Privacy and cookie policy

This Privacy Policy sets out the rules for the processing and protection of personal data provided by users in connection with their use of the website www.pba.pl (hereinafter: “Website“).

Data administrator

1. The administrator of personal data collected on the website www.pba.pl is GEO PROPERTY GROUP POLSKA JUSTYNA LIPKA SPÓŁKA KOMANDYTOWA with its registered office at Boduszewo 15A, 62-095 Boduszewo REGON 380794043, NIP 782-282-74-10 (hereinafter: “Administrator “).
2. Contact with the Administrator regarding the protection of personal data is possible at the e-mail address kontakt@pba.pl
3. The administrator takes special care to protect the interests of data subjects, and in particular ensures that personal data is:
   1. processed in accordance with the law,
   2. collected for specified, lawful purposes and not subjected to further processing inconsistent with these purposes,
   3. factually correct and adequate in relation to the purposes for which they are processed,
   4. stored in a form that allows identification of the persons they concern, no longer than it is necessary to achieve the purpose of processing.
4. The administrator fully ensures the security of personal data, including guarantees the impact on the scope of processed data and facilitates the exercise of all rights of data subjects. In the interests of the security of the entrusted personal data, the Administrator operates on the basis of internal procedures and recommendations, in accordance with the relevant legal acts in the field of personal data protection, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 EC.

Purpose, scope and grounds for processing personal data

1. The administrator processes personal data for various purposes, but always in accordance with the law and relevant legal grounds:
   1. In order to handle the inquiry sent via the contact form or directly by e-mail, the provided personal data is processed, such as: name, surname, contact details. The legal basis for such data processing is Art. 6 sec. 1 lit. b GDPR. If the person submitting the inquiry also provides other data, it is considered consent to the processing of this data as well – then the legal basis for such processing is art. 6 sec. 1 lit. a GDPR, which allows the processing of personal data on the basis of voluntary consent;
   2. In the case of accepting the offer / placing an order – in order to conclude and perform the contract, i.e. based on art. 6 sec. 1 lit. b of the GDPR, such personal data as: name and surname, address of residence (if provided), PESEL number or NIP number, details of identity documents, e-mail address and business activity data (if provided) such as: business name, registered office address, NIP number, REGON number.
   3. For marketing purposes of the Administrator, cooperating entities and authorized entities, for the purposes of analyzing and personalizing the offer presented on the Website, as well as promoting the Administrator’s services and managing services – art. 6 sec. 1 lit. f GDPR;
   4. In order to establish, pursue or defend against claims, personal data are processed, such as: name and surname, address of residence (if provided), PESEL number or NIP number, details of identity documents, e-mail address (if provided) and business activity data (if provided) such as: business name, registered office address, NIP number, REGON number. The legal basis for such data processing is Art. 6 sec. 1 lit. f of the GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator pursues its legitimate interest (in this case, the Administrator’s interest is to have personal data that will allow to determine, pursue or defend against claims, including clients and third parties);
   5. For archival and evidence purposes, personal data are processed, such as: name and surname (if provided), e-mail address – for the purpose of securing information that can be used to demonstrate facts of legal significance. The legal basis for such data processing is Art. 6 sec. 1 lit. f of the GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator pursues its legitimate interest (in this case, our interest is to have personal data that will prove certain facts related to the provision of services, e.g. when a state authority requests it) ;
   6. In order to fulfill the obligations imposed on the Administrator by law (Article 6(1)(c) of the GDPR);
   7. For analytical purposes, i.e. researching and analyzing activity on the Website, such personal data are processed as: date and time of visiting the website, type of operating system, approximate location, type of web browser used to browse the website, time spent on the website, visited subpages , subpage where the contact form was filled out. The legal basis for such data processing is Art. 6 sec. 1 lit. f of the GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator pursues its legitimate interest (in this case, the Administrator’s interest is to know the activity of customers on the website);
   8. In order to administer the website, personal data such as: IP address, server date and time, information about the web browser, information about the operating system are processed – these data are automatically saved in the so-called server logs each time you use the www.pba.pl website. The administration of the website without the use of a server and without this automatic recording would not be possible. The legal basis for such data processing is Art. 6 sec. 1 lit. f of the GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator pursues its legitimate interest (in this case, the Administrator’s interest is the administration of the website).
2. Providing personal data is voluntary and depends on the decision of the persons providing the data. However, in some cases, providing certain personal data is necessary, for example, to be able to contact a given person in order to handle an inquiry or to perform a contract, or to meet the expectations of Website users in terms of using it.

Cookies

1. The website uses cookies. They contain data in text form and are stored on the user’s end device. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.
2. When the user visits the Website for the first time, a banner is displayed with an explanation of cookies. After clicking the “Save preferences” button, the user agrees to the Administrator’s use of certain categories of cookies and plug-ins selected in the pop-up window, in accordance with the selected preferences. As stated below, you may disable the use of cookies through your browser, but please note that the Site may not function properly if you do so.
3. The entity placing cookies on the website user’s end device and accessing them is the Administrator. The legal basis for such processing is Art. 6 sec. 1 lit. a GDPR, which allows the processing of personal data on the basis of voluntary consent.
4. Cookies do not store any information that could constitute the user’s personal data, and are not used to determine the user’s identity.
5. Software for browsing websites (web browser) usually allows cookies to be stored on the user’s end device by default. Website users can change the settings in this regard: the web browser allows you to delete cookies; it is also possible to automatically block cookies – for this purpose, please refer to the documentation of your browser. However, restrictions on the use of cookies may affect some of the functionalities available on the Website.
6. Cookies are used for the following purposes:
   1. impact on the processes and efficiency of using the website – cookies are used to make the website work efficiently and to use the functions available on it, which is possible, among others, by remembering settings between subsequent visits to the website. Thanks to them, you can efficiently navigate the website and individual subpages;
   2. session state – cookies often store information about how visitors use the website, e.g. which subpages they view most often. They also make it possible to identify errors displayed on some subpages. Cookies used to save the so-called “session state” therefore help to improve services and enhance the browsing experience;
   3. creating statistics – cookies are used to analyze how users use the website (how many open the website, how long they stay on it, which content arouses the greatest interest, etc.). This allows you to constantly improve the website and adapt its operation to the preferences of users. In order to track activity and create statistics, the Administrator uses Google tools, such as Google Analytics; in addition to reporting website usage statistics, Google Analytics may also be used, together with some of the cookies described above, to help show you more relevant content across Google services (e.g. Google Search) and across the web;
   4. displaying advertisements – this type of cookie allows you to customize advertisements, thanks to which the use of websites can be free – to the preferences and habits of their users. They make it possible to provide users with advertising content more tailored to their interests and needs and to assess the effectiveness of advertising activities.
7. Analytical cookies are used in cooperation with the Administrator’s analytical partners to collect information about the use of the website, such as pages visited, traffic sources and other website measurements:
   1. Google Analytics: collects information that reports website trends without identifying individual visitors. These cookies track information such as the time of the visit, whether the visitor has been to the site before and which page referred the user to the Site. More information can be found at: https://policies.google.com/privacy?hl=pl and https://policies.google.com/technologies/partner-sites
   2. Google Tag Manager: It can be used to collect information about the activities performed by users on the Website, such as the implementation of various events. With it, you can better configure your website analytics. More information can be found at: https://policies.google.com/privacy?hl=pl
8. The administrator uses marketing tools available on Facebook. As part of these tools, it directs advertising to recipients on this website, based on the consent of users. In order to target personalized advertisements in terms of user behavior on the Website, the so-called Pixel of Facebook, which automatically collects information about the use of our website in terms of pages viewed. The information collected as part of Pixel Facebook is anonymous, i.e. it does not allow users to be identified. However, please note that Facebook may combine this information with other information about you collected as part of your use of Facebook and use it for its own purposes, including marketing. More information can be found at: https://www.facebook.com/privacy/explanation.

Data subjects’ rights

1. Persons whose data is processed by the Administrator have the right to:
   1. access to your personal data;
   2. rectification of personal data;
   3. deletion of personal data;
   4. limiting the processing of personal data;
   5. object to the processing of personal data;
   6. transfer of personal data.
2. The listed rights are not absolute, and therefore in some situations the Administrator may legally refuse to fulfill them. This may take place when the refusal to comply with the request is necessary or there are legally justified grounds for processing that override the interests, rights and freedoms of the data subjects, in particular the establishment, investigation or defense of claims.
3. Data subjects may exercise their rights by sending an e-mail to kontkat@pba.pl.
4. Data subjects have the right to lodge a complaint with the President of the Office for Personal Data Protection.
5. If the processing of personal data is based on consent, the person may withdraw this consent at any time:
   1. To withdraw consent to the processing of personal data, please send an e-mail to the address kontakt@pba.pl or a letter by post to the address of the Administrator’s registered office. If the processing of personal data was based on consent, its withdrawal does not mean that the processing of personal data up to that point was illegal. Therefore, until the consent is withdrawn, the Administrator has the right to process personal data and its withdrawal does not affect the legality of the existing processing.
   2. Preferences for saving cookies can be changed at any time through the functionalities available on the Website.

Recipients of personal data

1. In certain situations, the Administrator has the right to transfer personal data to other recipients, if it is necessary to perform the concluded contract or to fulfill the obligations incumbent on the Administrator. This applies to such groups of recipients: entities providing IT and hosting services, postal and courier operators, entities providing legal services, banks, insurers, law firms, other entities cooperating in the execution of orders (to the extent it is necessary to achieve the purpose of processing).
2. Website users’ data, such as cookies regarding their visit to the Website, are also transferred to online advertising operators, such as Google or Facebook.
3. On the basis of the relevant legal provision or decision of the competent authority, the Administrator may be required to transfer personal data also to other entities, whether public or private.

The period of personal data processing

1. The administrator processes personal data only for the time needed to achieve the designated goal. After this period, personal data will be irreversibly deleted or destroyed.
2. The administrator makes every effort to minimize the period of storage of personal data that is no longer used. However, for technological and operational reasons, the actual time to remove data from the backup copy may be longer. 30 days for deleting data from backup copies should be added to the periods given below.
3. Regarding the individual periods of personal data processing, we kindly inform you that the data will be processed:
   1. in the case of contact or inquiry – for the duration of the correspondence in the case and necessary to achieve the goal resulting from the content of the inquiry, and then, depending on the results of the correspondence – they will either supply the customer base and will be further processed in order to perform the contract, or the data will be deleted if there is no possibility of establishing cooperation. In the case of a clear closure of the conversations, the data will be immediately removed from the working system databases. In the event of concluding a contract, the data will be processed for the time necessary to implement and use the rights and obligations arising from it, including for the time necessary to fulfill the obligations arising from the provisions of law imposed on the Administrator and to pursue claims and defend against claims,
   2. until the consent is withdrawn or the purpose of processing is achieved, but no longer than for 10 years – in relation to personal data processed on the basis of consent;
   3. until the objection is successfully raised or the purpose of processing is achieved, but not longer than for 10 years – in relation to personal data processed on the basis of the legitimate interest of the Personal Data Administrator,
   4. until it becomes obsolete or loses its usefulness, but no longer than for 10 years – in relation to personal data processed mainly for analytical purposes, the use of cookies and website administration.

Automated decision making, profiling and data transfer to third countries

1. Actions may be taken in relation to users of the Website consisting in automated decision making, including profiling in order to provide services under the concluded contract and for the Administrator to conduct marketing activities.
2. Personal data is not transferred from third countries within the meaning of the provisions on the protection of personal data. This means that we do not send them outside the European Union.