1. General Information
1.1 This Privacy Policy applies to the personal data of users (hereinafter referred to as “Users”) of the website available at www.clpb.pl (hereinafter referred to as the “Website”), as well as other categories of individuals specified in this Privacy Policy.
1.2 The controller of the personal data of Website Users is the Service Provider, namely Centralne Laboratorium Pomiarowo-Badawcze Sp. z o.o., with its registered office in Jastrzębie-Zdrój (44-335), ul. Rybnicka 6, entered in the Register of Entrepreneurs maintained by the District Court in Gliwice, 10th Commercial Division of the National Court Register under KRS No. 0000035253 (hereinafter referred to as the “Company”).
1.3 The personal data of Website Users are processed by the Service Provider for the purpose of operating the Website, in particular to:
A. ensure the proper functioning of the Website;
B. investigate cases of unauthorized use of the Website;
C. prepare internal reports and analyses (including statistics concerning Website page views);
D. improve the quality of the Website;
E. send, by electronic means, a newsletter ordered by the User to the e-mail address provided by the User.
1.4 Contact details of the Company's Data Protection Officer:
Anna Magnuszewska
Centralne Laboratorium Pomiarowo-Badawcze Sp. z o.o.
ul. Rybnicka 6
44-335 Jastrzębie-Zdrój
E-mail: [email protected]
1.5 The above person should be contacted regarding any matters related to the protection of personal data processed by the Service Provider.
Exercise of Data Subject Rights
1.6 Every natural person (hereinafter referred to as the “Applicant”) has the right to request that the Service Provider:
A. confirm whether their personal data are being processed and provide access to such data;
B. rectify personal data;
C. erase or restrict the processing of personal data;
D. transfer personal data, including the right to receive such data and transmit them to another controller or request, where technically feasible, direct transmission to another controller (where processing is carried out by automated means and based on a contract or consent);
E. object to the processing of personal data (where the processing is based on the Company's legitimate interests).
1.7 Requests referred to above shall be carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). This means that, in certain cases specified by the GDPR, the above rights may not apply.
1.8 Requests should be submitted in writing to:
Centralne Laboratorium Pomiarowo-Badawcze Sp. z o.o.
ul. Rybnicka 6
44-335 Jastrzębie-Zdrój
or by e-mail to:
If the Service Provider does not process the Applicant’s personal data (other than data necessary to process the request itself), the request will not be fulfilled and the Applicant’s data will be deleted without undue delay.
1.9 Upon receipt of a request, the Service Provider shall immediately inform the Applicant and record the request in its internal register.
1.10 The Service Provider reserves the right to verify the Applicant’s identity. Failure to successfully verify identity due to circumstances attributable to the Applicant shall result in refusal to process the request. The Applicant will be informed accordingly without delay.
1.11 Requests are examined by the relevant department of the Service Provider without undue delay, but no later than within 10 days of receipt. The Company's Data Protection Officer is consulted regarding the handling of each request.
1.12 The Service Provider shall provide a response no later than three (3) weeks from receipt of the request. In objectively complex cases requiring significant effort by the Company, this period may be extended to two (2) months. The Applicant shall be informed of such extension without delay.
1.13 In response to a data access request, the Applicant shall receive information including:
- the purposes of processing;
- categories of personal data processed;
- recipients or categories of recipients to whom the data have been or will be disclosed, including recipients in third countries or international organizations;
- the planned retention period or the criteria used to determine that period;
- where personal data were not collected from the data subject, any available information about their source;
- information about automated decision-making, including profiling, and meaningful information about the logic involved and the consequences of such processing;
- the right to request rectification, erasure, restriction of processing, or to object to processing (where applicable);
- the right to lodge a complaint with a supervisory authority.
1.14 When fulfilling the right of access or the right to data portability, the Service Provider shall provide a copy of the Applicant’s personal data in commonly used, machine-readable formats.
1.15 Any complaints concerning the application of this procedure should be submitted to the Data Protection Officer (DPO) at:
Centralne Laboratorium Pomiarowo-Badawcze Sp. z o.o.
ul. Rybnicka 6
44-335 Jastrzębie-Zdrój
Complaints shall be examined without undue delay, but no later than within 10 days of receipt.
Other Provisions
1.16 Where the Service Provider requests consent for the delivery of commercial information by electronic means (e.g., e-mail, SMS, Bluetooth, etc.), the person who has granted such consent may withdraw it at any time by sending an e-mail to the address specified in point 1.4 with the word “unsubscribe” in the subject line. The same applies to any other consent obtained through the Website.
1.17 The Service Provider undertakes to make every effort to ensure a high level of security when using the Website. Any incidents affecting information security should be reported to the address specified in point 1.4.
1.18 The Service Provider reserves the right to disclose selected information concerning a User to competent authorities or third parties requesting such information where there is an appropriate legal basis and in accordance with applicable law.
1.19 Except as provided in point 1.18, information concerning a User shall not be disclosed to any third party or authority without the consent of the data subject.
Cookies and System Logs
1.20 When a User connects to the Website, information about the User’s device, including its number (including IP address) and type, is recorded in the Website’s system logs. The Service Provider also processes data concerning the User’s IP address, device type, connection time and other operational data related to the User’s activity on the Website. Such data are processed in particular for technical purposes and general statistical analysis.
1.21 The Service Provider uses cookies (small text files sent to the User’s device) to collect information related to the User’s use of the Website. Cookies enable:
- maintaining the User’s session,
- adapting the Website to the User’s preferences,
- creating page-view statistics.
1.22 Users may change cookie settings at any time by modifying their web browser settings. Browser settings may be configured to block cookies automatically or to notify the User each time cookies are stored on their device. Detailed information on managing cookies is available in the settings of the web browser used.
1.23 Certain sections of the Website and other forms of communication with Users may contain so-called web beacons (electronic images, also known as clear GIFs). Web beacons allow information to be collected, such as:
- the IP address of the device accessing the page,
- the URL of the page,
- page loading time,
- browser type,
- information stored in cookies,
for the purpose of measuring the effectiveness of advertisements and other Website functions.
Hosting
1.24 Under a written data processing agreement, the Service Provider entrusts the processing of all personal data provided by Users, as well as other data referred to in this Privacy Policy, to Advicom Sp. z o.o. for the purposes of hosting, administration, maintenance and management of the Website.
Final Provision
1.25 Date of the last update of this Privacy Policy: 25 May 2018.