MEBLOMET Spółdzielnia Pracy PRIVACY POLICY
By using our website, you entrust us with your data. We understand the weight of this responsibility and assure you that we keep your data secure, give you complete control over it, and strictly adhere to all data protection and security laws.
This Privacy Policy not only explains what data we collect and for what purpose, but also emphasizes your control over it. You have the power to update, export, delete, and manage your data as you see fit.
The Privacy Policy is the implementation of the information policy of Meblomet Workers’ Cooperative, towards the Users of the website www.meblomet.com.pl (the “Service”) in all aspects of the processing and protection of personal data. It is designed to inform you about how we collect, use, and protect your personal data.
1. PERSONAL DATA
1.1 We process the data of the Users of the Website, which, based on Regulation 2016/679 of the European Parliament and of the Council of the European Union of 27 April 2016 on the protection of natural persons about the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (hereinafter: ”General Data Protection Regulation“ or ”GDPR“), have the nature of personal data.
1.2 The administrator of the personal data of the Website users is the website’s owner and operator, the company Meblomet Spółdzielnia Pracy/ Personal Data Controller, with a registered office at ul. J. Marka 1, 34-730 Mszana Dolna/Data Controller, NIP: 737 000 32 76,
REGON: 000412582, entered in the Register of Entrepreneurs of the National Court Register kept at the REGISTERED OFFICE OF THE REGISTERED OFFICE OF KRAKOWA ŚRÓDMIEŚCIA IN KRAKOW, XII ECONOMIC DEPARTMENT OF THE NATIONAL REGISTER OF CURRENCY, under KRS no. 0000128870.
1.3 The Administrator can be contacted in writing or by post at 34-730 Mszana Dolna, ul. J. Marka 1 or by e-mail at: office@meblomet.com.pl.
1.4 The Data Controller has appointed a Data Protection Officer, who can be contacted in writing or by post at 34-730 Mszana Dolna ul. J. Marka 1 or by e-mail at: office@meblomet.com.pl.
1.5 We process the data provided by Service Users for the purpose and to the extent necessary for the proper operation of the Service and the delivery of value and results that are foreseen by the scope of the Service, such as the preparation of a response to an enquiry.
1.6 The Service User’s name, address, telephone number, or email address will not be stored unless the Service User provides it voluntarily, for example, in a newsletter, job application, or enquiry addressed to us.
1.7 We also process statistical data on service users to learn about their use of the Service and improve its operation.
1.8 We do not process special categories of personal data or personal data relating to criminal convictions, violations of the law, or related security measures.
1.9 The processing of personal data of Service Users for purposes other than those indicated in the preceding sentences (such as marketing of services or receipt of commercial information) shall only take place with the User’s consent and to the extent indicated in the said consent.
1.10. The provision of personal data is voluntary; however, it may be necessary to undertake the relevant activities of the Service, including responding to an enquiry. The provision of other personal data (i.e. data that is not necessary for the provision of the service electronically) is not obligatory. To whom the data relates, it is at the User’s discretion, and its processing is subject to the User’s consent. The User can set the browser to block all cookies from a specific domain or all domains and set at the device level – the device can provide settings by which the User can control the information collected.
2. COLLECTION AND RETENTION OF PERSONAL DATA
2.1 We use various technologies to collect and store information, including cookies, local memory such as browser memory or application cache, databases and server logs.
2.2 Entering our website automatically triggers the transmission of information to our website’s server and via the browser installed on the Service User’s device, as well as the temporary storage of this information in a so-called log file. We do not influence this process.
The following information is collected without the involvement of the Service User and is stored until it is automatically deleted:
– IP address of the device sending the request on the network,
– date and time of the access,
– name and URL,
– website/application from which the contact took place (Referrer-URL),
– used browser and, if applicable, the operating system of the device operating on the network and name of the Internet provider providing the Internet network to the Service User.
2.3 When contacting us (via the contact form or by email), the processing of User data necessary for the acceptance of the contact/query and its processing takes place following Article 6(1)(b) GDPR (to carry out the pre-contractual action). User data may be stored in our CRM system (Customer-Relationship-Management System) or a comparable system receiving enquiries.
The supplier administers the CRM system based on our legitimate interest (efficient and fast processing of detailed user data). Accordingly, we have entered into an agreement with the supplier by Article 28 of the GDPR, in which the supplier, as a processor, undertakes to process your data exclusively according to our instructions and to comply with the data protection standards adopted in the EU.
2.4 We only retain the personal data of Site Users for the period necessary to answer questions or resolve problems, provide improved and new services, and comply with legal requirements under applicable legislation. After this period, Users’ data is deleted from all systems.
3. SHARING OF PERSONAL DATA
3.1 We share data about and provided by Users of the Service through analytical and statistical tools. This data includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network data including the carrier name and application version number, and application, browser and device interactions with Google services, including IP address, crash reports, system activity data, and date, time and URL of the requesting page. For example, we analyse data about Service User visits to optimise the design of the Service; we use data about the advertisements with which a Service User interacts to check the effectiveness of advertising campaigns.
3.2 To design our pages in line with our needs and to optimise them on an ongoing basis, we use, based on Article 6 (1) (f) GDPR (legitimate interest), Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as ”Google,” as well as the Google Optimize extension. In this connection, pseudo-anonymous user profiles are created, and cookies are used. The information provided by cookies regarding the use of the website, such as:
- browser type/version,
- operating system used,
- URL (previously visited page),
- IP address of the computer,
- The time of the server request is transferred to a Google server in the USA and stored there. Google operates within the framework of the Privacy Shield agreement, thus guaranteeing compliance with European data protection law.
3.3 The user can block cookies’ storage through an appropriate setting in the browser software. However, in this case, it will not be possible to fully use all the functions of the website. In addition, the user can block the collection of data produced by the cookie related to the use of Google’s website (including the IP address) and block the processing of this data by Google by downloading and installing the browser plug-in at https://tools.google.com/dlpage/gaoptout?hl=pl.
As an alternative to the browser plug-in or within browsers on mobile devices, an opt-out cookie can be installed via this link to block future data storage by Google Analytics on this website.
3.4 Based on Article 6(1)(f) of the GDPR (legitimate interest), we use the Google Ads online advertising program, which is designed to ensure that only advertisements relevant to the User’s actual or presumed interest are displayed on devices.
This website uses the Google Ads.
Programme and, as part of this, conversion tracking (conversion tracking) based on cookies. These cookies are activated when the User clicks on an advertisement displayed by Google. Third-party providers, including Google, display advertisements on websites and use stored cookies to display advertisements based on the User’s previous visits to the website. These Ads-cookies expire after 30 days and the gclid after 90 days and are not used to identify you personally. Google will transfer this information to third-party providers as prescribed by law or insofar as third parties process this data on behalf of Google. However, Google will never associate your IP address with other Google data.
3.5 You may withdraw your consent to the collection and storage of data at any time, with effect for the future. The website user can deactivate the use of cookies by accessing the page deactivating Google advertisements, as well as deactivate conversion tracking cookies by selecting a setting so that cookies are blocked from the domains “googleadservices.com” and “doubleclick.net” and so that our website cannot install cookies either.
3.6 Our website uses the advertising programs Google Ads and Google Analytics and, as part of this, conversion tracking and data collection within the advertising functions (remarketing using Google Analytics, advertising reporting functions such as demographic and interest reports, DoubleClick Campaign Manager reports, DoubleClick Bid Manager reports and Google ad network impression reports). The associated data processing is carried out based on Article 6(1)(f) GDPR (legitimate interest).
For the support of Google Ads customers and publishers, when displaying and managing advertisements, Google uses DoubleClick-Cookie on the pages of its advertising network and for certain services provided by Google. By opening a web page and displaying or clicking on an advertisement placed on the Google network, the user can install DoubleClick-Cookie in the browser. The DoubleClick-Cookie qualifier assigned to the browser is the same one used when accessing sites that use advertising programmes.
Third-party providers, including Google, display advertisements on websites using cookies stored for this purpose based on the user’s previous visits to the site.
3.7 Users who do not want to receive advertisements about their interests may deactivate the Google Remarketing-Trackings cookie by adjusting their browser settings.
3.8 Our website uses Google Tag Manager, a tool that allows you to manage your website via an interface. Google Tag Manager implements tags, does not access data, does not use cookies and does not save personal data. Google Tag Manager frees up other tags which may save this data. If a deactivation is carried out in the domain or cookie area, this includes all tracking tags insofar as they have been implemented within Google Tag Manager. Further information regarding Google Tag Manager can be found at: https://www.google.com/intl/pl/tagmanager/use-policy.html
3.9. Our website includes YouTube functions for displaying and playing videos. YouTube, LLC, 901 Cherry Ave, offers these features. San Bruno, CA 94066 USA.
In the case of this function, an extended data protection module is used, which, according to the provider, only triggers the storage of the Service User’s data during the playback of the video. During the video’s display, YouTube triggers cookies to collect information on user behaviour. The information provided by YouTube allows, among other things, the compilation of statistics on video plays, the improvement of the user’s experience, and the prevention of abuse. Irrespective of viewing the attached video, you are connected to Google’s “DoubleClick” network every time you open the page, which may result in further data processing beyond our control.
For more details on using cookies on YouTube, the Service User can find the YouTube Data Protection Statement at https://policies.google.com/privacy?hl=pl.
3.10. Our website uses Google Maps to present maps and develop directions. Google manages Google Maps. Using our website, the user consents to the collection, processing and use of data recorded automatically and provided by the user by Google, one of its representatives or third-party providers. Data processing takes place based on consent within the meaning of Article 6(1)(a) of the GDPR. The terms and conditions for the use of Google Maps can be found at: https://policies.google.com/terms?hl=pl
3.11. Our site uses Hotjar, a tool managed by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, which monitors and records your behaviour on the site. This tool records data on user behaviour such as navigation, page scrolling and cursor movements. It also collects information on location, device used, operating system, browser and cookies. Hotjar does not collect or store personal information about users.
More information on the privacy policy of the Hotjar tool can be found at the link: https://www.hotjar.com/privacy.
Turning off the monitoring and recording of activity is possible via the link: https://www.hotjar.com/opt-out.
3.12 As part of our offer based on our legitimate interest in managing our online offer, the handling of online enquiries and customer service, according to Article 6.1.f GDPR, we pass on the personal data of Service Users to subcontractors and cooperators of MEBLOMET Spółdzielnia Pracy. The subcontractors and collaborators process them for MEBLOMET Spółdzielnia Pracy by the instructions and the Privacy Policy and with all appropriate measures to protect the confidentiality and security of the information.
3.13. Personal data of Service Users may be transferred to recipients in third countries, i.e. outside the European Economic Area (EEA) or international organisations.
4. SAFEGUARDS
4.1 The Controller shall make every effort to ensure that all physical, technical and organisational measures are in place to protect personal data against accidental or wilful destruction, loss, alteration, unauthorised disclosure, use or access, per all applicable legislation. To ensure the security of the personal data collected and processed, we use:
- Encryption to ensure data privacy during transmission.
- Control of information collection, storage and processing procedures, including physical security measures to prevent unauthorised access to our systems.
- Restriction of access to personal data. Only employees, subcontractors and collaborators of the Meblomet Spółdzielnia Pracy have this access when it is justified by Article 6(1)(b) of the GDPR and necessary from a contractual point of view or based on a legitimate interest in the economical and efficient conduct of business. Any person with such access must maintain strict confidentiality and may face the consequences, including termination of the cooperation, if these obligations are not fulfilled.
5. USER RIGHTS
5.1 About the processing of personal data, the Service User is entitled to:
- request from the Administrator access to the Service User’s personal data,
- request the Administrator to update and correct the Service User’s personal data,
- request the Administrator to delete the Service User’s personal data,
- request the Administrator to restrict the processing of the Service User’s personal data,
- to object to the processing of the Service User’s personal data,
- portability of the Service User’s personal data,
- to lodge a complaint with a supervisory authority.
5.2 The rights indicated in clause 5.1 may be exercised by the Service User by:
- e-mail contact at: office@meblomet.com.pl
- written contact by post to the following address: 34-730 Mszana Dolna, ul. J. Marka 1
