Privacy Policy

I. Introduction

The pro­tec­tion of our Users’ per­son­al data is of the utmost impor­tance to the Own­er of this web­site. We make every effort to ensure that Users feel safe when entrust­ing their per­son­al data while using our website.

We process Users’ per­son­al data only to the extent nec­es­sary to ensure a func­tion­al web­site and ser­vices. Users’ per­son­al data is processed only with their con­sent, except where pri­or con­sent can­not be obtained for fac­tu­al rea­sons and where data pro­cess­ing is per­mit­ted by law.

A User is a nat­ur­al per­son, legal enti­ty, or organ­i­sa­tion­al unit with­out legal per­son­al­i­ty to which the law grants legal capac­i­ty, using elec­tron­ic ser­vices avail­able on the website.

This pri­va­cy pol­i­cy explains the rules and scope of pro­cess­ing Users’ per­son­al data, their rights, as well as the oblig­a­tions of the data con­troller, and pro­vides infor­ma­tion about the use of cookies.

The con­troller applies state-of-the-art tech­ni­cal mea­sures and organ­i­sa­tion­al solu­tions to ensure a high lev­el of pro­tec­tion of processed per­son­al data and safe­guards against unau­tho­rised access.

I. Data Controller

The con­troller of per­son­al data is Fun­dac­ja „Sfera Har­monii” (Sfera Har­monii Foun­da­tion), with its reg­is­tered office at ul. św. Win­cen­tego 16/22, 03–505 War­saw, Poland, entered in the reg­is­ter of entre­pre­neurs main­tained by the Dis­trict Court in War­saw, Com­mer­cial Divi­sion, under KRS num­ber: 0000109211, NIP (Tax ID): 526–268-52–66 (here­inafter referred to as the “Own­er”).

II. Purpose of Personal Data Processing

The con­troller process­es Users’ per­son­al data for the fol­low­ing purposes:

• Pro­mo­tion­al activ­i­ties for its own prod­ucts or ser­vices, includ­ing newslet­ter dis­tri­b­u­tion, upon obtain­ing the User’s consent.
• Col­lect­ing data on User behav­iour to improve web­site func­tion­al­i­ty, mea­sure traf­fic, and per­son­alise con­tent, pri­mar­i­ly through cook­ies and track­ing technologies.

The User may also con­sent to receiv­ing infor­ma­tion about news and pro­mo­tions, in which case the con­troller will also process per­son­al data to send the User com­mer­cial infor­ma­tion regard­ing new prod­ucts or ser­vices, pro­mo­tions, or sales.

Per­son­al data is also processed to ful­fil the con­troller’s legal oblig­a­tions and to car­ry out tasks in the pub­lic inter­est, includ­ing tasks relat­ed to secu­ri­ty or the stor­age of tax documentation.

Per­son­al data may also be processed for the pur­pos­es of direct mar­ket­ing of prod­ucts, secur­ing and pur­su­ing claims or pro­tect­ing against claims of the User or third par­ties, as well as mar­ket­ing of third-par­ty ser­vices and prod­ucts or own mar­ket­ing that is not direct marketing.

III. Types of Data

Each time a User vis­its www​.hash​taglab​.pl, data and infor­ma­tion are auto­mat­i­cal­ly col­lect­ed from the access­ing com­put­er sys­tem, including:

• the type and ver­sion of the brows­er used;
• the User’s oper­at­ing system;
• the User’s inter­net ser­vice provider;
• the User’s IP address;
• the date and time of the User’s access to the website;
• web­sites from which the User’s sys­tem access­es www​.hash​taglab​.pl;
• web­sites accessed by the User’s sys­tem via www​.hash​taglab​.pl;
• log files con­tain­ing IP address­es or oth­er data that may be attrib­uted to the User.

This data is stored in sys­tem log files and is not stored togeth­er with oth­er per­son­al data of the User.

IV. Legal Basis for Data Processing

Per­son­al data is processed in accor­dance with Reg­u­la­tion (EU) 2016/679 of the Euro­pean Par­lia­ment and of the Coun­cil of 27 April 2016 on the pro­tec­tion of nat­ur­al per­sons with regard to the pro­cess­ing of per­son­al data and on the free move­ment of such data and repeal­ing Direc­tive 95/46/EC (Gen­er­al Data Pro­tec­tion Reg­u­la­tion — GDPR), OJ EU L 119, 4.5.2016, pp. 1–88.

The con­troller process­es per­son­al data only after obtain­ing the User’s pri­or con­sent. Con­sent to the pro­cess­ing of per­son­al data is entire­ly voluntary.

V. User Rights

The User may at any time:

1. Request infor­ma­tion from the con­troller about the scope of per­son­al data processing.
2. Request cor­rec­tion or rec­ti­fi­ca­tion of their per­son­al data.
3. With­draw con­sent to the pro­cess­ing of their per­son­al data with­out giv­ing a rea­son. The request not to process data may relate to a spe­cif­ic pro­cess­ing pur­pose indi­cat­ed by the User, e.g. with­draw­al of con­sent to receive com­mer­cial infor­ma­tion, or may relate to all data pro­cess­ing pur­pos­es. With­draw­al of con­sent for all pro­cess­ing pur­pos­es will result in the dele­tion of the User’s account from the web­site, along with all per­son­al data pre­vi­ous­ly processed by the con­troller. With­draw­al of con­sent shall not affect pro­cess­ing already car­ried out.
4. Request, with­out giv­ing a rea­son, that the con­troller delete their data. The request for data dele­tion shall not affect pro­cess­ing already car­ried out. Dele­tion of data means simul­ta­ne­ous dele­tion of the User’s account, along with all per­son­al data saved and processed by the con­troller to date.
5. Object to the pro­cess­ing of per­son­al data, both with regard to all per­son­al data processed by the con­troller and only to a lim­it­ed extent, e.g. with regard to data pro­cess­ing for a specif­i­cal­ly indi­cat­ed pur­pose. The objec­tion shall not affect pro­cess­ing already car­ried out. Fil­ing an objec­tion will result in the dele­tion of the User’s account, along with all per­son­al data saved and processed by the con­troller to date.
6. Request restric­tion of per­son­al data pro­cess­ing, either for a spec­i­fied peri­od or with­out time lim­i­ta­tion but with­in a spec­i­fied scope, which the con­troller shall be oblig­ed to ful­fil. This request shall not affect pro­cess­ing already car­ried out.
7. Request that the con­troller trans­fer their per­son­al data to anoth­er enti­ty. The User should sub­mit a request to the con­troller, indi­cat­ing to which enti­ty (name, address) the per­son­al data should be trans­ferred and which spe­cif­ic data the User wish­es the con­troller to trans­fer. Upon con­fir­ma­tion by the User, the con­troller will trans­fer the per­son­al data in elec­tron­ic form to the indi­cat­ed entity.

The con­troller shall inform the User of actions tak­en with­in one month of receiv­ing any of the requests list­ed above.

VI. Data Retention Period

As a rule, per­son­al data is stored only for as long as nec­es­sary to ful­fil the con­trac­tu­al or statu­to­ry oblig­a­tions for which it was col­lect­ed. The data will be delet­ed imme­di­ate­ly when its stor­age is no longer nec­es­sary for evi­den­tiary pur­pos­es under civ­il law or in con­nec­tion with a statu­to­ry data reten­tion obligation.

Con­tract-relat­ed infor­ma­tion is stored for evi­den­tiary pur­pos­es for a peri­od of three years from the end of the year in which com­mer­cial rela­tions with the User end­ed. Data will be delet­ed after the expiry of the statu­to­ry lim­i­ta­tion peri­od for con­trac­tu­al claims.

In addi­tion, the con­troller may retain archival infor­ma­tion regard­ing com­plet­ed trans­ac­tions, as their stor­age is relat­ed to claims to which the User is enti­tled, e.g. under warranty.

If no con­tract has been con­clud­ed between the User and the Own­er, the User’s per­son­al data is stored until the User’s account on the web­site is delet­ed. Account dele­tion may result from a request by the User, with­draw­al of con­sent to the pro­cess­ing of per­son­al data, or an objec­tion to the pro­cess­ing of such data.

VII. Entrusting Data Processing to Other Entities

The con­troller may entrust the pro­cess­ing of per­son­al data to enti­ties coop­er­at­ing with the con­troller, to the extent nec­es­sary for the exe­cu­tion of trans­ac­tions, e.g. for the prepa­ra­tion of ordered goods and deliv­ery of ship­ments or the trans­mis­sion of com­mer­cial infor­ma­tion from the con­troller (the lat­ter applies to Users who have con­sent­ed to receiv­ing com­mer­cial information).

Beyond the pur­pos­es indi­cat­ed in this Pri­va­cy Pol­i­cy, Users’ per­son­al data will not be dis­closed to third par­ties or trans­ferred to oth­er enti­ties for the pur­pose of send­ing mar­ket­ing mate­ri­als from those third parties.

Users’ per­son­al data is not trans­ferred out­side the Euro­pean Union.

This Pri­va­cy Pol­i­cy com­plies with the pro­vi­sions of Arti­cle 13(1) and (2) of the GDPR.

VIII. Cookies

The web­site uses cook­ies or sim­i­lar tech­nolo­gies (here­inafter col­lec­tive­ly referred to as “cook­ies”) to col­lect infor­ma­tion about the User’s access to the web­site (e.g. via a com­put­er or smart­phone) and their pref­er­ences. They are used for adver­tis­ing, sta­tis­ti­cal pur­pos­es, and to adapt the web­site to the User’s indi­vid­ual needs.

Cook­ies are pieces of infor­ma­tion con­tain­ing a unique ref­er­ence code that the web­site sends to the User’s device for stor­age and some­times track­ing pur­pos­es regard­ing the device used. They usu­al­ly do not allow the User to be per­son­al­ly iden­ti­fied. Their main pur­pose is to bet­ter adapt the web­site to the User.

Some cook­ies on the web­site are only avail­able for the dura­tion of a giv­en inter­net ses­sion and expire when the brows­er is closed. Oth­er cook­ies are used to remem­ber the User, who is recog­nised upon return­ing to the web­site. These are stored for a longer period.

The web­site uses first-par­ty cook­ies and third-par­ty cook­ies, including:

• Strict­ly nec­es­sary cook­ies — essen­tial for the web­site to function;
• Pref­er­ence cook­ies — remem­ber­ing User preferences;
• Ana­lyt­ics cook­ies — col­lect­ing sta­tis­ti­cal information;
• Tar­get­ing / adver­tis­ing cook­ies — used for adver­tis­ing purposes.

All cook­ies on the web­site are set by the con­troller and com­ply with applic­a­ble Euro­pean Union law.

Most Users and some mobile browsers auto­mat­i­cal­ly accept cook­ies. If the User does not change their set­tings, cook­ies will be saved on their device.

Users can change their cook­ie accep­tance pref­er­ences or change their brows­er to receive a noti­fi­ca­tion each time the cook­ie func­tion is set. To change cook­ie accep­tance set­tings, adjust your brows­er settings.

Please note that block­ing or delet­ing cook­ies may pre­vent full use of the website.

Cook­ies will be used for essen­tial ses­sion man­age­ment, including:

• Cre­at­ing a spe­cial login ses­sion for the User so that the web­site remem­bers the User is logged in and their requests are deliv­ered effec­tive­ly, secure­ly, and consistently;
• Recog­nis­ing Users who have pre­vi­ous­ly vis­it­ed the web­site, allow­ing iden­ti­fi­ca­tion of the num­ber of unique users and ensur­ing suf­fi­cient serv­er capac­i­ty for new users;
• Recog­nis­ing whether the vis­i­tor is reg­is­tered on the website;
• Record­ing infor­ma­tion from the User’s device, includ­ing cook­ies, IP address, and brows­er infor­ma­tion, for diag­nos­ing prob­lems, admin­is­ter­ing, and track­ing web­site usage;
• Cus­tomis­ing lay­out ele­ments or web­site content;
• Col­lect­ing sta­tis­ti­cal infor­ma­tion about how the User uses the web­site to improve it and deter­mine which areas are most pop­u­lar with Users.

IX. Contact

For mat­ters relat­ed to the pro­tec­tion of per­son­al data, please con­tact the controller:

Fun­dac­ja „Sfera Harmonii”
ul. św. Win­cen­tego 16/22
03–505 War­saw, Poland
KRS: 0000109211 | NIP: 526–268-52–66
Email: [email protected]

The User has the right to lodge a com­plaint with the super­vi­so­ry author­i­ty — the Pres­i­dent of the Per­son­al Data Pro­tec­tion Office (ul. Staw­ki 2, 00–193 War­saw, Poland).