§ 1 General provisions

1. The controller of personal data is Reakcja Flagi Reklamowe Sp. z oo, with its registered office at ul. Szczawnicka 1 60-471 Poznań, with the NIP number: 7812005617 and KRS number: 0000825046. You can contact Reakcja Flagi Reklamowe Sp. z oo in writing to the address indicated in the preceding sentence or by e-mail to the following address: [email protected] .
2. Pursuant to Article 37 of the GDPR, Reakcja Flagi Reklamowe Sp. z o. o. has not appointed a Data Protection Officer.
3. The privacy policy is an integral part of the Regulations. By using the services we offer, you entrust us with your information. This document serves only as an aid in understanding what information and data are collected and for what purpose and what they are used for. This data is very important to us, so please read this document carefully as it specifies the principles and methods of processing and protecting personal data. This document also specifies the principles of using "Cookies" files.
4. We would like to inform you that we comply with the principles of personal data protection and all legal regulations provided for in the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
5. At the request of the person whose personal data is processed, we provide comprehensive information on how we use their personal data. We always try to provide clear information about the data we collect, how we use it, what purposes it is to serve and to whom we transfer it, what protection we provide for this data when transferred to other entities, and we provide information on the institutions that should be contacted in case of doubts.

§ 2 Privacy Policy

1. We respect your privacy. We want to ensure that you have a comfortable experience when using our services.
2. We value the trust you place in us by entrusting us with your personal data to provide services. We always use personal data honestly and in a way that does not disappoint your trust, only to the extent necessary to provide services.
3. As a User, you have the right to receive full and clear information about how we use your personal data and for what purposes it is necessary. We always provide clear information about the data we collect, how and with whom we share it, and provide information about the entities to contact in case of doubts.
4. If you have any doubts about our use of your personal data, we will take immediate action to clarify and dispel such doubts. We will answer all questions related to this in an exhaustive manner.
5. We will take all reasonable steps to protect your data from improper and uncontrolled use.
6. The legal basis for processing your personal data is:
   1. 6 section 1 letter a
      the data subject has given consent to the processing of his or her personal data for one or more specific purposes
   2. Article 6 section 1 letter b)
      processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract
   3. 6 section 1 letter c)
      processing is necessary to fulfil a legal obligation to which the controller is subject
   4. Article 6 paragraph 1 letter d)
      processing is necessary to protect the vital interests of the data subject or another natural person
   5. Article 6 section 1 letter e)
      processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
   6. Article 6 section 1 letter f)
      processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
7. Your personal data related to the conclusion and performance of the contract will be processed for the period of its performance, as well as for a period not longer than that provided for by law, including the provisions of the Civil Code and the Accounting Act, i.e. not longer than 10 years from the end of the calendar year in which the last contract was performed.
8. Your personal data processed for the purpose of concluding and performing future contracts will be processed until you file an objection.
9. You have the right to: access your personal data and receive a copy of the personal data being processed, rectify incorrect data; request the deletion of data (right to be forgotten) in the event of the circumstances provided for in Art. 17 of the GDPR; request the restriction of data processing in the cases indicated in Art. 18 of the GDPR, object to data processing in the cases indicated in Art. 21 of the GDPR, transfer the data provided, processed in an automated manner.
10. If you believe that your personal data is being processed unlawfully, you can file a complaint with the supervisory authority (Personal Data Protection Office, ul. Stawki 2, Warsaw). If you need additional information related to the protection of personal data or want to exercise your rights, please contact us by mail at the correspondence address.
11. We comply with all applicable data protection laws and regulations and will cooperate with data protection authorities and law enforcement agencies authorized to do so. In the absence of data protection regulations, we will act in accordance with generally accepted data protection principles, principles of social coexistence and established customs.
12. If you have any questions, please contact us using the page from which you were redirected to this Privacy Policy. Your contact request will be promptly forwarded to the appropriate person appointed for this purpose.
13. To make it easier for us to respond or comment on the information you have provided, please provide your name and surname.

§ 3 Scope and purpose of collecting personal data

1. We process the necessary personal data to provide services and for accounting purposes only.
2. We collect, process and store the following user data:
   1. name and surname,
   2. residential address,
   3. delivery address (if different from residential address),
   4. Tax Identification Number (NIP),
   5. electronic mail address (e-mail),
   6. telephone number (mobile, landline),
   7. information about the web browser used,
   8. other personal data voluntarily provided to us.
3. Providing the above data is completely voluntary but also necessary for the full implementation of the services.
4. We may transfer personal data to servers located outside your country of residence or to affiliated entities, third parties based in other countries, including countries in the EEA (European Economic Area, EEA - a free trade area and the Common Market, including the countries of the European Union and the European Free Trade Association EFTA) for the purpose of processing personal data by such entities on our behalf in accordance with the provisions of this Privacy Policy and applicable laws, customs and regulations regarding data protection.
5. Your data may be accessed by entities providing services necessary to run the website, i.e.:
   1. Hosting companies providing hosting or related services to the Administrator
   2. Companies through which the Newsletter service is provided
   3. IT service and support companies performing maintenance or responsible for maintaining IT infrastructure
   4. Companies intermediating online payments for goods or services offered on the Website (in the case of a purchase transaction on the Website)
   5. Companies acting as intermediaries in mobile payments for goods or services offered within the Service (in the case of a purchase transaction made on the Service)
   6. Companies responsible for the Administrator's accounting (in the case of purchase transactions on the Website)
   7. Companies responsible for delivering physical products to the User (postal/courier services in the case of a purchase transaction on the Website)

§ 4 Cookies

1. It uses cookies or similar technologies (hereinafter collectively referred to as "cookies"), which are understood to mean computer data, in particular text files, intended for using the website and stored in the end devices of Users browsing the pages. Information collected using cookies allows us to tailor services and content to individual needs, as well as user preferences, and is also used to develop general statistics regarding the use of the pages by users. Data collected using cookies is collected solely for the purpose of performing specific functions for Users and is encrypted in a way that prevents access by unauthorized persons.
2. We use cookies on our website:
   1. Internal cookies - files placed and read from the User's Device by the Service's IT system
   2. External Cookies - files placed and read from the User's Device by the IT systems of external Services. Scripts of external Services that can place Cookies on the User's Devices have been consciously placed on the Service through scripts and services made available and installed on the Service
   3. Session Cookies - files placed and read from the User's Device by the Service during one session of a given Device. After the session ends, the files are deleted from the User's Device.
   4. Persistent Cookies - files placed and read from the User's Device by the Service until they are manually deleted. Files are not deleted automatically after the Device session ends, unless the User's Device configuration is set to the mode of deleting Cookie files after the Device session ends.
3. Our website uses the following types of cookies because they are necessary to provide services:
   1. essential cookies that enable the use of services available on the website, in particular authentication cookies used for services that require authentication;
   2. security cookies, in particular those used to detect authentication abuse;
   3. performance cookies, enabling the collection of information on how websites are used;
   4. functional cookies, which enable the “remembering” of user-selected settings and personalisation of the user interface;
   5. advertising cookies, which enable the provision of advertising content to users tailored to their interests.
4. Software for browsing websites (internet browser) usually allows cookies to be stored on the end device by default. The user browsing the website can independently and at any time change the settings for cookies, specifying the conditions for their storage and access by cookies to their device. The Client can change the settings referred to in the previous sentence using the settings of the internet browser. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the settings of the internet browser or to inform about them each time cookies are placed on the User's device. Detailed information on the possibilities and methods of handling cookies is available in the settings of the software (internet browser).
5. By using the website without changing the cookie settings, you agree to the storage of cookies. The customer can always withdraw their consent by changing the cookie settings. Information on how to configure cookie settings in sample web browsers can be found here:
   1. Chrome
   2. Opera
   3. FireFox
   4. Edge
   5. Safari
   6. Internet Explorer 11

§ 5 Use of analytical tools and important marketing techniques

1. We use Google Analytics (Google Inc., based in the USA) to statistically analyze website traffic. Google Analytics uses so-called cookies, which are text files stored on the visitor's computer that allow the analysis of the use of the website. The information generated by the cookie about your use of the website is transferred to a Google server in the USA and stored there. If IP anonymization is enabled on the website, the IP address will be shortened by Google in the first instance within the European Union or other countries in the European Economic Area. The full IP address will only be transferred to a Google server and shortened there in special cases. On behalf of the operator of this website, Google will use this data to evaluate your use of the website, to prepare reports on website activity and to provide additional services related to the website and the use of Internet resources for the website operator. The IP address of your computer transmitted by your browser as part of Google Analytics will not be combined with other data from Google. To prevent cookies from being stored, you must change your browser settings. However, we would like to point out that in this case you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data relating to your use of the website and generated by the cookie (including your computer's IP address) and its transmission to Google, and prevent Google from processing this data, by downloading and installing the browser plug-in under the following link. The current link is  https://tools.google.com/dlpage/gaoptout?hl=en.
2. We use the Facebook pixel. This technology enables Facebook (Facebook Inc., based in the USA) to know that the person registered with it is using the Service. This means that Facebook pixels are integrated into our websites. The integration of Facebook pixels allows us to present and optimise targeted advertising, as well as to measure the reach of our marketing activities. This constitutes a legitimate interest in accordance with Art. 6 lit. 1f GDPR. When you visit our website, the Facebook pixel connects your browser to the Facebook server and a cookie is stored. This informs Facebook that you have visited our website based on your IP address. If you have a Facebook account, Facebook can associate this information with your profile and use it to display targeted advertising, unless you have previously objected to such activities in your Facebook profile settings.
3. We use remarketing techniques that allow us to match advertising messages to user behavior on the site, which may give the illusion that the user's personal data is being used to track them, but in practice no personal data is transferred from us to advertising operators. The technological condition for such actions is the enabled support of cookies.
4. We use a solution that automates the operation of the Service in relation to users, e.g. it can send an email to the user after visiting a specific subpage, provided that the user has agreed to receive commercial correspondence from us.

§ 6 Rights and obligations

1. We have the right, and in cases specified by law also the statutory obligation, to provide selected or all information concerning personal data to public authorities or third parties who submit such a request for information based on the applicable provisions of Polish law.
2. The user has the right to:
   1. access to personal data
      The User has the right to obtain access to his/her personal data, realized upon request submitted to the Administrator
   2. rectification of personal data
      The User has the right to demand from the Administrator immediate rectification of personal data that is incorrect and/or supplementation of incomplete personal data, carried out upon request submitted to the Administrator
   3. deletion of personal data
      The User has the right to demand that the Administrator immediately delete personal data, executed upon request submitted to the Administrator. In the case of user accounts, deletion of data consists in anonymizing the data enabling the identification of the User. The Administrator reserves the right to suspend the execution of the request to delete data in order to protect the legitimate interest of the Administrator (e.g. when the User has violated the Regulations or the data was obtained as a result of correspondence). In the case of the Newsletter service, the User has the option of deleting their personal data themselves using the link placed in each sent e-mail message.
   4. restrictions on the processing of personal data
      The User has the right to restrict the processing of personal data in the cases indicated in Article 18 of the GDPR, including questioning the accuracy of personal data, carried out at the request submitted to the Administrator
   5. transfer of personal data
      The User has the right to obtain from the Administrator personal data concerning the User in a structured, commonly used machine-readable format, implemented upon request submitted to the Administrator
   6. object to the processing of personal data
      The User has the right to object to the processing of his or her personal data in the cases specified in Article 21 of the GDPR, carried out at the request submitted to the Administrator
   7. lodging a complaint
      The User has the right to lodge a complaint with the supervisory authority responsible for the protection of personal data.