1. General provisions
2. Purpose and scope of data collection
3. Basis for data processing
4. The right to control, access and correct your data
5. Final provisions


1. GENERAL PROVISIONS
1. The controller of personal data collected via the website www.arredi.pl is Dominika Banaszkiewicz, conducting business activity under the name ARREDI sc, registered office address: Ul. Konstytucji 3 Maja 6 lok. 1A, NIP: 1251328537, REGON: 141798046, entered into the Central Register and Information on Business Activity, Aleksandra Janczarska, conducting business activity under the name ARREDI sc, registered office address: Ul. Konstytucji 3 Maja 6 lok. 1A, 05-250 Radzymin, NIP: 9512196548, REGON: 141549768, entered into the Central Register and Information on Business Activity, jointly conducting business activity in the form of a civil partnership under the name ARREDI, registered office address: Ul. Konstytucji 3 Maja 6 lok. 1A, 05-250 Radzymin, delivery address: , NIP: 1251624454, REGON: 147073172, e-mail address: kontakt@arredi.pl
2. The personal data of the Service Recipient are processed in accordance with the Personal Data Protection Act of 29 August 1997 (Journal of Laws No. 133, item 883, as amended) and the Act on the provision of electronic services of 18 July 2002 (Journal of Laws No. 144, item 1204, as amended).
3. 3. The Administrator takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are:
1. processed in accordance with the law,
2. collected for specified, lawful purposes and not subject to further processing incompatible with those purposes,
3. factually correct and adequate in relation to the purposes for which they are processed and stored in a form which enables identification of the persons to whom they relate, no longer than is necessary to achieve the purpose of processing.


2. PURPOSE AND SCOPE OF DATA COLLECTION
1. The personal data of Service Users collected by the Administrator are used for:
1. contacting the service recipient (customer)
2. information purposes and other activities related to the Service Recipient's activity on the website www.arredi.pl
3. marketing purposes (Newsletter)
2. The Administrator processes the following personal data of Service Recipients:
1. Name and surname,
2. Address,
3. Email address,
4. Phone number,
5. Tax Identification Number,
3. The Administrator may process the following data characterizing the manner in which the Service Recipient uses the services provided electronically (operational data):
1. Designations identifying the end of the telecommunications network or the IT system used by the Service Recipient.
2. Information on the commencement, termination and scope of each use by the Service Recipient of the service provided electronically.
3. Information about the Service Recipient’s use of services provided electronically.
4. Providing personal data referred to in point 2 is necessary for the Service Provider to provide services electronically within the website.


3. BASIS FOR DATA PROCESSING
1. Using the website and concluding agreements for the provision of electronic services via it, which involves the need to provide personal data, is completely voluntary. The data subject independently decides whether they want to start using the services provided electronically by the Service Provider in accordance with the Regulations.
2. Pursuant to Article 23 of the Personal Data Protection Act of 29 August 1997 (Journal of Laws No. 133, item 883, as amended), data processing is permissible, among others, when:
1. the data subject consents to this, unless it concerns the deletion of data relating to him or her.
2. it is necessary for the performance of a contract when the data subject is a party to it or when it is necessary to take steps prior to entering into a contract at the request of the data subject.
3. The processing of personal data by the Administrator always takes place within the framework of the grounds for the admissibility of their processing listed in point 2. The processing of data will be related to the performance of the contract or the need to take action before concluding the contract at the request of the data subject (point 2 letter b).


4. THE RIGHT TO CONTROL, ACCESS AND CORRECT YOUR DATA
1. The Service Recipient has the right to access the content of his/her personal data and to correct them.
2. Every person has the right to control the processing of data concerning them, contained in the Administrator's data file, and in particular the right to request the supplementation, updating, rectification of personal data, temporary or permanent suspension of their processing or their removal if they are incomplete, outdated, untrue or have been collected in violation of the Act or are no longer necessary to achieve the purpose for which they were collected.
3. In order to exercise the rights referred to in points 1 and 2, you can use it by sending an appropriate e-mail message to the following address: kontakt@arredi.pl

6. FINAL PROVISIONS
1. The Administrator applies technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data subject to protection, and in particular protects data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of applicable regulations and change, loss, damage or destruction.
2. The Service Provider shall provide appropriate technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically.