Privacy policy

1. General Terms
   The Privacy Policy defines how Users’ personal data necessary for the provision of electronic services via the website www.daitose.com (hereinafter: the “Service”) is collected, processed, and stored. The Service collects only the personal data necessary for the provision and development of the services offered therein. Personal data collected through the Service is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR), as well as the Personal Data Protection Act of 10 May 2018.
2. Data Controller
   The Data Controller of the personal data collected through the Service is DAI TO SE MICHAŁ WAWRZYNEK, JAKUB KOJDER CIVIL PARTNERSHIP, 357, 34-146 Stryszów, NIP: 5512661871. Contact address: hello@daitose.com (hereinafter: the “Controller”).
3. Purpose of Collecting Personal Data
   Dane osobowe wykorzystywane są w celu: rejestracji konta i weryfikacji tożsamości Użytkownika, umożliwienia logowania do Serwisu, realizacji umowy dotyczącej usług i e-usług, komunikacji z Użytkownikiem (livechat, formularz kontaktowy itp.) wysyłki newslettera (po wyrażeniu zgody Użytkownika na jego otrzymywanie), prowadzenia systemu komentarzy, świadczenia usług społecznościowych, promocji oferty Administratora, marketingu, remarketingu, afiliacji, personalizacji Serwisu dla Użytkowników, działań analitycznych i statystycznych, windykacji należności, ustalenia i dochodzenia roszczeń albo obrony przed nimi.
   Podanie danych jest dobrowolne, ale niezbędne do zawarcia umowy albo skorzystania z innych funkcjonalności Serwisu.
4. Type of Personal Data Processed
   The Controller may process the User’s personal data: first and last name, date of birth, residential address, e-mail address, telephone number, and tax identification number (NIP).
5. Period of Personal Data Processing
   Users’ personal data will be processed for the following periods: • where the legal basis for processing is the performance of a contract – until the expiry of the limitation period for claims arising after its performance, • where the legal basis for processing is consent – until such consent is withdrawn, and after withdrawal until the expiry of the limitation period for claims. In both cases, the limitation period is 6 years, and for claims for periodic performance and claims relating to business activity – 3 years (unless a specific provision provides otherwise).
6. Disclosure of Personal Data
   Users’ personal data may be transferred to: entities affiliated with the Controller, its subcontractors, and entities cooperating with the Controller, e.g. companies handling electronic payments, courier/postal service providers, or law firms. Users’ personal data may also be transferred outside the European Economic Area (EEA).
7. Users’ Rights
   

   The User of the Service has the right to: access their personal data, rectify it, erase it, restrict its processing, transfer it, object to its processing, and withdraw consent at any time (which does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal). A request to exercise any of the above rights should be sent to: hello@aleolio.com. The Controller shall comply with or refuse such a request without undue delay – no later than within one month of its receipt. The User also has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing of their personal data violates their rights and freedoms under the GDPR.

8. Cookies
   The Service collects information using cookies – session, persistent, and third-party. The collection of cookies supports the proper provision of services on the Service and serves statistical purposes. The User may define the scope of access of cookies to their device in the browser settings.
9. Automated Decision-Making and Profiling
   Users’ data shall not be processed in an automated manner that could result in any decisions being made with respect to them. Users’ data may be subject to profiling for the purpose of tailoring content and personalizing offers, provided that they have given their consent.
10. Final Provisions
    The Controller reserves the right to make changes to this Privacy Policy; however, the rights of Users will not be limited. Information about such changes will be made available in the form of a notice published on the Service.

In matters not regulated by this Privacy Policy, the provisions of the GDPR and the provisions of Polish law shall apply.