Personal Data on the Website

1. Data Controller
The controller of personal data of Users/Clients collected via this website is its owner: DADAN.pl Michał Dadan, ul. Narutowicza 40/1, 90-135 Łódź, Poland.

2. Purposes and Legal Bases
Personal data of Users/Clients collected via the website is processed—according to the User’s/Client’s choice—for the purpose of performing a service agreement.
The legal bases for processing include:
– the Polish Act of 18 July 2002 on the Provision of Services by Electronic Means (Journal of Laws 2017, item 1219, consolidated text), and
– Regulation (EU) 2016/679 of 27 April 2016 (GDPR).

In addition to data necessary to fulfill an order and handle complaints, we may—with your consent—collect and process additional information about you.

We process data to: handle sales and maintain records; meet tax obligations; manage complaints and correspondence; conduct marketing, send newsletters, and run promotions; set up and manage your user account; inform you about site and offer updates; display ads; run A/B tests; enter into agreements; issue pro forma and VAT invoices; prepare quotes; send payment reminders; distribute technical notices and subscription-expiry information; share service information; provide service/maintenance support; handle reservations; and answer inquiries.

Some of these activities require your prior consent by law; we carry them out only after obtaining such consent.

In all cases, we collect and process only the data necessary for the specific purpose you agree to. For example, if you only sign up for a newsletter, your email address is sufficient; a phone number is not required.

Certain data—such as your IP address—is transmitted to our server automatically due to how the Internet works (this is necessary for your browser to access any website, including ours). See our Cookie Policy for details.

Data processed on the basis of your consent is stored until you withdraw that consent, and then retained for 10 years to reflect current limitation periods for claims.

Not all processing is based on consent. For example, if you place an order for services and provide an email address for delivery of finished files, company details, etc., we process that data because it is necessary to perform the contract. Such data is stored for 5 years from the end of the year in which the order was placed, as required by accounting regulations.

If you contact us on your own initiative (e.g., by email or via social media), any data you provide—together with your email address/identifier—will naturally appear in our email or social-media systems. In this case, the data is processed on the basis of consent implied by initiating contact, solely to reply, engage in dialogue, perform the requested service, or register what you wish to communicate.

If you conclude a contract with us for translation, editing, or a similar service involving materials you provide, and those materials contain personal data, we will process such data only to perform the ordered service, settle and invoice it, and handle any complaints.

Your data is processed within the European Union. If we ever cooperate with partners outside the EU, they will be entities that observe European data-protection rules, confirmed—for example—by participation in the EU–U.S. Privacy Shield program or successor data-transfer frameworks, or by other appropriate safeguards under GDPR.

3. Possible Recipients of Personal Data

3.1. If you choose to receive a newsletter, the website owner may distribute it via third-party email service providers.

3.2. Your data may be accessed by us and by our business partners listed below. We work only with entities that process your data in a manner compliant with GDPR, under data-processing agreements. Partners receive only the data necessary to perform their tasks—for example, our accounting office sees only the data visible on your invoice/receipt.

Partners that may receive your data:

• Konsens sp. z o.o. (accounting office), Lokal nr 1, ul. Kopernika 64A, 90-553 Łódź

• cyber_Folks SA (data center/hosting), ul. Wierzbięcice 1B, 61-569 Poznań

• Get Response Sp. z o.o. (email operator), ul. Arkońska 6/A3, 80-387 Gdańsk

Your data may also be disclosed to public authorities (including tax offices) and competent bodies (e.g., the police) as required by law.

The Data Controller will not disclose information or client data to any other third parties beyond what follows from the website’s purpose and the scope of your consent and statements, unless there is a legal basis requiring the Controller to do so. We take all reasonable steps to safeguard such information, in particular as required by GDPR.

4. Your Rights
You may withdraw any consent you have given at any time, or limit the scope of processing. You also have the right to access, review, erase, rectify, and port your data. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, contact us at: [email protected].

5. Providing Data
Providing personal data is voluntary. However, failure to provide the data necessary to conclude an agreement for an Electronic Service means the agreement cannot be concluded. In other words, you do not have to provide any data or agree to its processing, and there are no negative consequences for declining—for example, refusing the newsletter does not affect order fulfillment. But if, when placing an order, you do not provide the data required for delivery and invoicing, we will be unable to fulfill it.

To conclude a transaction, the following are required: full name and/or organization name, Tax ID (NIP, for companies), billing address, shipping address (if different), telephone number, and email address.

6. Supervisory Authority
Any person whose data is processed by the website owner may lodge a complaint with the supervisory authority in case of any irregularities: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland; email: [email protected]