EN PL

Privacy Policy

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the "protection of natural persons with regard to the processing of personal data" and on the free movement of such data, and repealing Directive 95/46/EC" (General Data Protection Regulation "GDPR"), we inform you about the principles of processing your personal data and your rights related to this.

1. Who is the controller of your personal data?

The controller of your personal data is the company DanLab Danuta Katryńska, located in Białystok, ul. Handlowa 6D, NIP: 685-204-74-55, REGON: 200181857.

For any questions or concerns, please contact us directly at our office or via:

a) email: [email protected]

b) phone: +48 85 6612 866

2. Legal basis and purpose of data processing

Following the acceptance of our cookie policy, voluntary contact with our company via the contact form, or service submission, we are entitled to process your data based on Art. 6(1)(b) of GDPR.

Your personal data is processed for the following purposes:

  1. Fulfilling obligations of the Controller resulting from actions requested by the data subject, such as: a) Preparing commercial offer documentation.
    b) Responding to service submissions within the period and form required by law.

  2. Realizing the legitimate interests of the Controller, including: a) Marketing of our products and services.
    b) Analytical activities (tailoring services to your needs, optimizing products based on your feedback and interests, optimizing service processes, etc.).
    c) Archival purposes (evidence), securing information in case proof of compliance is needed.
    d) Possible determination, assertion, or defense against claims.
    e) Customer satisfaction surveys and improving the quality of services and products.

In other cases, your data will be processed only based on your prior consent.

Providing data is voluntary but necessary to carry out actions requested by the data subject.

3. Rights under GDPR

According to GDPR, individuals whose personal data is processed are entitled to the following rights:

a) The right to access and obtain a copy of their data.
b) The right to rectify (correct) their data.
c) The right to delete data or restrict its processing.
d) The right to data portability.
e) The right to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection).
f) The right to object to data processing.

Regardless of other rights (including the right to withdraw consent), you have the right to object at any time to data processing for direct marketing purposes. Upon objection, your data will no longer be processed for marketing purposes immediately.

4. Data retention period

Data processed for the purpose of contract fulfillment will be stored for the sum of the following periods:

a) The period in which claims related to the contract may arise.
b) The statute of limitations for potential claims related to the contract.
c) +1 year in case of claims submitted shortly before their expiration.

Data processed for direct marketing purposes will be stored and processed until you object to such processing or until the Controller determines that it is outdated.

5. Data recipients

The personal data provided by you may be entrusted to our subcontractors (processors: our partners, entities providing accounting, transportation, IT, legal, consulting services, etc.) to the extent necessary for fulfilling the obligations arising from the contract.

6. Information on data transfer outside the EEA

Currently, we do not transfer and do not plan to transfer your data outside the European Economic Area.