Introduction
If you have found your way to this document, it means that the security of your data is important to you. By conducting business activity under the name Organic Future Institute Katarzyna Kieszkowska we care for appropriate treatment of your personal data. Our goal is to duly inform you about matters related to the processing of your personal data, especially given the content of data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and the Council of 27.04.2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data and repealing Directive 95/46/EC (hereinafter: “RODO”). In this Privacy Policy, we inform you about the legal basis for processing your personal data, how we collect and use it, as well as your rights related to it.
This Privacy Policy also complies with the requirements set under the Telecommunications Act of 15 September 2017, in relation to the use of cookies (cookies). As the owner of the Naturally Balanced website, we are obliged to inform you about the aforementioned files that the website uses.
Personal Information
When does this Privacy Policy apply?
This Privacy Policy applies to all cases where we process your personal data. This includes cases where we process personal data obtained directly from you, as well as cases where your personal data was obtained from other sources.
2. how, on what legal basis and what types of personal data do we process?
We are transparent about how and on what legal basis we process personal data, as well as the purposes for which we process personal data. We take care to indicate the necessary information in this regard each time. In order to make the explanation of these issues as clear as possible, we present the following summary of personal data processing operations in connection with the website.
At the same time, we point out that whenever we process personal data on the basis of a legitimate interest (Article 6(1)(f) RODO), we try to analyse and balance our interest and the potential impact on your data (positive as well as negative) and your rights under data protection legislation.
3 Processing of personal data of website visitors
In connection with the use of the website, we process the following data sent by your browser to the server: IP address, date and time of the start of the session, time zone information, source page information, access status/http access code, address of the accessed page, browser type, operating system and its interface, browser language and software version.
The processing of this data is necessary for the proper operation of the website and to ensure stability and security. Their processing is based on Article 6(1)(f) of the RODO.
Explanations of cookies can be found in point 3 of this Privacy Policy.
4 Processing of personal data under the contact form
In the “contact” section of the website, you can find a contact form that allows you to submit an inquiry.
The contact form collects the following data: first name Optionally, within the content of the inquiry, you can provide other personal data, which is provided voluntarily and according to your will. The data mentioned above is necessary because it is possible to answer your question by providing it.
Personal data are processed on the basis of your consent expressed by entering the data in the form and sending them to us, i.e. pursuant to Article 6(1)(a) of the RODO. Consent is voluntary in nature.
The full scope of your rights and obligations in relation to the processing of personal data (in accordance with Article 13 RODO) is included in the information clause in section 2.5 of the Privacy Policy.
5. processing of personal data within the newsletter
By subscribing to the newsletter, you provide us with your data in the form of your email address via the newsletter subscription form. The provision of data is voluntary but necessary to subscribe to the newsletter. The legal basis for processing your personal data is Article 6(1)(a) of the RODO.
You can revoke your consent at any time.
The full scope of your rights and obligations in relation to the processing of personal data (in accordance with Article 13 RODO) is included in the information clause in Section 2.5 of the Privacy Policy.
6 Processing of personal data within Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies stored on your computer to analyse the use of the website. The information generated by the cookies about your use of the website is usually transferred to a Google server in the USA and stored there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by Google Analytics will not be merged with other data by Google. We use this tool to analyse and regularly improve the use of the website.
You can prevent the storage of cookies by setting your browser software accordingly or by using the appropriate browser plug-in.
The legal basis for processing your personal data is Article 6(1)(f) of the RODO.
The full scope of your rights and obligations in relation to the processing of personal data (in accordance with Article 13 RODO) is included in the information clause in Section 2.5 of the Privacy Policy.
7. processing of personal data in the context of orders made through our website
In a situation where you place an order through our website, it is necessary to provide the necessary data – name, address, email address – in order to process the order. Providing this data is voluntary; however, if you fail to provide it, we will not be able to process your order. Data collected from you in this way will be processed solely for the purpose of processing the order, issuing an invoice and for accounting or statistical purposes. The data will be processed until the expiry of the limitation period for claims under the concluded contract. Please note that once your order has been completed, you cannot dispute the data or object to the data processing until the expiration of the limitation period.
Once the statute of limitations has expired, you can object to the processing of your data for statistical purposes and request that your data be deleted from our database.
8 Social Media
On the website, you will find links to social media sites where information about us and our activities is posted. We, as the owner of the social network account, as well as the owner of the social network itself, are the data administrators of the social network.
9 How long is your personal data processed?
The length of time we will process your personal data depends on the legal basis for processing. We inform you that:
where we process personal data on the basis of consent, the processing period lasts until the intended purpose is achieved or the consent is withdrawn.
in case we process personal data for the purpose of performing a contract or undertaking activities prior to the performance of a contract (order fulfilment), for the period of the order fulfilment, and after its completion for the period of the statute of limitations for claims and archiving accounting documentation (5 years), in accordance with applicable law.
where we process personal data on the basis of legitimate interest, the period of processing lasts until the expiry of the aforementioned interest (e.g. the period of the statute of limitations for civil law claims) or until you object to further such processing – in situations where you are entitled to such objection under the law.
where we process personal data because it is necessary to do so under applicable law, the processing periods for that purpose are determined by those laws.
10. when and how are personal data shared with third parties? Do we transfer data to third countries?
We only transfer personal data to others if the law allows us to do so. In this case, we provide provisions and security mechanisms in the relevant contract with the third party in order to protect the data and maintain data protection, confidentiality and security standards.
11. disclosure of personal data to third parties in connection with the provision of services purchased through our website
If you purchase a specific service through our website, your personal data may be transferred to our cooperating entities – only for the purpose of proper performance of the service purchased by you. We assure you that in such a situation when we transfer personal data, we administer to other entities to perform certain activities on our behalf, we enter into a special agreement with such entity. Agreements of this kind are called contracts of entrustment of personal data processing (Article 28 of RODO), thanks to which we have control over how and to what extent the entity to which we entrusted the processing of certain categories of personal data processes them.
At the same time, we point out that in the above situation, your data may be processed in order to use the invoicing system, to use accounting, marketing, IT services, or to maintain your subscription. Your data may also be processed for the purpose of processing various types of payments that you make through our website. In this case, we will share your data with the online payment provider of your choice, but only to the extent necessary to process the payment.
12. what rights do you have, and how can you exercise them? [information clause]
You have certain rights regarding your personal data, and we, as the data controller, are responsible for exercising those rights in accordance with applicable law. If you have any questions or requests regarding the scope and exercise of your rights, you can contact us at the following details:
hello@ofi.org.pl
We will reply to the message received from you as soon as we have verified your identity.
13 Access to personal data
You have the right to access your data that we hold as a controller. You can exercise this right by sending us an email.
14. Amendment of personal data, its rectification or erasure
You can make changes, including updating, correcting or deleting your personal data that we process, by sending us an email.
You can exercise your right to erasure e.g. when your data is no longer necessary for the purposes for which it was collected by us or when you withdraw your consent to data processing.
15. withdrawal of consent
If we process your personal data on the basis of your consent, you may withdraw this consent at any time. We will inform you of this right at any time when we collect consent and allow you to withdraw your consent as easily as you gave it. In order to withdraw your consent, please send us an email.
16. right to restrict processing or to object to the processing of personal data
You have the right to restrict processing or object to the processing of your personal data at any time on the grounds of your particular situation unless the processing is required by law.
You can object to the processing of your personal data when:
– the processing of your personal data is carried out on the basis of a legitimate interest or for statistical purposes, and the objection is justified by your particular situation.
– the personal data are processed for direct marketing purposes, including being profiled for this purpose.
In turn, with regard to the request for restriction of data processing, we inform you that you are entitled to it when.
– you question the accuracy of the personal data – for a period allowing us to check the accuracy of the data.
– the processing is unlawful, and you object to the erasure of the personal data, requesting instead that their use be restricted.
– we no longer need your personal data for the purposes of the processing, but you need them to establish, assert or defend your claims.
– you have objected under Article 21(1) of the RODO to our processing of your data until we have determined whether the legitimate grounds on our side override your grounds for objection.
17. right to data portability
You have the right to data portability of data concerning you and you have the right to send this data via us to another controller if:
– the processing is based on consent, pursuant to Article 6(1)(a) of the RODO or Article 9(2)(a) of the RODO; or
– the processing is based on a contract in accordance with Article 6(1)(b) of the RODO; and
– the processing is carried out by automated means.
When exercising your right to data portability, you may request that we send your personal data directly to another controller, insofar as this is technically possible.
The right to data portability must not adversely affect the rights and freedoms of others. If you wish to exercise these rights, please send us an email.
Any other questions, concerns or complaints
In the event that you have any questions, objections or concerns about the content of this Privacy Policy or the manner in which we process personal data, as well as complaints regarding these matters, please send us an email with details of your complaint. Any complaints received will be investigated and responded to.
You also have the right to lodge a complaint to the supervisory authority, which is the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.
Cookie files (cookies)
As indicated in point 2.2. A, cookies are used within this website. Therefore, we inform you about the most important elements of cookies so that the use of our website is clear and understandable for you.
1. What are cookies?
Cookies are small files that are stored on your electronic device by websites that you visit. The cookies contain various information that is often necessary for the website to function correctly. Cookies are encrypted in such a way that unauthorised people cannot access them. We can only read the data collected by cookies and – for technical reasons – trusted partners whose services we use. Most importantly, cookies cannot run programs or transmit viruses to electronic devices.
2. for what purpose do we use cookies?
Basic cookies – installed if you have given your consent through the software’s settings installed on your electronic device. Within the basic cookies, we distinguish technical and analytical.
Technical cookies – are necessary for the website to work correctly.
Cookies are used to:
– ensure the proper display of the website – depending on what device you are using.
– Adapt the content to your choices of technical importance for the operation of the website, e.g. the chosen language
– remember whether you have given your consent to display certain content.
Analytical cookies are necessary to bill business partners or measure the effectiveness of marketing activities without identifying personal data and improve the website’s functioning. They can be used to:
– study statistics on website traffic and check traffic sources (redirection directions).
– Detect various types of abuse such as artificial internet traffic (bots).
3. how long are cookies used?
Session cookies – remain on your device until you leave the website or turn off the software (web browser). These are mainly technical cookies.
Permanent cookies – remain on your device for the time specified in the file parameters or until they are manually deleted by you.
Can I resign from accepting cookies?
You can always change your browser settings and refuse the request to install cookies. However, before you decide to change your settings, please note that cookies are for your convenience when using the website. Disabling cookies may cause the website to display incorrectly in your browser.
5. how to disable cookies?
You can delete cookies from your browser and block their reinstallation at any time.
Depending on the browser you use, the option to delete or withdraw consent to the installation of cookies may differ. In such a situation, you should read the instructions available in the given browser on your electronic device.
Final provisions
Can this Privacy Policy be changed and when?
We reserve the right to change this Privacy Policy if the technology by which we process personal data changes, or if the means, purposes or legal basis for processing personal data changes, or due to: new laws, new guidelines of the authorities responsible for the supervision of personal data protection processes. Each time, the information regarding the change of this Privacy Policy will be available on our website, and you will be able to familiarise yourself with its new content.
In order to ensure the best possible contact on the subject of personal data protection, we enable contact by letter (post) or email using the contact details provided below:
hello@ofi.org.pl