Privacy Policy

Privacy policy of the www.ibz-eg.com website

GENERAL PROVISIONS

1. The administrator of the personal data collected through the website www.ibz-eg.com is IBZ Engineering Group spółka z ograniczoną odpowiedzialnością w organizacji with its registered office in Białystok: ul. Kombatantów 7, 15-110 Białystok, Poland; e-mail address: biuro@ibz-eg.com, hereinafter referred to as the “Administrator”.
2. The personal data collected by the Administrator via the website shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR-RODO” and the Personal Data Protection Act of 10 May 2018

THE TYPE OF PERSONAL DATA PROCESSED, THE PURPOSE AND SCOPE OF DATA COLLECTION

1. PURPOSE OF PROCESSING AND LEGAL BASIS. The controller processes personal data via www.ibz-eg.com in case:
   1. the user uses the contact form. Personal data is processed on the basis of Article 6(1)(f) of the aforementioned RODO (GDPR) as a legitimate interest of the Administrator.
   2. the user subscribes to the Newsletter to send commercial information electronically. Personal data is processed after separate consent is given pursuant to Art. 6.1.a) of the GDPR-RODO.
   3. THE TYPE OF PERSONAL DATA BEING PROCESSED. The Administrator processes the following categories of your personal data:
2. first and last name,
3. e-mail address,
4. phone number,
5. TAX IDENTIFICATION NUMBER (Business Number – NIP)

THE ARCHIVING PERIOD OF PERSONAL DATA.

1. Users’ personal data is stored by the Administrator:
   1. if the basis for data processing is necessary for the fulfillment of a contract, for as long as it is necessary for the fulfillment of the contract, and after that time for a period corresponding to the statute of limitations. Unless a special provision stipulates otherwise, the statute of limitations is six years, and for claims for periodic services and claims related to business activity – three years.
   2. if the data processing is based on consent, until the consent is revoked, and after the revocation of consent for a period of time corresponding to the period of limitation of the claims that the Administrator may raise and that may be raised against him. Unless a special provision provides otherwise, the period of limitation is six years, and for claims for periodic benefits and claims related to the conduct of business activity – three years.
2. Additional information may be downloaded while using the website, in particular: IP address assigned to your computer or external IP address of your Internet provider, domain name, browser type, access time, operating system type.
3. Navigation data may also be collected from users, including information about the links and references they choose to click on or other actions taken on the website. The legal basis for such activities is the legitimate interest of the Administrator (Article 6(1)(f) of the TABLE), consisting in facilitating the use of services provided electronically and improving the functionality of these services.
4. The provision of personal data by the user is voluntary.
5. Personal data will also be processed in an automated way in the form of profiling, provided that the user gives their consent pursuant to Article 6 (1) (a) of the GDPR-RODO. As a consequence of the profiling, a profile will be assigned to the person concerned in order to make decisions or to analyse or predict their preferences, behaviour and attitudes.
6. The Administrator shall take particular care to protect the interests of the data subjects and shall ensure in particular that the data is collected:
   1. processed lawfully,
   2. collected for designated, legitimate purposes and not further processed in a way incompatible with those purposes,
   3. Substantially correct and adequate in relation to the purposes for which they are processed and kept in a form which permits identification of the persons concerned for no longer than is necessary to achieve the purpose of the processing.

PROVIDING PERSONAL DATA

1. The personal data of the users are passed on to the service providers, which the Administrator uses to run the website. The service providers to whom the personal data are transferred, depending on the contractual arrangements and circumstances, are either subject to the Administrator’s instructions as to the purposes and ways of processing the data (processors) or they determine the purposes and ways of processing them themselves (administrators).
2. Users’ personal data are stored exclusively in the European Economic Area (EEA).

THE RIGHT OF CONTROL, ACCESS TO AND CORRECTION OF OWN DATA

1. The data subject has the right to access to the content of their personal data and the right of rectification, erasure, restriction of processing, right of transfer, right to object, right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal.
2. The legal basis of the user’s request:
   1. Access to data – Article 15 of the GDPR – RODO
   2. Rectification of data – Article 16 of the GDPR – RODO.
   3. Deletion of data (the right to be forgotten) – Article 17 of the GDPR – RODO.
   4. Restriction of processing – Article 18 of the GDPR – RODO.
   5. Transfer of data – Article 20 of the GDPR – RODO.
   6. Objection – Article 21 of the GDPR – RODO
   7. Withdrawal of consent – Article 7(3) of the GDPR – RODO.
3. In order to exercise the powers referred to in point 2, an appropriate e-mail can be sent to: biuro@ibz-eg.com.
4. In the event of a user with an entitlement resulting from the above rights, the Administrator meets the request or refuses to meet it immediately, but no later than one month after receiving it. However, if – due to the complicated nature of the request or the number of requests – the Administrator will not be able to fulfill the request within one month, he will fulfill it within the next two months, informing the user in advance within one month of receiving the request – about the intended extension of the deadline and its reasons.
5. If it is found that the processing of personal data violates the provisions of the GDPR-RODO, the data subject has the right to lodge a complaint with the President of the Office for Personal Data Protection.

COOKIES

1. The Administrator’s website uses “cookies”.