#### § 1 General Provisions

The data controller is **Marta Rurka-Kantas**, residing at Thombs of the Kings 40, apartment 13, 8016 Pafos. Marta Rurka-Kantas can be contacted by mail at the address mentioned above or by email at: **[email protected]**.

According to Art. 37 GDPR, **Marta Rurka-Kantas** has not appointed a Data Protection Officer.

This Privacy Policy is an integral part of the Terms and Conditions. By using our services, you entrust us with your information. This document is intended to help you understand what information and data are collected and for what purposes, as well as how they are used. These data are very important to us, so please read this document carefully as it defines the principles and methods of data processing and protection. This document also outlines the use of cookies.

We inform you that we comply with the principles of personal data protection and all legal regulations provided by the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Upon request from the data subject, we provide comprehensive information on how we use their personal data. We always clearly inform about the data we collect, how we use it, what purposes it serves, and to whom we disclose it, and we provide information about institutions to contact in case of doubts.

#### § 2 Privacy Principles

We respect your privacy. We aim to ensure your comfort when using our services. We value the trust you place in us by providing your personal data for the performance of services. We always use personal data in a fair manner and to meet your expectations, only to the extent necessary for service performance.

As a User, you have the right to receive full and clear information on how we use your personal data and for what purposes they are necessary. We always clearly inform about the data we collect, how and to whom we disclose it, and we provide information about the entities to contact in case of doubts.

In case of doubts about how we use your personal data, we will promptly take action to clarify and resolve such doubts. We provide comprehensive answers to all related questions. We will take all reasonable actions to protect your data from improper and uncontrolled use.

The legal basis for processing your personal data is:
– Art. 6 (1) (a) – the data subject has given consent to the processing of their personal data for one or more specific purposes.
– Art. 6 (1) (b) – processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
– Art. 6 (1) (c) – processing is necessary for compliance with a legal obligation to which the data controller is subject.
– Art. 6 (1) (d) – processing is necessary to protect the vital interests of the data subject or another natural person.
– Art. 6 (1) (e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
– Art. 6 (1) (f) – processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party.

Your personal data related to the conclusion and performance of the contract will be processed for the duration of the contract, and also for no longer than required by law, including the provisions of the Civil Code and the Accounting Act, i.e., for no longer than 10 years, counting from the end of the calendar year in which the last contract was performed.

Your personal data processed for the purpose of concluding and performing future contracts will be processed until you object.

You have the right to:
– access your personal data and receive a copy of the data being processed,
– rectify incorrect data,
– request the deletion of data (right to be forgotten) in the circumstances provided in Art. 17 GDPR,
– request the restriction of processing data in the cases specified in Art. 18 GDPR,
– object to the processing of data in the cases specified in Art. 21 GDPR,
– transfer your data provided, processed in an automated manner.

If you believe your personal data is being processed unlawfully, you may lodge a complaint with the supervisory authority (Office for Personal Data Protection, Stawki 2, Warsaw). If you need additional information related to data protection or wish to exercise your rights, please contact us by mail at the correspondence address.

We adhere to all applicable data protection regulations and will cooperate with data protection authorities and law enforcement agencies. In the absence of data protection provisions, we will act in accordance with general data protection principles, social norms, and established practices.

If you have any questions, please contact us through the website from which you were redirected to this Privacy Policy. The contact request will be promptly forwarded to the appropriate designated person. To facilitate our response or addressing the information provided, please provide your name.

#### § 3 Scope and Purpose of Collecting Personal Data

We process necessary personal data for service performance and accounting purposes only. We collect, process, and store the following user data:
– first and last name,
– email address,
– phone number (mobile, landline),
– information about the web browser used,
– other voluntarily provided personal data.

Providing the above data is entirely voluntary but also necessary for the full performance of services. We may transfer personal data to servers located outside your country of residence or to affiliated entities, third parties based in other countries, including those in the EEA (European Economic Area), for processing personal data on our behalf in accordance with the provisions of this Privacy Policy.

The services offered and orders are processed based on forms that include the necessary information required to perform and execute the contract.

#### § 4 Cookies

To improve the quality of services, we use cookies. Cookies are small text files sent by the server to your device, which can be read by our server.

Cookies allow:
– recognizing your device and appropriately tailoring the offer to your preferences,
– saving your settings,
– facilitating the use of the service,
– analyzing the way the service is used.

You have the right to control and delete cookies at your discretion. To do this, you need to change the settings of your web browser. If you choose the “Block Cookies” option, you may not be able to use some features of our service.

#### § 5 Data Protection

We store personal data in a manner secured against unauthorized access and against misuse. We apply appropriate technical and organizational measures to ensure the security of personal data, in accordance with applicable legal requirements.

#### § 6 Changes to the Privacy Policy

We reserve the right to change this Privacy Policy at any time, which may result from changes in legal regulations or other circumstances. We will notify you of any changes via our website. We recommend regularly checking the current version of the privacy policy.

#### § 7 Contact

If you have any questions regarding this Privacy Policy, please contact us:
– **Email address:** [email protected]

Date of last update: **25.07.2024**