Privacy policy

TOPTEL.PL WEBSITE PRIVACY POLICY

1.Personal data administrator

The administrator of your data is: Toptel.pl sp.z o.o. sp.k. with headquarters at 31-221 Kraków, ul. Białoprądnicka 15A, entered into the Central Register and Information on Economic Activity, under the NIP number: 945-19-81-163, REGON: 356688733. In matters related to the processing and protection of personal data, a contact point has been appointed in the form of an e-mail address: toptel @ toptel.pl Contact in the indicated cases is also possible in the form of traditional correspondence to the administrator's address with the note: "Personal Data Protection" and in person at 31-589 Kraków, Niepokalanej Panny Marii 111b.

Personal data collected by the Administrator via the website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement such data and repealing Directive 95/46 / EC (General Data Protection Regulation), hereinafter referred to as the GDPR and the Personal Data Protection Act of 10 May 2018. We respect the right to privacy and we care about data security. For this purpose, secure communication encryption protocol (SSL).

2. Access data and hosting

You can visit our website without providing your personal data. Each time the website is accessed, the server automatically saves only the so-called server logs, such as the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the Internet service provider submitting the request (access data) and documents the page call. These data are analyzed solely for the purpose of ensuring the website functions properly and improving our offer. The above serves in accordance with Art. 6 sec. 1 lit. f GDPR, securing our legitimate interest, consisting in the correct presentation of our offer. All access data will be deleted no later than seven days after the end of your visit to the website.

Hosting services provided by an external service provider
As part of entrusting data processing - on our behalf, an external service provider performs services for us in the field of hosting and presentation of websites. All data that - as described in this privacy policy - have been collected as part of the use of our website or in the forms provided for this purpose in the online store, are stored on the servers of this service provider. Processing on other servers takes place only to the extent specified in this privacy policy. This service provider is based in a country belonging to the European Union or the European Economic Area.

3. Collection and processing of data to fulfill the contract and create a customer account

We collect personal data only if you voluntarily provide it to us when placing your order, contacting us (e.g. via the contact form or e-mail) or creating a customer account. Mandatory fields are marked as such because the data they contain are necessary for us to perform the contract or to consider the case in which you contacted us, or to set up a customer account. Without providing them, you cannot complete the order or create a customer account or contact us. What data is collected results from the forms into which the data is entered. We use the data provided by you to perform the contract and answer your inquiries. After the performance of the contract or deletion of your customer account, the processing of your data will be limited and after the retention periods specified in the tax and accounting regulations have expired, this data will be deleted, unless you expressly consent to further use of this data or in accordance with applicable regulations we reserve the right to further use the data, about which we inform you in this statement. Your customer account can be deleted at any time. For this purpose, please send a message to our contact address. In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Administrator.

This applies to the following groups of recipients:
◦ persons authorized by us, employees and associates who must have access to personal data in order to perform their duties,
◦ hosting company,
◦ companies handling mailings,
◦ companies handling SMS messages,
◦ companies with which the Administrator cooperates in the field of own marketing,
◦ couriers,
◦ insurers,
◦ law offices and debt collectors,
◦ banks,
◦ payment operators,
◦ public authorities.

4. E-Mail-Newsletter

If you subscribe to our newsletter, then we will use the data necessary for this purpose or provided separately by you to send you our e-mail newsletter on a regular basis based on your consent. You can unsubscribe from the newsletter at any time using the appropriate link in the newsletter. After unsubscribing, we will delete your e-mail address, unless you have expressly consented to the further use of your data for other purposes or we reserve the right to further use the data in cases permitted by law, about which we inform you in this statement.

5.Important Marketing Techniques

The operator uses statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The operator does not provide personal data to the operator of this service, but only anonymised information. The service is based on the use of cookies on the user's end device. In terms of information about user preferences collected by the Google advertising network, the user can view and edit information derived from cookies using the tool: https://www.google.com/ads/preferences/

6. "COOKIES"

The installation of "cookies" is necessary for the proper provision of services on the website. The "cookies" files contain information necessary for the proper functioning of the website, and they also provide the opportunity to compile general statistics of website visits. The website uses the following types of "cookies": session and permanent. "Session" cookies are files temporary, which are stored on the user's end device until logging out (leaving the page). "Permanent" "cookies" are stored on the user's end device for the time specified in the parameters of "cookies" or until they are deleted by the user. The administrator uses his own cookies to better understand how the user interacts with the content of the website.The files collect information about the way the user uses the website, the type of page from which the user was redirected and the number of visits and time of the user's visit to the website. This information does not record specific information. user personal data penetrates, but is used to develop statistics on the use of the website. The user has the right to decide on the access of "cookies" to his computer by selecting them in the window of his browser. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.

7. User rights over their own personal data

Each user has the right to:
a) Access to personal data concerning them, including obtaining a copy of the personal data subject to processing. The right to obtain a copy may not adversely affect the rights and freedoms of others.
b) Correcting and supplementing the data in case of incorrect or outdated data.
c) Deletion of data
- If the request to delete data relates to data necessary for the performance of the contract, it may be associated with the termination of the contract.
d) Restrictions on their processing in the following cases:
- The data subject questions the correctness of the personal data - for a period allowing the administrator to check the correctness of this data.
- The processing is unlawful and the data subject opposes the deletion of personal data, requesting instead to limit their use.
- The administrator no longer needs personal data for processing purposes, but they are needed by the data subject to establish, assert or defend claims.
- The data subject has objected pursuant to art. 21 sec. 1 against processing until it is determined whether the legitimate grounds of the administrator override the grounds for objection of the data subject.
e) Data portability
- the data subject has the right to receive in a structured manner, a commonly used machine-readable format, personal data concerning him, which he provided to the administrator, and has the right to send these personal data to another administrator without hindrance from the administrator to whom this personal data was provided.
f) Not being subject to automated decision-making (in profiling)
g) The right to object to the processing of personal data.
- If the processing concerns statistical purposes or is carried out on the basis of the Administrator's legitimate legal interest, and the objection is justified by the specific situation of the person.
All requests regarding the implementation of the above-mentioned rights should be addressed to the Administrator: < br /> a) By electronic means to the following address: toptel@toptel.pl
b) to the following address: 31-221 Kraków, ul. Białoprądnicka 15A
c) In person at the Administrator's seat.
The administrator provides information about the actions taken without undue delay,
within one month of receiving the request. Due to important circumstances (including the number of requests or the complexity of the application), the deadline may be extended by another 2 months. The Administrator will inform the data subject within one month of the reasons for the delay and extension of the deadline.

8. Final Provisions

The administrator uses technical and organizational measures to ensure the protection of personal data being processed, appropriate to the threats and categories of data protected, and in particular, protects the data against unauthorized disclosure, removal by an unauthorized person, processing in violation of applicable laws and change, loss, damage or destruction. The administrator provides appropriate technical measures to prevent the acquisition and modification by unauthorized persons of personal data sent electronically. In matters not covered by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply accordingly.