Privacy Policy of the https://legosse.pl website

1. Definitions

1.1 Administrator – Prosta S.A. MNS GROUPE, based in Wrocław at Uniwersytecka Street, 1, 50-145, registered in the National Court Register kept by the District Court for Wrocław Fabryczna in Wrocław, VI Economic Department under the KRS number 0001083785, NIP 8971932934, represented by the Director – Aliaksei Nemirovich.

1.2 Personal data – information about a natural person identified or identifiable by one or more specific factors that determine physical, economic, cultural or social identity, including device IP, Internet ID and information collected through cookies, and other similar technology.

1.3 Policy – this Privacy Policy.

1.4. RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

1.5. Service – the Internet service operated by the Administrator at https://legosse.pl.

1.6 User – any natural person visiting the Site or using one or more of the services or functionalities described in the Policy.

2. Processing of Personal Data in connection with the use of the Website

2.1 In connection with the User’s use of the Website, the Administrator collects Data to the extent necessary to provide the individual services offered. The detailed rules and purposes of processing the Personal Data collected during the User’s use of the Website are described below.

3. Purposes and legal basis for processing Personal Data on the Website

A) Use of the Service

3.1 Personal data of all persons using the Website are processed by the Administrator:

3.1.1. to provide services electronically in terms of providing Users with access to content collected on the Website – in which case the legal basis for processing is the necessity of processing for the performance of the contract (Article 6.1.b of the RODO);

3.1.2. to establish and assert claims or defend against claims – the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting in the protection of its rights.

B) Contact form, Feedback form, Registration form for special events, Table reservation form

3.2 The Administrator provides the possibility of contacting him using an electronic contact form, feedback form, registration form for special events, and table reservation form. Using the forms requires providing Personal Data necessary to contact the User and respond to the inquiry. The User may also provide other data to facilitate contact or service the inquiry. Provision of data marked as mandatory is required to accept and service the inquiry, and failure to provide such data will result in the impossibility of service. Provision of other data is voluntary.

3.3 Personal data is processed to identify the sender and handle his/her inquiry sent through the forms provided – the legal basis for processing is the necessity of processing for the performance of the service contract (Article 6(1)(b) RODO); concerning data provided optionally, the legal basis for processing is consent (Article 6(1)(a) RODO).

C) Marketing

3.4 The User’s personal data may also be used by the Administrator to direct marketing content to the User through various channels, i.e. via e-mail, MMS/SMS. Such activities are undertaken by the Administrator only if the User has given his/her consent, which can be withdrawn at any time.

3.5 Personal data are processed:

3.5.1. to send the requested commercial information – the legal basis for processing, including the use of profiling, is the legitimate interest of the Administrator (Article 6(1)(f) RODO) in connection with the consent given;

3.5.2. for analytical and statistical purposes – the legal basis of the processing is the Administrator’s legitimate interest (Article 6.1.f RODO), consisting of conducting analyses of Users’ activity on the Site to improve the applied functionalities.

4. Cookies

4.1 The Administrator within the Service uses cookies. The purposes and rules regarding the use of cookies can be found in the Cookie Policy.

5. Period of processing of Personal Data

5.1 The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a general rule, data are processed for the duration of the service, until the withdrawal of the consent given or the filing of an effective objection to data processing in cases where the legal basis for data processing is the Administrator’s legitimate interest.

5.2 The data processing period may be extended if the processing is necessary for the establishment and assertion of possible claims or defense against claims, and thereafter only if and to the extent required by law. After the expiration of the processing period, the data shall be irreversibly deleted or anonymized.

6. Privileges of the User

6.1 You have the right to access the content of your data and to request rectification, deletion, restriction of processing, the right to data portability, and the right to complain with the supervisory authority for the protection of Personal Data.

6.2 You also have the right to object to data processing that is carried out based on the legitimate interests of the Administrator.

6.3 To the extent your data is processed based on consent, you may withdraw that consent at any time by contacting the Administrator via legossemedia@gmail.com.

7. Recipients of Personal Data

7.1 In connection with the performance of services, Personal Data will be disclosed to external entities, including, in particular, IT service providers that allow the proper use of the Website.

7.2 If the User’s consent is obtained, his/her data may also be made available to other entities for their purposes, including marketing purposes.

7.3 The Administrator reserves the right to disclose selected information concerning the User to the competent authorities or third parties who submit a request for such information, based on the relevant legal basis and by the provisions of the applicable law.

8. Transfer of Personal Data outside the EEA

8.1 The level of protection of Personal Data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers Personal Data outside the EEA only when necessary and with an adequate level of protection, primarily by:

8.1.1. cooperation with processors of Personal Data in countries for which a relevant decision of the European Commission has been issued regarding the determination of ensuring an adequate level of protection of Personal Data;

8.1.2. use of standard contractual clauses issued by the European Commission;

8.1.3. application of binding corporate rules approved by the relevant supervisory authority.

8.2 The Administrator shall always inform of its intention to transfer Personal Data outside the EEA at the collection stage.

9. Security of Personal Data

9.1 The Administrator shall conduct a risk analysis on an ongoing basis to ensure that the Personal Data is securely processed by the Administrator – ensuring, first and foremost, that only authorized persons have access to the data and only to the extent necessary for the tasks they perform. The Administrator ensures that all operations on Personal Data are recorded and performed only by authorized employees and associates.

9.2 The Administrator shall take all necessary measures to ensure that its subcontractors and other cooperating entities also provide guarantees to apply appropriate security measures whenever they process Personal Data on behalf of the Administrator.

10. Contact information

10.1 Contact with the Administrator is possible through – legossemedia@gmail.com

11. Privacy policy changes

11.1 The policy shall be reviewed on an ongoing basis and updated as necessary.

11.2 The current version of the Policy has been adopted and is effective as of 21.05.2024.