PRIVACY AND COOKIES POLICY

 

Among other things, you have the right to access your data, correct it, and request its deletion. In addition, you have the right to object to the processing of your personal data or request the restriction of its processing. 

Your provision of the required personal data is voluntary, but is a condition for us to provide certain services to you (e.g., maintaining an account, sending a newsletter) or to perform a contract. We do not make individual decisions towards you based solely on automated processing (profiling), which would produce legal effects or similarly significantly affect you.

Our domain has an SSL certificate, so your data is encrypted.

Below you will find all the most relevant issues related to the processing of personal data on our site. 

 

Who is the controller of the website and personal data?

 

The administrator of the website and personal data is Generator Pomysłów sp. z o.o. with its registered seat in Lublin (20-052), Ks. J. Popiełuszki 28D/1, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court Lublin Wschód in Lublin with its seat in Świdnik, VI Economic Department of the National Court Register under KRS number: 0000668963, having NIP: 7123335078.

Contact information: e-mail address: monika@generatorpomyslow.pl, tel: +48 536 755 075.

 

What is the legal basis for processing personal data?

 

Personal data are collected and processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (RODO). The processing of personal data is also regulated by the national Law on Personal Data Protection of May 10, 2018 (i.e., Journal of Laws of 2019, item 1781).

What data do we process?

Depending on the purpose and your preferences, we may process data such as your name, address, email address, phone number, bank account number, IP address, and in the case of entrepreneurs, your VAT number and business address. In addition, we may process other personal data directed in correspondence to us. It is important to us that our app users have a great experience, so we use tools that analyze activity on the site and in the app. This allows us to quickly identify non-intuitive solutions in the application. Therefore, for analytics purposes, we may also process data about the source of the transition to the Platform, the operating system and browser used to browse the Platform, data about services viewed, time spent on the site, abandoned shopping carts, orders placed, activity in response to a newsletter mailing, user age range, gender, approximate location, and interests (based on online activity). 

The above data is provided to us as a result of activities such as: 

  • Using the contact form,
  • Sending correspondence directly to our e-mail address,
  • Providing us with data in the course of a phone call,
  • Account registration on the Platform,
  • Placing an order on the Platform,
  • Newsletter signup,
  • Adding reviews of the Service (if such a possibility is made available),
  • Data collection of other analytics data by the Platform software or tools listed in this Privacy Policy. 

 

For what purposes do we process your data?

 

We process data to the extent relevant to the operation of our Platform and keep it for the period allowed by regulations. We process data provided by users when using the Platform. 

  • Conclusion and performance of a contract – on the basis of Article 6(1)(b) of the RODO, i.e. when the processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract.
  • Establishment and maintenance of an account – on the basis of Article 6(1)(b) RODO, i.e. when the processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract.
  • Providing contact with us via contact form, email, phone call – on the basis of Article 6(1)(b) of the RODO, i.e. when the processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract.
  • Adding opinions and their verification – on the basis of: Article 6(1)(a) of the RODO – i.e. when the data subject has given his/her consent to the processing of his/her personal data for one or more specified purposes, 
  • Direct marketing on the basis of: Article 6(1)(a) of the RODO – i.e. when the data subject has given his or her consent to the processing of his or her personal data for one or more specified purposes, or on the basis of Article 6(1)(f) of the RODO, i.e. when the processing is necessary for purposes arising from legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
  • Sending newsletters and handling loyalty programs – based on Article 6(1)(a) of the RODO, i.e. when the data subject has consented to the processing of his/her personal data for one or more specified purposes.
  • Fulfillment of legal obligations, establishment and investigation of claims – on the basis of Article 6(1)(c) RODO, i.e. when the processing is necessary for the fulfillment of a legal obligation incumbent on the controller, and on the basis of Article 6(1)(f) RODO, i.e. when the processing is necessary for purposes deriving from legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
  • Analytical and statistical activities – Article 6(1)(f) RODO, i.e. when the processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

We use tools such as Facebook Ads and Google Ads, where we can target ads to specific groups based on interests, gender, age, occupation. These tools are described in detail in the cookie policy.

 

To whom do we share personal information?

 

We provide personal data to other entities only to the extent that the data subject has consented to the processing of the data, to the extent that it is necessary for the performance of a contract, or to the extent that it results from the legitimate interests pursued by the controller. These are the Platform’s cooperating hosting provider, newsletter tool provider, CRM and invoicing system provider, accounting office, IT company providing services to the Platform, online payment operators, banks, marketing tool providers and other subcontractors, as well as entities to whom we are obliged to provide your data under applicable laws. In the case of analytics and statistics data, which is not personal data, it may be transferred to companies that commonly provide analytics, statistics and optimization services, including the United States (e.g., companies: Google LLC, Meta Platforms Inc.).

The Service Provider hereby informs that the content provided by Users in the framework of completing the Personality Questionnaire form is transferred to a tool that analyzes it with the help of artificial intelligence. Users’ data, are transferred after prior anonymization through the Service Provider’s proprietary module, which means that personal data (allowing to identify a specific User), are NOT transferred to artificial intelligence tools.

 

Is data transferred to third countries or international organizations?

 

Part of the data processing operations may involve the transfer of data to third countries or international organizations in connection with the use of tools that store personal data on servers located in third countries, especially the USA. 

However, it should be pointed out that the providers of these tools guarantee an adequate level of personal data protection, in particular by joining the Data Privacy Framework program or using standard contractual clauses. This applies in particular to the services of Google Ireland Limited. 

 

Exactly what rights do you have in relation to the processing of your personal data?

 

You have the right to:

  • Request access to your personal data,
  • Request rectification of your personal data,
  • object to the processing of personal data,
  • Request the deletion of your personal data,
  • Request for restriction of personal data processing,
  • request for portability of personal data,
  • obtain information about automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the EU,
  • obtain information about the purposes of processing, categories of personal data processed, recipients or categories of recipients of such data, 
  • obtain information about your rights under the RODO, the right to file a complaint with the PUODO, the planned period of data storage or the criteria for determining this period, the source of the data, 
  • obtain a copy of your personal data.

If you wish to exercise any of the rights mentioned above, please inform us. We will promptly provide you with any information about the action taken on your request. 

You can withdraw the consent you have given us to process your personal data at any time. To do so, please contact us. 

 

Cookie Policy

 

Cookies are commonly occurring short text information that identify the software you are using, customize content for you and ensure proper operation of websites. They are stored on the device you use and have a domain name, storage time and a specific value. Cookies used on our Platform are secure and are divided into session cookies and persistent cookies. Session cookies are stored only until the session of a particular browser ends. Persistent cookies are stored on your device until you delete them. You can use your browser to change your cookie preferences or delete them (persistent cookies) at any time. 

 

Basis for the use of cookies

 

We use some of the cookies to the extent necessary for the proper provision of electronic services, other cookies are used on the basis of the consent you have given. 

The consent given is based on the settings of the Internet browser, other software used to manage cookies, or the settings of the cookie manager if it is made available on the site. 

You can disable cookies, as well as particular types of cookies. If you disable or restrict cookies, some features of our site may stop working because they require your consent to use them.

 

 

Entities whose cookies we use:

 

Google tools – Google Analytics, Google Ads, Google Adsense, Google Tag Manager, and the Google-owned YouTube, provided by Google Ireland Limited(Registration Number: 368047 / VAT Number: IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland. We base our actions regarding the use of these tools on our legitimate interest in marketing using commonly used tools. From our perspective, the data collected in connection with the use of these tools is not personal data due to anonymization.

For more information about the tools, please refer to Google’s Terms and Conditions and Privacy Policy. 

 

Google Analytics

 

We use the Google Analytics tool for analytics and statistics purposes to improve the performance of our website. 

The data collected in connection with the use of the tool is not of a personal nature due to anonymization and includes an examination of the user’s traffic on the site (information about the operating system, browser, pages and sub-pages visited, time spent on the site and sub-pages, the source of the site visit).

 

Google Ads

 

When you visit our site, remarketing cookies are left on your device which collect information about your activity on our site. The collected information is used to display ads on Google’s network that match your activities and interests. If you have given your consent to Google, this data may also be further processed by Google, e.g. to create target groups. 

If you do not wish to receive personalized ads, it is possible to define your settings at myadcenter.google.com.

 

Google AdSense

 

Personalized ads within the AdSense network may be displayed on our site. Cookies are used to display ads based on visits and activity on our site or on other sites. 

 

Google Tag Manager

 

This tool allows us to analyze traffic and user activity using tags. This allows us to collect information about the effectiveness of ads, which contributes to the optimization of our website and offerings. 

 

Microsoft Clarity

 

We use the Microsoft Clarity tool to improve the experience of Platform Users and to analyze User behavior on the Platform. This allows us to make optimizations and identify possible problems with the site.  

For more information, please see Microsoft’s Privacy Statement.

 

Server logs

 

Visiting and using the site involves sending requests to the server, which are recorded in so-called server logs. They contain, among other things, information about the user’s IP address, date and time of the query, browser and operating system. 

Server logs are recorded and stored on the server. However, they are not tied to specific people using the site and are not intended to identify them – they are used only for the administration of the site, and their content is not disclosed to unauthorized persons.