1. Basic information for Users of the Site

the source document is the property (hereinafter: “Privacy Policy”) of the site available at: https://zalnet.pl (hereinafter: “Site”).
The Privacy Policy is informative – the principles of applying the principles of processing personal data of users (otherwise: “Data Subjects”) and contains information on cookies, which are marked by the Site. The Privacy Policy does not apply to users of any details.
Each user using the software within the Site is asked to accept the cookie policy.
Providing personal data by the user is installed, but necessary for access to electronic services enabled on the Site.

  1. Personal Data Administrator

The administrator of personal data processed via the Internet of the Site is Beata Zalewa, conducting business under the name “ZALNET Beata Zalewa”, permanent place of business: Wola Radzięcka 62, 23-440 Frampol, article with an entry in the Central Register and Information on Economic Activity of the Republic of Poland (CEIDG) – made by the Minister of Economy, NIP number: 7171119964.
The Personal Data Administrator declares that the required laws, principles of protection of personal data of users of the Site, which are available through compliance with the law, are observed.
The Personal Data Administrator can be contacted:
to the correspondence address: Wola Radzięcka 62, 23-440 Frampol;
to the electronic address: info@zalnet.pl;
by phone: +48 600 926031 from Monday to Monday, from 8:00. do 16.00.

  1. Data Protection Inspector

The Administrator does not comply with the provisions of the Data Protection Inspector. In matters related to the processing of personal data, please contact the administrator.

  1. Processing of personal data

The Administrator of the Users’ personal data for the purpose of:
the period of operation of the Site,
access to electronic services (e.g. newsletter service),
implementation of the ordered service,
fulfillment of obligations imposed by law,
marketing and advertising,
contact with the User,
such as: first name, last name, existence of the company, residential address, registered office address (street, number, code, connection), NIP number, PESEL number, electronic address (e-mail), telephone number, IP address and other data sent by the Users to the Administrator.

The Administrator provides detailed applications regarding the processing of personal data:
company name, address, NIP – purpose for issuing a VAT invoice,
name, surname, address, PESEL – purpose for issuing a VAT invoice,
e-mail address – purpose for sending a newsletter and an electronic VAT invoice.

  1. Consent to the processing of personal data

Consent to the processing of personal data, on the principles of the basic principles of the privacy policy, may be expressed in order to order a newsletter or provide information electronically.
Expressing consent to the transfer of personal data in the marketing sense means express consent to the receipt of data.
Marketing information will be sent to the user’s e-mail address.
The user may at any time submit an objection in connection with the consideration of marketing data and the newsletter service. In order to withdraw consent, it is necessary to send an appropriate notification to the e-mail address: info@zalnet.pl.
Filing an objection does not affect the lawfulness of processing before it is filed.

  1. Legal basis for the processing of personal data

The basis for the processing of Personal Data by the Administrator are the provisions:

  • art. 6 sec. 1 letter a GDPR, which allows for the processing of personal data based on the consent granted;
    Art. 6 sec. 1 letter b GDPR and Art. 6 sec. 1 letter f GDPR, personal data are necessary for the performance of the contract for the provision of services by electronic means and another contract concluded between the user and the Administrator or on the website, which is transferred to the contracts, as well as when personal data are required to be sent with legally hidden interests of the Administrator;
    Art. 6 sec. 1 letter c GDPR, which allows for the transfer of personal data if it is necessary to fulfill the personal data by the Personal Data Administrator with access to the law.,
  1. Profiles on social networking sites

The Site contains “plug-ins” for social networking sites.
The Administrator, together with the provider of a given plug-in, is the administrator of personal data, while the Administrator’s responsibility is limited to collecting and transmitting data to the indicated services, i.e. information about the IP address and the browser identifier.
Using the plug-in results in sending data (IP address information and the browser identifier) ​​to the service whose plug-in was used.
Using the plug-ins is voluntary.
Using the plug-in means consent to the transfer of data to the social networking site.
The Administrator processes the data of people visiting its profiles on social networking sites, such as: comments, posts, opinions and Internet identifiers.
The data described in paragraph 6 are collected for the purpose of:
enabling Users to be active on social networking sites;
running social networking sites and communicating information about the Administrator’s activities through them;
marketing, including advertising;
providing services for Users.

In order to improve the quality of services, the Administrator processes statistical information regarding the use of its profiles and for this purpose uses statistical tools provided by the portals.

The Administrator processes personal data in accordance with art. 6 sec. 1 letter f of the GDPR, in the legitimate interest of the Administrator, consisting in facilitating the use of services, improving the quality and functionality of the services provided, and the processing of this data does not violate the rights and freedoms of Users who are aware of the conduct of statistical activities and sharing their results to improve services in accordance with their needs.

The owner of the social networking site decides on the time of availability of statistical data.

Due to the specificity of the portals, information about people following the profiles, as well as the content of comments, opinions, posts and other information provided by Users is public. Information provided solely for the information of the Administrator is not disclosed to other entities.

Detailed information on the principles of data processing by the portals can be found in the privacy protection principles of the portals.

  1. Entrustment of personal data processing

The Administrator may entrust the processing of personal data on the basis of an entrustment agreement.

Personal data collected by the Administrator may be made available to:
external service providers – e.g. Accounting Office of mgr Kazimierz Wolanin. ul. T.Kościuszki 85/13 23-400 Biłgoraj tel. 84 686 78 84;
public or private entities at their request on the basis of generally applicable provisions of law;
other persons and entities with the prior written consent of the person to whom such data relates.

  1. The Administrator shall provide appropriate technical and organizational measures to guarantee the security of the collected personal data, preventing access to User data by third parties. The Administrator uses current versions of ESET Smart Security and Microsoft Defender.
  2. Withdrawal of consent

The User may withdraw consent to the processing of his/her personal data at any time.
Withdrawal of consent does not affect the lawfulness of processing before its withdrawal.
In order to withdraw consent, you must:
send an appropriate statement to the e-mail address: info@zalnet.pl;
delete the following from your social media profile:
comment,
opinion on services,
content of other User activities.

  1. User Rights

The data subject is entitled to request:
access to data and to receive a copy thereof (Article 15 of the GDPR);

rectification (correction) of data (Article 16 of the GDPR);

deletion of data (Article 17 of the GDPR);

restriction of data processing (Article 18 of the GDPR);

transfer of data (Article 20 of the GDPR);

objection to data processing (Article 21 of the GDPR).

  1. In order to exercise the rights specified in paragraph 1, the data subject should contact the Administrator at the e-mail address: info@zalnet.pl.
  2. The data subject has the right to lodge a complaint with the Inspector General for Personal Data Protection – the President of the Personal Data Protection Office with its registered office in Warsaw. Contact details for the Personal Data Protection Office can be found at: https://uodo.gov.pl/p/kontakt.
  1. Period of storing personal data

The Administrator stores personal data for as long as it is necessary to achieve the purposes for which they were collected and as long as it has a legal basis for this.
Personal data will be stored:

for a period of 3 (three) years – in relation to the personal data of an entity that is an entrepreneur (within the meaning of the provisions of the Act of 23 April 1964 – the Civil Code), related to the conclusion and performance of an agreement concluded between the Administrator and the User and for the purpose of determining, pursuing or defending claims;

for a period of 6 (six) years – in relation to the personal data of an entity that is not an entrepreneur, related to the conclusion and performance of an agreement concluded between the Administrator and the User and for the purpose of determining, pursuing or defending claims;

for a period of 3 months – in relation to personal data that were collected via an electronic form, and at the same time no agreement was concluded between the Administrator and the User;
for a period of 5 (five) years – in relation to personal data related to the fulfilment of tax law obligations.

  1. The limitation period ends on the last day of the calendar year, unless the limitation period is shorter than two years.
  2. The period specified in months ends on the expiry of the day that corresponds to the initial day of the period, and if there was no such day in the last month – on the last day of that month.
  3. Data processed on the basis of marketing consent or newsletter consent are deleted immediately after an objection to the processing of personal data for marketing purposes is filed.
  4. Cookies

The Site uses cookies. Cookies are small files saved in the memory of an electronic device in order to enable Users to use the functionalities of the Site.

The entity that places cookies on the User’s end device and obtains access to them is the Administrator.

The User’s web browser allows the use of cookies on their device by default, therefore, upon the first visit to the Site, you must consent to the use of cookies.

The User can manage cookies independently, including deleting and blocking these files at any time.
To reject cookies, select the option to reject them in the browser. Please note that selecting this option will cause some functions of the Site to not work properly.
The User can customize their cookie settings in the browser. Failure to change these settings means acceptance of the cookies used.
Changes to cookie settings consisting in limiting their use may affect some functionalities available on the Site, e.g. a longer loading period of the Site.
Cookies may be persistent or session cookies:
persistent cookies will be stored by the web browser and will remain valid until the set expiry date;
a session cookie expires at the end of the User’s session, when the web browser is closed.

  1. Cookies used on the Site may contain personal data in the form of an IP address, which the Administrator does not save or store.
  2. Cookies are used for the purpose of:

maintaining the session,
remembering information about the session,
providing the functionality of the Site,
adapting the content of the site to the User’s preferences and optimizing the use of the Site.

  1. The Site uses the following Files:

pll_language cookies – purpose: permanent polylang plugin – validity period: 1 year;
cf bm cookie – purpose: session cookie, does not store data, deleted after closing the browser.

  1. Social networking sites may use cookies other than those listed in this Privacy Policy, in particular files enabling logging in and providing advertisements that match the preferences of the Site Users.
  2. Final provisions

This Privacy Policy is intended solely for the use of Data Subjects.

In the scope not regulated by the Privacy Policy, the generally applicable provisions on the protection of personal data shall apply.
The Privacy Policy may be supplemented or updated in accordance with the current needs of the Administrator, especially in order to provide up-to-date and reliable information for the Users of the Site.

Any changes to the Privacy Policy will be posted on the Site and will come into effect after 7 business days from the date of publication.

Each User should take care of their own data security and the security of their electronic devices that are used to access the Internet. The electronic device should absolutely have an antivirus program, a secure version of the web browser they use and an enabled firewall. The User should check whether the operating system and programs installed on their device