Data security and privacy protection of our Clients are of utmost importance to us. Therefore, we implement procedures and policies ensuring the highest level of data protection for you.
We hereby inform that:
- The controller of your personal data is Studio DR Ltd. in Wisla (43-460), Poland, at 65D/2 Malinka Street (hereinafter referred to as: Controller/Company).
- You can contact the Company’s Data Protection Officer (DPO) by writing to the Controller’s address at iod@studiodr.pl or by sending traditional mail to the Data Controller’s address with the note „DPO”. Fulfilling the obligation arising from art. 11 of the Polish Act of 10 May 2018 on the protection of personal data, we inform you that Mr. Emilian Kujawski serves as the DPO.
- To ensure the highest level of security and legality of processed data, we have implemented written rules and procedures governing our internal operations and dealings with external entities. We employ technical and organizational measures to protect processed data according to identified threats and categories of data covered by protection. Specifically, we secure data against unauthorized access, acquisition by an unauthorized person, alteration, loss, damage, or destruction.
- While using our website, your personal data (if provided) and metadata (i.e., data illustrating the way of using the website without directly revealing the user’s identity) may be processed for one or more of the following purposes:
- Actions aimed at entering into and performing contracts for services offered by the Company.
- Conducting analyses and statistics for business purposes.
- Carrying out marketing activities undertaken by the Company independently or in cooperation with other entities.
- Data archiving.
- Responding to requests and inquiries.
- Undertaking actions related to ensuring security.
- Fulfilling legal obligations incumbent on the Company.
- The legal basis for processing your data is:
- Necessity for the performance of a contract or actions at your request before concluding a contract.
- Necessity to fulfill a legal obligation incumbent on the Controller.
- Necessity arising from the legitimate interests pursued by the Controller, such as responding to your requests and inquiries, activities in the scope of market research, and marketing.
As a company located in Poland our personal data processing is performed under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation)(Text with EEA relevance) [further as: GDPR] and applicable Polish Acts.
- As a rule, you have the following rights related to the processing of your personal data:
- Right to access personal data – at any time, you can request information from the Company whether we process your data and have access to your personal data, as well as obtain one free copy of your data (subsequent copies may be subject to a fee).
- Right to rectify personal data – you can make changes to the previously provided information by requesting their supplementation or modification, considering the purpose of their processing.
- Right to erase personal data (right to be forgotten) – you can request the Controller to erase your data if the conditions specified in art. 17 of the GDPR are met.
- Right to restrict the processing of personal data – if you believe that your data is processed to an excessive extent, you have the right to request limitation of their processing, in accordance with the conditions specified in art. 18 of the GDPR.
- Right to data portability – in accordance with the conditions specified in art. 20 of the GDPR.
- Right to object to the processing of data – if data processing is based on the premise specified in art. 6(1)(f) of the GDPR (legitimate interest of the Controller), considering the provisions of art. 21 of the GDPR.
- Right to withdraw consent, in case data processing is based on consent – at any time and in any way, without affecting the lawfulness of processing carried out based on consent before its withdrawal.
- Right to lodge a complaint with the President of the Personal Data Protection Office in Poland (https://uodo.gov.pl/en/p/for-citizens) if you believe that the processing of personal data violates the provisions of applicable law.
- Personal data provided by users when using the service (contact forms, metadata) is processed in accordance with regulations governing the processing of personal data.
- Users’ service data is not disclosed to any third party without their consent. However, the Controller reserves the right to provide the User’s data to appropriate state authorities, only when these entities have the necessary authorization in accordance with the law applicable in Poland.
- The Company uses cookies on its websites. More information is provided below in the „Cookie Policy” section.
- The principles described in this policy apply from the date of publication on the website until further notice.
- The Controller reserves the right to change the content of this policy without informing Users each time. To stay up-to-date with the privacy policy provisions, we encourage you to regularly visit this page.