- personal data, this means any information relating to an identified or identifiable natural person;
- service provider or equivalent to "us" – this should be understood polishleaks.pl, e-mail address: firstname.lastname@example.org;
- Account – this means an account on https://polishlekas.pl providing access to a non-public part of the Service, to which only those Users who have received an individual invitation to participate in non-public activities conducted through this part of the Service and are interested in such activities can register;
- website – this means the website available at https://polishleaks.pl/;
- user – this means the visitor to the site.
- GDPR – this means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC
Personal. Purposes of processing
If you are merely browsing the Service and familiar with public content, you do not need to inform us of your identity. The collection and processing of personal data may take place in connection with the user's use of services provided electronically on the Website. Providing personal data is also necessary for registration in the Account. With your voluntary consent, personal data may be processed for marketing purposes, including profiling, in relation to third-party products and services. At the same time, we inform you that it is not possible to use anonymously certain services, available in a private part of the Service, related to participation in non-public actions.
In addition, your data may also be processed in order to match the content of the Service Provider's websites to your interests, as well as the detection of bots and abuses, as well as statistical measurements and improvement of the services provided by the Service Provider.
Period of processing of personal data
The duration of the processing of your personal data depends on the purpose for which the processing is carried out.
Personal data used for marketing purposes are processed until you withdraw your consent to their processing for this purpose.
In relation to the services we provide, your data will be processed for the period during which these services will be provided and, sometimes, after their completion, but only if it is permitted or required by applicable law e.g. processing for statistical, billing or redress purposes. In this case, the data will be processed only for the period necessary for the performance of such purposes.
When it comes to matching the content of the Service provider to your interests, as well as detecting bots and abuses, statistical measurements and improving the service, your data will be processed for these purposes until you object or until you have finished using the services provided by us.
Legal basis for processing
The processing of your personal data is based on several grounds. In relation to the service we provide, your data will be processed on the basis of Art. Article 6 (1) 1(b) GDPR (this is necessary for the performance of a contract to which the data subject is a party). When it comes to matching the content of the publisher's portal to your interests, as well as detecting bots and abuse, as well as statistical measurements and improving the service, your data will be processed on the basis of Art. Article 6 (1) 1 point (f) GDPR (legitimate interest of the controller). The legitimate interest of the administrator is to tailor the content of our services e.g. websites to your needs, ensure the security of these services, as well as their continuous improvement. In addition, your voluntary consent applies to the processing of data for marketing purposes, including profiling.
Voluntary provision of personal data
Providing your personal data is voluntary, but necessary for the performance of the services we provide. If you do not provide this data, the service will not be able to be provided.
Providing personal data for marketing purposes is voluntary. If you do not consent to the processing of personal data left by you as part of the use of websites, services and other functionalities, including those stored in cookies, your personal data will not be processed for this purpose.
Processing of data for other purposes, i.e. matching the content of the Service Provider's websites to your interests, detecting bots and abuses in the services we provide, statistical measurements and improvement of these services is necessary in order to ensure the high quality of the services we provide. If you do not collect your personal data for these purposes, it may prevent the proper provision of services.
The rights of the data subject
You have the following rights in connection with our processing of your personal data:
- the right to access your data, including obtaining a copy of the data,
- right to request rectification.
To the extent that your data is processed on the basis of consent or as part of the service provided (data is necessary for the provision of the service), you can additionally exercise the following rights:
- the right to withdraw consent to the extent that it is processed on this basis. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- the right to transfer personal data, i.e. to receive your personal data from the controller in a structured, commonly used, machine-readable format.
- the right to erasure,
- the right to restrict processing.
In order to exercise the above rights, you should contact us as a data controller.
You also have the right to lodge a complaint with a supervisory authority dealing with the protection of personal data.
Recipients of personal data
Your data may be transferred to entities processing personal data on behalf of the Service Provider m.in. IT service providers – such entities process the data on the basis of a contract with the controller and only in accordance with the instructions of the controller.
The scope of the data thus entrusted includes data provided by Users in connection with the use of services provided electronically through the Service and data processed in connection with registration and maintenance of the Account. The transfer of entrusted data takes place automatically, immediately after their collection from users.
Transfer of personal data to third countries
Your personal data may be transferred to third countries, in which case the controller will provide adequate safeguards to your rights.
The use of the Service does not involve special risks for the User, beyond the normal dangers associated with the use of the Internet. Nevertheless, we recommend that users be careful and use software that protects against so-called malware and other internet-related threats (antivirus, firewall).
We take appropriate and state-of-the-art security measures to ensure that your personal data is protected from unauthorized use, processing, acquisition and modification.
Users can specify the conditions for storing and accessing cookies using the settings of their web browser. These settings may be changed at any time, e.g. in such a way as to block the automatic acceptance of cookies or to inform the User about each cookie placed. You can also delete cookies from your end device.