Privacy Policy

I. General provisions

  1. This Privacy Policy defines the method of collecting, processing and storing personal data necessary to provide services electronically via the website in the domain www.notoagency.pl (hereinafter referred to as the Website ).
  2. The administrator of Users' personal data is Noto Agency Sp. z o. o. with its registered office in Rzeszów (35-328) at Ignacego Paderewskiego 124a/203. Tax Identification Number (NIP): 8133897482 (hereinafter referred to as the Administrator ).
  3. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the GDPR ).
  4. The data collected by the Controller will be: processed in accordance with the law, processed for clearly defined purposes and not subject to further processing incompatible with these purposes, substantively correct and adequate in relation to the purposes for which they are processed, stored no longer than is necessary to achieve the purpose of processing.

II. Purpose and legal basis of data processing

  1. The Administrator processes personal data necessary to provide and develop the services offered via the Website and its individual functionalities.
  2. Personal data will be processed for the following purposes: promoting the Controller's own products and/or services and those of its Partners by sending marketing information electronically, provided that the User has consented to receiving such notifications via e-mail (Article 6, paragraph 1, letter a of the GDPR); providing access to information about new products in the industry directly related to the Controller's activities, provided that the User has consented to receiving such notifications via e-mail (Article 6, paragraph 1, letter a of the GDPR),
    for analytical and statistical purposes based on the Controller’s legitimate interest in verifying Users’ activity and their preferences to optimise services and products as well as the functionalities of the Website (Article 6, paragraph 1, letter f of the GDPR); for the possible establishment, pursuit of claims or defence against them based on the Controller’s legitimate interest in protecting its rights (Article 6, paragraph 1, letter f of the GDPR). In each of the above-mentioned cases (paragraph 2), the provision of data is voluntary, but necessary to conclude a contract or use other functionalities of the Website.

III. Period of personal data processing

  1. Personal data will be processed for the period in which the person remains an active User of the Website, and after that time for the period necessary to comply with the law, pursue or defend against possible claims, but no longer than 3 years from the date of termination of the contract for the provision of electronic services.
  2. Data processed on the basis of consent will be processed until the consent is withdrawn, provided that the withdrawal of consent does not affect the lawfulness of data processing carried out before such withdrawal.

IV. Information about processing

  1. Personal data, depending on the purpose of processing, may be disclosed to: entities associated with the Controller, entities cooperating with the Controller, subcontractors, in particular entities providing and operating selected IT systems and solutions, entities handling online payments, entities providing courier and postal services, f. law firms.
  2. Personal data processed by the Administrator will not be transferred outside the European Economic Area or to international organizations.

V. Rights of data subjects

  1. The Website User has the right to: access the content of their personal data, rectify data, delete data, restrict data processing, transfer data, object to processing based on the legitimate interest of the administrator, withdraw consent at any time without affecting the lawfulness of processing based on this consent before its withdrawal.
  2. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if he or she considers that the processing violates his or her rights and freedoms.
  3. There is no automated decision-making, including profiling, in the data processing process.

VI Final Provisions

  1. The Administrator reserves the right to introduce changes to this Privacy Policy and at the same time ensures that the rights of Users arising from this document will not be limited.
  2. The User will be informed about any changes to the Privacy Policy via a message available on the Website.