Privacy Policy

I. General provisions‍

1. The Privacy Policy defines how the personal data of Users necessary for the provision of electronic services through the website secretroomgdansk.pl (hereinafter: the Website) is collected, processed and stored.
2. The Website collects only personal data necessary for the provision and development of the services offered in it.
3. Personal data collected through the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR) and the Personal Data Protection Act of 10 May 2018.

II. Data Administrator

‍The administrator of personal data collected through the Website is Eldar Kurseitov, address: 69, Grunwaldzka Avenue, 80-241 Gdańsk, NIP: 5842794144, REGON: 386285549, e-mail address: kontakt@secretroomgdansk.pl (hereinafter: Controller).

‍III. Purpose of collecting personal data‍

1. Personal data is used in order to:

• execution of the contract for services and e-services,
• communication with the User (livechat, contact form, etc.)
• sending the newsletter (after the User has given his consent to receive it),
• running a comment system,
• the provision of community services,
• promotion of the Administrator's offer,
• marketing, remarketing, affiliation,
• personalization of the Service for Users,
• analytical and statistical activities,
• establishing and asserting claims or defending them.

1. Providing data is voluntary, but necessary to conclude a contract or use other functionalities of the Website.

IV. Type of personal data processedThe Administrator may process the User's personal data: name and surname, date of birth, e-mail address, telephone number.Users' personal data will be processed for the period of:

‍Administrator może przetwarzać dane osobowe Użytkownika: imię i nazwisko, data urodzenia, adres e-mail, numer telefonu.V. Okres przetwarzania danych osobowych

‍Dane osobowe Użytkowników będą przetwarzane przez okres:

• when the basis for data processing is the performance of the contract — until the limitation of claims after its execution,
• when the basis for data processing is consent — until its revocation, and after revocation of consent to limitation of claims.

‍

In both cases, the limitation period is 6 years, and for claims for periodic benefits and claims relating to the conduct of business — 3 years (unless the specific provision provides otherwise).VI. Sharing of personal data

VI. Udostępnianie danych osobowych‍

1. Users' personal data may be transferred to: entities associated with the Administrator, its subcontractors, entities cooperating with the Administrator, e.g. companies that support e-payments, companies providing courier/postal services, law firms.
2. Your personal data will not be transferred outside the European Economic Area (EEA).

VII. Rights of Users‍

1. The Website User has the right to: access the content of their personal data, their rectification, deletion, restriction of processing, portability, objection to processing, withdrawal of consent at any time (which does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal).
2. The request for the User to exercise the right resulting from the mentioned rights should be sent to the address kontakt@secretroomgdansk.pl.
3. The administrator fulfills or refuses to comply with the request immediately — within a maximum of one month from its receipt.
4. The User has the right to lodge a complaint with the President of the Office for Personal Data Protection if he considers that the processing violates his rights and freedoms (GDPR).

VIII. Cookie files‍

1. The website collects information using cookies — session, permanent and external entities.
2. The collection of cookies supports the correct provision of services on the Website and serves statistical purposes.
3. The user can specify the scope of access of cookies to his device in the browser settings.

IX. Automated decision making and profiling‍

1. Users' data may not be processed in an automated manner so that any decisions could be made against them as a result.
2. Users' data may be profiled in order to adapt the content and personalize the offer after they have given their consent.

X. Final provisions‍

1. The Administrator has the right to make changes to the Privacy Policy, but the rights of Users will not be limited.
2. Information about the changes made will appear in the form of a message available on the Website.
3. In matters not regulated in this Privacy Policy, the provisions of the GDPR and the provisions of Polish law apply.