1.2. The purpose of this Policy is to define the principle and methodology of processing and usage of data and information obtained from Web page users, and to present information about the rights individuals have with regard to their personal data.
- Rules of personal data protection
Masfrost is the controller of personal information provided by users on the page operated by Masfrost. Masfrost will make every effort to process all personal data in accordance with the purpose for which such data was collected, and to use such data in accordance with the scope of existing approvals (consent) and the processing areas permitted by law.
- Purpose of personal data processing
3.1 Every individual that provides personal data to Masfrost using the forms published on a Web page will be informed of the specific purpose of processing such data and of the legal basis of processing.
3.2. Masfrost will only use personal data for the specified purposes.
3.4. Your personal data processed on the basis of your consent will only be processed until your consent is withdrawn or the purpose of collection of such data expires. You can remove your consent at any time, without prejudice to compliance with the processing law, determined on the basis of the consent before withdrawal.
Data processed upon signing and execution of an agreement shall continue to be processed in accordance with the applicable legislation, however not beyond the lapse of the time period in which Masfrost can pursue its claims relating to the agreement, unless a longer period is prescribed in the Accounting Act.
- Data security and storage
4.1 Masfrost ensures the security of personal data through adequate technical and organizational measures to prevent unauthorized processing, loss, damage or alteration of data.
4.2 Masfrost will make every effort to ensure that personal data are:
o compliant with the law, true, fair and transparent,
o collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes;
o adequate, relevant and not excessive in relation to the purposes for which they are processed;
o accurate and updated as necessary;
o kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are further processed;
o processed in a manner ensuring adequate security of personal data;
o in a manner ensuring the exercise of data subjects’ entitlements;
o not transferred without adequate protection to third countries outside the European Economic Area or to international organizations.
- Data collection
5.1 When collecting any personal data, Masfrost will record the original source of such data.
5.2 Personal data are collected via:
o online forms – information is collected through various forms available on the Web page for contact, inquiry or comments;
o offline contact – various phone numbers, fax numbers and e-mail addresses are published on Masfrost Web pages for contact purposes;
o traffic information and statistics of Masfrost page visits – a record is kept of traffic information recorded automatically by our server, such as user IP address, URLs visited before visiting our site, URLs visited after visiting our site, pages visited. In addition, page views and clicks statistics are collected. Masfrost is not able to identify users directly on the basis of traffic or page usage statistics.
- User rights
6.1 Masfrost respects the rights of every individual, relating to the processing of such individual’s personal data. Specifically, every data subject has the following rights:
a) right to be informed of the processing of their personal data,
b) right to access the data, request that the data be corrected, supplemented or modified,
c) right of erasure (“right to be forgotten”),
d) right of restriction of data processing,
e) right of data portability,
f) right to object to the processing of their data for reasonable purposes of Masfrost as the data controller, such as direct marketing of its products and services and for profiling, and the right not to be covered by decisions based exclusively on automated processing.
6.2. In the event of being unable to definitively identify an individual, for example considering the scope of data provided by that individual, Masfrost shall be entitled to refuse to take action upon the data subject’s request and shall inform the data subject of such refusal, unless the data subject provides additional information for identification.
6.3. Masfrost is not required to erase data (“right to be forgotten”) if the processing of such data is necessary for:
a) exercising the rights and freedom of speech and freedom of information,
b) complying with a legal processing obligation under EU or Polish law, or performance of a task serving the public interest,
c) archiving purposes in the public interest, scientific or historical research, or statistical purposes,
d) determination, pursuing or defending any claims.
6.5. Should a User object to further processing of their personal data for marketing purposes, profiling or transferring the personal data to another data controller, such objection will be considered accordingly. However, the data controller is allowed to retain identification data of the data subject in the data collection exclusively in order to avoid any reuse of that subject’s data for the purposes objected against.
6.6. Users are entitled to exercise the right to information and access to their data at a frequency not higher than once every 6 months. The data controller is required to provide the necessary information upon request of the data subject concerned, within 30 days.
- Range of disclosure of user data
Masfrost hereby declares that they shall not sell or share users’ personal information collected for processing to any third parties or institutions without the user’s express consent or instruction, or without the instruction of State authorities authorized to make such demands under the applicable Act of law for the purpose of their proceedings, security or defence purposes, for the legally established tasks performed in the public interest, when this is necessary for accomplishment of the legally justified goals of Masfrost.
- Right to complain