pOLITYKA PRYWATNOŚCI

Privacy

Policy

Privacy Policy
(current as of August 27, 2024)

I. GENERAL INFORMATION

This Privacy Policy sets out the rules for using the website available at www.slkpartners.pl (hereinafter referred to as the “Website”). The Policy defines the principles for processing all information constituting personal data that is obtained in connection with Users’ use of the Website.
 
II. PERSONAL DATA CONTROLLERS

The controllers of personal data collected within the Website are:
Skrzypek Klepuszewski Klimczyk Sp. k., Plac Powstańców Śląskich 16/18, 53-129 Wrocław, Poland, NIP: 899-297-84-27, KRS: 0001072308, REGON: 527075180 (hereinafter: the Controller)
SL TAX Sp. z o.o., Plac Powstańców Śląskich 16/18, 53-129 Wrocław, Poland, NIP: 899-295-46-51, KRS: 0001024795 (hereinafter: the Controller)
“PROFIT” Sp. z o.o., Krawiecka 3/23, 50-148 Wrocław, Poland, NIP: 894-301-24-75, KRS: 0000366468, REGON: 021386954 (hereinafter: the Controller)
The Controller places great importance on the protection of privacy and the confidentiality of personal data of Website users (“Users”) and, with due diligence, selects and applies appropriate technical and organizational measures to ensure the protection of processed personal data.
The Controller safeguards personal data against disclosure to unauthorized persons and against processing in violation of applicable laws.
The Controller processes Users’ data in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter: “GDPR”).
The Controller is entitled to process personal data belonging to third-party databases only on the basis of a data processing agreement.
 
III. SCOPE, LEGAL GROUNDS AND PURPOSES OF PROCESSING PERSONAL DATA

Activity, telecommunications and operational data
We process data concerning your activity on the Website, such as the number of interactions with specific functionalities, time spent on the Website, date and time of use, technical information about the device used to access the Website, device ID and its location. These data are processed for statistical purposes and to improve the quality of services and functionalities available on the Website, which constitutes the Controller’s legitimate interest (Article 6(1)(f) GDPR).
When using telecommunications services enabling access to the Website, your telecommunications (transmission) data (e.g. IP address) or operational data (identifiers of the recipient, telecommunications network termination or ICT system used, start and end time and scope of service use) are technically generated and may potentially be linked to personal data.
To the extent necessary, such data are processed in accordance with applicable law. The Controller ensures their security and applies appropriate technical measures to prevent unauthorized access.
Newsletter
Your personal data (name, e-mail address) may also be processed for the purpose of sending a newsletter, provided that you have given your consent via the Website. The legal basis for processing is your voluntary consent, which may be withdrawn at any time without affecting processing carried out prior to withdrawal (Article 6(1)(a) GDPR).
Defense against claims and assertion of claims
Your data may be processed for the purpose of defending against potential claims or asserting claims related to your use of the Website. The legal basis is the Controller’s legitimate interest consisting in the possibility of defending or asserting claims (Article 6(1)(f) GDPR).
Processing related to inquiries
Data provided by you may be processed in order to respond to an inquiry or resolve issues related to use of the Website. The legal basis is the Controller’s legitimate interest in responding to your inquiry (Article 6(1)(f) GDPR).
Processing for the performance of a contract
If you enter into a contract with the Controller, or the Controller undertakes actions at your request prior to concluding a contract, data will be processed to the extent necessary for these purposes on the basis of Article 6(1)(b) GDPR.
Processing to comply with a legal obligation
In certain cases, data must be processed to comply with legal obligations imposed on the Controller, e.g. settlement of paid services or handling complaints. The legal basis is Article 6(1)(c) GDPR.
 
IV. DATA RETENTION PERIOD

Personal data processed to respond to inquiries will be processed for the period necessary to handle the inquiry. If messages constitute evidence in court or other proceedings, they will be stored until the limitation period expires or proceedings are finally concluded, whichever occurs later.
Data processed to comply with legal obligations will be stored until such obligations are fulfilled, unless the law requires longer retention.
Data processed on the basis of the Controller’s legitimate interest, including statistical and analytical data, will be processed until the User effectively objects.
Newsletter data will be stored until consent is withdrawn.
Data processed for the performance of a contract or pre-contractual actions will be stored until claims arising from the contract become time-barred.
Data will also be deleted when no longer necessary for the purposes for which they were collected. Information necessary to prove consent will be processed for 3 years after processing ends.
 
V. DISCLOSURE OF DATA TO THIRD PARTIES. DATA RECIPIENTS

The Controller applies technical and organizational safeguards to protect personal data against unauthorized disclosure, loss, destruction or unlawful processing.
Only authorized employees, collaborators and external service providers supporting the Website have access to personal data, subject to confidentiality obligations. Data publicly disclosed within the Website may be visible to other Users.
Personal data may be disclosed to authorized entities under applicable law, including public authorities.
 
VI. USER RIGHTS

You have the right to:
A. access your personal data,
B. rectification of personal data,
C. correction of personal data,
D. restriction of the processing of personal data,
E. erasure of personal data,
F. data portability to another data controller,
G. lodge an objection at any time to the processing of personal data by the Controller where:
  i. the processing is carried out for the purposes of direct marketing – if you exercise this right, we will immediately cease processing your personal data for this purpose,
  ii. the processing is carried out for the purposes of the Controller’s legitimate interests – if you exercise this right, we will immediately cease processing your personal data, unless the Controller is able to demonstrate compelling legitimate grounds for further processing that override your interests, rights, or freedoms.
H. In the event that you exercise any of the above rights, the Controller shall promptly take actions aimed at remedying any non-compliance in the processing of personal data.
Furthermore, where the processing of personal data is based on your consent, you have the right to withdraw such consent. Consent may be withdrawn at any time, without prejudice to the lawfulness of processing carried out prior to its withdrawal.
J. In order to exercise the rights referred to above, you may contact the Controller by e-mail at: biuro@slgroup.pl.
K. The User also has the right to lodge an objection at any time to the processing of personal data by the Controller where:
  i. the processing is carried out for the purposes of direct marketing – if the User exercises this right, we will immediately cease processing their personal data for this purpose,
  ii. the processing is carried out for the purposes of the Controller’s legitimate interests – if the User exercises this right, we will immediately cease processing their personal data, unless we are able to demonstrate compelling legitimate grounds for further processing that override the User’s interests, rights, or freedoms.

In the event that the User exercises any of the above rights, the Controller shall promptly take actions aimed at remedying any non-compliance in the processing of personal data.
Furthermore, where the processing of personal data is based on consent, the User has the right to withdraw such consent at any time, without prejudice to the lawfulness of processing carried out prior to its withdrawal.
In order to exercise the rights referred to above, you may contact the Controller by e-mail at biuro@slgroup.pl or by post at the following address:
Plac Powstańców Śląskich 16/18, 4th floor,
53-314 Wrocław
The User also has the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office) if the User considers that the processing of personal data by the Controller violates the provisions of applicable law, in particular the GDPR.
VII. COOKIES

When you use the Service, we may store certain data on your device in the form of so-called “cookies”. Cookies help us in various ways, for example by enabling better adjustment of the content of the Service to your interests. Cookies are not harmful to your device and are intended solely to facilitate the use of the Service both for us and for you.
In order to enable the use of cookies, Users are entitled to give their consent prior to using the Service. You are not obliged to accept cookies; however, acceptance of cookies allows for full and proper functionality of the Service.
The data contained in cookies will be stored for the duration of the lifecycle of such cookies on the User’s device.

VIII. PLUG-INS

Google
Our website uses functionalities provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), which may analyze certain information about users.
Google LLC is headquartered in the United States and uses IT infrastructure located in the USA for data processing. However, according to Google’s assurances, such transfers are carried out in compliance with the GDPR, in particular with appropriate safeguards as detailed in agreements concluded between individual users of Google services and Google, or on the basis of standard contractual clauses. This means that Google undertakes to ensure an adequate level of personal data protection as required by the GDPR.
The processing of data within Google services is carried out under the following principles.
Google Web Fonts
The Service uses Web Fonts provided by Google. This means that, in order to properly display texts and fonts, your browser loads the appropriate Web Fonts into its cache. For this purpose, it is necessary for the browser to establish a connection with Google servers. As a result of this connection, Google receives information that access to the Service was obtained from your IP address. These data may be transferred to Google servers in the USA.
We use Google Web Fonts in order to maintain visual consistency of the Service, which improves its readability for users. The legal basis for the disclosure of the IP address is therefore our legitimate interest (Article 6(1)(f) GDPR). More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq, as well as in Google’s privacy policy: https://www.google.com/policies/privacy/.
Google Analytics
Within the Service, we use Google Analytics. As part of this service, we automatically collect statistical information on users’ use of the Service, including IP addresses. Google Analytics also collects demographic data, data on interests, and other data related to users’ activity on websites. These data may be transferred to Google servers in the USA. More information on data processing within Google Analytics can be found at https://support.google.com/analytics/answer/6004245 or in Google’s privacy policy at https://policies.google.com/privacy.
The legal basis for data processing within Google Analytics is our legitimate interest in the form of the ability to generate statistics for the purpose of improving the Service.
Google Maps
Within the Service, we use Google Maps. In order for the materials from Google Maps presented by us to be displayed and integrated in your browser, the browser must be able to connect to a Google server, which may also be located in the United States. As part of providing the Google Maps service on websites, Google receives information that your device’s IP address has been used to access the map displayed within our Service.
In addition, if you use Google Maps within the Service while logged into your personal Google account, Google will associate this event with your Google account. To avoid this, you should log out of Google before visiting the Service. The data collected in this way are stored and used by Google for advertising purposes, market research, and personalization of Google Maps displays. These data may be transferred to Google servers in the USA.
More information on the processing of data by Google within the Google Maps service can be found in Google’s Privacy Policy at https://policies.google.com/privacy, as well as in the Additional Terms of Service for Google Maps available at https://www.google.com/intl/pl/help/terms_maps/.
The legal basis for data processing within the Google Maps service is our legitimate interest in enabling the integration of map services in order to indicate the location of our business.
Additional information regarding data collected by plug-ins
Within cookie settings or browser settings, you may refuse consent to the collection of the above-mentioned data about you. Alternatively, you may install a browser add-on available at: https://tools.google.com/dlpage/gaoptout.
In the event of data transfers to the USA, the legal basis for such transfers are contractual clauses ensuring an adequate level of protection, in accordance with the standard contractual clauses set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.
At your request, the Controller will provide a copy of the data transferred to a third country.

IX. USER DATA SECURITY AND CHILDREN

The Controller undertakes to apply appropriate technical measures to achieve the highest possible level of security for the User’s personal data, making every effort to prevent unauthorized access to such data.
The Controller undertakes to protect personal data against accidental or unlawful disclosure to unauthorized persons, destruction, loss, damage, alteration, or processing in violation of applicable law.
The Controller declares that it will not knowingly collect or process personal data of persons under the age of 16 without first obtaining the consent of their parents or other legal guardians.
If the Controller becomes aware that it has unknowingly obtained personal data of a person under the age of 16, the Controller undertakes to immediately take steps to cease processing such data and to delete them.

X. FINAL PROVISIONS

This Privacy Policy may be subject to change due to technological development and modifications of existing standards. Therefore, the Controller undertakes to periodically and regularly review this Policy in order to introduce the most up-to-date legal and technological regulations.
In the event of any doubts regarding the content of this Privacy Policy, explanations may be obtained by contacting us by e-mail at: biuro@slkpartners.pl or by correspondence at the following address:
Plac Powstańców Śląskich 16/18, 4th floor
53-314 Wrocław