Our website address is: www.komes.com.pl.

This privacy policy has been adopted in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union No. L 119/1 of 4.5.2016; hereinafter: GDPR).
The purpose of this policy is, in particular, to fulfill the information obligation referred to in Articles 13 and 14 of the GDPR.

1. Definitions

In the content of this policy, we use the following terms:

Service – the website operated by KOMES at https://komes.com.pl and subdomains of koios.pl

We – KOMES sp. z o.o., headquartered at ul. Warszawska 400, 43-300 Bielsko-Biała, Poland, VAT ID: 5470047881, with a share capital of 600,000.00 PLN, e-mail address: info@koios-mail.pl, phone number: +48 603 080 099.

You, the User, Client – any individual whose personal data is processed by KOMES in connection with the use of the Service.

2. Who is the data controller?

The data controller is the entity that determines the purposes and means of processing personal data. The controller of your personal data is KOMES.

3. Whose personal data do we process?

In connection with our business activities, we process, in particular, the personal data of users of the Service. The scope of the processed data is always adequate to the purposes of the processing.

4. What data do we collect through the Service, and for what purpose do we use it?

The scope of your data that we collect and the purposes for which it is processed depend on the functionalities of the Service you use, as follows:

Browsing the Service website

I. What data do we collect?

Data recorded in the form of server logs, where the user is identified by an IP address. This data includes:

a) the time the request was received,

b) the time the response was sent,

c) the name of the client station – identified via the HTTP protocol,

d) information about errors that occurred during the execution of the HTTP transaction,

e) the URL address of the page previously visited by the user (referrer link) – in cases where access to the Service was via a hyperlink,

f) information about the user’s web browser,

g) information about the IP address.

II. For what purpose do we process the data?

For the purposes of administering the server on which the Service is hosted, as well as for statistical analysis of traffic within the Service.

III. Do you have to provide us with your data?

Providing your data is voluntary; however, it is necessary to ensure proper use of the Service.

IV. On what legal basis do we process your data?

Based on:

a) the contract concluded, the subject of which is the service provided electronically in the form of access to the Service (Article 6(1)(b) of the GDPR), and

b) our legitimate interest (Article 6(1)(f) of the GDPR) – consisting in the ability to make the Service available to third parties, as well as ensuring the proper display and functioning of the Service.

V. Who may we share your data with?

Personal data may be shared by us with third parties only if we are required or authorized to do so under applicable law. You may use the system to share your data at your discretion. The recipients of the data may include, in particular:

a) individuals or entities managing our infrastructure or IT systems,

b) individuals or entities providing data hosting services,

c) subcontractors involved in the performance of contracts concluded with you.

VI. How long will we process your data?

For as long as necessary to perform the contracts concluded or for the duration of our legitimate interest in processing the data — in any case, no shorter than the period of your visit to the Service websites.

If the basis for data processing is our legitimate interest, you have the right to object to further processing of your data – in accordance with point 8 below.

2. Contact form

I. What data do we collect?

The data provided in the form. This includes:

a) first and last name,
b) email address,
c) phone number,
d) data contained in the subject or body of the message.

II. For what purpose do we process the data?

For the purposes of:

a) responding to submitted messages, as well as archiving them.
b) pursuing claims or defending against asserted claims.

III. Are you required to provide us with your data?

Providing your data is voluntary; however, it is necessary to send messages through the form and to receive a response..

IV. On what legal basis do we process your data?

Based on:

a) taking steps at your request to enter into a contract (Article 6(1)(b) GDPR),
b) our legitimate interest (Article 6(1)(f) GDPR) — consisting in the ability to correspond with you, and
c) your consent given via the Service.

V. Who may we share your data with?

Personal data may be shared by us with third parties only if we are required or authorized to do so under applicable law. You may share the data using the system at your own discretion. Recipients of the data may include, in particular:

a) persons managing our infrastructure or IT systems,
b) persons providing data hosting services,
c) subcontractors involved in the performance of contracts concluded with you.

VI. How long will we process your data?

For as long as necessary to perform the concluded contracts or for the duration of our legitimate interest in processing the data — but in any case, no shorter than the period of correspondence with you.

Please note that if the basis for data processing is our legitimate interest, you have the right to object to further processing of your data, as described in point 8 below.

3.Cookies

The Cookies Policy constitutes Annex No. 1 to this Privacy Policy.

4. Can data be processed in procedures involving automated decision-making, including “qualified” profiling?

Currently, we do not use any processes involving automated decision-making that produce legal effects or similarly significant impacts on the data subjects. If such processes are implemented in the future regarding personal data processing, we will ensure their compliance with applicable regulations, including Article 22 of the GDPR.

5. Can your personal data be transferred outside the European Economic Area (EEA)?

The data controller does not anticipate transferring your data outside the European Economic Area (EEA). However, if such a situation arises in the future, the data will be protected in accordance with applicable laws, in particular by using so-called Standard Contractual Clauses (SCC).

6. What rights do you have regarding the processing of your data?

You may submit to us a request for:

  1. access to your processed data (including information about our processing or a copy of the data),
  2. rectification (correction) of data,
  3. restriction of processing (suspension of operations on data or preventing data deletion),
  4. erasure of data (“right to be forgotten”),
  5. data portability to another controller.

These requests can be submitted especially as described in point 11 below and will be handled in accordance with applicable laws, including Articles 15-20 of the GDPR.

7. Right to object

Regardless of the above, you have the right to object to the processing of your data based on our legitimate interest. In such cases:

a) If personal data is processed for marketing purposes – we will immediately cease such processing.

b) If the processing is based on another legitimate interest – we will stop processing unless we demonstrate:

 i) that the legitimate interest overrides your interests, rights, and freedoms; or

 ii) there is a basis for establishing, asserting, or defending claims.

The right to object can be exercised, in particular, by sending an appropriate statement as described in point 11 below.

8. Complaint to the supervisory authority

If you believe that the processing of your data violates applicable laws, you have the right to file a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office. Contact details for the Office are available, in particular, on the website: https://uodo.gov.pl/pl/p/kontakt.

9. Place of publication and updates of the privacy policy

This privacy policy may be subject to changes from time to time. The current version of the policy will always be available on our website at: https://komes.com.pll/polityka-prywatnosci-en