PRIVACY POLICY
Analytics and the form on this website
We run Google Analytics only with your consent. We store your choice in your browser for 180 days. You can change it by clicking "Privacy settings" in the footer. If you refuse, you can still use the website and contact us.
Once you give your consent, we count visits, clicks on the phone number and email address, and enquiries received through the form. In these events we do not send your name, email address, phone number or message content to analytics. We do not enable Google Analytics advertising features. Analytics cookies remain valid for up to 180 days.
Google reCAPTCHA protects the form against spam. It runs when you use the form, regardless of your consent to analytics. You can read more about Google services in the Google Privacy Policy.
Messages sent through the form are delivered to our company mailbox hosted by Zoho. The website has no user accounts and no enquiry dashboard. To limit spam, we store a hash of the IP address and the time of attempts to send the form outside the public directory of the website.
effective from 27 August 2020
Dear User and Service Recipient,
F.H.U. Sprint-Trans Przewozy Krajowe i Międzynarodowe Osób Beata Martuszewska, as the owner of the sprint-trans.pl website, makes every effort to ensure the security and confidentiality of your personal data. We protect your privacy when you visit our website, register an account on our website and use our services, as well as when you contact us by phone or email, sign up for our newsletter or visit our social media channels. We act in accordance with the law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "GDPR").
In this document we want to give you the most important information about the processing of personal data. For simplicity, we have set it out as questions and answers. Our aim is for you to learn for what purpose, on what legal basis and for how long we process your data, who has access to it and what rights you have.
Who is the controller of your personal data?
The controller of your personal data is
F.H.U. Sprint-Trans Przewozy Krajowe i Międzynarodowe Osób Beata Martuszewska
with its registered office at Siedlce 182, 33-322 Korzenna, Poland
Tax identification number (NIP): 734 120 95 90
If you have any questions or concerns, you can contact us electronically at the following email address: kontakt@sprint-trans.pl
For what purposes do we process personal data?
We process your personal data for the following purposes:
- to maintain your service recipient account – the personal data you provide when registering is necessary for you to be able to order our services;
- to provide our services – the personal data you provide is necessary to fulfil your order, settle the contract and, where applicable, pursue our claims;
- to answer questions you send us by phone or electronically, including through the form on our website and our social media communication channels (Facebook, Instagram, LinkedIn, YouTube);
- to send you our newsletter – on the basis of your consent to receive it;
- for marketing and statistical purposes – information about visits to our website and social media relates to the promotion and development of the sprint-trans.pl website and to our work on improving our products and the quality of the services we provide;
On what legal basis do we process personal data?
The legal basis for our processing of personal data is, as applicable:
- a contract, or steps taken at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR);
- the relevant provisions of law, where processing is necessary for compliance with a legal obligation to which we are subject (Article 6(1)(c) GDPR), for example regulations specifying the data we must include on an invoice;
- our legitimate interest in carrying out marketing activities, compiling statistics on the use of individual features of the website and maintaining business relations with you (Article 6(1)(f) GDPR);
- your consent, given unambiguously and freely (Article 6(1)(a) GDPR) – where we ask for such consent and it is given to us, for example if you wish to receive our newsletter;
- the establishment, exercise or defence of legal claims, which is our legitimate interest in bringing proceedings and defending against claims in proceedings before courts and other state authorities (Article 6(1)(f) GDPR).
How long do we process personal data?
We process personal data for as long as necessary to achieve the purposes set out above, unless you submit a valid and proper request for the erasure of your personal data. In addition, the processing period may depend on the legal provisions that apply to us, for example regarding the retention of financial documents or limitation periods for claims.
Do we share data with other parties?
In some situations, further transfer of personal data may be necessary for us to perform our contractual obligations and conduct our business properly and professionally. In every case, however, before sharing personal data, we require the recipient to guarantee adequate protection and confidentiality.
We may transfer your personal data to:
- entities involved in the performance of our contracts, for example accounting firms and IT service providers;
- our authorised employees and associates who need access to your data to perform their duties properly;
- competent state authorities under applicable law.
Do we transfer personal data to third countries?
As a rule, we do not transfer personal data to countries outside the European Union. However, if this becomes necessary in connection with the sale of our products and the provision of our services, we will assess the circumstances and ensure an adequate level of data protection, so that the processing complies with the applicable legal regulations.
We also inform you that, in running our website, we use services and technologies offered by companies such as Facebook, Microsoft and Google, which are based in the United States. Under the GDPR, these are entities located in third countries, for which an adequate level of protection or appropriate safeguards must be demonstrated. We therefore assure you that these entities have joined the Privacy Shield programme under the implementing decision of the European Commission of 12 July 2016 and guarantee that they will comply with the high standards of personal data protection that apply in the European Union. For this reason, the use of their services and technologies in the processing of personal data is lawful.
Do we make automated decisions when processing personal data?
We do not make automated decisions, in particular decisions that could produce legal effects concerning natural persons or similarly significantly affect them.
Do we use cookies?
Our website uses cookies, which are short text files stored on the user's computer, phone, tablet or other device. They can be read by our system and by systems belonging to other entities whose services we use (for example Facebook and Google). Cookies allow us to collect anonymous data about visits to the pages of our website, which we can then use to improve the features available on the website, identify errors or improve our marketing activities.
Web browsers usually allow cookies to be stored on the user's device by default. However, users can block and restrict the installation of cookies at their own discretion using their browser settings or one of the many available (free) tools. Please note that disabling or restricting cookies may make the website harder to use, for example by causing pages to load more slowly or limiting the use of certain features or liking the page on Facebook.
How do we protect your data?
To ensure a high and consistent level of protection, we apply IT security measures and technical and organisational measures appropriate to the processing, including, among others:
- TLS encryption,
- creating backup copies,
- equipping data centres with data protection mechanisms,
- carrying out regular security tests,
- monitoring the security of personal data,
- minimising the risk of potential misuse and responding quickly if it occurs,
- implementing a data protection policy,
- ensuring the ongoing confidentiality, integrity, availability and resilience of processing systems and services,
- allowing access to personal data only to authorised persons,
- creating and regularly changing passwords to the systems in which personal data is processed.
What rights do the people whose data we process have?
The people whose data we process have the right to:
- access their personal data;
- rectification of their personal data;
- erasure of their personal data;
- restriction of the processing of their personal data;
- object to the processing of their personal data;
- data portability;
- withdraw their consent to data processing.
These rights are not absolute, however, and in some situations, after analysis, we may lawfully refuse to fulfil them.
We also inform you that withdrawing your consent to data processing does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.
If you submit a request to us to exercise any of the above rights, we will respond to it without undue delay and in any event within one month of receipt. If, due to the complexity or number of requests, we are unable to fulfil your request within one month, we will fulfil it within a further two months. We will, however, inform you of the intended extension in advance.
How can you lodge a complaint about irregularities in the processing of personal data?
If you believe that we are processing your personal data in breach of the applicable law, you can lodge a complaint with the President of the Personal Data Protection Office (UODO).
Can we change our Privacy Policy?
Yes. Personal data protection is a process that we adapt to current needs and changing technology. For this reason, our Privacy Policy may be supplemented or amended. We will inform you of this by posting information on our website and, in the case of significant changes, we will send separate electronic notifications to registered service recipients.
This is a translation provided for information. The Polish version of this privacy policy is the binding one.