This document describes the rules for the processing of your personal data in connection with the use of the website https://lipidsystems.pl (hereinafter: “Website”).
The Controller of personal data and the owner of the Website is LIPID SYSTEMS spółka z ograniczoną odpowiedzialnością with its registered office in Wrocław, address: ul. Krzemieniecka 48C, 54-613 Wrocław, entered in the register of entrepreneurs kept by the District Court for Wrocław – Fabryczna in Wrocław, VI Economic Division of the National Court Register under KRS number: 0000395576, NIP [TAX IDENTIFICATION NUMBER]: 8943032420. Contact with the Controller is possible by mail at the
above address and by e-mail: office@lipidsystems.pl.
Your personal data is processed in a manner consistent with the requirements of generally applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”), the Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws of 2020, item 344 as amended) and the Act of 16 July 2004. Telecommunications Law (Journal of Laws of 2022, item 1648, as amended).
The definitions contained in § 1 of the Website Terms and Conditions shall apply accordingly to this Privacy Policy.
What information do we process?
- Depending on the purpose, we may process the following information (including personal data) about you:
1) Identification data: name, company name, e-mail address – for communication via contact form.
2) Web server logs: we automatically collect web server logs if you visit our Website, using the computer on which the Website is installed (known as a “web server”). The web server automatically recognizes certain information, such as your IP address, the date and place of your visit to the Website, the website from which you visited the Website, the type of web browser used, the type of operating system used, and the domain name and address of the website operator.
3) IP addresses: we may collect information about your IP address. IP addresses are used as part of the information contained in the web server logs described above and for technical purposes.
4) Anonymous and statistical data: we may also collect other information about you that is not personal and does not identify you, but allows us to perform analytical and statistical purposes; this may include information about your operating system and browser, the source from which you navigate to the Website, the pages you view and navigate between pages, the time spent on the Website, clicking on links, your age range, gender, approximate location (hereinafter: “Another Information”).
- If we become aware of the use of the Website in a manner inconsistent with the law, the Terms and Conditions or this Privacy Policy, we may process your personal data for the purpose and to the extent necessary to determine your liability and protect your rights and claims.
- Through the Website, we do not collect or process data revealing racial or ethnic origin, political, religious or philosophical beliefs, membership of trade union organisations or data concerning health, sex life or criminal record.
Purposes and legal bases of processing
Your personal data is processed for the following purposes, based on the following legal bases:
1) if you communicate with us via the contact form – in order to respond to your message, pursuant to Article 6(1)(b) of the GDPR, i.e. the condition of necessity to perform the contract or to take action at the request of the data subject before concluding the contract; our correspondence may be archived for the purpose of establishing or defending against potential claims, pursuant to Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the administrator,
2) for technical, purposes, so that the Website displays correctly, is stable and secure and allows quick retrieval of information, as well as to send you information related to the functioning of the Website (if necessary), pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller in ensuring the proper operation of the Website),
3) for purposes related to the creation of an archive for the purpose of possible defense or redress, pursuant to Article 6(1)(f) of the GDPR (legitimate interest consisting in the protection of legitimate rights and claims),
4) for analytical and statistical purposes, in terms of Another Information, on the basis of the legitimate interest of the controller, pursuant to Article 6(1)(f) of the GDPR, which is the creation and analysis of statistics related to user activity on the Website and its optimisation,
5) in the event of becoming aware of the use of the Website in a manner inconsistent with the law, the Regulations or this Privacy Policy, we may process the user’s personal data also for the purpose and to the extent necessary to determine their liability and protect their legitimate rights and claims, pursuant to Article 6(1)(f) of the GDPR (the legitimate interest of the administrator consisting in the protection of legitimate rights and claims), 6) if the disclosure of your personal data is requested by an authorized state, authority, based on the premise of the need to fulfill the legal obligation incumbent on the administrator,
referred to in Article 6(1)(c) of the GDPR
Processing time
Personal data will only be processed for as long as necessary to achieve the processing purpose in question. In the case of communication via a contact form, your personal data will be processed until your request has been answered. Correspondence may be archived in order to establish or defend against possible claims, until these claims expire. You can ask us to obtain a copy of this correspondence or to delete it (unless our overriding interest opposes this, e.g. in asserting or defending against claims).
Obligation to provide data
Providing your personal data is voluntary, however, failure to do so may prevent us from responding to your enquiry.
Rights of data subjects
Regardless of the legal basis for processing, you have the right to access your data, the right to obtain a copy of the data, as well as the right to request rectification, and in some situations also the right to request the deletion of data or the right to request restriction of processing. If the processing of personal data takes place on the basis of the premise of necessity for the purposes
of the legitimate interest of the administrator (Article 6(1)(f) of the GDPR), you have the right to object to the processing of personal data. If the processing is undertaken on the basis of the prerequisite that the processing is necessary for the performance of the contract or to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the GDPR), you also have the right to data portability. Regardless of the legal basis for processing, if you suspect that your personal data is processed contrary to the GDPR, you have the right to lodge a complaint with the supervisory authority (in Poland it is the President of the Office for Personal Data Protection) about the unlawful processing of your personal data.
Sharing data with third parties
The transfer of data to third parties is always carried out in accordance with the law, on the basis of a concluded contract that indicates the purposes of processing specified by us. The recipients of your personal data may be entities with whom we cooperate in order to perform the services provided to you or to perform the concluded contract. These may include: providers of external systems to support our business, including web hosts, IT service providers, and other subcontractors if the scope of our ooperation requires access to your data. The data may also be made available to state authorities authorized to access data on the basis of
legal provisions. We may also exchange information with third parties that does not constitute personal information, such as the number of visits to the Website („Another Information”). Such information does not identify you in any way as a user of our website, but it is also accessed by the providers of the tools that collect it.
Update or rectification of data
If you wish to update or rectify your personal data, you can send a message to our e-mail address. You will receive a notification about the update of your data. Please update your personal data whenever it changes. Providing false personal data or personal data concerning another person is prohibited.
Automated decision-making, profiling
Your personal data is not used to make decisions in an automated manner, including profiling. We do not use IT systems that would automatically make decisions about your personal data. Decisions and actions are made exclusively by our employees.
Security of personal data
The place where your personal data is stored is protected by appropriate physical, IT and organizational safeguards aimed at adequate data protection. However, we have no control over the security of electronic communications from the time you send them until they reach us. Access to your personal data is restricted. Only employees who need such access in order to do their
job can obtain it. In addition, the Website has been equipped with the SSL protocol, which allows you to securely and effectively encrypt the data sent between the user and the server. Subpages containing personal data forms are automatically switched to the https protocol.
Final Provisions
- We make every effort to ensure a high level of security of your personal data. Any disturbing events affecting the security of information and data transfer should be reported to the following e-mail address: office@lipidsystems.pl.
- In order to obtain additional information regarding the processing of personal data, please contact us at the following e-mail address: office@lipidsystems.pl.
- We reserve the right to make changes to this Privacy Policy.