Polityka prywatności - MaxieDISC®

Privacy Policy

 

The following Privacy Policy outlines Rules for saving and accessing data on User Devices using the Service for the purpose of providing electronic services by the Administrator and Principles of User Personal Data Collection and Processing, which have been provided by them personally and voluntarily through the tools available on the Service.

The following Privacy Policy is an integral part of Terms of Service, which defines the rules, rights, and obligations of Users using the Service.

§1 Definitions

  • Service – the online service „MaxieDISC” operating at the address https://maxiedisc.com
  • External service – partner websites, service providers, or service recipients cooperating with the Administrator
  • Service / Data Administrator – The Service Administrator and Data Administrator (hereinafter referred to as the Administrator) is the company „Maxie Hill. Sp. z o.o.”, operating at the address: ul. Św. Marcin 29/8, 61-806 Poznań, with the tax identification number (NIP): 7831725809, and the National Court Register number (KRS): 0000556122, providing services electronically through the Service.
  • User A natural person for whom the Administrator provides services electronically through the Service.
  • Device – electronic device together with software, through which the User gains access to the Service
  • Cookies – text data collected in the form of files uploaded to the User Device
  • GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
  • Personal data – mean information about an identified or identifiable natural person („data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
  • Processing – means an operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
  • Processing restriction – denotes the marking of personal data stored for the purpose of limiting its future processing
  • Profiling – means any form of automated processing of personal data which consists of using personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements
  • Agreement – consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her
  • Personal data breach – means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data transmitted, stored or otherwise processed
  • Pseudonymization - means processing personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person
  • Anonymization Data anonymization is an irreversible data operation process that destroys/overwrites „personal data,” making it impossible to identify or link a given record to a specific user or natural person.

§2 Data Protection Officer

On the basis of Art. 37 of the GDPR, the Controller did not appoint a Data Protection Officer.

In matters concerning data processing, including personal data, please contact the Administrator directly.

§3 Types of Cookies

  • First-party cookies – files uploaded to and read from the User's Device by the Service's teleinformation system
  • External cookies – files uploaded to and read from the User Device by the teleinformation systems of External Services. Scripts of External Services, which may place Cookies on the User Device, have been knowingly placed in the Service through scripts and services provided and installed in the Service
  • Session cookies – files uploaded to and read from the User Device by the Service during a single session of a given Device. After the session ends, files are deleted from the User Device.
  • Durable cookies – files uploaded to and read from the User Device by the Service until they are manually deleted. Files are not automatically deleted after a Device session ends unless the User's Device configuration is set to the Cookie deletion mode after Device session end.

§4 Data Storage Security

  • Cookie Storage and Retrieval Mechanisms Mechanisms for storing, reading, and exchanging data between Cookies saved on the User's Device and the Service are implemented through the built-in mechanisms of web browsers and do not allow for the downloading of other data from the User's Device or data from other websites the User has visited, including personal data or confidential information. The transfer of viruses, Trojan horses, and other worms to the User's Device is also practically impossible.
  • Internal cookies The Cookies used by the Administrator are safe for the User's Devices and do not contain scripts, content, or information that could compromise the security of personal data or the security of the User's Device.
  • External cookies The Administrator takes all possible steps to verify and select website partners in the context of User security. The Administrator selects well-known, large partners with global public trust for cooperation. However, they do not have full control over the content of cookies originating from external partners. The Administrator is not responsible for the security of cookies, their content, and their licensed use by scripts installed on the website originating from external websites to the extent permitted by law. The list of partners is provided later in the Privacy Policy.
  • Cookie Control
  • User-side threats – The Administrator applies all possible technical measures to ensure the security of data placed in Cookies. However, it should be noted that securing this data depends on both parties, including the User's activity. The Administrator is not responsible for the interception of this data, impersonation of the User's session, or its deletion as a result of conscious or unconscious User activity, viruses, Trojan horses, and other spyware that the User's Device may be or has been infected with. In order to protect themselves against these threats, Users should follow recommendations for using the internet.
  • Personal data storage – The Administrator assures that all efforts are made to ensure that personal data entered voluntarily by Users are secure, access to them is limited and carried out in accordance with their intended purpose and processing objectives. The Administrator also assures that all efforts are made to secure the data held against loss, by applying appropriate physical and organizational security measures.
  • Password storage The Administrator declares that passwords are stored in encrypted form, using the latest standards and guidelines in this regard. Decryption of access passwords provided in the Service is practically impossible.

§5 Purposes for which Cookies are Used

  • Improving and facilitating access to the Service
  • Service Personalization for Users
  • Enabling login to the service
  • Marketing, Remarketing on external services
  • Ad serving services
  • Affiliate services
  • Statistics management (users, number of visits, device types, connection, etc.)
  • Serving multimedia services
  • Provision of social services

§6 Purposes of Personal Data Processing

Personal data voluntarily provided by Users are processed for one of the following purposes:

  • Electronic service delivery:
    • User account registration and maintenance services on the Website and related functionalities
    • Newsletter Services (including transmission of advertising content with consent)
    • Commenting/liking posts on the Service without registration
    • Information sharing services about content placed on the Service on social networking sites or other websites.
  • Communication of the Administrator with Users regarding the Service and data protection
  • Ensuring the Legally Justified Interest of the Data Controller

User data collected anonymously and automatically is processed for one of the following purposes:

  • Maintaining statistics
  • Remarketing
  • Serving ads tailored to user preferences
  • Affiliate program management
  • Ensuring the Legally Justified Interest of the Data Controller

§7 Third-Party Website Cookies

The Service Administrator uses JavaScript scripts and web components from partners who may place their own cookies on the User's Device. Please remember that you can decide for yourself in your browser settings which cookies are allowed to be used by individual websites. Below is a list of partners or their services implemented in the Service that may place cookies:

Services provided by third-party entities are beyond the Administrator's control. These entities may change their terms of service, privacy policies, data processing purposes, and cookie usage methods at any time.

§8 Types of Data Collected

The Service collects data about Users. Some data is collected automatically and anonymously, while other data consists of personal data voluntarily provided by Users when signing up for specific services offered by the Service.

Anonymous data collected automatically:

  • IP Address
  • Browser type
  • Screen resolution
  • Approximate location
  • Opened website subpages
  • Time spent on the correct website subpage
  • Operating system type
  • Previous page address
  • Referrer URL
  • Browser language
  • Internet connection speed
  • Internet Service Provider
  • Demographic data (age, gender)

Data collected during registration:

  • Name / Surname / Nickname
  • Log in
  • Email address
  • IP Address (Collected Automatically)

Data collected during newsletter signup

  • Name / Surname / Nickname
  • Email address
  • IP Address (Collected Automatically)

Data collected during comment submission

  • Name / Nickname
  • Email address
  • IP Address (Collected Automatically)

Some data (without identifying data) may be stored in cookies. Some data (without identifying data) may be transferred to a statistical service provider.

§9 Access to Personal Data by Third Parties

As a general rule, the sole recipient of personal data provided by Users is the Administrator. Data collected within the scope of services provided are not transferred or resold to third parties.

Access to data (most often based on a Data Processing Agreement) may be held by entities responsible for maintaining the infrastructure and services necessary for operating the service, such as:

  • Hosting companies providing hosting or related services to the Administrator
  • Companies through which the Newsletter service is provided

Entrusting the processing of personal data – Newsletter

Administrator uses a third-party service for the provision of the Newsletter service. Freshmail, . The data entered in the newsletter signup form is transmitted, stored, and processed in an external service of this service provider.

We inform you that the indicated partner may modify the indicated privacy policy without the Administrator's consent.
Entrustment of personal data processing – Hosting, VPS, or Dedicated Server Services

The administrator uses the services of an external provider for hosting, VPS, or dedicated servers for the operation of the service - ADMIN.NET.PL Tomasz Rzepka Arkadiusz Nowara S.C.. All data collected and processed on the website are stored and processed within the service provider's infrastructure located in Poland. There is a possibility of access to the data as a result of maintenance work carried out by the service provider's personnel. Access to this data is governed by the agreement concluded between the Administrator and the Service Provider.

§10 Method of personal data processing

Personal data provided voluntarily by Users:

  • Personal data will not be transferred outside of the European Union, unless it has been published as a result of the User's individual action (e.g., entering a comment or post), which will make the data accessible to anyone visiting the service.
  • Personal data will not be used for automated decision-making (profiling).
  • Personal data will not be resold to third parties.

Anonymized data (without personal data) collected automatically:

  • Anonymous data (without personal data) will be transferred outside the European Union.
  • Anonymized data (without personal data) can be used for automated decision-making (profiling).
    Profiling of anonymized data (without personal data) does not trigger legal consequences or similarly significantly affect the data subject in automated decision-making.
  • Anonymous data (without personal data) will not be resold to third parties.

§11 Legal Basis for Processing Personal Data

The service collects and processes User data based on:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
    • Art. 6(1)(a)
      the data subject has given consent to the processing of their personal data for one or more specified purposes
    • Article 6(1)(b)
      processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
    • Art. 6 sec. 1 lit. f
      processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
  • Act of May 10, 2018, on the Protection of Personal Data (Journal of Laws 2018, item 1000)
  • Act of July 16, 2004, Telecommunications Law (Journal of Laws 2004 No. 171 item 1800)
  • Act of February 4, 1994, on Copyright and Related Rights (Journal of Laws 1994 No. 24 item 83)

§12 Personal Data Processing Period

Personal data provided voluntarily by Users:

As a general rule, the indicated personal data are stored only for the period of providing the Service within the Website by the Administrator. They are deleted or anonymized within 30 days from the moment of completion of service provision (e.g., deletion of a registered user account, unsubscribing from the Newsletter, etc.).

An exception is made for situations that require the protection of legally justified purposes for further processing of this data by the Controller. In such a situation, the Controller shall retain the indicated data from the time of the User's request for their deletion, for no longer than 3 years in the event of a violation or suspected violation of the service's terms and conditions by the User.

Anonymized data (without personal data) collected automatically:

Anonymous statistical data, which does not constitute personal data, is stored by the Administrator for the purpose of maintaining service statistics indefinitely.

§13 User Rights Related to Personal Data Processing

The service collects and processes User data based on:

  • Right to access personal data
    Users have the right to access their personal data, which is exercised upon a request submitted to the Administrator.
  • Right to rectification of personal data
    Users have the right to request from the Controller the immediate correction of personal data that is inaccurate and/or the completion of incomplete personal data, to be exercised by a request submitted to the Controller.
  • Right to erasure of personal data
    Users have the right to request the immediate deletion of personal data from the Administrator, which is exercised upon a request submitted to the Administrator. In the case of user accounts, data deletion involves anonymizing data that enables the User's identification. The Administrator reserves the right to suspend the fulfillment of a data deletion request to protect the Administrator's legally justified interests (e.g., when the User has violated the Terms and Conditions or when data has been obtained as a result of ongoing correspondence).
    For the Newsletter service, the User has the option to delete their personal data independently by using the link included in every email sent.
  • The right to restrict the processing of personal data
    Users have the right to restrict the processing of personal data in cases specified in Article 18 of the GDPR, including disputing the accuracy of personal data, which is exercised upon a request made to the Administrator.
  • Right to data portability
    Users have the right to obtain from the Administrator personal data concerning the User in a structured, commonly used, machine-readable format, exercised upon request submitted to the Administrator.
  • Right to object to the processing of personal data
    Users have the right to object to the processing of their personal data in cases specified in Article 21 of the GDPR, exercised upon a request submitted to the Controller.
  • Right to lodge a complaint
    Users have the right to lodge a complaint with the supervisory authority responsible for data protection.

§14 Contact the Administrator

You can contact the Administrator in one of the following ways

  • Mailing address Maxie Hill Ltd., ul. Św. Marcin 29/8, 61-806 Poznań
  • Email address office@maxiedisc.com
  • Phone call – +48 570 490 040
  • Contact Form – available at: https://maxiedisc.com/kontakt/

§15 Service Requirements

  • Restricting the writing and access to cookies on the User's Device may cause some Service functions to malfunction.
  • The Administrator shall not be held liable for any malfunction of the Service's features if the User restricts the ability to save and read cookies in any way.

§16 External Links

In the Service- articles, posts, entries, or User comments may contain links to external websites with which the Service Owner does not cooperate. These links, and the pages or files indicated by them, may be dangerous for your Device or pose a threat to the security of your data. The Administrator is not responsible for content located outside the Service.

§17 Changes to the Privacy Policy

  • The Administrator reserves the right to change this Privacy Policy at any time without notifying Users regarding the processing and use of anonymous data or the use of Cookies.
  • The Administrator reserves the right to change this Privacy Policy at its discretion regarding the processing of Personal Data, of which Users with user accounts or subscribed to the newsletter service will be informed via e-mail within 7 days of the changes. Further use of the services means familiarization with and acceptance of the introduced changes to the Privacy Policy. In the event that the User does not agree with the introduced changes, they are obliged to delete their account from the Service or unsubscribe from the Newsletter service.
  • Changes made to the Privacy Policy will be published on this subsection of the Service.
  • The introduced changes come into effect upon their publication.