§1. Personal data administrator

1. The controller of personal data within the meaning of art. 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) is RAMZES-BUDOWNICTWO sp. z o.o. with its registered office in Kokoszkowy, at ul. Gdańska 1D, 83-207 Kokoszkowy, NIP: 5922284511, REGON: 388723982.

2. E-mail address of the data controller: biuro@ramzes-budownictwo.pl.

3. The Administrator, in accordance with Article 32, paragraph 1 of the GDPR, complies with the principle of personal data protection and applies appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, modification, unauthorized disclosure or unauthorized access to personal data processed in connection with the conducted business activity.

4. Providing personal data by the client is voluntary, but necessary in order to conclude an agreement with the data controller.

5. The data controller processes personal data to the extent necessary to perform the agreement or provide services to the data subject.

§2. Purpose and basis of personal data processing

The Administrator processes personal data for the following purposes:

a. preparation of an offer in response to the client's interest, which is a legitimate interest of the data controller (Article 6 paragraph 1 letter f of the GDPR);

b. conclusion and implementation of contracts with clients, based on the concluded contract (Article 6 paragraph 1 letter b of the GDPR);

c. provision of services electronically via websites, based on the concluded contract (Article 6 paragraph 1 letter b of the GDPR);

d. handling the complaint process, based on the obligation incumbent on the data controller in connection with the applicable provisions of law (Article 6 paragraph 1 letter c of the GDPR);

e. accounting related to issuing and accepting settlement documents, based on the provisions of tax law (Article 6 paragraph 1 letter c of the GDPR);

f. archiving data for the purpose of determining, pursuing or defending against claims or the need to demonstrate facts, which is a legitimate interest of the data controller (Article 6 paragraph 1 letter f of the GDPR);

g. contact by telephone or e-mail, in particular in response to inquiries addressed to the data controller, which is a legitimate interest of the data controller (Article 6 paragraph 1 letter f of the GDPR);

h. sending technical information regarding the functioning of the services used by the client, which is a legitimate interest of the data controller (Article 6 paragraph 1 letter f of the GDPR);

i. marketing, which is his legitimate interest (Article 6 paragraph 1 letter f of the GDPR) or is based on previously granted consent (Article 6 paragraph 1 letter a of the GDPR).

§3. Data recipients. Data transfer to third countries

1. The recipients of personal data processed by the data controller may be entities cooperating with the data controller when it is necessary for the performance of the contract concluded with the data subject.

2. The recipients of personal data processed by the data controller may also be subcontractors - entities whose services the data controller uses when processing data, e.g. accounting offices, law firms, entities providing IT services (including hosting services).

3. The data controller may be obliged to provide personal data on the basis of applicable legal regulations, in particular to provide personal data to authorized state bodies or institutions.

4. Personal data in connection with the use by the controller of tools for analyzing and tracking website traffic may be transferred to an entity based outside the European Economic Area, e.g. to Google LLC or to Meta Platforms Inc. As an appropriate data protection measure, the data controller has agreed to standard contractual clauses in accordance with Article 46 of the GDPR with the providers of these services. More information on this subject is available here:

https://commission.europa.eu/law/law-topic/data-protection_en.

§4. Period of storing personal data

1. The data controller stores personal data for the duration of the contract concluded with the data subject and after its termination for purposes related to pursuing claims related to the contract, performing obligations resulting from applicable legal provisions, but for a period not longer than the limitation period in accordance with the provisions of the Civil Code.

2. The data controller stores personal data contained in settlement documents for the period specified in tax law.

3. The data controller stores personal data processed for marketing purposes for a period of 10 years, but no longer than until the withdrawal of consent to data processing or objection to data processing.

4. The data controller stores personal data for purposes other than those indicated in paragraphs 1-3 for a period of one year, unless the consent to data processing has been withdrawn earlier and data processing cannot be continued on a basis other than the consent of the data subject.

§5. Rights of the data subject

1. Every data subject has the right to:

a. access – to obtain confirmation from the controller whether their personal data are being processed. If data about a person is being processed, they are entitled to access them and to obtain the following information: about the purposes of processing, categories of personal data, information about the recipients or categories of recipients to whom the data has been or will be disclosed, the period of data storage or the criteria for determining them, the right to request rectification, deletion or restriction of the processing of personal data of the data subject and to object to such processing (Article 15 of the GDPR);

b. to receive a copy of the data – to obtain a copy of the data subject to processing, with the first copy being free of charge, and for subsequent copies the controller may impose a reasonable fee resulting from administrative costs (Article 15 paragraph 3 of the GDPR);

c. to rectify – to request rectification of their personal data that are incorrect or to supplement incomplete data (Article 16 of the GDPR);

d. to delete data – to request the deletion of his or her personal data if the controller no longer has a legal basis for their processing or the data are no longer necessary for the purposes of processing (Article 17 of the GDPR);

e. to restrict processing – request to restrict the processing of personal data (Article 18 of the GDPR), when:

- the data subject questions the accuracy of the personal data – for a period allowing the controller to verify the accuracy of this data,

- the processing is unlawful and the data subject objects to its deletion, requesting the restriction of its use,

- the controller no longer needs this data, but it is necessary for the data subject to establish, pursue or defend claims,

- the data subject has objected to the processing – until it is determined whether the legitimate grounds on the part of the controller override the grounds for the objection of the data subject;

f. to transfer data – to receive personal data concerning them, which they have provided to the controller, in a structured, commonly used machine-readable format, and to request that this data be sent to another controller, if the data are processed on the basis of the data subject's consent or a contract concluded with them and if the data are processed in an automated manner (Article 20 of the GDPR);

g. to object – to object to the processing of their personal data for the legitimate purposes of the administrator, for reasons related to their specific situation, including profiling. In such a case, the administrator assesses the existence of important legitimate grounds for processing that override the interests, rights and freedoms of the data subjects, or grounds for establishing, pursuing or defending claims. If, according to the assessment, the interests of the data subject are more important than the interests of the administrator, the administrator will be obliged to stop processing the data for these purposes (Article 21 of the GDPR).

2. In order to exercise the above-mentioned rights, the data subject should contact the administrator using the contact details provided and inform him/her which right and to what extent he/she wants to exercise.

3. The data subject has the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office in Warsaw.

§6. Profiling

1. Personal data obtained by the data controller may be processed automatically – including in the form of profiling. Profiling of personal data performed by the data controller consists in the evaluation of selected information about the data subject for the purposes of analysis and forecasting personal preferences and interests, in particular for the possibility of providing the data subject with a personalized offer.

2. Automatic data processing performed by the data controller does not give rise to any legal consequences for the data subject. The data subject may object to the automated processing of their data at any time.

§7. Google Analytics

1. The Administrator uses Google Analytics, a web analytics service provided by Google Inc. based in the USA.

2. Google Analytics uses cookies that enable the analysis of the user's use of the website. The information generated by the cookie about the use of the website is transmitted and stored on a Google server. On behalf of the Administrator, Google will use this information to analyze the use of the website by users in order to prepare reports on website activity and to provide other services related to the use of the website and the Internet for the commissioning entity.

3. The data will not be used for the purpose of identifying any natural person.

4. The user can prevent the storage of cookies by using the appropriate browser settings; however, in this case, the full functionality of the site will not be available to the user. Furthermore, users can prevent Google from collecting the data generated by cookies and relating to their use of the website (including their IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=pl.

5. The user can object to the collection and processing of data related to the use of the website by Google at any time by downloading and installing the browser plug-in available at the following address: https://tools.google.com/dlpage/gaoptout?hl=en .

§8. Facebook Pixel

1. The Administrator uses the Facebook Pixel, an analytical tool that helps measure the effectiveness of advertisements based on the analysis of actions taken by users on the website.

2. The Administrator uses the Facebook Pixel tool to direct personalized advertisements to the Client on Facebook. This involves the use of Facebook cookies. The legal basis for the use of the Facebook Pixel tool by the Administrator is Article 6 paragraph 1 letter f of the GDPR.

§9. Social plugins

1. The Administrator uses plugins on the website that direct to social networking sites. The plugins in question are marked with the logo of the given social networking site.

2. Data is sent to social networking sites only when the user has actively clicked on the appropriate plugin button. After clicking on the plugin icon, the web browser will start a connection with the servers of the given social networking site, and the user will be redirected to the website of the external service provider, i.e. the owner of the given social networking site, and the user's web browser will establish a direct connection with the servers of these social networking sites. Using these functions may involve the use of external cookies. From the moment you click on a given plugin, personal data is processed on a given social networking site, and the owner of the social networking site becomes a co-administrator of personal data. The Administrator informs that from the moment you actively click on the plugin button, the Administrator has no influence on the nature and scope of personal data collected by the given social networking site.

3. Data is sent regardless of whether the user has an account on a given social networking site or is logged in. If the user is logged in to a given social networking site, the collected personal data will be directly assigned to the account (profile) used by the user.

4. For more information on the purpose and scope of personal data collection, including the principles of their processing by the provider of a given site, please refer to the privacy policies of these providers.

Cookie policy

1. The entity that places cookies on the user's end device and obtains access to them is RAMZES-BUDOWNICTWO sp. z o.o. with its registered office in Kokoszkowy.

2. The website does not automatically collect any information, except for information contained in cookies.

3. Cookies (so-called "cookies") are computer data, in particular text files, which are stored on the end device of the user using the systems and websites provided by the service provider and are intended for the use and operation of these systems and websites. Cookies usually contain the name of the website from which they originate, the time they are stored on the user's end device and a unique number.

4. Cookies used by the service provider are used for the purpose of:

- adapting the content of websites to the user's preferences and optimizing the use of websites; in particular, these files allow the user's device to be recognized and the website to be properly displayed, tailored to their individual needs;

creating statistics that help understand how users use systems and websites, which allows for improving their structure and content;

- maintaining the user's session in order to enable returning to the content of forms available on websites.

5. The following types of cookies are used within the systems and websites provided by the service provider:

- "session cookies" and "persistent cookies". "Session" cookies are temporary files that are stored on the user's end device until logging out, leaving the website or disabling the software (internet browser). "Persistent" cookies are stored on the user's end device for the time specified in the cookie parameters or until they are deleted by the user;

- "essential" cookies, enabling the use of services available within the systems and websites, e.g. authentication cookies used for services requiring authentication;

cookies used to ensure security, e.g. used to detect abuses in the scope of authentication within the systems and websites;

- "functional" cookies, which enable "remembering" the settings selected by the user and personalizing the user interface, e.g. in terms of the selected language or region from which it comes, font size, appearance of the website, etc.

In many cases, the software used to browse websites (internet browser) allows cookies to be stored on the user's end device by default. Users can change the settings for cookies at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the settings of the internet browser or to inform about their placement on the user's device each time.

Detailed information on the possibilities and methods of handling cookies is available in the software (internet browser) settings and is described here:

Please be advised that restrictions on the use of cookies may affect some functionalities available in systems or on websites.