Privacy policy

GENERAL PROVISIONS
1. The controller of personal data collected through the blackdale.co website is Blackdale NIP 5242931414, KRS 0000944226, ul. Nowy Świat 33/13, 00-029 Warsaw, hereinafter referred to as the “Controller,” which is also the Service Provider. Email address: office@blackdale.co.
2. Personal data collected by the Controller through the website is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR, and the Personal Data Protection Act of 10 May 2018.
TYPE OF PROCESSED PERSONAL DATA, PURPOSE AND SCOPE OF DATA COLLECTION
1. PROCESSING PURPOSE AND LEGAL BASIS. The Controller processes personal data through the blackdale.co website in the following cases:
  1. when the user uses the contact form. Personal data is processed on the basis of Article 6(1)(f) of the polish GDPR (RODO) as a legitimate interest of the Controller.
2. TYPE OF PROCESSED PERSONAL DATA. The Controller processes the following categories of user’s personal data:
  1. Email address,
  2. Phone number,
3. PERIOD OF PERSONAL DATA ARCHIVING. User’s personal data is stored by the Controller:
  1. in the case where the basis for data processing is the performance of a contract, for as long as necessary to perform the contract, and thereafter for a period corresponding to the limitation period for claims. Unless a specific provision provides otherwise, the limitation period is six years, and for claims related to periodic services and claims related to business activity – three years.
  2. in the case where the basis for data processing is consent, until the consent is withdrawn, and after the withdrawal of consent for a period corresponding to the limitation period for claims that the Controller may raise or that may be raised against the Controller. Unless a specific provision provides otherwise, the limitation period is six years, and for claims related to periodic services and claims related to business activity – three years.
4. Additional information may be downloaded when using the website, in particular: the IP address assigned to the user’s computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.
5. User’s navigation data may also be collected, including information about links and references they decide to click or other actions taken on the website. The legal basis for such activities is the legitimate interest of the Controller (Article 6(1)(f) of the polish GDPR (RODO)), consisting in facilitating the use of services provided electronically and improving the functionality of these services.
6. Providing personal data by the user is voluntary.
7. Personal data will also be processed in an automated way in the form of profiling, provided that the user gives consent based on Art. 6(1)(a) of the polish GDPR (RODO). The consequence of profiling will be assigning a profile to a particular person for the purpose of making decisions, or analyzing or predicting their preferences, behaviors, and attitudes.
8. The administrator takes special care to protect the interests of the persons whose data are processed, and in particular ensures that the data collected by him are:
  1. processed lawfully,
  2. collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes,
  3. adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed, and stored in a form that permits identification of the data subjects for no longer than is necessary for the purposes of processing.
9. SHARING OF PERSONAL DATA
  1. Personal data of users is transferred to service providers used by the Administrator to operate the website. Service providers to whom personal data are transferred, depending on contractual arrangements and circumstances, either are subject to the instructions of the Administrator as to the purposes and methods of processing of such data (processors) or independently determine the purposes and methods of their processing (controllers).
  2. Personal data of users is stored exclusively within the European Economic Area (EEA).
10. RIGHT TO CONTROL, ACCESS TO OWN DATA CONTENT AND THEIR CORRECTION
  1. The person whose data is being processed has the right to access the content of their personal data and the right to rectification, erasure, restriction of processing, right to data portability, the right to object, the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  2. Legal basis for the user’s request:
    1. Access to data – Art. 15 of the polish GDPR (RODO)
    2. Rectification of data – Art. 16 of the polish GDPR (RODO)
    3. Erasure of data (the right to be forgotten) – Art. 17 of the polish GDPR (RODO)
    4. Restriction of processing – Art. 18 of the polish GDPR (RODO)
    5. Right to data portability – Art. 20 of the polish GDPR (RODO)
    6. Right to object – Art. 21 of the polish GDPR (RODO)
    7. Withdrawal of consent – Art. 7(3) of the polish GDPR (RODO)
  3. In order to exercise the rights referred to in point 2, you can send an appropriate e-mail message to the following address: office@blackdale.co.
  4. If a user makes a request for their rights resulting from the above-mentioned rights, the Administrator will fulfill the request or refuse to fulfill it immediately, but no later than one month after its receipt. However, if, due to the complex nature of the request or the number of requests, the Administrator is unable to fulfill the request within one month, he will fulfill it within the next two months, informing the user in advance within one month of receiving the request of the intended extension and its reasons.
  5. If it is found that the processing of personal data violates the provisions of the GDPR, the person whose data it concerns has the right to lodge a complaint with the Polish President of the Personal Data Protection Office.
11. COOKIES
  1. The Administrator’s website uses cookies.
  2. The installation of cookies is necessary for the proper provision of services on the website. The cookies contain information necessary for the proper functioning of the website and also allow for the development of general statistics on website visits.
  3. Two types of cookies are used on the website: session and persistent.
    1. “Session” cookies are temporary files that are stored on the user’s end device until logging out (leaving the website).
    2. “Persistent” cookies are stored on the user’s end device for the time specified in the cookie parameters or until they are deleted by the user.
  4. The Administrator uses their own cookies to better understand the user’s interaction with the website content. The files collect information about how the user uses the website, the type of website from which the user was redirected, and the number of visits and time the user spent on the website. This information does not register specific user personal data, but is used to develop statistics on website usage.
  5. The user has the right to decide on access to cookies on their computer by selecting them in their browser window beforehand. Detailed information on the possibilities and methods of managing cookies is available in the software settings (web browser).
  6. The Administrator uses statistical analysis of website traffic through Google Analytics 4 (Google Inc.). The operator does not provide personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the user’s end device. In terms of user preference information collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/
  7. The administrator uses Mouseflow, a web analytics tool by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits to the website (solely with anonymized IP addresses). It captures mouse movements and clicks solely for the purpose of randomly replaying individual visits to the website and making potential improvements to its functionality. Due to anonymization, the information cannot be attributed to a specific person and will not be shared with third parties. If the user does not consent to the collection of their data by the Mouseflow tool, they can block it on the website using it, at the following address: mouseflow.com/opt-out .
12. FINAL PROVISIONS
  1. The Administrator uses technical and organizational measures to ensure that the processing of personal data is protected against threats and categories of data protected, and in particular secures the data against unauthorized disclosure, taking by an unauthorized person, processing in violation of applicable law, or modification, loss, damage or destruction.
  2. The Administrator provides appropriate technical means to prevent the acquisition and modification by unauthorized persons of personal data transmitted electronically.
  3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant Polish laws shall apply accordingly.