As Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) applies from 25 May 2018, we provide you with information on personal data.

This document sets out the principles according to which the personal data of persons using the https://theparasight.com/ website (hereinafter: “Website”) is protected.

This Privacy Policy describes the type of Website User Personal Data collected, how it is collected, used, as well as stored and possibly shared, and describes what rights you have about the processing of your personal data.

The Controller is obliged to protect the privacy of the Website Users. In doing so, the Controller shall make every effort to ensure the protection of the personal data provided to the Website User in connection with the use of the Website and making purchases.

Please be informed that the Controller of your personal data is THE PARASIGHT S.A. with its registered seat in Krakow, al. Juliusza Słowackiego 66, 30-004 Kraków, Poland, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Krakow — Śródmieście in Kraków, XI Economic Division of the National Court Register, under National Court Register (KRS) number: 0000805820; Taxpayer’s Identification Number (NIP): 6772446986.

PURPOSES AND BASIS OF PROCESSING

1. Contact form

We process the data you provide in the contact form in order to process your request and answer your question, based on our legitimate interest (Article 6(1)(f) of the GDPR), which is to contact customers and answer their questions.

2. Agreement

If you are contacted to conclude an agreement, we process your data in order to take steps at your request before concluding the agreement, e.g. to negotiate or to present an offer (Article 6(1)(b) of the GDPR). Data will be processed for the time necessary to act on your request. If an agreement is not concluded after this period, the data will be deleted, whereas if the agreement is concluded, it will continue to be processed until the execution of the agreement and the statute of limitations for claims arising from the agreement based on the Controller’s legitimate interest, which is the defence and assertion of claims (Article 6(1)(b) and (f) of the GDPR).

If an agreement is concluded with you, your data will be processed:

1. to conclude and perform the agreement under the conditions set out in the Website’s regulations (Article 6(1)(b) GDPR), and
2. to provide the service electronically, in particular, to maintain your customer account in the shop (Article 6(1)(b) GDPR),
3. to carry out the complaint process and to provide proper customer service (Article 6(1)(b) of the GDPR),
4. for archival (evidential) purposes to secure information in the event of a legal need to prove facts, based on the Controller’s legitimate interest (Article 6(1)(f) GDPR), which is the archiving of documentation,
5. for direct marketing of the Controller’s products and services based on the Controller’s legitimate interest (Article 6(1)(f) of the GDPR), which is direct marketing of its products and services,
6. to tailor advertising offers to customers’ needs, to present advertisements based on your consent and the Controller’s legitimate interest (Article 6(1)(a) and (f) of the GDPR), which is the adjustment of categories of offers or individual offers based on your activity.

If an agreement is concluded with you, the data will be processed for the purpose of concluding and performing the agreement (e.g. contact in connection with its performance, confirmation of payment) and on the basis thereof (Article 6(1)(b) of the GDPR).

Your data is also processed for the purpose of asserting or defending against claims, which is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR) to assert and defend against claims.

3. Commercial information

If you have given your consent, your personal data will be processed in order to send you commercial information concerning products and services, promotions and offers based on your consent and the Controller’s legitimate interest, which is direct marketing of its own products and services (Article 6(1)(a) and (f) of the GDPR).

4. Conducting traditional correspondence and e-mail

If you send e-mails or postal correspondence to the Controller which is not related to the provision of services or performance of another agreement, the personal data contained therein shall be processed to process the request or enquiry submitted in the correspondence.

The basis for the processing, in this case, is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR), which consists of correspondence and the handling of requests and enquiries in connection with the business activity performed. The provision of personal data necessary to process the request is mandatory.

5. Telephone contact

If you are contacted by telephone for matters that are not related to the provision of services to you or the performance of another agreement, the personal data provided by you will be processed to deal with the request or enquiry you have made.

The basis for the processing, in this case, is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR), which consists in the handling of requests and enquiries in connection with the business activity performed. The Controller may require you to provide data necessary for the handling of the request, in which case the provision of such data is mandatory for the handling of the request.

6. Contact from the contractor’s or customer’s employees

If you contact us by phone or e-mail concerning an agreement concluded with your employer or actions were taken at their request before concluding an agreement — we process the data obtained in this way to perform the concluded agreement and to take actions at his request before concluding an agreement (Article 6(1)(b) of the GDPR), as well as to assert, defend against claims, which constitutes a legitimate interest of the Controller consisting in the protection of his rights (Article 6(1)(f) of the GDPR).

If you contact us on a matter other than the concluded agreement, we will process your data to answer the question you have asked or to resolve the matter with which you have approached us. The basis for the processing is the legitimate interest of the Controller in answering a question or resolving a matter in connection with its business activities (Article 6(1)(f) of the GDPR).

7. Other grounds for the processing

Your data may also be processed:

1. to fulfil legally binding obligations on the Data Controller (Article 6(1)(c) of the GDPR, among others tax obligations, obligations under the Civil Code, the GDPR, issuing VAT invoices, processing complaints, fulfilling information obligations),
2. for analytical and statistical purposes of customer satisfaction surveys, which is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR).

DATA RECIPIENTS

1. Entrustment of data processing and data sharing

We may share your personal data with the entities we use to process them, in particular, companies providing services for the delivery of goods (shipping companies), handling the processes necessary for sending notifications of order fulfilment, service providers providing advertising and marketing services, as well as for the settlement of accounts receivable,

The Controller will also provide access to your data when this is necessary due to an obligation on their part.

The Controller may share your personal data with parties to transactions you enter into through the Website. Sellers to whom GDPR applies, having obtained the personal data of Buyers from the Controller, are obliged to comply with all obligations towards Buyers arising from the GDPR and other laws, including ensuring that they exercise their rights under the GDPR.

The Controller may share the data stored in cookies with Trusted Partners to better identify the attractiveness of advertisements and services for, and improve the overall quality and effectiveness of the services provided by the aforementioned entities. The sharing of data stored in cookies is subject to the User’s consent.

2. Transfers of data to third countries or international organisations

The Controller may entrust the processing of personal data to a third country, i.e. outside the European Economic Area, and send it to external entities cooperating with the Controller acting on the Controller’s behalf for the purposes described above.

Your personal data will be transferred outside the European Economic Area to Google LLC, based in Mountain View, USA, in connection with the use of the email system.

The Controller may also store personal data in a location that is subject to a different jurisdiction from your place of residence or registered office.

In addition, some of our Trusted Partners may store service user data outside the EEA (European Economic Area).

The transfer of data outside the EEA, e.g. to the USA, only takes place if the respective entity meets an adequate level of security and data protection, e.g. based on the European Commission’s decision of 12 July 2016, the so-called Privacy Shield. This means that your data may only be transferred to entities that comply with the principles set out by the United States Department of Commerce under the EU-US Privacy Shield Framework programmes governing the collection, use and retention of personal data from European Union Member States respectively. Such a transfer shall occur only if an agreement containing standard contractual clauses requiring a specific level of protection of personal data has been concluded with the data importer.

DATA RETENTION PERIOD

The period for which we may process your personal data depends on the legal basis which constitutes the legal prerequisite for the processing of personal data by the Controller. We shall never process personal data beyond the above legal grounds. Accordingly, we inform you that:

1. where the Controller processes personal data based on consent, the period of processing lasts until you withdraw that consent,
2. in case the Controller processes your personal data obtained based on your request to take action by the Controller before concluding an agreement, the processing period lasts for the time necessary to take action on your request,
3. where the Controller processes personal data for the performance of an agreement, the period of processing shall last until the possibility of either party asserting claims related to the agreement ceases,
4. where the Controller processes personal data based on their legitimate interest, the period of processing shall last until the expiry of the aforementioned interest (e.g. the limitation period for civil law claims) or until the data subject objects to further such processing — in situations where such an objection is entitled under the law,
5. where the Controller processes personal data because it is necessary to do so under applicable legislation, the processing periods for that purpose are determined by that legislation,

YOUR RIGHTS

We inform you that you have the following rights:

1. The right to access your data and to receive a copy thereof
2. The right to rectify (amend) your data
3. The right to delete your data.

If you believe that there are no grounds for us to process your data, you can request that we delete it.

1. Restrictions on data processing

You may request that we restrict the processing of your personal data solely to storing it or carrying out activities agreed upon with you if you believe that we have incorrect data about you or are processing it unjustifiably; or you do not want us to delete it because you need it to establish, assert or defend a claim; or for the duration of an objection, you have lodged against the processing.

2. The right to object to the processing:

‘Marketing’ objection. You have the right to object to the processing of your data for direct marketing purposes. If you exercise this right, we will stop processing your data for this purpose.

Objection on grounds of a special situation. You have the right to object to the processing of your data based on a legitimate interest for purposes other than direct marketing, and where the processing is necessary for us to carry out a task in the public interest or for the exercise of official authority vested in us. You should then indicate to us your particular situation which, in your opinion, justifies us ceasing the processing subject to the objection. We will stop processing your data for these purposes unless we demonstrate that the grounds for our processing override your rights or that your data is necessary for us to establish, assert or defend our claims.

3. The right to data portability:

You have the right to receive from us in a structured, commonly used and machine-readable format (e.g. “.csv” format) personal data concerning you which you have provided to us based on an agreement or your consent. You may also instruct us to send this data directly to another entity.

4. The right to lodge a complaint with a supervisory authority

If you believe that we are processing your data unlawfully, you may lodge a complaint to this effect with the President of the Office for Personal Data Protection.

5. The right to withdraw consent to the processing of personal data

At any time you have the right to withdraw your consent to the processing of those personal data which we process based on your consent. Withdrawal of consent will not affect the lawfulness of the processing carried out based on your consent before its withdrawal.

At any time you have the right to withdraw your consent to the processing of those personal data which we process based on your consent. Withdrawal of consent will not affect the lawfulness of the processing carried out based on your consent before its withdrawal.

If you believe that we are processing your data unlawfully, you may lodge a complaint to this effect with the President of the Office for Personal Data Protection.

If you wish to exercise the above rights, please contact us personally, by post or e-mail using the following details:

THE PARASIGHT S.A., al. Juliusza Słowackiego 66, 30-004 Kraków, Poland;

e-mail:info@theparasight.com;

VOLUNTARY PROVISION OF PERSONAL DATA

The provision of data in connection with the handling of the request and the enquiry submitted by telephone, by traditional mail or by e-mail correspondence is necessary for the handling of the enquiry and the response to it, and the resolution of the matter and failure to do so will result in the impossibility of sending a response or resolving the matter.

When you contact us to ask a question or indicate a case for a solution, your contact details are voluntary but necessary to answer the question or solve the case presented.

Provision of the data indicated as mandatory in the contact form is necessary to handle and respond to the enquiry, and failure to do so will result in the impossibility of sending the enquiry.

The provision of data in connection with the conclusion, execution and performance of the agreement is voluntary but necessary for the proper performance of the service and the execution of the agreement. The consequence of failing to provide such data will be the impossibility to conclude an agreement with the Controller.

We may also require you to provide data if this is necessary to comply with our legal obligations. In this case, the provision of data is mandatory.

Provision of data necessary to send commercial information on products and services, promotions and offers is voluntary but necessary to send such information. Failure to do so prevents the sending of commercial information on products and services, promotions and offers.

AUTOMATED DECISION-MAKING

The information we collect in connection with the use of our Websites may be processed by automated means (including profiling) to the extent that this is necessary for the performance of advertising and marketing services and to decide whether to grant you a sales discount, but this will not have any legal effect on the individual or similarly materially affect the individual. We attach particular importance to the issue of profiling and point out that for the purposes of profiling: we do not process any sensitive data, we use typical data for this purpose: e-mail address and IP address or cookies, we profile to analyse or forecast the personal preferences and interests of persons using our Websites or products or services and to adapt the content on our Websites or products to these preferences. We profile for marketing purposes, i.e. to match marketing offers to the above preferences. Profiling also allows us to give you an appropriate discount, the granting and amount of which depends in particular on the data collected and processed about you.

Our Partners may use targeting and profiling, which is an automated way of processing personal data that involves, among other things, using personal data to analyse or predict personal preferences, interests, location, behaviour. The use of profiling allows our Partners to more specifically personalise the advertising presented to you. Our partners’ cookies are used in this process so that such processing requires your consent, which you can revoke at any time on our website and the websites of our partners.