Privacy policy
JUKA-PRACOWNIA.PL
§ 1 GENERAL INFORMATION
1. The Privacy Policy of the Online Service is for informational purposes only and does not constitute a contract or terms of service.
2. All terms and words written with a capital letter (e.g., Website, User, etc.) should be understood according to the definitions provided in the Website Terms of Service.
3. In the case of any discrepancies between this Privacy Policy and consents for the processing of personal data granted by an individual, the legal basis for determining the scope of actions by the Administrator will be the voluntarily expressed consents or applicable legal provisions relevant to the specific factual situation.
§ 2 DATA CONTROLLER
1. The data controller of your personal data is Krzysztof Czereda, operating under the company Juka Pracownia Projektowa Krzysztof Czereda, conducting business at Piękna 64G, Apt. 9, 50-506 Wrocław, NIP: 8831816872, REGON: 383112908 (hereinafter: the Administrator).
2. For any matters related to the protection of personal data, we encourage you to contact the Administrator at the address mentioned above or via email: biuro@juka-pracownia.pl.
3. You can also send a request to the provided address to obtain information on which personal data we hold about you and for what purposes they are processed.
4. The Administrator informs that correspondence is stored for statistical purposes and to improve the GDPR assistance system, as well as for complaint resolutions and any decisions regarding administrative interventions based on reports. The collected addresses and data will not be used for communication for purposes other than addressing the report, specifically not for marketing purposes.
5. If you contact the Administrator for specific actions, the Administrator may request additional data from you, such as your name, email address, or phone number, to confirm your identity and enable us to respond to your request. Providing this data is not mandatory but may be necessary to complete the action or obtain the information you’re seeking.
6. If you have given additional consent for the use of cookies, the data administrators of information obtained based on your online activity may also include our trusted partners.
§ 3 DATA COLLECTION AND PURPOSE OF PROCESSING
1. We process personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), as well as other currently applicable laws during the processing of specific data.
2. According to the above-mentioned legal provisions, personal data is understood as information about an identified or identifiable individual. An identifiable individual is someone who can be directly or indirectly identified, in particular based on an identifier such as a name, identification number, location data, online identifier, or one or more specific factors identifying the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.
3. We ensure that the data obtained from you is confidential, secure, and processed only when necessary. We process data lawfully, fairly, and transparently to the person whose data is being processed. We process only the data that is necessary for the legally justified purpose, meaning the reason for processing. Personal data is collected with due diligence and appropriately protected from unauthorized access. We implement appropriate security measures based on current technical knowledge to protect personal data against accidental loss and unauthorized access, use, modification, or disclosure. Personal data is stored in a way that allows the identification of the data subject for no longer than is necessary for the purposes for which it is processed.
4. The Administrator obtains personal data in the following ways: a) through voluntarily provided information in an email or contact form; b) through a complaint, request, inquiry, or letter of any kind; c) through the submission of a review; d) through voluntarily provided information in an email sent in connection with the intention to cooperate; e) through cookies, pixels, or similar internet technologies.
5. The purpose and scope of the data processed by the Administrator arise from the consent of the User or legal regulations and, in selected cases, is specified based on the actions taken by these persons on the Website or through other communication channels.
6. Providing personal data by the User of the Website is voluntary, but necessary to use specific functionalities of the Website (e.g., using contact forms).
7. The scope of required data for entering into the appropriate contract is indicated in advance on the Website (we mark the data that must be provided to enter into the contract/use a specific functionality). The consequence of not providing personal data may be the inability to use the functionality of the Website effectively.
8.Your personal data is obtained by the Administrator for the following purposes:
| Purpose of processing | Legal basis | Legitimate reason, if applicable |
|---|---|---|
| Conducting statistics | Art. 6(1)(f) GDPR | To have information about the statistics of our actions, which helps improve our business activities. |
| Conducting marketing activities for our products and services without using electronic communication means | Art. 6(1)(f) GDPR | To carry out marketing activities promoting our business activities. |
| Conducting marketing activities for our products and services using electronic communication means, including profiling | Art. 6(1)(f) GDPR, and due to other applicable regulations, including the Telecommunications Law and the Act on Electronic Services, based only on obtained consents (Art. 6(1)(a) GDPR) | To conduct marketing activities promoting our business using email addresses and/or phone numbers. Presenting tailored advertisements. |
| Handling inquiries via contact form, email, complaints, other requests | Art. 6(1)(a) GDPR; Art. 6(1)(c) GDPR | To respond to inquiries and requests made through the contact form or in another form, including storing key requests and responses to ensure accountability. Handling complaints and claims, including from third parties. |
| Entering into and fulfilling Service Agreements or taking action at the request of a prospective User before the agreement is concluded | Art. 6(1)(b) GDPR | To conclude and fulfill the Service Agreement or take actions at the request of a prospective User before the agreement is concluded. |
| Archiving documents | Art. 6(1)(c) GDPR | To fulfill legal obligations, e.g., tax and accounting requirements, GDPR compliance. |
| Posting reviews on the Website | Art. 6(1)(a) GDPR | To assess satisfaction. |
9. For an adult Client or User, with their additional consent, Personal Data may also be processed to present, create, assign, and execute personalized advertisements, offers, or promotions (discounts) for Administrator’s products or services and those of its partners, customized to their preferences (profiling), through automated decision-making, which may have legal effects or significantly affect them, e.g., by offering them a short-term discount on a specific product they recently viewed on our Online Store (this option is not available to those who are not adults or those who have not consented to such action).
10. Email contact, contact form. By contacting us via email, you provide us with your email address as the sender’s address. Additionally, the message content may contain other personal data. Providing this data is voluntary but necessary to contact us.
By contacting us via the contact form, you provide us with your email address, phone number, name, and surname. You may also include other personal data in the message content. Providing this data is voluntary but necessary to contact us.
Your data is processed for the purpose of contacting you, and the legal basis for processing is Art. 6(1)(a) GDPR, i.e., your consent to contact us. After contact, the legal basis for processing is a legitimate purpose in the form of archiving correspondence for internal purposes (Art. 6(1)(c) GDPR).
The content of the correspondence may be archived, and we cannot definitively determine when it will be deleted; however, it will be no later than 5 years. You have the right to request the history of the correspondence you conducted with us (if it was archived), as well as request its deletion unless the archiving is justified by our overriding interests.
11. Reviews. If you want to add a review of a product, you must send an email to the Administrator.
Your data is processed for the purpose of enabling the posting of Reviews, and the legal basis for processing is Art. 6(1)(a) GDPR, i.e., your consent to post your review on our website. The data will be processed for as long as the review is published on the website, unless you request its removal, which will result in the deletion of your data associated with the review from the database.
At any time, you can correct your data in the review or request its removal. You also have the right to data portability as per Art. 20 GDPR.
§ 4 CATEGORIES OF PERSONAL DATA
1. The data controller may process the following categories of personal data:
a) personal data provided for using the contact form, sent via email, or provided during the submission of reviews, complaints, or other requests, including: name and surname, email address, contact phone number, address [street, house number, apartment number, postal code, city, country];
b) other data, particularly obtained based on the User’s activity online, including data obtained through the Website or other communication channels with the User, using cookies and similar technologies, such as user logs, information about the User’s device used to browse the Website.
§ 5 RECIPIENTS OF PERSONAL DATA
1. Your personal data may be processed by our partners and subcontractors, i.e., entities whose services we use for data processing and providing services to you. To our knowledge, all entities to which we entrust personal data processing guarantee the use of appropriate measures for the protection and security of personal data required by law.
2. User personal data may also be provided to:
a) state authorities or other entities authorized under the law to fulfill obligations imposed on us;
b) the Administrator’s partners, especially those partners who help technically with the efficient operation of the Website (e.g., supporting us in sending emails, and in the case of advertising actions – also in marketing campaigns), hosting service providers, IT service providers, companies that service software, support the Administrator in marketing campaigns, as well as providers of legal and advisory services and accounting services;
c) moreover, we may share fully anonymized data (data that cannot identify you) with entities we cooperate with.
3. As part of marketing activities (advertising), the Administrator uses the services of third-party entities that employ cookies, pixels, or similar technologies on the Website. A detailed list of these entities is provided in the Cookies Policy.
4. Personal data may also be provided by the Administrator to third parties in the form of trusted subcontractors or collaborators to the extent necessary to provide the service. In particular, personal data may be provided to Justyna Kochanowicz-Czereda, conducting business under the name Juka Pracownia Projektowa Justyna Kochanowicz-Czereda (NIP: 795 249 82 64, REGON: 520871494).
§ 6 ARCHIVING PERSONAL DATA
1. The Administrator will store User personal data as long as necessary for the purposes specified in this Privacy Policy and/or to fulfill the Administrator’s obligations arising from legal regulations. After this period, the Administrator will securely delete your personal data.
2. Data is stored for the following periods:
| Marketing purposes | If processed based on consent – until consent is withdrawn. If processed based on a legitimate purpose – until an objection is raised |
| Data provided through the contact form, email | For no longer than 10 years to maintain accountability |
| Data provided through the contact form, email | Until deleted through website/browser/device settings (note: deleting the files does not always mean deleting the personal data obtained via these files – in such cases, personal data will be deleted until an objection is raised) |
| Data provided during the complaint process or other procedures related to User claims | 8 years |
| Other data categories (except for cookie data, as explained in the Cookies Policy) | 5 years |
3. In each case, personal data will also be stored if the law obliges the Administrator to process it; personal data will be stored longer in case the User has any claims against the Administrator, to pursue claims by the Administrator, or to defend against claims from third parties, for the period of limitation as defined by law, especially the Civil Code.
4. Depending on the scope of personal data and the purposes of its processing, it may be stored for different periods. In each case, the longer storage period applies.
§ 7 RIGHTS, ACCESSING AND UPDATING PERSONAL DATA, COMPLAINTS
Under Art. 15 of the GDPR, you have the right to obtain information from the Administrator on whether your personal data is being processed.
If the Administrator processes your personal data, you have the right to:
a) access your personal data;
b) obtain information on the purposes of processing, the categories of processed personal data, the recipients or categories of recipients of such data, the planned period of storage of your data or the criteria for determining this period, your rights under the GDPR, and the right to lodge a complaint with a supervisory authority, the source of these data, automated decision-making, including profiling, and the safeguards applied when transferring these data outside the European Union;
c) obtain a copy of your personal data.
Additionally, you can request the correction of personal data (Art. 16 GDPR), deletion of personal data (Art. 17 GDPR), object to the processing of personal data (Art. 21 GDPR), and, where technically feasible, request the transfer of personal data to another organization (Art. 20 GDPR).
Regarding the right to be forgotten, the Administrator will update or delete your data, unless there is a legal obligation to retain it for business purposes or compliance with the law. In some cases, you have the right to request a restriction of personal data processing (Art. 18 GDPR). You can also contact the Administrator in case of any concerns regarding the collection, storage, or use of personal data.
The Administrator strives to process all requests regarding the above operations on your personal data promptly, no later than 30 days from receiving the request. Due to the complexity of the request, the Administrator has the right to consider your request within a period exceeding 30 days, and will inform the User in advance.
The Administrator strives to resolve complaints, but if you remain dissatisfied with the response, you can file a complaint with the supervisory authority responsible for data protection in your jurisdiction. In Poland, the supervisory authority under the GDPR is the President of the Personal Data Protection Office, with its seat at Stawki 2, 00-193 Warsaw.
§ 8 AUTOMATED PERSONAL DATA PROCESSING, COOKIES POLICY
1. Our Website, like almost all other websites, uses cookies. The Cookies Policy applies to anyone browsing the Website.
2. The Cookies Policy is an integral part of this Privacy Policy. The content of the Cookies Policy can be found here .
3. The Website also uses functionalities similar to cookies. Therefore, the provisions of the Cookies Policy should be applied accordingly to these technologies.
4. Certain cookies process your personal data. The processing of personal data from cookies or similar technologies on our Website is carried out to ensure the functionality of the Website, to adapt the Website to the User’s preferences, and for analytical purposes. Processing is based on our legitimate interest. The legal basis for processing personal data for advertising purposes will be your additional consent, expressed by selecting and ticking the checkbox during the consent process for cookies.
5. When a User uses the Website, cookies are employed to identify their browser and/or device. Cookies collect various types of information that generally do not constitute personal data. However, some information, depending on its content and use, may be linked to a specific individual and thus, under the GDPR, will constitute personal data.
6. For information collected by cookies, which may be linked to a specific individual, the provisions of the Website’s Privacy Policy relating to personal data apply, especially regarding the rights of the data subject.
7. The Website uses profiling. Thanks to cookies used on the Website, the Administrator can learn about the User’s preferences, e.g., by analyzing how often they visit the Website or which content they view. Analyzing online behavior helps better understand the habits and expectations of Users and allows for adapting the Website to the needs and interests of specific Users. This technology enables presenting Users with advertisements tailored to their needs and interests.
§ 9 CHANGES TO THE PRIVACY POLICY
1. These terms of the Privacy Policy 1.0. apply from 01.01.2025.
2. The Administrator declares the right to make changes to this document for important reasons, including: a) changes to applicable regulations, especially those related to the GDPR, telecommunications law, electronic services, and consumer rights, if such changes affect the rights and obligations of the Administrator or the rights and obligations of the User; b) the development of functionalities or electronic services caused by technological progress, including the implementation of new IT, technological, or technical solutions on the Website, which impact how User data is processed.
3. The Administrator commits to informing Users about any changes to this document in advance, allowing them to familiarize themselves with the changed document, e.g., by posting the updated Privacy Policy text on the Website’s homepage.
List of website documents: