The administrator of your personal data collected via www.nilen.pl (hereinafter: “Service”) is NILEN spółka z ograniczoną odpowiedzialnością with its registered seat in Kraków (address: Mogilska 16/10, 31-516 Kraków), entered in the register of entrepreneurs of the National Court Register under KRS number: 0000901920, identified by REGON number: 38905515200000 and NIP number: 6751751595 (hereinafter: “Administrator”).
For all data protection issues, you can contact the Administrator via e-mail: kontakt@nilen.pl
When contacting us, you may provide us with your personal information, including information contained in the content of your correspondence or provided during a telephone conversation.
The legal basis for processing the data you provide to us by contacting us is Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive F95/46/EC (hereinafter: “RODO”), (i.e. “processing is necessary for the purposes of legitimate interests pursued by the legitimate Administrator or by a third party”). This legitimate interest is the desire to answer the questions you have, including those regarding the Administrator’s activities and offerings, and opportunities for cooperation.
We may process data of each user of the Service characterizing your use of our Service (this is so-called usage data, mostly anonymous). This processing includes the automatic reading of a unique identifier that identifies the telecommunications network termination or data communications system you are using, as well as the date and time of the server, information about the technical parameters of the software and device you are using (e.g. whether you are using a laptop or a phone when browsing our site), as well as the location from which you connect to our server. We may use this information for marketing purposes, market research and to improve the operation of the Website. The data recorded in the server logs are not associated with specific individuals using the Service. The server logs are only auxiliary material used to administer the Service.
The legal basis for the operation of exploitation data processing is Article 6(1)(f) of the RODO (i.e. “processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party”). This legitimate interest is to enable diagnostics of errors in the Service and to improve its quality.
Upon separate consent, we may process your personal data for marketing purposes, including to send you commercial, promotional, advertising or marketing information.
As a general rule, the legal basis for the processing of your personal data for these purposes is Article 6(1)(a) of the DPA (i.e. “the data subject has consented to the processing of his/her personal data for one or more specified purposes”). You may withdraw your consent at any time – without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
In some cases, the legal basis for processing your personal data for direct marketing purposes may be the legitimate interest of the controller (Article 6(1)(f) of the RODO – i.e. “processing is necessary for the purposes of the legitimate interests pursued by the controller” in connection with Recital 47 of the RODO, which states: “The processing of personal data for the purposes of direct marketing may be considered an activity carried out in the legitimate interest”). According to Recital 47 of the RODO, such a legitimate interest may exist in cases where there is a substantial and appropriate relationship between the data subject and the controller. Remember, however, that you always have the right to object, at any time and free of charge, to this processing, whether primary or further – including profiling, insofar as it is related to direct marketing. Once you have objected to the processing of your personal data for direct marketing purposes – the Controller may no longer process your data for such purposes.
The content of your correspondence with us may be subject to archiving. You have the right to request the history of the correspondence you have had with us (if it was subject to archiving), as well as to request its deletion, unless its archiving is justified due to our overriding interests.
The legal basis for processing your personal data after contacting us is our legitimate interest in the form of the need to ensure that we can prove certain facts in the future. We may therefore process your personal data for the purpose of establishing, investigating, or defending against claims under Article 6(1)(f) of the DPA (i.e. “processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party”).
Like almost all other websites, we use cookies. Cookies are small text information stored on your terminal device (e.g. computer, tablet, smartphone) that can be read by our data communications system. You can read more about cookies, for example, here: https://pl.wikipedia.org/wiki/HTTP_cookie or: https://www.allaboutcookies.org/
Cookies allow us to:
We use cookies based on your consent, except when cookies are necessary to properly provide electronic services to you
In the situation specified in points. 1, 2 and 3, we process the information contained in cookies on the basis of Article 6 (1) (f) RODO (processing is necessary for the purposes arising from the legally justified interests pursued by the administrator or a third party). This legitimate interest is to ensure the proper functioning of the Website, as well as to monitor and analyze traffic and keep statistics of visits to the Website.
In the situation specified in point 4 (in the case of processing of your personal data for marketing purposes, i.e. for advertising, market research and your behavior and preferences with the purpose of using the results of such research to improve the quality of our services), we process the information contained in cookies on the basis of Article 6(1)(a) of the RODO (the data subject has given his/her consent to the processing of his/her personal data for one or more specified purposes), pursuant to Article 18(4) of the Act of July 18, 2002 on the provision of electronic services.
We use cookies on the basis of your consent, except when cookies are necessary for the proper provision of an electronic service to you.
When you visit the Site for the first time, you will be shown a notice about the use of cookies. Accepting this notice means that you consent to the use of cookies in accordance with the provisions of this privacy policy for all purposes described above. You can always withdraw your consent (without affecting the legality of processing prior to withdrawal of consent) by deleting cookies and changing the cookie settings of your browser.
Importantly, you do not have to share the information contained in cookies with us. This can be prevented by deleting cookies and changing the cookie settings on your web browser. Opting out of cookies usually only applies to a specific browser – this means that the same action will have to be taken for any other browser you use on the same or another device.
You can also use tools that allow you to collectively manage your cookie settings and browser plug-ins that allow you to control cookies. Web browsers also offer the possibility to use the so-called “incognito mode”, which allows you to visit websites without saving information about the visited sites and downloaded files in the browser history. As a rule, cookies created in incognito mode are deleted when all windows of this mode are closed.
Note, however, that disabling cookies may cause difficulties in using the Website, as well as many other websites that use cookies.
We also maintain profiles on the following social networks:
The Service contains links to the aforementioned social networks so that you can quickly reach our pages on these portals. These are so-called “social plug-ins”, which only activate when you click on them when your browser connects to the respective portal. This also results in the transfer of information, including your personal information, to that portal. If by clicking on a plug-in you are simultaneously logged in to the portal in question, the transfer of information about your visit to our Service and the recording of this fact in your account on the social network in question may occur via your account on that portal.
When displaying a page containing such a plug-in, your browser will establish a direct connection with the servers of the social network administrators. The content of the plug-in is transmitted by the respective service provider directly to your browser and integrated into the page. Thanks to this integration, service providers receive information that your browser has displayed our site, even if you do not have a profile with the given service provider or are not currently logged in with them. Such information (often together with your IP address) can be sent by your browser directly to the service provider’s server and stored there. If you are logged in to one of the social networks, this service provider will be able to directly associate your visit to our Site with your profile on the given social network.
For information on the purposes and scope of the collection of personal data, further processing and use of personal data by Facebook, Instagram and Pinterest, as well as your rights and how you can change the appropriate settings to protect your privacy, please refer to the respective privacy policies of the services:
(i) Facebook: https://www.facebook.com/privacy/explanation
(ii) Instagram: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
(iii) Pinterest: https://policy.pinterest.com/pl/privacy-policy
If you do not want social networks to collect data about you through our Service, you should log out of them before visiting our Service. You can also completely prevent plug-ins from loading on the site by using the appropriate extensions for your browser.
We may process the following categories of information about you:
usage data about all users of the Service:
data of persons contacting the Administrator:
In our operations, we use the support of specialized external entities that may or must have access to some of your data – these include IT service providers, accounting, legal, hosting, mailing system providers, analytics, marketing and remarketing tool providers, social plugin providers, as well as our trusted partners and associates. In addition, the Service users’ data may be disclosed to third parties that provide us with cookie-related services.
The data of all users of the Service and those who contact us are processed in an information system, located in part in the so-called public cloud provided by third parties.
Information related to your use of the Service may also be accessed by recipients authorized by law to receive it (e.g., government authorities in the event of such a request).
Some of the operations described above involve the transfer of your personal data to so-called third countries (outside the European Economic Area), where the RODO does not apply. However, this always takes place on the basis of the legal instruments provided for in the RODO, which guarantee adequate protection of your rights and freedoms.
In the case of the transfer of personal data to a third country within the meaning of the RODO, when the European Commission has not issued a decision on the adequate protection of personal data for those countries (in accordance with Article 45 of the RODO), we take appropriate measures to ensure an adequate level of data protection in the event of transfer. These include the European Union’s standard contractual clauses or binding internal data protection regulations. In cases where this is not possible, we base the transfer of data on the exceptions described in Article 49 of the RODO, in particular express consent or the necessity of the data transfer to fulfill the terms of the contract or to perform pre-contractual activities. The legal basis for data transfers to third countries is therefore, unless otherwise stated, the consent referred to in Article 6(1)(a) of the RODO in conjunction with Article 49(1)(a) of the RODO. At the same time, we would like to inform you that in the case of sending data to a third country for which there is no decision on adequate protection of personal data or adequate guarantees, there is a possibility and risk that authorities in the third country in question (for example, intelligence services) will gain access to the transferred data for the purpose of collection and analysis, and that the possibility of enforcing the rights of data subjects cannot be guaranteed.
Your personal data will be processed for the duration of your use of the Service, and in justified cases, also later for the period necessary for the statute of limitations for claims specified by the relevant regulations.
Personal data provided through the means of communication of your choice will be retained for no longer than necessary to respond, after which time it may be retained only in justified cases for the period necessary for the statute of limitations for claims as defined by relevant regulations.
The processing of your personal data contained in cookies continues until you disable the use of cookies. You can do this by deleting cookies and changing the cookie settings of your browser.
The processing of your personal data based on consent as a legal premise, continues until you withdraw your consent.
We make every effort to ensure that you are satisfied with your cooperation with us. Remember, however, that you have a number of rights that will allow you to influence how we process your personal data and, in some cases, cause us to stop such processing. These rights are:
The right of access to personal data (regulated in Article 15 of the RODO)
Article 15
Data subject’s right of access
The right to rectify data (regulated in Article 16 of the RODO)
Article 16
Right to rectify data
The data subject has the right to request from the controller the prompt rectification of personal data concerning him/her that is inaccurate. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by providing an additional statement.
The right to erasure (regulated in Article 17 of the RODO)
Article 17
Right to erasure (“right to be forgotten”)
The right to restrict processing (regulated in Article 18 of the RODO)
Article 18
Right to restrict processing
The right to restrict processing (regulatedThe right to object to processing (regulated in Article 21 RODO)
Article 21
Right to object
The right to data portability (regulated in Article 20 of the RODO)
Article 20
Right to data portability
Pursuant to Article 77 of the RODO, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged violation was committed, if you believe that the processing of personal data concerning you has violated or is violating the provisions of the RODO.
In Poland, the supervisory authority is the President of the Office for Personal Data Protection. You can get detailed information (including contact details) on the website of the Office for Personal Data Protection maintained at: https://uodo.gov.pl/
If you want to contact another supervisory authority responsible for the protection of personal data – visit the website of the European Data Protection Board available at: https://edpb.europa.eu/about-edpb/about-edpb/members_pl
Your personal data obtained in connection with the use of our Service is not collected for the purpose of entering into a contract with you as defined in the RODO.
Providing your selected personal information when contacting us through your chosen communication channel is completely voluntary, but in most situations necessary to respond to your inquiry.
You do not have to share the information contained in cookies with us. You can prevent this by deleting cookies and changing the cookie settings on your browser. Detailed information about the possibility and methods of handling cookies is available in the settings of your software (web browser). Remember, however, that changing the settings of cookies so that the use of the information contained in them is blocked may cause difficulties in using the Website.
We obtain the data of users of the Service and those who contact us only to themselves.
We obtain the remaining data, including anonymous usage data and personal data related to the use of cookies, by automated means – most often, however, this is not personal data.
Exploitation data and data related to the use of cookies may be processed by automated means as defined by the RODO.
Data processed through marketing and remarketing tools or social plugins may be subject to profiling.
Other data collected in connection with the use of the Website, including data of users and those who contact us, are not processed by automated means or subject to profiling.
