nzdn » Privacy Policy

Privacy Policy

I. General provisions

The privacy policy determines how the personal data of Users necessary for the provision of electronic services through the https://nzdn.art website (hereinafter: the Service) are collected, processed, and stored.
The Service collects only personal data necessary for the provision and development of services offered in it.
Personal data collected through the Service is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/WE (General Data Protection Regulation, GDPR) and the Personal Data Protection Act of 10 May 2018.

II. Data controller

The data controller of personal data collected through the Service is NZDN, email address: contact@nzdn.art(hereinafter: the Controller).

III. Purpose of collecting personal data

Personal data is used for the following purposes:

registration of a user account and verification of identity,

enabling login to the Service,

implementation of the agreement concerning services and e-services,

communication with the user (live chat, contact form, etc.),

sending newsletters (if the user has given their consent to receive them),

operation of the comment system,

providing social services, promotion of the Administrator's offer,

marketing, remarketing,

affiliation, personalization of the Service for users,

analytical and statistical actions,

debt recovery,

determination and enforcement of claims or defense against them.
Providing data is voluntary, but necessary to conclude an agreement or use other functionalities of the Service.

IV. Type of processed personal data

The Administrator may process the following personal data of the user: name and surname, date of birth, address of residence, email address, phone number, VAT number.

V. Period of processing personal data The personal data of users will be processed for the following periods:

if the basis for processing data is the performance of the contract - until the expiration of claims after its performance,
if the basis for processing data is consent - until its withdrawal, and after withdrawal of consent until the expiration of claims.

In both cases, the statute of limitations is 6 years, and for claims for periodic benefits and claims related to conducting business - 3 years (unless otherwise provided by special regulation).

VI. Sharing Personal Data

The personal data of Users may be disclosed to:
- entities affiliated with the Administrator, its subcontractors, entities cooperating with the Administrator, e.g. payment processing companies, courier/postal services, law firms.
- Personal data of Users may be transferred outside the European Economic Area (EEA).

VII. Rights of Users

A User of the Service has the right to: access the content of their personal data, rectify, delete, restrict processing, transfer, object to processing, withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).
To report the exercise of a right by a User resulting from the above rights, it should be sent to the address [email address].
The Administrator fulfills or refuses to fulfill the request immediately - no later than one month from its receipt.
A User has the right to file a complaint with the President of the Personal Data Protection Office if he or she considers that the processing violates his or her rights and freedoms (GDPR).

VIII. Cookies

The service collects information using cookies - session, permanent and external parties.
The collection of cookies supports the proper provision of services in the Service and serves statistical purposes.
The user can specify the scope of access to cookies on their device in the browser settings.

IX. Automated decision-making and profiling

User data cannot be processed in an automated manner that could result in any decisions being made against them.
User data may be profiled in order to customize content and personalize the offer after their consent has been given.

X. Final provisions

The administrator has the right to make changes to the Privacy Policy, but the rights of the Users will not be limited.
Information about the changes made will appear in the form of a message available in the Service.
In matters not regulated in this Privacy Policy, the GDPR and Polish law apply.