The data Controller is MINE BEST SP. Z O.O., incorporated under the laws of Poland with its registered office in Warsaw, Poland, Jerzego Ficowskiego 15, 01-747 Warsaw, entered in the register of entrepreneurs of the National Court Register kept by the 14th Commercial Department of District Court for the city of Warsaw under no. KRS 0000711283, tax identification no. NIP 8381858527, statistical number REGON 36908496200000, (hereinafter referred to as the ‘Company’ or the ‘Controller’) may collect and process data (including personal data) concerning the users (hereinafter the ‘User’) of this website and/or any services (i.e. technical assistance/support, means of communication, customer services, complaints) (hereinafter the ‘Services’).
The Controller declares to ensure a high standard of protection of the data belonging to the User, interested parties and visitors to www.leiagabriel.com. This Privacy Policy (hereinafter the ‘Policy’) sets forth the rules for the collection, processing and use of the Personal Data of the website’s users, interested parties and visitors.
The purpose of this Policy is primarily to inform the User, visitors and interested parties about their rights in relation to the processing of their data by the Controller.
In the event of any questions or concerns regarding data protection, please contact the Controller directly at privacy@leiagabriel.com.
Any personal data are processed by the Controller in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (further: ‘GDPR’).
The Controller does not intentionally collect Personal Data of children aged below 16, without the consent of the child’s parent or legal guardian. In the case of doubt, parents and legal guardians are asked to contact the Company at privacy@leiagabriel.com.
Your Personal Data may be processed for the purpose of:
performing a contract or taking an action at your request prior to the conclusion of a contract, and for the purpose of pursuing claims under the contract - Article 6(1)(b) and/or (f) GDPR;
answering the questions, you asked through the contact form and/or address e-mail, which is in the exercise of the Company’s legitimate interest - Article 6(1)(f) GDPR;
fulfilling the Company’s legal obligations, including tax and accounting legislation - Article 6(1)(c) GDPR;
direct marketing activities through the information channel of your choice as well as adapting our websites, offers and advertising to your interests, which are based on your voluntary and explicit consent - Article 6(1)(a) GDPR;
providing you marketing information about our products and services as well as relevant third-party products and services by other means, such as advertising on websites which is based on Company’s legitimate interest - Article 6(1)(f) GDPR;
The provision of Personal Data by the User is voluntary, however it is required in accordance to be able to use the Controller’s services provided through www.leiagabriel.com.
Depending on the type of the Services and the scope of consents granted by the User, the Company processes one or more information of the data stored: name/surname, e-mail address, IP address; and other technical information (e.g. regarding type of devices and other tools, web browser), information necessary to provide technical assistance or support (e.g. parameters, logs, other descriptions), pages opened, duration of the visit, number of the various page views, number of visits, referral source, data of the ISP and the subscriber’s data - however, these shall only be used for statistical purposes or to ensure the correct operation of the website.
Under the applicable law, the following rights are vested in the User, in particular:
the right to access to the Personal Data;
the right to request to rectify, correct or delete the Personal Data;
the right to object (forbid) to the processing of the Personal Data;
the right to request a restriction of the Personal Data processing;
the right to request a transfer of the Personal Data to another entity;
The User has the right to request the erasure of the Personal Data (the right to be forgotten) without undue delay if:
the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
the consent given earlier has been effectively revoked, unless The Company has the right to process the data on another legal ground;
the User objects to the processing of Personal Data for marketing purposes;
the deletion of Personal Data would be necessary to fulfil The Company’s legal obligation;
the processing of the data was not in accordance with the applicable law;
the User objects to the processing (also by profiling) of Personal Data, based on the legally legitimate interest pursued by the Company or by the third party, unless there are valid, legally justified grounds for processing of the User’s Personal Data that override the interests, rights and freedoms of the User or there are grounds for establishing, exercising or defending legal claims.
The User has the right to withdraw a consent to the processing of Personal Data at any time, but the withdrawal does not affect the lawfulness of processing based on the consent before its withdrawal.
The User has the right to submit a complaint to a data protection authority – President of the Personal Data Protection Authority (PUODO) in Poland. You can exercise this right when you believe that we are processing your data without justification or in a manner inconsistent with the applicable law.
In order to exercise the aforesaid right or in the case of any questions or doubts about the Personal Data protection, please contact the Controller at privacy@leiagabriel.com.
The Company may be obliged to provide the Personal Data to the following category of recipients, in particular:
business partners or Company’s affiliates – if necessary, in connection with The Company’s business activity, especially for the purpose of performing contracts with such third parties, providing services and ensuring the appropriate standards of performance and compliance with the provisions of the law and safety requirements, communicating with the User and with third parties, meeting financial obligations and responding to User’s requests and legal demands;
third parties providing day-to-day services for the Company (e.g. legal advisors, tax advisors, IT service providers, auditors, accounting companies, outsourced workforce providers, customer service, software providers, e-mail operators, server hosting providers);
entities entitled upon binding regulations (e.g. administrative bodies, supervisory bodies, regulators, law enforcement bodies);
other parties as notified to the User at the time of Personal Data collection;
The Company may enter into written data processing contracts with another entity (further: the ‘Processor’). The right to enter into such contracts arises from the provisions of the law. The Company transfers the Personal Data solely in the scope necessary for realization of aim agreed with the Processor and only to the extent necessary for the purposes of such aim, applies all required legal and technical measures for protection of the Personal Data in order to ensure the highest quality of the Services.
Additionally, please be informed that your Personal Data may be transferred outside the European Economic Area to an entity such as, in particular, Google LLC. The USA does not ensure an adequate level of protection of your data (mainly due to the loss of legal force of the Privacy Shield) due to the lack of a decision by the European Commission regarding the determination of an adequate level of Personal Data protection and we do not provide appropriate safeguards specified in Article 46 GDPR, including we have not concluded standard contractual clauses with the data recipient, and we do not have binding corporate rules. Therefore, we would like to inform you that there is a risk of insufficient protection of your data. In this case, the basis for the transfer of personal data is your voluntary consent in accordance with the Article 6(1)(a) GDPR.
The Company stores the Personal Data solely for the period necessary for obtaining purposes specified in this Privacy Policy for which the Personal Data have been collected. In certain extraordinary situations, longer retention periods may be required under the applicable law (e.g. settlement, tax issues, legal proceedings/claims). However, in each case data retention is based on the appropriate legal basis – e.g. consent or binding provision of law.
Personal Data will be processed over time specified as:
fulfilling the legal obligations arising from the provisions of the GDPR in connection with the exercise of User’s rights and archiving the requests made to the Company or informing about privacy risks, as well as fulfilling the obligations arising from tax law and other applicable legal regulations - until the expiry of the limitation periods;
necessary in the context of contact through a form/e-mail or other application and necessary for the preparation and presentation of a response or offer of cooperation - until the objection is raised or consent to such contact is revoked;
to conduct marketing activities regarding the news, services and products we offer - until such processing is objected or until withdrawn of the consent to receive information with such content;
if the processing of Personal Data is based on the consent – until it is withdrawn;
Please be informed that in order to function properly, www.leiagabriel.com uses cookies.
Cookies are small information in the form of a text file, sent by the website and then saved on the end device (computer, tablet, smartphone), which are used to browse the web (further: ‘Cookies’).
This website uses its own Cookies (their purpose is to ensure the proper functioning of the websites functionality), while third party Cookies (required in order to use the functions provided by third parties) are used by third party systems (Google Analytics, social media plugins etc.).
The website uses three types of Cookies:
Session Cookies – temporary files, saved on the User’s device until the user signs out, leaves the website or closes the browser;
Permanent Cookies – saved on the User’s device for the time specified in its parameters or until its deletion by the User;
Local storage - stored on the User’s device for a definite or indefinite period or until its deletion by the User;
The purpose of using Cookies is not to collect any Personal Data about the User visiting the website, however it is not excluded that the information collected through Cookies may be recognized as Personal Data.
Cookies are used for the purposes of:
maintenance of the started session;
configuration of the website and adjusting it to the preferences of the User;
analysis of the clicks, displays and visits to the website, maps of moving around the website, time spent on the website;
marketing analysis and statistics;
In some circumstances, the Controller may work with third parties to provide services on the website. For example, third-party analytics providers may use their own Cookies to collect information about User’s activities and/or the marketing statistics. This information may be used for statistical purposes and analysing of the traffic recorded on the website and also for optimizing the functionality of it (to be more accessible, intuitive). The Controller does not control these Cookies. In order to disable or reject third-party Cookies, please refer to the relevant third party’s website.
External cookies of social networking sites (e.g. Facebook, LinkedIn, Twitter, Instagram, Google) are attached by the Company to use their interactive features. If you are simultaneously logged on to a specific social media platform, third-party Cookies may identify your visit to the website and collect information about your Internet usage habits. To prevent such Cookies from collecting information log out of your user account on social media platform and/or turn off Cookies by your current browser’s settings.
The following third-parties can use their own Cookies on the website:
www.google.com
www.linkedin.com
www.facebook.com
www.youtube.com
www.twitter.com
www.instagram.com
During the first visit to the website, information regarding Cookies used is displayed. By activating the "Accept" button, you agree to save cookies on the terminal device you use. You can always change the settings for Cookies or delete them from your browser.
The links to guides how to disable the option of accepting Cookies in the popular browsers are presented below:
We point out that disabling, limiting or not accepting Cookies may result in malfunctioning of the website or other unforeseeable difficulties.
Collected server logs, containing, in particular User’s IP address, time of arrival of the request, the first line of the http request, the http response code, number of bytes sent by the server, information about the user’s browser, information about errors that occurred during the HTTP transaction, information about the type of devices is stored indefinitely.
Access to the above information is available to authorized persons who administer the Company’s website. The above data do not identify specific Users browsing the website and is used only for server administration purposes. Files with logs can be analysed for statistical purposes (website traffic, errors).
The Controller uses technical and organizational measures to protect the processed Personal Data adapted to the risks and categories of data covered by protection. The data are protected technically and organizationally against unauthorized access, processing in violation and change, loss, damage or destruction.
We apply the principle of data minimization in accordance with the GDPR regulations, processing only those that are solely necessary to provide our services and maintain satisfactory quality for users.
The Controller shall take the appropriate measures to ensure:
protection of Personal Data against loss, unauthorized access and/or use, destruction, modification or disclosure;
appropriate technical and organizational safeguards (e.g. SSL certificate);
protection of Personal Data according to the level of risk and specific categories of Personal Data;
We would like to emphasize that the use of the Internet and related services may cause the risk of cyber attacking, including unauthorized access by third parties to any data. Avoidance or minimization of possible threats is possible thanks to the application of appropriate technical security measures, e.g. through the use of antivirus programs and their current update, or other measures protecting the Users identification on the Internet. Detailed information on maintaining security on our website can be found at privacy@leiagabriel.com.
This website may contain links to the other external websites. The Controller is not responsible for the content provided by such websites and the User is obliged to read the privacy policy or other regulations of visited websites.
The Controller is not liable for usage by other users or third parties of any Personal Data made publicly available by the users themselves through the www.leiagabriel.com.
Please, be informed that this Privacy Policy can be amended at any time. This Privacy Policy is updated on a regular basis and made available on the website www.leiagabriel.com.
We recommend that you read through the contents regularly.
The current version of the Privacy Policy is effective from 1st December 2020.