Privacy policy

NATURALLY WITH TASTE MAGDALENA ZAJĄC, as the owner of the www.marmurowapracownia.pl website, makes every effort to ensure that your privacy is properly protected. In order to implement the lawful (GDPR), transparent and secure processing of your personal data, we adopt the following privacy policy.
According to Art. 13 sec. 1 and sec. 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (GDPR), we inform:
a. General information:
a. The Administrator of Personal Data within the meaning of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (Official Journal EU L 2016, No. 119) (hereinafter referred to as GDPR) is NATURALLY WITH TASTE, NIP: 8132942677 , with its seat at 37-600 Lubaczów, ul. Baziaka 15A, tel. 794 006 653, e-mail: biuro.stone.art@gmail.com
b. A user within the meaning of this Privacy Policy is a natural person using the Administrator’s websites, including the Administrator’s contact forms
c. Contact in matters relating to the processing of personal data by the Administrator: biuro.stone.art@gmail.com

2. Purpose of data processing by the Administrator.
a. The User entrusts the processing of personal data to the Administrator in order to handle the recruitment, inquiry or order submitted via the contact form.
b. Providing personal data by the User during contact is voluntary, and the data provided will be used (if applicable) only for the purposes of:
a. Provide answers.
b. Presentation of the Administrator’s offer.
c. Security of the Administrator’s network systems (eg protection against spam and DDOS attacks).
d. To measure web audience.
e. Employee recruitment.
c. Expressing consent by providing contact details is voluntary, but in some cases failure to provide them may prevent the handling of the inquiry / order submitted via the contact form.

3. Legal basis for data processing by the Administrator.
a. The legal basis for the processing of personal data for the purposes set out in 2.b.a and 2.b.b. constitutes the User’s consent (Article 6.1. a) of the GDPR), and / or Article 6.1. b) of the GDPR if the User wishes to conclude a contract.
b. The premise for the processing of personal data for the purpose specified in 2.bc is the legitimate interest pursued by the administrator (Article 6.1.f) of the GDPR), and the legal basis is Recital 49 of the GDPR and the Regulation of the Minister of Internal Affairs and Administration of April 29, 2004 on personal data processing documentation and technical and organizational conditions to be met by devices and IT systems used to process personal data.
c. The premise for the processing of personal data for the purpose specified in 2.bd is the legitimate interest pursued by the administrator (Article 6.1.f) of the GDPR), and the legal basis is Article 8 point 1 d) of the Regulation of the European Parliament and of the Council on respect for life data protection and the protection of personal data in electronic communications and repealing Directive 2002/58 / EC (Regulation on privacy and electronic communications).
d. Personal data for the purpose specified in 2.b.e. are processed due to the willingness to conclude a contract (Article 6.1 b) of the GDPR), and the legal basis for the collected data is Article 221 § 1 of the Labor Code

4. The scope of data processing by the Administrator
a. For the purposes indicated in 2.b.a and 2.b.b., to the extent that the User voluntarily provides, the Administrator may process:
a.name and surname (contact person)
b. contact telephone number
c. contact e-mail address
d. Internet domain address (and possibly other related data provided by the User)
e. other data provided by the User
b. For the purpose mentioned in 2.b.c .:
a.IP address
b.metadata sent by the browser (or other end device connecting to the Administrator’s website)
c. For the purpose stated in 2.b.d .:
a.metadata sent by the browser
d. For the purpose specified in 2.b.e (recruitment), we will ask the person applying for employment to provide data such as: name and surname, date of birth, place of residence (correspondence address), education and previous employment history.
e. Recipients of personal data and transfer of personal data to a third country:
a. User’s personal data related to the purposes mentioned in points 2.b.a. to 2.b.c. and 2.b.e. will be processed only by the Administrator.
b. Data related to the purpose of point 2.b.d. will be processed by the Administrator and the partner, Google Inc. based in the USA, whose web audience measurement tool (Google Analytics) is used by the Administrator. These data are anonymous and are not shared further.
c. Google, which performs the web audience measurement service for the Administrator, has joined the EU-US Privacy Shield agreement, and in accordance with the decision of the European Commission of July 12, 2016, IP / 16/216, the transfer of personal data to entities based in the United States, which joined the above-mentioned of the agreement, ensures an adequate level of personal data protection, in accordance with Art. 45 GDPR;
f. The User’s personal data may be made available to entities from the Administrator’s capital group and the Administrator’s partners with whom the Administrator cooperates by combining products or services. In the event of cooperation, the data may also be accessed by subcontractors (processors), such as, for example, accounting companies, hosting companies.