Privacy policy

Fulfilling the obligation resulting from article 13 and article 14 of Regulation of the European Parliament and the Council  (EU) 2016/679 of April 27, 2016 on the protection of natural persons in terms of processing of personal data and on the free movement of such data and repealing the directive 95/46/EC (general regulation on processing of personal data) (Official Journal of the European Union L119, page 1) – hereinafter referred to as the GDPR – we inform: 
1. The administrator of your personal data is Pro-Lab general partnership ul. Modelarska 10, 40-142 Katowice, NIP:  6342967524 (hereinafter referred to as the Administrator)
2. The Administrator has appointed an Inspector of Data Protection – Ms. Małgorzata Dobrowolska.  Contact: e-mail m.dobrowolska@pro-lab.edu.pl 
3. The Administrator will be processing your data on the basis of: 1. Your consent (the basis of art. 6 sec.1 let. a GDPR), for the purposes indicated in its content. You have the right to withdraw your consentto the processing of your personal data at any time, however, the withdrawal of consent does not affect the lawfulness of processing which has been performed on the basis of your consent before its withdrawal; 1. in order to conclude a contract on the basis of your interest with our offer (the basis of art. 6 sec. 1 let. b GDPR); 3. in order to perform and on the basis of concluded contract (the basis of art. 6 sec. 1 let. b GDPR); 4. for archival (evidence) purposes which are the implementation of our legitimate interest in securing information in the event of a legal need to prove facts (art. 6 sec. 1 let. f GDPR); 5. for a possible determination, investigation or defence against claims, being the implementation of our legitimate interest (the basis of art. 6 sec. 1 let. f GDPR); 6. in order to evaluate satisfaction of our clients, being the implementation of our legitimate interest of defining the quality of our service and the level of satisfaction of our clients with products and services (the basis of art. 6 sec. 1 let. f GDPR). 
4. If the Administrator has sourced your data from other sources than directly from you, it means that it was passed on the basis of concluded contract or as a part of obligation resulting from applicable law by: entities performing public tasks, entities of social service, schools, service providers, subcontractors, entities cooperating with the Administrator.  In this case, the Administrator can process such categories of personal data as: identification data, personal details, marriage or other form of relationship, details concerning other members of family and the household, ways of spending time and interests, legal information regarding the sentences, health data, education and courses, profession and employment, current employment, recruitment, professional career, data on racial or ethnic origin.
5. You have the right to object to the processing of your personal data at any time. We will cease to process your data, unless we will be able to prove that in relation to your data there is legitimate basis important to us, which is superior to your interests, rights and freedom, or when your data will be necessary for the possible determination, investigation or defence of claims. You have the right to object to the processing of your data for the purpose of direct marketing at any time. If you exercise this right – we will stop processing your data for this purpose.
6. Your personal data will be processed for the period in which it will be necessary to perform the services provided by the Administrator. Your personal data processed in connection with the concluded contract with the Administrator will be processed for the period in which claims related to this contract may be disclosed, as well as for the period required for data storage by applicable law. We may process the data processed for the purposes of direct marketing of our products and services until you object to its processing for this purpose or when we determine that it has become outdated. 
7. Your data may be accessed by entities cooperating with us, such as: accounting offices, lawyers, IT specialists, tax accountants, public authorities and those performing public tasks or entities acting on their behalf. Your data will not be passed beyond European Economic Area.
8. In accordance to the GDPR, you have the right to: request access to your data, the right to receive a copy of the data, the right to rectify (correct) your data, the right to delete data, the right to limit data processing, the right to object to data processing and the right to transfer data.
9. Submitting personal data is voluntary, however, it is necessary for implementation of goals of personal data processing. In cases required by applicable law, providing personal data may be mandatory.
10. The Administrator does not make decisions in an automated manner, including profiling. 
11. If you think that your personal data processing violates the provisions of the GDPR – you have the right to bring a complaint to the President of the Office for Personal Data Protection.

What kind of personal data we collect and why we collect it – additional information:

1. When a person visiting the website leaves a comment, we collect data visible in the commenting form, as well as an IP address of the visitor and the signature of his/her browser as an aid in spam detection.
2. An anonymised character string created on the basis of your e-mail address (so called hash) can be send to the Gravatar service in order to verify if you use it. Gravatar privacy policy is available here:
https://automattic.com/privacy/. After the approval of the comment, your profile picture is publicly visible in the context of your comment.
3. If you are a registered user and upload images to the website, you should avoid uploading images with the EXIF tags of location.  Visitors of the website can download and read full location data from the images on the website.
4. If you leave a comment on our website, you will be able to choose an option to save your name, e-mail address and website address in cookies, thanks to which the above information will be conveniently supplemented when writing further comments. These cookies expire after one year.
5. If you visit the login page, we will create a temporary cookie for the purposes of checking whether your browser accepts cookies. This cookie does not include any personal data and will be discarded after you close the browser.
6. While logging in, we create a few additional cookies needed to save your login information and chosen screen options. Login cookies will expire after two days, and screen options will expire after one year. If you choose the option „Remember me”, logging in will expire after two weeks. If you log out of your account, login cookies will be deleted.
7. If you modify or publish an article, there will be an additional cookie saved in your browser. This cookie does not include any personal data, it only indicates the ID of the article you just edited.  It expires after one day.
8. Articles on this website may contain embedded content (e.g. films, images, articles etc.). Embedded content from other websites act in a similar way as if the user visited a specific website directly.
9. The websites may collect information about you, use cookies, attach additional, external tracking systems and monitor your interactions with the embedded content, including tracking your interactions with the embedded content if you have an account and are logged in to that website.
10. If you leave a comment, its content and metadata will be stored for an indefinite period of time. Thanks to this, we are able to recognise and accept next comments automatically, without sending them for moderation each time.
11. For the users that registered on our website (if there are any), we also store personal data included in the profile. Every user can inspect, make a correction or delete all personal data at any moment (apart from the user name which cannot be changed). Website administrators can also view and modify this information.
12. If you have the user account or you added a comment , you can request delivery of a file with the exported set of your personal data in our possession, including all those provided by you. You can also request deleting all of your personal data in our possession. This does not include any data that we are required to keep for administrative, legal or security purposes.