Privacy policy

The administrator of personal data collected through the website www.nanovo.pl is Nanovo Sp. z o.o. with its registered office in Warsaw, Aleja Księcia Józefa Poniatowskiego 1, 03-901 Warsaw, hereinafter referred to as the “Controller", which is also the Service Provider.
Personal data collected by the Controller through the website are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR, and the Personal Data Protection Act of 10 May 2018.

TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

1. PURPOSE OF PROCESSING AND LEGAL BASIS. The Controller processes personal data through the website www.nanovo.pl in the following cases:
  1. when the user uses the contact form. Personal data is processed on the basis of Article 6 (1) (f) of the GDPR as part of the legitimate interest of the Controller.
2. TYPE OF PERSONAL DATA PROCESSED. The Controller processes the following categories of your personal data:
  1. name and surname;
  2. e-mail address;
  3. phone number.
3. PERIOD OF ARCHIVING PERSONAL DATA. The personal data of users is stored by the Controller:
  1. where the basis for data processing is the performance of a contract - for as long as necessary for the performance of the contract and after that for a period corresponding to the limitation period for claims. Unless specific provisions stipulate otherwise, the limitation period is six years and for claims for periodic benefits and claims related to business activity – three years.
  2. where the basis for data processing is consent, as long as the consent is not revoked and after revoking the consent for a period corresponding to the period of limitation for claims that the Controller may raise and which may be raised against them. Unless specific provisions stipulate otherwise, the limitation period is six years and for claims for periodic benefits and claims related to business activity – three years.
4. When using the website, additional information may be collected, including, but not limited to: the IP address assigned to the user's computer or the external IP address of the Internet provider; domain name; browser type; access time; operating system type.
5. Navigation data may also be collected from users, including information about the links they click or other actions they take on the website. The legal basis for such activities is the legitimate interest of the Controller (Article 6 (1) (f) of the GDPR), consisting in facilitating the use of services provided by electronic means and improving the functionality of these services.
6. Providing personal data by the user is voluntary.
7. The Controller exercises due care to protect the interests of the data subjects, which includes, but is not limited to ensuring that the collected data is:
  1. processed lawfully;
  2. collected for specified and legitimate purposes and no further processed in a way incompatible with the intended purposes;
  3. relevant and adequate in relation to the purposes for which they are processed and stored in a format that allows for the identification of the data subjects, no longer than it is necessary to achieve the purpose of processing.
PERSONAL DATA SHARING
1. Users' personal data is transferred to service providers used by the Controller when operating the website. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, are either subject to the Controller's instructions as to the purposes and methods of processing this data (processors) or independently determine the purposes and methods of their processing (controllers).
2. Your personal data is only stored in the European Economic Area (EEA).
RIGHT TO CONTROL, ACCESS AND CORRECT YOUR OWN DATA
1. The data subject shall have the right to access their personal data and the right to rectify, erase them, restrict their processing, transfer them, object, withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
2. Legal basis for the user’s request:
  1. Access to data – Article 15 of the GDPR
  2. Rectification – Article 16 of the GDPR.
  3. Data erasure (“right to be forgotten”) – Article 17 of the GDPR.
  4. Restriction of processing – Article 18 of the GDPR.
  5. Data portability – Article 20 of the GDPR.
  6. Objection – Article 21 of the GDPR
  7. Withdrawal of consent – Article 7 (3) of the GDPR.
3. In order to exercise the rights referred to under item 2, an appropriate e-mail may be sent to the following address: [email protected].
4. Should the user request to exercise their entitlement resulting from the above rights, the Controller shall comply with the request or refuse to comply with it immediately, but not later than within one month after receiving it. However, if – due to the complex nature of the request or the number of requests – the Controller is not be able to comply with the request within a month, the Controller shall comply with it within the next two months, informing the user in advance within a month of receiving the request about
5. \the intended extension of the deadline and its reasons.
7. If it is found that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office.
COOKIES
1. The Controller's website uses cookies.
2. The installation of "cookies" is necessary for the proper provision of services on the website. “Cookies" contain information necessary for the proper functioning of the website, and also give the opportunity to develop general statistics of website visits.
3. The website uses the following types of "cookies": session and permanent.
  1. Session cookies are temporary files that are stored on the user's end device until the user logs out (leaves the website).
  2. Persistent cookies are stored at User’s end device for a specified period determined in the cookies parameters or until they are deleted by the User.
4. The Controller uses their own cookies in order to better understand how the user interacts with the content of the website. The files collect information on the way the user uses the website; the type of the website from which the user was redirected, as well as the number of visits and the duration of the user's visit to the website. This information does not record specific personal data of the user, but is used to compile statistics on the use of the website.
5. The User has the right to decide on allowing "cookies" to access their computer by selecting them in the browser window. Further details about the possibilities and methods in terms of cookie management are available in the software (Internet browser) settings:
FINAL PROVISIONS
1. The Controller shall apply technical and organizational measures to ensure protection of the processed personal data appropriate to the threats and categories of covered data, including, but not limited to they shall protect the data against unauthorized access; takeover by an unauthorized person; processing in violation of applicable regulations, as well as change, loss, damage or destruction.
2. The Controller shall provide appropriate technical measures to prevent unauthorized persons from obtaining or modifying the personal data submitted by electronic means.
3. In matters not covered by this Privacy Policy, the provisions of the GDPR and other relevant provisions of the Polish law shall apply accordingly.