Privacy Policy for KCRI

KCRI Sp. z o.o. with its registered office in Kraków at ul. Miechowska 5b/3, 30-055 Kraków, National Court Register number KRS 0000218183, complying with the obligations under the applicable personal data protection laws, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter GDPR), provides you with information on your personal data processing and protection.

The information in the Privacy Policy will help you understand what personal data are collected and processed by KCRI Sp. z o.o., for what purpose they are used, and what rights you have in relation to personal data protection.

The Controller attaches particular importance to respecting the privacy of users who visit the website www.kcri.org (hereinafter “Website”).

 

I. PERSONAL DATA CONTROLLER

The personal data controller is KCRI Sp. z o.o. with its registered office at ul. Miechowska 5b/3, 30-055 Kraków, National Court Register number KRS 0000218183, (hereinafter also “PDC”, ”Company”, “Controller”)

Contact:

II. PURPOSE OF PERSONAL DATA PROCESSING

Your personal data will be processed for the purpose of:

  • providing services offered through the Website,
  • contacting persons who use the Website (hereinafter also “Users”) in connection with the services offered,
  • enabling the User to contact KCRI,
  • adapting the content of the Website to the User’s preferences,
  • resolving complaints/appeals lodged by Users,
  • keeping statistics, performing analyses and archiving of the data.

Moreover, the Controller collects information on IP numbers of any devices that establish connections to the website under the address http://www.kcri.org

Such collected data are used to analyze and verify the operations of our website. Such data allow the development of, e.g. traffic statistics enabling reliable assessment of the level of interest in the service. We use the information on IP numbers also for technical purposes. In no event are the user personal data merged with the IP numbers of devices establishing connections to the website. Some areas of the service may use cookies, i.e. text files saved on the user’s device which identify the user in the manner necessary to enable the use of certain functions of the service. More Cookies Policy.

 

III. LEGAL BASIS OF PERSONAL DATA PROCESSING

The legal basis for the processing of collected personal data is Article 6 (1) lit a) of the GDPR. The data will be processed until withdrawal of the consent granted or raising an objection.

However, the person whose data are processed has the right to withdraw the granted consent at any time. This will not compromise the lawfulness of processing done before withdrawal of consent.

IV. YOUR RIGHTS RELATED TO DATA PROCESSING BY THE CONTROLLER

In connection with your data processing by the PDC you have the right to:

  • access the content of your data,
  • correct the data,
  • erase the data (to the extent it is possible in accordance with the applicable laws),
  • limit the processing,
  • transfer the data,
  • object to the processing.

Such requests must be submitted to the Controller.

You have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data violates provisions of the GDPR. As from 25 May 2018, the supervisory authority is the President of the Office for Personal Data Protection.

Providing your personal data to the Controller is voluntary. However, if you do not provide your personal data or if you provide incomplete personal data, the accomplishment by the Controller of the purposes defined in Section II may be seriously impeded or prevented.

V. DATA TRANSFER

The Controller does not intend to transfer your personal data to any third countries or international organizations.

VI. AUTOMATED DECISION MAKING

The Controller will not make any automated decisions with regard to your data on the basis of the personal data shared by you, including decisions resulting from profiling.

VII. ADDITIONAL INFORMATION

This Policy is in effect from 25 May 2018 until its revocation and it fulfils the legal obligation under Articles 13 – 14 of the GDPR.