PRIVACY POLICY

Privacy Policy

This Privacy Policy outlines the rules for storing and accessing data on Users’ Devices who use the Service, for the purpose of providing electronic services by the Administrator, as well as the rules for collecting and processing Users’ personal data, which have been voluntarily and personally provided by them through the tools available on the Service.

This Privacy Policy constitutes an integral part of the Service Terms and Conditions, which define the rules, rights, and obligations of Users using the Service.

§1 Definitions

  • Service – the “atomicsystems.pl” website operating at https://atomicsystems.pl/

  • External Service – websites of partners, service providers, or contractors cooperating with the Administrator

  • Service/Data Administrator – the Administrator of the Service and the Data Administrator (hereinafter referred to as the Administrator) is the company “ATOMIC SYSTEMS sp. z o.o.”, operating at the address: ul. Józefińska 43/7, holding tax identification number (NIP): 945-22-01-902, providing electronic services via the Service

  • User – a natural person for whom the Administrator provides electronic services via the Service

  • Device – an electronic device with software, through which the User gains access to the Service

  • Cookies – text data collected in the form of files placed on the User’s Device

  • GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

  • Personal Data – means information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

  • Processing – means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction

  • Restriction of processing – means the marking of stored personal data with the aim of limiting their processing in the future

  • Profiling – means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements

  • Consent – the data subject’s consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them

  • Personal Data Breach – means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed

  • Pseudonymization – means the processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person

  • Anonymization – data anonymization is an irreversible process of data operations that destroys or overwrites “personal data” in a way that makes it impossible to identify or link a given record with a specific user or individual.

§2 Data Protection Officer

Pursuant to Article 37 of the GDPR, the Administrator has not appointed a Data Protection Officer.

For matters related to data processing, including personal data, please contact the Administrator directly.

§3 Types of Cookies

  • Internal Cookies – files placed and read from the User’s Device by the Service’s IT system.

  • External Cookies – files placed and read from the User’s Device by IT systems of External Services. The scripts of External Services that may place cookies on User Devices have been deliberately included in the Service through scripts and services provided and installed within the Service.

  • Session Cookies – files placed and read from the User’s Device by the Service during a single session of that Device. These files are deleted from the User’s Device after the session ends.

  • Persistent Cookies – files placed and read from the User’s Device by the Service until they are manually deleted. These files are not automatically removed after the Device session ends, unless the User’s Device is configured to delete cookies at the end of the session.
 
 

§4 Data Storage Security

  • Mechanisms for storing and reading Cookies – The mechanisms for storing, reading, and exchanging data between Cookies saved on the User’s Device and the Service are implemented through built-in web browser functions and do not allow for the retrieval of other data from the User’s Device or data from other websites visited by the User, including personal data or confidential information. It is also practically impossible for viruses, trojans, or other worms to be transferred to the User’s Device this way.

  • Internal Cookies – Cookies used by the Administrator are safe for User Devices and do not contain scripts, content, or information that could pose a threat to the security of personal data or the Device used by the User.

  • External Cookies – The Administrator makes every effort to verify and select service partners with regard to User security. The Administrator chooses to work with well-known, reputable partners with global public trust. However, the Administrator does not have full control over the contents of Cookies from external partners. To the extent permitted by law, the Administrator is not responsible for the security, content, or lawful use (in accordance with licenses) of Cookies originating from External Services via Scripts installed in the Service. A list of partners is provided later in this Privacy Policy.

  • Cookie control
     
  • User-side risks – The Administrator uses all possible technical measures to ensure the security of data stored in Cookies. However, it should be noted that data security depends on both parties, including the User’s own behavior. The Administrator is not responsible for data interception, session hijacking, or deletion resulting from conscious or unconscious actions of the User, viruses, trojans, or spyware that may have infected or is currently infecting the User’s Device. Users should follow best practices for safe internet use to protect themselves from such threats.

  • Storage of personal data – The Administrator ensures that all efforts are made to secure the personal data voluntarily submitted by Users. Access to such data is limited and carried out in accordance with its intended use and processing purposes. The Administrator also ensures that appropriate physical and organizational safeguards are in place to protect stored data from loss.

  • Password storage – The Administrator declares that all passwords are stored in encrypted form, using the latest standards and guidelines in this area. Decryption of passwords entered in the Service for account access is virtually impossible.
     

§5 Purposes for Which Cookies Are Used

  • Improving and facilitating access to the Service
  • Personalizing the Service for Users
  • Enabling login to the Service
  • Marketing and remarketing on external platforms
  • Advertising services
  • Affiliate services
  • Compiling statistics (e.g. users, visit counts, device types, connections, etc.)
  • Providing multimedia services
  • Delivering social networking services

    §6 Purposes of Personal Data Processing

    Personal data voluntarily provided by Users is processed for one of the following purposes:

    • Provision of electronic services:
      • Registration and maintenance of the User’s account in the Service and related functionalities
      • Newsletter service (including the sending of advertising content with the User’s consent)
      • Commenting on / liking posts in the Service without requiring registration
      • Sharing information about content posted on the Service via social media or other websites
    • Communication between the Administrator and Users regarding the Service and data protection
    • Fulfilling the Administrator’s legitimate interests

    User data collected anonymously and automatically is processed for one of the following purposes:

    • Compiling statistics
    • Remarketing
    • Serving advertisements tailored to User preferences
    • Operating affiliate programs
    • Fulfilling the Administrator’s legitimate interests

    §7 Cookies from External Services

    The Administrator uses JavaScript scripts and web components from partners in the Service, who may place their own cookies on the User’s Device. Please note that you can control which cookies are allowed by individual websites through your browser settings. Below is a list of partners or their services implemented within the Service that may place cookies:

    Services provided by third parties are beyond the Administrator’s control. These entities may change their terms of service, privacy policies, data processing purposes, and use of cookies at any time.

    §8 Types of Data Collected

    The Service collects data about Users. Some data is collected automatically and anonymously, while other data consists of personal information voluntarily provided by Users when signing up for specific services offered by the Service.

    Anonymous data collected automatically:

    • IP address
    • Browser type
    • Screen resolution
    • Approximate location
    • Subpages visited within the Service
    • Time spent on each subpage
    • Operating system type
    • URL of the previous page
    • Referring URL
    • Browser language
    • Internet connection speed
    • Internet service provider

    Data collected during registration:

    • First name / last name / nickname
    • Username
    • Email address
    • IP address (collected automatically)
    • Other basic personal data

    Data collected when signing up for the Newsletter service:

    • First name / last name / nickname
    • Email address
    • IP address (collected automatically)

    Data collected when adding a comment:

    • Full name / nickname
    • Email address
    • Website address
    • IP address (collected automatically)

    Some data (excluding identifying information) may be stored in cookies. Some data (excluding identifying information) may be transferred to a statistics service provider.

    §9 Access to Personal Data by Third Parties

    As a rule, the only recipient of personal data provided by Users is the Administrator. Data collected as part of the services provided is not transferred or sold to third parties.

    Access to the data (most commonly based on a Data Processing Agreement) may be granted to entities responsible for maintaining the infrastructure and services necessary for operating the Service, such as:

    • Companies through which the Newsletter service is provided.

    Entrusting Personal Data Processing – Newsletter

    In order to provide the Newsletter service, the Administrator uses a third-party provider – the MailChimp platform. Data entered in the newsletter subscription form is transferred to, stored, and processed by this external service provider.

    Please note that the mentioned partner may modify their privacy policy without the Administrator’s consent.

    §10 Method of Personal Data Processing

    Personal data voluntarily provided by Users:

    • Personal data will not be transferred outside the European Union unless published as a result of the User’s individual action (e.g., by posting a comment or entry), which will make the data available to anyone visiting the website.
    • Personal data will not be used for automated decision-making (profiling).
    • Personal data will not be sold to third parties.

    Anonymous data (non-personal data) collected automatically:

    • Anonymous data (non-personal data) may be transferred outside the European Union.
    • Anonymous data (non-personal data) will not be used for automated decision-making (profiling).
    • Anonymous data (non-personal data) will not be sold to third parties.

    §11 Legal Basis for Personal Data Processing

    The Website collects and processes Users’ data on the basis of:

    • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), specifically:
      • Art. 6(1)(a)
        the data subject has given consent to the processing of his or her personal data for one or more specific purposes
      • Art. 6(1)(b)
        processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
      • Art. 6(1)(f)
        processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
    • The Personal Data Protection Act of 10 May 2018 (Journal of Laws 2018, item 1000)
    • The Telecommunications Law Act of 16 July 2004 (Journal of Laws 2004 No. 171, item 1800)
    • The Copyright and Related Rights Act of 4 February 1994 (Journal of Laws 1994 No. 24, item 83)

    §12 Duration of Personal Data Processing

    Personal data voluntarily provided by Users:

    As a rule, such personal data is stored only for the duration of the Service provided by the Administrator through the Website. The data is deleted or anonymized within 30 days after the termination of the service (e.g., deletion of a registered user account, unsubscribing from the Newsletter, etc.).

    An exception applies in cases where it is necessary to preserve the data for legally justified purposes of further processing by the Administrator. In such cases, the Administrator may retain the data, starting from the moment the User requests its deletion, for no longer than 3 years in the event of a violation or suspected violation of the Website’s terms of service by the User.

    Anonymous data (non-personal data) collected automatically:

    Anonymous statistical data that does not constitute personal data is stored by the Administrator for the purpose of maintaining website statistics for an indefinite period.

    §13 User Rights Related to the Processing of Personal Data

    The Website collects and processes Users’ data based on:

    • Right of access to personal data
      Users have the right to access their personal data, which is granted upon request submitted to the Administrator.

    • Right to rectify personal data
      Users have the right to request the Administrator to promptly correct any inaccurate personal data and/or complete any incomplete personal data. This right is granted upon request submitted to the Administrator.

    • Right to erase personal data
      Users have the right to request the Administrator to promptly delete their personal data. This right is granted upon request submitted to the Administrator.
      In the case of user accounts, data deletion involves the anonymization of identifying information. The Administrator reserves the right to withhold the execution of a data deletion request if necessary to protect the Administrator’s legitimate interests (e.g., if the User has violated the Terms of Service or if the data was obtained as part of ongoing correspondence).
      In the case of the Newsletter service, the User may delete their personal data independently by using the unsubscribe link included in every email message.

    • Right to restrict the processing of personal data
      Users have the right to restrict the processing of their personal data in situations outlined in Article 18 of the GDPR, such as contesting the accuracy of the data. This right is granted upon request submitted to the Administrator.

    • Right to data portability
      Users have the right to receive their personal data from the Administrator in a structured, commonly used, machine-readable format. This right is granted upon request submitted to the Administrator.

    • Right to object to the processing of personal data
      Users have the right to object to the processing of their personal data in cases defined in Article 21 of the GDPR. This right is granted upon request submitted to the Administrator.

    • Right to lodge a complaint
      Users have the right to lodge a complaint with the supervisory authority responsible for personal data protection.

    §14 Contacting the Administrator

    You can contact the Administrator using one of the following methods:

    §15 Service Requirements

    • Restricting the storage and access to Cookies on the User’s Device may result in certain functions of the Service not functioning properly.

    • The Administrator bears no responsibility for any malfunctioning features of the Service in the event that the User in any way restricts the ability to store or read Cookies.

    §16 External Links

    The Service — including articles, posts, entries, or User comments — may contain links to external websites with which the Owner of the Service has no affiliation. These links, as well as the websites or files they point to, may pose a risk to Your Device or threaten the security of Your data. The Administrator is not responsible for any content located outside the Service.

    §17 Changes to the Privacy Policy

    • The Administrator reserves the right to make changes to this Privacy Policy at any time, without notifying Users, with regard to the use and processing of anonymous data or the use of Cookies.

    • The Administrator also reserves the right to make changes to this Privacy Policy concerning the processing of Personal Data. In such cases, Users who have a user account or are subscribed to the newsletter will be informed via email within 7 days of the changes taking effect. Continued use of the services constitutes acknowledgement and acceptance of the amended Privacy Policy. If a User does not agree with the changes, they are required to delete their account from the Service or unsubscribe from the Newsletter.

    • All changes to the Privacy Policy will be published on this subpage of the Service.

    • The changes take effect upon publication.

    Office:

    ATOMIC SYSTEMS sp z o.o.
    ul. Józefińska 43/7
    30-529 Kraków, Polska
    NIP: 945-22-01-902

    Production:

    ATOMIC SYSTEMS sp z o.o.
    ul. Graniczna 89,
    32-087 Bibice, Polska

    Contact:

    Mobile: +48 501 604 406
    E-mail: biuro@atomicsystems.pl

    Copyright © Atomicsystems.pl. All rights reserved.