data Controller for the period indicated below:
a) until the statute of limitations for potential claims arising from agreements concluded between the Personal Data Controller and the user expires,
b) until the user withdraws consent or effectively objects to the processing of personal data regarding newsletter subscriptions,
c) until an effective objection is raised if the legal basis for processing is the legitimate interest of the Personal Data Controller,
d) until the User withdraws consent to data processing in the case of processing personal data based on consent,
e) for the time necessary to pursue specific claims made by the Personal Data Controller or to defend against them (if the User has made claims) in connection with the concluded agreements referred to above,
f) for the duration of the performance of obligations arising from legal provisions, including in particular tax and accounting regulations, e.g., obligations related to storing documentation in accordance with the requirements of Article 74 of the Accounting Act of 29 September 1994,
g) for the period necessary for the Personal Data Controller to document the proper fulfillment of its legal obligations before public administration authorities, including the supervisory authority for personal data protection,
h) for archiving purposes, where this concerns the history of correspondence and responses to submitted inquiries (not directly related to concluded agreements) – for a period no longer than 3 years.
13. Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119 No. 1 of 2016), the user has the following rights regarding their personal data: a) the right to access data,
b) the right to rectify (correct) data,
c) the right to erase data,
d) the right to restrict data processing,
e) the right to data portability,
f) the right to object to data processing for reasons relating to their particular situation, in the case of personal data being processed by
The Controller of personal data for the purpose of pursuing legitimate interests (as referred to above – Article 6, paragraph 1, letter f of the GDPR),
g) the right to lodge a complaint with the President of the Personal Data Protection Office or another competent supervisory authority,
h) the right to withdraw consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal, if the Controller processes personal data with the consent of the user.
14. The Controller does not transfer personal data outside the European Economic Area or to international organizations.
15. The Controller does not conduct automated processing of user data that will simultaneously lead to decisions being made with legal effects or similarly significantly affecting their situation.
16. The Personal Data Controller may share Users’ personal data with:
a) entities supporting the Personal Data Controller in connection with the services provided, including those responsible for postal, courier, IT (including hosting and email service providers), financial, accounting, legal, and marketing activities,
b) employees and associates of the Personal Data Controller.