Privacy policy

Data protection policy

• Personal data controller
• Contact on matters relating to the processing of personal data
• Data origin
• Type of personal data processing
• Purpose of data processing
• Transfer of personal data
• Processing times for personal data
• Automatic processing and profiling
• Your right to your own personal data
• Supervisory authority and complaints

I. Personal data controller

The administrator of the personal data is the company Kairos Limited Liability Company  based in Kraków, ul. Józefa Kałuży 1, 30-111 Kraków, registered in the Register of Entrepreneurs kept by the District Court for Kraków under KRS no. 0000708205, NIP 6772429048, REGON 368948780, tel: info@kairospolska.plrepresented by Kairos Limited Liability Company nip: 6772429048, hereinafter referred to as the Administrator  www.kairospolska.pl.

II. Contact on matters related to the processing of personal data

Email: info@kairospolska.pl
Post: ul Józefa Kałuży 1, 30-111 Kraków

III. Origin of data

Personal data is only collected in connection with activity on the websites  www.kairospolska.pl. Including in particular by purchasing goods, services, asking questions, subscribing to search results, contacting customer service, etc.

IV. Type of processing of personal data

1. In order to carry out the service/transaction, the data required are name, surname, residential address in the case of an individual or name, address and VAT number in the case of a company, email and telephone number for contact. Failure to consent to the processing of this data prevents the conclusion and execution of the contract. In addition, the user may provide other personal and address data on a voluntary basis.
2. In addition, if the user agrees, data is collected in cookies and stored in the browser settings.
3. According to separate legal provisions, it may be necessary to process other data, e.g. for tax or accounting reasons.

4. Why and how do we use cookies?

   To analyse the effectiveness of our advertising and content activities, we track cookies as follows:

   Google Analytics, Google, YouTube - we track user information in accordance with Google's privacy policy: https://www.google.com/intl/pl_pl/policies/technologies/cookies/

   Using Google Analytics software, the website places a counting code on the user's computer to collect data about users. We inform you that the data is tracked under an agreement with GOOGLE Inc. For this purpose, we use a mechanism to anonymise the user's IP number. You can object to the collection of data by the Google Analytics software or by changing your browser settings at any time.

   Data is also used for purposes such as demographic reports, remarketing/retargeting and tracking activity on the site: page scrolling, copying page elements, activity times and individual page editing events. .

   We embed video elements made available from YouTube into the pages of our website. To this end, code referring to YouTube is placed in the relevant sections and pages. YouTube tracks the playback of video clips, and this tracking is done in accordance with its privacy policy, which is available https://support.google.com/youtube/answer/171780?hl=pl

V. Purpose of data processing

1. Users' personal data are processed by the Administrator in order to perform the concluded contract, in particular:
   • Provision of electronic services.
     • Contact between the parties to the transaction.
   • Make payments in connection with the transaction.
     • Issue of posting documents.
   • Contact the Administrator (www.kairospolska.pl)
     • Transaction handling.
     • Taking suggestions.
     • Complaints handling.
     • Resolving technical problems.
   • Activity monitoring, including, for example, keyword research, bid analysis and activity management.
   • Tailoring of advertising according to previously viewed content, customisation of categories of offers or individual offers in the Administrator's settings or the settings of third-party services based on user activity.
   • Conducting marketing activities including direct marketing of the Administrator's own services or the services or goods of third parties.
   • Contact for the purposes of authorised marketing activities, via the available communication channels, in particular and with your consent, by e-mail and/or telephone.
2. Personal data will also be processed for purposes arising from separate legal provisions, including but not limited to tax and accounting purposes.
3. For reasons of legitimate interest www.kairospolska.pl personal data is also processed for:
   • Ensuring security of services.
   • Addressing fraud, abuse and breaches of the rules and regulations.
   • Mediation and resolution of disputes between users.
   • Statistics, service improvement and analysis.
   • Handling contact with the service department also in cases where they are not related to the performance of the contract.
   • Data archiving.

VI. Transfer of personal data

1. Personal data will only be processed by www.kairospolska.pl and selected partners for the purposes indicated above.
2. The processing of personal data by the technology partners of www.kairospolska.pl is carried out on the basis of a contract ensuring that the terms of processing comply with the Data Protection Regulation.
3. Personal data may be forwarded to public authorities entitled to obtain them also on the basis of separate regulations (e.g. the Police, the Public Prosecutor's Office, Customs and Tax Authorities, etc.).
4. Personal data will be transferred outside the European Economic Area based on appropriate legal safeguards which are the standard contractual clauses for the protection of personal data approved by the European Commission in accordance with Article 26(4) of the Directive.
5. The User may, at his or her own risk, make his or her personal data available via the Platform to other Users, e.g. for the purpose of shipping.

VII. Length of processing of personal data

1. Your personal data will be processed until you revoke your consent to the processing of your personal data and, after such revocation, for the period of the statute of limitations for claims to and against the controller.
2. The controller is entitled to process personal data for security purposes, fraud prevention, phishing, as well as for statistical and analytical purposes for up to 10 years after the end of the contract.
3. Insofar as this results from separate legal regulations (e.g. Accounting Act, Tax Ordinance), personal data will be stored for the period required by the aforementioned regulations in order to enable the legal requirements of the aforementioned regulations.

VIII. Automatic Processing and Profiling

1. Personal data is processed by automated means including profiling in order to tailor the content of the website to your personal preferences and interests. Automated processing or profiling will not have any legal effect or materially affect you.

IX. Your rights in relation to your own personal data

1. Every user has the right to:
   • Access to the personal data concerning him/her, including obtaining a copy of the personal data being processed. The right to obtain a copy must not adversely affect the rights and freedoms of others.
   • Correcting and completing data where it is found to be incorrect or out of date.
   • Data deletions.
     • If the request for deletion concerns data necessary for the performance of the contract, it may involve termination of the contract.
   • Restrictions on their processing in the following cases:
     • The data subject questions the accuracy of the personal data - for a period of time allowing the controller to verify the accuracy of the data.
     • The processing is unlawful and the data subject objects to the erasure of the personal data, requesting instead the restriction of its use.
     • The controller no longer needs the personal data for the purposes of the processing, but they are needed by the data subject to establish, assert or defend a claim.
     • The data subject has raised an objection under Article 21(1) to the processing until it is established whether the legitimate grounds on the part of the controller override the grounds of the data subject's objection.
   • Data portability - the data subject shall have the right to receive in a structured, commonly used machine-readable format the personal data concerning him or her which he or she has provided to the controller, and shall have the right to transmit that personal data to another controller without hindrance from the controller to whom the personal data was provided.
   • Not to be subject to automated decision-making (including profiling).
   • The right to object to the processing of personal data.
     • Where the processing relates to statistical purposes or is carried out on the basis of a legitimate legal interest of the Administrator and the objection is justified by the particular situation of the person.
2. Any requests for the exercise of the above-mentioned rights should be addressed to the Administrator:
   • By e-mail to info@kairospolska.pl
   • At the address: Kairos Limited Liability Company, ul Józefa Kałuza 1, 30-111 Kraków
   • In person at the Administrator's premises.
3. The controller shall provide information on the action taken without undue delay, within one month of receipt of the request. Due to important circumstances (inter alia the number of requests or the complexity of the request), the deadline may be extended by another 2 months. At the same time, the Administrator shall inform the data subject of the reasons for the delay and the extension of the deadline within one month.
4. The first copy of the list of personal data is provided free of charge, for subsequent copies there is a charge based on administrative costs of PLN 40.
5. If the data subject's requests are manifestly unfounded or excessive, in particular due to their continuing nature, the controller may charge a fee resulting from the administrative costs of PLN 100 or, in exceptional cases, refuse to take action.
6. The fees referred to above should be paid to the Administrator's bank account specified in the response to the application. The Administrator will take action after the payment is credited to the bank account.
7. 7 The refusal to act and the fee may be complained about to the supervisory authority.

X. Supervisory authority and complaints

1. In relation to the processing of personal data, any person has the right to lodge a complaint against an act or omission of the Controller with the supervisory authority, which is:
   Office for the Protection of Personal Data
   2 Stawki Street
   00-193 Warsaw