Privacy Protection Policy and the Use of Cookies

§1

General conditions

  1. In order to protect the privacy of the users of services provided on the site https://realm.com.pl (hereby known as the “Website”), as the owner and administrator of the Website – REALM Sp. z o.o. based in Warsaw, we hereby apply the following Privacy Policy.
  2. The administrator of your personal data surrendered during the use of the Website is REALM Sp. z o.o. based in Warsaw (postcode: 00-133) on al. Jana Pawła II 22, registered in the National Court Register by the Regional Court for the city of Warsaw in Warsaw, XII Commercial Division of the National Court Register with KRS number: 0000848629, with founding capital of PLN 5,000 (hereby known as the “Administrator”).
  3. he personal data of the users of the Website (hereinafter referred to as ‘Users’) are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the repeal of Directive 95/46/EC (hereinafter referred to as ‘GDPR’) and other currently applicable data protection legislation.
  4. By accepting this Privacy Policy, the User agrees to be bound by the regulations contained in the Website’s Privacy Policy.

§2

Purposes and Basis of Personal Data Processing

  1. This Policy applies to all persons using the Website.
  2. Your personal data may be processed for the purposes of:
    • the Administrator’s marketing, including monitoring advertising campaigns and analysing how the Website is used, tailoring content and offers to the User, with the possibility of conducting automated analysis;
    • analysing how Users use the Website, collecting statistics and reporting on its operation;
    • providing offers and information regarding services provided by the Administrator.
  3. The basis for the processing of personal data is the User’s expression of consent to the processing of his or her personal data (Article 6 paragraph 1 letter A of the GDPR) or for the necessity to take action at the request of the person to whom the data applies (Article 6 paragraph 1 letter B of the GDPR) or for the processing of data necessary for the fulfilment of the Administrator’s legal requirements (Article 6 paragraph 1 letter f of the GDPR), such as to determine, pursue or defend against claims, as well as for the archiving and billing purposes required by the GDPR.
  4. Providing personal data is voluntary, but necessary to use the Website and all its functions.
  5. The range of personal data processed is limited to the minimum required for the provision of Website services. The Administrator does not collect personal data as a rule. When visiting the Website, a Google cookie will be left on your device, which, with the use of an anonymous identifier (ID) records the pages visited and allows for the display and control of tailored advertisements.
  6. In the event the Administrator requests further information for a newsletter or contact form, such information may contain:
    • Name and surname;
    • E-mail address;
    • Telephone number.
  7. Your data may be stored for a maximum of 5 years, unless otherwise required by law.

§3

The Rights of Those whose Data is Collected

  1. In regard to the processing of personal data, you are entitled to certain rights, including:
    • the right to access the data – you have the right to obtain information from the Company as to whether your personal data is being processed by the Company, as well as to certain other information (e.g. the purpose for which the data is being processed, as well as the type of personal data collected). You also have the right to access your personal data, in the form of a copy of the personal data concerning you. This is to ensure that you are aware of and able to check how the Company uses your personal data. The Company may refuse to provide a copy of such personal data in a situation where this could negatively affect the rights of another person;
    • the right to rectify data – you have the right to demand that the Company immediately correct your personal data if it is incorrect or incomplete (e.g. when the Company processes your incorrect name and surname); 
    • the right to erasure (also known as the "right to be forgotten") - this allows you to request the erasure of your personal data where, for example, the data has been used unlawfully or where your consent has been withdrawn (where it was the sole basis for processing your data). However, the "right to be forgotten" does not constitute an absolute right to the erasure of your personal data, as there are certain exceptions to this, e.g. where the Company needs to continue to use the data to establish, pursue or defend legal claims or to comply with a legal obligation;
    • the right to restrict processing – you have the right to stop the Company from further using your personal data in the event that, for example, the Company is in the process of assessing a request to rectify your data. In the event of the processing of personal data being restricted, the Company may continue to store your personal data, but may not continue to actively use it (e.g. for marketing purposes);
    • the right to transfer data – you have the right to receive and reuse certain personal data for your own purposes from other entities (which are separate data controllers). This right applies only to your personal data that you have provided to us and that we process (automatically) with your consent or for the purpose of performing a contract. In such a case, we will provide you with a copy of your personal data in a structured, commonly used and machine-readable format or (if technically possible) we may transmit your data directly to another data controller. The Company may refuse to exercise this right where it could negatively affect the rights of another person.
  2. To the extent that the basis for the processing of your personal data is the pursuit of legitimate interests, you have the right to object to the processing of such data, in particular in connection with their processing for direct marketing purposes. However, the Company may continue to process personal data if it can demonstrate important and legitimate grounds for processing that override your interests, rights and freedoms or if it is necessary to establish, pursue or defend claims. If you object to the processing of your personal data for direct marketing purposes, we will not continue to process your personal data for such purposes.
  3. When the basis for processing personal data is consent, you have the right to withdraw your consent at any time. The withdrawal of your consent does not change the legality of any prior processing.
  4. You have the right to lodge a complaint with the compliance supervisory body for personal data protection (i.e. the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).
  5. In case of any questions regarding the processing of your personal data and the protection of your rights, the Website User may contact the Administrator by mail at the following address: al. Jana Pawła II 22, 00-133 Warsaw or by e-mail: biuro@realm.com.pl.

§4

Sharing and Entrusting Personal Data

  1. We inform you that your personal data will not be made available to any third party, except when an appropriate legal basis exists for the data administrator to make the data available and when such a legal basis exists for another party to access it including on the basis of services commissioned in accordance with concluded entrustment agreements. Parties to whom the data is entrusted are obliged to apply appropriate safeguards to secure the data.

§5

Protection of Personally Identifiable Information

  1. The Administrator will apply precautions and safeguards to ensure the protection of processed personal data, appropriate to the risk and type of data to be protected. Such data will be protected against unauthorised access, unauthorised processing, change, loss, damage or destruction.
  2. The Administrator will take measures in accordance with industry standards to protect the confidentiality of the data. Reasonable organisational, technical and physical controls will be applied to protect your personal data from loss, misuse or modification.

§6

Use of Technology

  1. Google Analytics
    • The Platform uses Google Analytics provided by Google Ireland Limited. ("Google"). This tool allows for the analysis of how the Platform is used, to create statistics and reports on its operation. Google does not use the data collected to identify the Platform user, nor does it collate this information to enable individuals to be identified. More information on the terms of use and data protection: https://www.google.com/analytics/terms/gb.html and https://policies.google.com/?hl=pl.
  2. Google Tag Manager
    • The Platform uses Google Tag Manager, which serves to control advertising campaigns and the use of the Platform. The service provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
    • As a result of visiting the Platform, a Google cookie is left on your device, which, with the help of an anonymous identifier (ID) and based on the pages you visit, enables the display of tailored advertisements and the control of these advertisements.

§7

Cookies

  1. The Administrator uses cookies, which are small information texts stored on the User's end device. They can be read by the Administrator's IT system from the User's end device, granting access to the information contained therein.
  2. Cookies are stored for the following purposes:
    • to provide services offered by the Administrator,
    • to adapt the services offered to the User’s preferences,
    • for the marketing, reporting and statistical purposes of the Administrator and its partners,
    • to present advertisements tailored to the User’s preferences.
    • Users are informed that it is possible to configure the web browser in such a way as to prevent the storage of cookies on the end device.
    • The Administrator also informs the User that cookies may be deleted after they have been saved by the Administrator using appropriate browser controls or with programs specifically for this purpose that are available within the operating system.
    • Information on how to delete cookies can be found at the links below:
      • Firefox: http://support.mozilla.org/pl/kb/usuwanie-ciasteczek,
      • Opera: http://help.opera.com/Linux/9.60/pl/cookies.html,
      • Internet Explorer: http://support.microsoft.com/kb/278835/pl,
      • Chrome: http://support.google.com/chrome/bin/answer.py?hl=pl&answer=95647,
      • Safari: http://support.apple.com/kb/HT1677?viewlocale=pl_PL

    §8

    Final Provisions

    1. This Policy will be amended when required by new legal regulations, by new guidelines from the personal data protection authorities or when other significant changes occur. We also reserve the right to amend the Policy in the event of technological changes that affect the processing of personal data, as well as in the event of a legal change to the basis, purposes or methods of processing personal data.