Privacy Policy

1. This Privacy Policy sets out the principles of processing personal data obtained through the website wojciechorzechowski.pl (hereinafter referred to as the “Website”).
2. The owner of the Website and at the same time the Data Controller is the Operator of this website, i.e.: pl Orzechowski spółka komandytowa ul. gen. Jarosława Dąbrowskiego 17a, 93-177 Łódź, entered into the Central Registration and Information on Business under the REGON number 363751021, NIP number 7252120227. You can contact us by mail at the indicated address, by phone at 693 704 142 or by e-mail at wojciech@wiwn.pl.
3. You can contact the Data Protection Supervisor by e-mail: biuro@gpkp.pl.
4. Personal data collected by the Administrator via the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also referred to as
5. The Administrator takes special care to respect the privacy of Users visiting the Website.

§ 1 Type of data processed, purposes and legal basis

1. The Administrator collects information about natural persons, including those conducting business or professional activities on their own behalf and natural persons representing legal persons or organizational units that are not legal persons but which are granted legal capacity by law, hereinafter collectively referred to as Users.
2. Users’ personal data are collected when using the contact form service on the Website for the purpose of performing a contract provided electronically. Legal basis: necessity for the performance of the contract for the provision of the contact form service (Article 6(1)(b) of the GDPR). Personal data will be processed for the purpose of responding to inquiries submitted via the contact form via the communication channels you indicated on the form, pursuant to Article 6(1)(a) of the GDPR.
3. When using the Contact Form service, the User provides the following data: name, telephone number, e-mail address and any data contained in the message content.
4. Users’ personal data may be processed for direct marketing purposes related to the services provided by the Data Controller. This data is processed until the Data Controller terminates marketing activities or until the Data Controller objects to the processing of Users’ personal data for this purpose – whichever occurs first. These activities are carried out solely on the basis of consent obtained, pursuant to Article 6(1)(a) of the GDPR and the legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR).
5. When using the Website, additional information may be downloaded, in particular: the IP address assigned to the User’s computer or the external IP address of the Internet provider, domain name, browser type, access time, type of operating system.
6. Navigational data may also be collected from Users, including information about links and hyperlinks they choose to click or other actions they take on the Website. Legal basis – the Controller’s legitimate interest (Article 6, paragraph 1, letter f, GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.
7. For the purpose of establishing, pursuing, and enforcing claims, certain personal data provided by the User as part of using the functionalities on the Website may be processed if the claims arise from the manner in which the User uses the services, as well as other data necessary to prove the existence of the claim, including the extent of the damage suffered. Legal basis – legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in the establishment, pursuit, and enforcement of claims, as well as defense against claims in proceedings before courts and other state authorities.
8. The provision of personal data to the Administrator is voluntary, in connection with the concluded contracts for the provision of services via the Website, with the reservation, however, that failure to provide the data specified in the forms will prevent the implementation of the contact form service.

§ 2 Who is the data shared or entrusted to and how long is it stored?

1. Users’ personal data are transferred to service providers used by the Administrator to operate the Website. Service providers to whom personal data are transferred, depending on contractual arrangements and circumstances, or are subject to the Administrator’s instructions regarding the purposes and methods of processing such data (processors).

The Administrator uses suppliers who process personal data solely at the Administrator’s request. These include, among others, suppliers of hosting services, IT services and technical support, and systems for analyzing website traffic.

1. Location. Service providers are based in Poland and other countries of the European Economic Area (EEA).
2. Users’ personal data are stored:
  - If the basis for personal data processing is consent under Article 172 of the Telecommunications Law, the User’s personal data will be processed by the Controller until the consent is revoked, and after the consent is revoked, for a period corresponding to the limitation period for claims that may be brought by the Controller and against the Controller. Unless specific provisions provide otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activity, three years.
  - If the basis for data processing is the performance of a contract, the User’s personal data is processed by the Administrator for as long as necessary to perform the contract, and thereafter for a period corresponding to the limitation period for claims. Unless specific provisions provide otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activity, three years.
3. Navigation data may be used to provide Users with better service, analyze statistical data and adapt the Website to Users’ preferences, as well as to administer the Website.
4. In the event of a request, the Controller makes personal data available to authorized state authorities, in particular organizational units of the Prosecutor’s Office, the Police, the President of the Office for Personal Data Protection, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.
5. Providing your personal data is prohibited. Failure to provide data will result in the inability to use your personal data to respond via the contact form.
6. Your personal data will not be processed in an automated manner, including in the form of profiling.
7. Your personal data will not be transferred to third countries or international organisations.
8. Based on separate consent, the User’s personal data may be transferred to entities associated with the Controller for the purpose of direct marketing of services provided by these associated entities:
  a) WONAN sp. z o. o., ul. gen. Jarosława Dąbrowskiego 17a, 93-177 Łódź, KRS 0000599441,
  b) Business Consulting Wojciech Orzechowski ul. gen. Jarosława Dąbrowskiego 17a, 93-177 Łódź, REGON 830332567
  c) SKLEPRENTIERA.PL sp. z o. o., ul. gen. Jarosława Dąbrowskiego 17a, 93-177 Łódź, KRS 0000556226,
  d) WARSZTATY Z NIERUCHOMOŚCI sp. z o. o., ul. gen. Jarosława Dąbrowskiego 17a, 93-177 Łódź, KRS 0001070857,
  e) WYDAWNICTWO STREFA NIERUCHOMOŚCI sp. z o. o., ul. Piotrkowska 270, 90-361 Lodz

§ 3 IP address

1. The Administrator may collect User IP addresses. An IP address is a number assigned to the computer of a person visiting the Website by the Internet service provider. The IP number provides access to the Internet. In most cases, it is assigned to the computer dynamically, meaning it changes with each Internet connection. The Administrator uses the IP address to diagnose technical problems with the server, create statistical analyses (e.g., to determine which regions receive the most visits), as information useful in administering and improving the Website, as well as for security purposes and to identify unwanted automated programs that burden the server and browse the Website’s content.
2. The Website contains links and references to other websites. The Administrator is not responsible for the privacy policies applicable therein.

§ 4 Rights of data subjects

1. Right to withdraw consent – legal basis: Article 7(3) of the GDPR.
  - The user has the right to withdraw any consent he has given
  - Withdrawal of consent takes effect from the moment of withdrawal
  - Withdrawal of consent does not affect the processing carried out by the Administrator in accordance with the law before its withdrawal.
  - Withdrawal of consent does not entail any negative consequences for the User, but may prevent further use of services or functionalities which, according to the law, the Administrator may only provide with consent.

1. Right to object to data processing – legal basis: Article 21
  - The User has the right to object at any time – for reasons related to his/her particular situation – to the processing of his/her personal data, including profiling, if the Controller processes his/her data based on a legitimate interest, e.g. marketing of the Controller’s products and services, keeping statistics on the use of individual functionalities of the Website and facilitating the use of the Website, as well as satisfaction surveys.
  - Unsubscribing via e-mail from receiving marketing communications regarding products or services will mean the User’s objection to the processing of his or her personal data, including profiling for these purposes.
  - If the User’s objection proves to be justified and the Administrator has no other legal basis for processing personal data, the User’s personal data will be deleted to the processing of which the User has objected.
  - The objection should be submitted via the Administrator’s e-mail address: wojciech@wiwn.pl.
2. Right to erasure (“right to be forgotten”) – legal basis: Article 17 GDPR.
  - The user has the right to request the deletion of all or some of their personal data.
  - The user has the right to request the deletion of personal data if:
    - personal data are no longer necessary for the purposes for which they were collected or processed;
    - withdrew specific consent to the extent that personal data were processed based on his consent;
    - has objected to the use of his data for marketing purposes;
    - personal data are processed unlawfully;
    - personal data must be erased in order to comply with a legal obligation under Union law or the law of the Member State to which the Controller is subject;
    - personal data were collected in connection with the provision of information society services
  - Despite a request to delete personal data, in connection with an objection or withdrawal of consent, the Controller may retain certain personal data to the extent that processing is necessary to establish, pursue, or defend legal claims, as well as to comply with a legal obligation requiring processing under EU or Member State law to which the Controller is subject. This applies in particular to personal data including: first name, last name, and email address, which are retained for the purpose of handling complaints and claims related to the use of the Controller’s services, as well as additionally, residential/mailing address and order number, which are retained for the purpose of handling complaints and claims related to concluded sales contracts or the provision of services.

1. Right to restrict data processing – legal basis: Article 18 GDPR.
  - The user has the right to request the restriction of the processing of their personal data. Submitting a request, until it is considered, prevents the use of certain functionalities or services that would involve the processing of the data covered by the request. The Administrator will also not send any communications, including marketing communications.
  - The user has the right to request the restriction of the use of personal data in the following cases:

- - - when he/she questions the accuracy of his/her personal data – then the Administrator limits their use for the time needed to check the accuracy of the data, but no longer than for 7 days;
    - when the data processing is unlawful and instead of deleting the data, the User requests the restriction of their use;
    - when personal data are no longer necessary for the purposes for which they were collected or used but are still needed by the User to establish, pursue or defend legal claims;
    - when he has objected to the use of his data – then the restriction takes place for the time needed to consider whether – due to the specific situation – the protection of the User’s interests, rights and freedoms outweighs the interests pursued by the Controller in processing the User’s personal data.

1. Right of access to data – legal basis: Article 15 of the GDPR.
  - The User has the right to obtain confirmation from the Controller whether he processes personal data, and if so, the User has the right to:

- - - access your personal data;
    - obtain information on the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the planned period of storage of the User’s data or the criteria for determining this period (when it is not possible to determine the planned period of data processing), the User’s rights under the GDPR and the right to lodge a complaint with a supervisory authority, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
    - obtain a copy of your data

1. The right to rectification of data – legal basis: Article 16 of the GDPR.
  - The User has the right to request immediate rectification of any inaccurate personal data concerning them by the Administrator. Taking into account the purposes of processing, the User whose data is processed has the right to request the completion of incomplete personal data, including by providing an additional statement, by sending a request to the email address provided.
2. The right to data portability – legal basis: Article 20 of the GDPR.
  - The User has the right to receive their personal data provided to the Controller and then send it to another Personal Data Controller of their choice. The User also has the right to request that the Personal Data be sent directly by the Controller to such Controller, if technically feasible. In such a case, the Controller will send the User’s personal data in a CSV file, which is a commonly used, machine-readable format that allows the data received to be sent to another Personal Data Controller.
3. If the User exercises the above rights, the Administrator will either comply with the request or refuse to comply with it immediately, but no later than one month after receiving it. However, if – due to the complex nature of the request or the number of requests – the Administrator is unable to comply with the request within one month, the Administrator will comply within the next two months, informing the User within one month of receiving the request of the intended extension and the reasons therefor.
4. The User may submit complaints, inquiries and requests to the Administrator regarding the processing of his or her personal data and the exercise of his or her rights.
5. The User has the right to request that the Administrator provide a copy of the standard contractual clauses.

1. The User has the right to lodge a complaint with the President of the Personal Data Protection Office regarding the violation of his or her rights to personal data protection or other rights granted under the GDPR.

§ 5 Changes to the Privacy Policy

1. If necessary, the Privacy Policy may be changed.