We respect your privacy and care about protecting your personal data. This Privacy Policy will provide you with information on how we handle your personal information. You will also learn about your rights and how applicable laws protect you and your personal information. Please read this Privacy Policy carefully before using our Services.
Definitions:
Services means any product, service, content, functionality, technology or feature, all related websites and applications that we offer you.
Service means the websites, applications and mobile sites or other online content through which we offer our Services.
1. WHO WE ARE
The administrator of your personal data processed in connection with the services provided by the Service is: Grupa IMAGE sp. z o.o. entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, XIII Commercial Department under KRS number 0000119156. NIP 118-00-04-559. REGON 008483423.
Contact details: 03-450 Warszawa, ul. Ratuszowa 11, phone: 22 8110199, fax: 22 8111993, e-mail: office@grupaimage.pl
2. HOW WE PROTECT YOUR PERSONAL DATA
We have implemented internal procedures on personal data security in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR"), which ensure effective protection of your personal data.
We use security features and management and technological processes to ensure a level of security appropriate to the risks associated with the processing of personal data, aimed at protecting your data against loss, theft, unauthorized access, use or modification.
3. WHAT DATA WE COLLECT
In connection with the provision of services, we use information about you and the device you are using.
- We process your personal information, which is necessary to set up an account and it is obligatory to provide it:
- Device ID
- If you agree, we will process your personal data, the provision of which is voluntary:
- first and last name
- contact phone number
- PESEL number
- e-mail/login in the eOSK system
- information about the OSK where the account has been created in the eOSK system.
- In connection with your use of the service, we also process data about the device you are using:
- version of the operating system
- IP address, imei, imsi
- time zone information
- the identifiers stored in the "cookie" files
- information about the browser;
- device identifiers and parameters such as: resolution, screen size, and device status such as screen orientation, network connection status;
- data sent via SMS, such as authentication tokens, etc. This access is only used to read information to activate services. We do not read or process your other SMS messages
- Information on how you use the service, such as: activity in the application, examination results and correct/incorrect answers;
- history of contacts with the data controller;
We will only link information related to your device to your eOSK account if you have validated it.
We use "cookies" technology, i.e. text files placed on your device, for technical session handling.
The information is stored in order to improve the operation of the application and system and to automatically address personalised offers and personalised information to you. We use "cookies" to make the website work faster and to collect statistics. By using "cookies" we do not identify the user based on the information contained in the "cookies".
If you do not agree to the placement of "cookies" on your device you can block their placement by configuring your web browser accordingly. Information on how to do this can be found in the help files of your web browser.
If you agree to place "cookies" on your device, and later want to delete them, you can do so. Information on how to do this can be found in the help files of your web browser.
4. HOW LONG DO WE KEEP YOUR PERSONAL DATA
Your personal data is stored for the period of registration on the site for functionalities related to your account.
In case of receiving a request to remove data, your data will be removed by the Administrator.
However, the Administrator will not delete the data which are necessary for the purposes of dealing with possible complaints and claims related to the sale of goods or use of the Administrator's services, as well as for archival, statistical and analytical purposes. We would like to stress that we will not keep your personal data longer than necessary, but we may need it due to the existence of legal reasons why we should or must keep it, as well as to protect you or the Administrator.
5. SHARING YOUR PERSONAL DATA
- We may only disclose your personal information to the extent, for the purpose and to the entities listed in this Privacy Policy. We do not share your data with any other entities than those indicated in this document.
- We provide your personal data to the service providers we use to run the service. Our business partners to whom we share your personal information are in particular:
- eOSK, including the Driver Training Centre, which has initiated the process of creating an account in the eOSK system after authorization of the device
- entity providing IT systems and equipment services
- bank and entities providing electronic payment processing services
- entities providing courier services,
- entities providing services as part of offering access to our service or as part of joint marketing activities
- entities providing us with demographic, geographic, advertising data, including targeting and online advertising and analytics in a broad sense
The service providers to whom we provide your personal data, depending on the contractual arrangements and circumstances, are processors, i.e. they process the personal data entrusted to them by us and are subject to our instructions as to the purposes and means of data processing, or they determine the purposes and means of processing themselves and are data controllers. We try to select our business partners as carefully as possible.
Our suppliers guarantee a high level of personal data protection. We have signed appropriate agreements with our suppliers to entrust the processing of your personal data.
- In special situations, where the applicable law requires us to make the collected personal data available to authorized state authorities, we will make such data available (e.g. courts, police, prosecutor's office).
- When transferring personal data outside the European Economic Area, we will ensure that the data is transferred in accordance with this Privacy Policy and applicable law. If data is transferred outside the European Economic Area, we use Standard Contractual Clauses as safeguards for countries where the European Commission has not established an adequate level of data protection.
6. YOUR RIGHTS
We ensure that you exercise your rights to control the processing of your personal data.
- RIGHT OF ACCESS TO DATA
The right to access your personal data. This right enables you to be informed whether we are processing personal data about you and if so, you have a right:
- to have access to your personal data;
- to be informed about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of the data, the intended period of storage of your data or the criteria for determining this period, your rights under the TYPE and the right to lodge a complaint with a supervisory authority, the source of the data, automated decision-making, including profiling, and the safeguards applicable to the transfer of the data outside the European Union;
- obtain a copy of your personal data.
- RIGHT OF RECTIFICATION
You have the right to correct and complete the personal data you provide. You can do so by submitting a request to us to correct your data (if it is incorrect) and to complete it (if it is incomplete).
- THE RIGHT TO RESTRICT DATA PROCESSING
You have the right to request a restriction on the processing of your personal data. If you make such a request, we will, until the request is processed, prevent you from using certain functionalities or services that will involve the processing of the data requested.
You have the right to request a restriction on the use of your personal data in the following cases:
- when you question the accuracy of your personal data;
- if the processing of your data is unlawful;
- when your personal data is no longer necessary for the purposes for which we have collected or used it, but is needed by you to establish, pursue or defend a claim;
- if you have objected to the use of your data, then the restriction is for the time necessary to consider whether, due to your particular situation, the protection of your interests, rights and freedoms outweighs the interests we pursue by processing your personal data.
- RIGHT TO WITHDRAW CONSENT
You have the right to revoke any consent you have given at the time of account registration. Withdrawal of consent has effect from the moment of withdrawal. Withdrawal of consent does not affect the processing we carry out lawfully before withdrawal of consent.
Withdrawal of consent does not entail any negative consequences for you. However, it may prevent you from continuing to use services or functionalities that we can legally only provide with your consent.
- RIGHT TO OBJECT
You have the right to object to the processing of your personal data at any time.
You have the right to object to the processing of your data if we are processing your data on the basis of a legitimate interest (of us or third parties). You have the right to object to the processing of your data on the grounds of your specific situation, if you believe that the processing affects your rights or freedoms. You also have the right to object if we process your data for direct marketing purposes. In some cases, we can demonstrate that we have legitimate grounds to process your data which take precedence over your rights and freedoms (e.g. the need to ensure the security of the Service and to prevent fraud). In such cases, the right to object does not involve the deletion of your personal data.
- THE RIGHT TO DELETE DATA ("RIGHT TO BE FORGOTTEN")
You have the right to request the deletion of all or some of the personal data concerning you. We will treat the request to delete all or some of your personal data as a request to delete your account.
You have the right to request the deletion of your personal data if:
- you have withdrawn your specific consent, to the extent that the personal data has been processed based on your consent;
- Your personal data is no longer necessary for the purposes for which it was collected or processed;
- you have objected to the use of your data for marketing purposes;
- Your personal data is processed illegally.
Although we request the deletion of personal data, in connection with raising an objection or withdrawing consent, we may retain certain personal data to the extent necessary to establish, assert or defend claims.
- RIGHT TO DATA TRANSFER
You have the right to receive your personal data that you have provided to us and then send it to another personal data controller of your choice.
In exercising this right we will provide you or a third party of your choice with your personal data in a structured, commonly used and machine-readable format. Remember that you have this right only with regard to data processed on the basis of your consent or the prerequisite for the performance of a contract you have concluded with us, and the processing itself is carried out in an automated manner (in IT systems).
You also have the right to request that your personal data be sent by us directly to such other controller, if technically possible.
- COMPLAINT TO THE DATA PROTECTION AUTHORITY
If you believe that your right to data protection or other rights granted to you under the TODO have been infringed, you have the right to lodge a complaint with the supervisory authority, the Data Protection Authority.
We would appreciate it if you would give us a chance to address your case and concerns about our actions before filing a complaint with the supervisory authority. In such situations, please contact our Privacy Department via the Contact Form.
- THE PROCEDURE FOR RECOGNISING YOUR APPLICATIONS
- If, in exercising the aforementioned powers, you make a request to us, we either comply with the request or refuse to comply with it immediately, but no later than one month after receipt. If, however, due to the complexity of the request or the number of requests, we are unable to comply with your request within one month, we will comply with it within a further two months by informing you in advance of the intended extension.
- If you wish to exercise any of the rights described below, please go to your account/privacy settings.
- The exercise of rights is, in principle, free of charge. You will not have to pay a fee for exercising your right to access your personal data (or for exercising any other rights). However, we may charge a reasonable fee if your request is manifestly unreasonable or excessive, in particular due to its continuing nature. In such cases we may also refuse to comply with your request.
7. CONTACT US
If you have any questions about your user account, how the application works or for help, please use the email pomoc@grupaimage.pl or the phone numbers provided on the website groupimage.eu.
If you have any questions regarding this Privacy Policy or our use of your personal data, etc., please contact the Data Protection Officer by e-mail (Alicja Gajlewicz e-mail: rodo@grupaimage.pl).