Privacy policy

This Privacy Policy is not a fully universal document and requires adaptation depending on the tools and solutions used by the Administrator, as well as the scope of processing purposes.

I. General Provisions
1. This Privacy Policy defines the method of collecting, processing, and storing personal data necessary for providing electronic services via the website under the domain rd-s.pl (hereinafter: the Service).
2. The Administrator of Users’ personal data is RETAIL DEVELOPMENT SOLUTIONS KINGA MORAWSKA, ul. Alaski 5/14, 05-509 Józefosław (hereinafter: the Administrator).
3. Personal data is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).
4. The data collected by the Administrator will be:
– processed lawfully,
– processed for specified, explicit purposes and not further processed in a manner that is incompatible with those purposes,
– adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed,
– kept for no longer than is necessary for the purposes of processing.

II. Purpose and Legal Basis for Data Processing
1. The Administrator processes personal data necessary for the provision and development of the services offered through the Service and its individual functionalities.
2. Personal data will be processed for the following purposes:
a. registration of an account, verification of the User’s identity, and execution of an agreement for the provision of electronic services in accordance with the Act of 18 July 2002 on the provision of electronic services, in particular by enabling the use of the User’s account – based on the acceptance of the Terms and Conditions (Art. 6(1)(b) GDPR);
b. communication with the User to provide them with necessary information and to build positive and reliable relationships with them, which constitutes the legitimate interest of the Administrator (Art. 6(1)(f) GDPR);
c. promotion of the Administrator’s own products and/or services as well as those of its Partners by sending marketing communications (newsletter) electronically if the User has consented to receiving such notifications via email (Art. 6(1)(a) GDPR);
d. providing access to information about industry news directly related to the Administrator’s activities, provided that the User has consented to receiving such notifications via email (Art. 6(1)(a) GDPR);
e. for analytical and statistical purposes based on the legitimate interest of the Administrator in verifying the activities and preferences of Users to optimize services and products as well as the functionalities of the Service (Art. 6(1)(f) GDPR);
f. for the potential establishment, exercise, or defense of legal claims based on the legitimate interest of the Administrator in protecting its rights (Art. 6(1)(f) GDPR).

III. Period of Personal Data Processing
1. Personal data will be processed for the period during which the person remains an active User of the Service (has a User account), and thereafter for the period necessary to comply with legal requirements, pursue or defend against any claims, but not longer than 3 years from the date of termination of the agreement for the provision of electronic services.
2. Data processed based on consent will be processed until the consent is withdrawn, with the understanding that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

IV. Information about Processing
1. Depending on the purpose of processing, personal data may be disclosed to:
a. entities affiliated with the Administrator
b. entities cooperating with the Administrator,
c. subcontractors, especially entities providing and servicing selected IT systems and solutions,
d. entities handling internet payments,
e. entities providing courier and postal services,
f. law firms.
2. Personal data processed by the Administrator will not be transferred outside the European Economic Area or to international organizations.

V. Rights of Data Subjects
1. The User of the Service has the right to:
– access their personal data
– rectify data
– erase data
– restrict the processing of data
– data portability
– object to processing based on the legitimate interest of the administrator
– withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal
2. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing violates their rights and freedoms.
3. The processing of data does not involve automated decision-making, including profiling.

VI. Final Provisions
1. The Administrator reserves the right to make changes to this Privacy Policy while ensuring that the rights of Users arising from this document will not be limited.
2. Users will be informed about any changes to the Privacy Policy through a notice available on the Service.