PRIVACY POLICY

The protection of Users' privacy is exceptionally important to "LAYSTER-GROUP" LIMITED LIABILITY COMPANY. For this reason, the Users of the www.layster-group.pl website are guaranteed high standards of privacy protection. "LAYSTER-GROUP" LIMITED LIABILITY COMPANY as the Data Controller takes care of the security of the data provided by Users.

The Controller's goal is also to properly inform Users about the rights and

obligations related to the processing of personal data, in particular in relation to the content of the provisions on the protection of personal data specified in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (hereinafter referred to as "GDPR"). Therefore, taking care to protect the privacy of Website Users, in this document the Controller informs about the legal grounds for processing personal data provided by Users in connection with their use of the www.layster-group.pl Website (hereinafter referred to as the "Website"), the methods of collecting, processing and protecting personal data, as well as the Users' rights.

The User is any natural person to whom the data pertains, using the website www.layster-group.pl or electronic services available through the Website.

The Controller of personal data provided by the User on the Website www.laystergroup.pl is "LAYSTER-GROUP" LIMITED LIABILITY COMPANY, Konstancińska 2, 02-942 Warsaw, NIP 9720851682, (hereinafter referred to as the " Controller").

USER'S CONSENT

The use of the www.layster-group.pl Website by the User means that the User accepts the fact that the Controller collects and uses personal data in accordance with this Privacy Policy.

The personal data of the Website User are processed by the Controller based on his consent, and in some cases described in this document, as part of the Controller's legitimate interest. The user has the right to withdraw his consent at any time. Withdrawal of consent does not affect the lawfulness of the processing which was made on the basis of consent before its withdrawal.

In the event of change of this Privacy Policy and continuation of using the Website by User, it shall be deemed as an agreement to the current terms of the Privacy Policy.

PERSONAL DATA PROCESSED BY THE CONTROLLER

The method of obtaining personal data

The Controller obtains personal data directly from the User via the Website, through the functionalities and communication tools available therein, and sending messages to the Controller via them.

Providing personal data by the user is voluntary.

Types of processed personal data

The Controller collects the following personal data about the User via the Website:

First name and last name;

Email address;

Phone number;

Message content;

Message Subject;

Company name.

PURPOSES OF THE PROCESSING OF PERSONAL DATA

The manner in which the Controller processes the User's data depends on the method of the User's use of the Website and its functionalities. Controller processes the User's personal data for the following purposes:

Communication with the User.

The Controller uses the User's personal data to communicate with him in personalized way. The information communicated to the User relates to the offered products or services, personal data security, network updates, reminders, as well as suggested offers of the Controller or its partners. Communication with the User also applies to the User's customer service. Personal data is used to help the User, solve technical problems and respond to his complaints.

Presenting commercial offers to the User by electronical means.

The purpose of using the User's personal data provided by him through the functionality and communication tools available on the Website, is marketing communication conducted by the Controller as part of his business, in particular, presenting commercial offers to the User by electronic means.

Presenting commercial offers to the User by telephone.

Sending information to the User by electronic means as part of the subscription to the Controller's newsletter.

The purpose of using the User's personal data provided as part of the subscription form for the Controller's newsletter provided on the Website is to inform the User by electronic means (email) about new products, services, promotions or events of the Controller or its partners.

Allowing the User to send comments or opinions.

The Controller uses the User's personal data to enable him commenting / reviewing the activities, services or products of the Controller or entities cooperating with him.

The Controller may process the User's personal data obtained via the Website also for the following purposes:

in order to conclude and implement a possible contract between the User and the Controller and provide services to the User as the Controller's customer in accordance with art. 6 sec. 1 lit. b) GDPR;

in order to conduct financial settlements with the User who is the Controller's customer for the implementation of any contract concluded between the parties, as well as possible claims from the User who is a customer as part of the Controller's legitimate interest in accordance with art. 6 sec. 1 lit. f) GDPR and fulfillment of the Controller's legal obligations towards tax authorities on the basis of separate provisions in accordance with art. 6 sec. 1 lit. c) GDPR;

in order to implement the Controller's marketing activities as part of the Controller's legitimate interest within the meaning of art. 6 sec. 1 lit. f) GDPR, as well as in accordance with the declarations of will regarding marketing communication submitted to the Controller. Consents given in the field of marketing communication (e.g. to send commercial information by electronic means or contact by phone for direct marketing purposes) may be withdrawn at any time, without affecting the lawfulness of the processing which was made on the basis of consent before its withdrawal;

in order to fulfill the Controller's legal obligations towards the User specified in the GDPR, within the meaning of art. 6 sec. 1 lit. c) GDPR.

SHARING OF PERSONAL DATA

The User's personal data is not transferred by the Controller to third parties.

USER RIGHTS

User rights

At every stage of processing of his data, the user has a number of rights allowing him to access his data, verify the correctness of data processing, correct it, as well as have the right to object to their processing, may request deletion of data, restriction of processing or transfer of data.

If the User wishes to exercise his rights as a subject of personal data, he may contact the Controller using the following contact details: "LAYSTER-GROUP" LIMITED LIABILIY COMPANY,

Konstancińska 2, 02-942 Warsaw, info@layster.pl.

The right to lodge a complaint with the supervisory authority

The user whose personal data is processed by the Controller has the right to lodge a complaint with the supervisory authority competent for the protection of personal data (the President of the Office for Personal Data Protection).

COOKIES POLICY

The Controller informs that while using the Website, a short text information called “cookies” is saved on the User’s end device. "Cookies" store IT data, such as: User’s IP address, name of the website it comes from, the period of time they are stored on the User's end device, record of parameters and statistics and unique number. Cookies are directed to the Website server via web browser installed on the User's end device.

Cookies are used on the Website in order to:

maintain the technical correctness and continuity of the session between the Website server and the User's end device;

optimize the User's use of the Website pages and adjusting the way they are displayed on the User's end device;

ensure the safety of using of the Website;

collect statistics of visits to the Website pages supporting the improvement of their structure and content;

optimally display advertising content on the User's end device, tailored to his preferences.

The Website uses two types of "cookies": "session" and "persistent". "Session" cookies are files that are automatically deleted from the Website User's end device after logging out of the Website or after leaving the Website pages or after turning off the web browser. "Persistent" cookies are stored on the User's end device for the time specified in the parameters of "cookies" or until they are deleted by the User. "Persistent" cookies are installed on the User's end device only with his consent.

The Controller informs that:

Web browsers accept the installation of "cookies" on the User's end device by default. Each Website User may at any time change the settings for "cookies" in the web browser used by him and automatically block the use of "cookies" or be informed about every posting of Cookies on his end device. Detailed information on the possibilities and methods of handling "cookies" is available in the settings of the web browser used by the Website User.

Limiting of the use of "cookies" by the User may adversely affect the correctness and continuity of the provision of Services on the Website.

Cookies installed on the Website User's end device may be used by advertisers or business partners cooperating with the Controller.

Cookies can only be considered personal data when combined with other data

indicating the identity, provided to the Controller by the User as part of the use of the Website.

Only Controller has the access to "cookies" processed by the server of the website.

If the User does not agree for saving and receiving of "cookies", he may change the rules regarding "cookies" using the settings of his web browser.

OTHER IMPORTANT INFORMATION

Protection of personal data

The Controller introduces appropriate measures to ensure the security of the User's personal data. Safe use of the Website is ensured by the systems and procedures used to protect against access and disclosure of data to unauthorized persons. In addition, the systems and processes used by the Controller are regularly monitored for detection of possible threats. Personal data obtained by the Controller are stored in computer systems with strictly limited access.

Storage of personal data

The period of storage of Users' personal data depends on the purposes of data processing by the Controller.

The Controller stores personal data for the period as is necessary to achieve specific goals, i.e.:

for the period of running a business by the Controller.

In each of the above cases, after the necessary processing period has elapsed, the data may be processed only for the purpose of pursuing claims against the background of the relationship between the parties until the final legal settlement of these claims.

Changes to the Privacy Policy

In order to update the information contained in this Privacy Policy and its compliance with applicable law, this Privacy Policy may be changed. If the content of the Privacy Policy is changed, the date of its update will be changed and indicated at the end of its text. In order to obtain information on the method of personal data protection, the Controller recommends to Users to regularly read the provisions of the Privacy Policy.

Contact information

In order to obtain any information regarding this Privacy Policy, the User may contact the Personal Data Controller:

"LAYSTER-GROUP" LIMITED LIABILITY COMPANY, Konstancińska 2, 02-942 Warsaw, using the following contact details: info@layster.pl.

Moreover, it is also possible to contact us by post at the following address: Konstancińska 2, 02-942 Warsaw.

This document was last updated on August 26, 2021.