Select Page
Home

PRIVACY POLICY

1. General provisions

This Privacy Policy sets out the rules for the processing of personal data and the use of cookies in connection with the use of the website available at https://xgagroup.pl/.

The controller of personal data processed through the website is XGA Group sp. z o.o., with its registered office at Rondo ONZ 1, 00-124 Warsaw, Poland.

The Controller takes due care to protect the privacy of website users and to ensure the security of processed personal data in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. Scope and purposes of personal data processing

Using the website does not generally require users to provide personal data.

Personal data may be processed in particular in connection with:

  • sending a message through the contact form,
  • responding to an enquiry,
  • conducting correspondence with a person who contacts the Controller,
  • ensuring the proper operation, security and maintenance of the website,
  • fulfilling obligations arising from applicable laws.

3. Contact form

The website provides a contact form through which users can contact the Controller.

Depending on the information provided by the user, personal data submitted through the contact form may include, in particular, first name, last name, e-mail address, telephone number and other information voluntarily included in the message.

Providing personal data is voluntary; however, certain information may be necessary for the Controller to respond to an enquiry.

Personal data submitted through the contact form is processed for the purpose of handling the enquiry, conducting correspondence and taking action at the request of the data subject.

4. Legal grounds for processing

Personal data is processed on the basis of the applicable provisions of the GDPR, in particular:

  • Article 6(1)(b) GDPR – where processing is necessary for taking steps at the request of the data subject prior to entering into a contract or for the performance of a contract,
  • Article 6(1)(c) GDPR – where processing is necessary for compliance with a legal obligation to which the Controller is subject,
  • Article 6(1)(f) GDPR – where processing is necessary for the purposes of the legitimate interests pursued by the Controller, in particular in connection with conducting correspondence, ensuring website security, and establishing, pursuing or defending against claims.

5. Technical data and server logs

When using the website, technical information related to the user’s connection to the server may be automatically processed, including the IP address, browser information, operating system and information concerning the use of the website.

This information may be recorded in server logs and is used primarily to ensure the proper operation and security of the website and to detect and prevent failures or security incidents.

The website is hosted on infrastructure provided by OVH.

6. Cookies

The website uses cookies, which are small files stored on the user’s device when visiting the website.

Cookies may be used in particular to:

  • ensure the proper operation of the website,
  • maintain sessions and basic website functionality,
  • remember selected user settings,
  • ensure the security and proper operation of the technical infrastructure.

The website does not use Google Analytics or other external analytical, advertising or social media tools referred to in this Privacy Policy.

Users may change their cookie settings at any time through the settings of their web browser. Restricting the use of certain cookies may affect the proper operation of some website features.

7. Recipients of personal data

Personal data may be shared with entities that support the Controller in operating the website and conducting its business, where this is necessary to achieve the relevant processing purposes.

This may include, in particular, the provider of hosting services, OVH, as well as entities providing technical or IT services to the Controller.

Personal data may also be disclosed to competent public authorities where such disclosure is required by applicable law.

8. Data retention period

Personal data is retained for as long as necessary to fulfil the purpose for which it was collected.

In the case of data submitted through the contact form, the data may be retained for the period necessary to handle the enquiry and conduct related correspondence, and subsequently for the period required by applicable law or necessary to establish, pursue or defend against potential claims.

Technical data and information contained in server logs are retained for the period resulting from the operation of the hosting infrastructure and the needs related to ensuring the security and proper functioning of the website.

9. Data subject rights

Where provided for by the GDPR, data subjects have the following rights:

  • the right to access their personal data,
  • the right to rectify their personal data,
  • the right to erase their personal data,
  • the right to restrict processing,
  • the right to data portability,
  • the right to object to processing where the legal basis for processing is the legitimate interest of the Controller,
  • the right to withdraw consent where processing is based on consent.

Users also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if they believe that the processing of their personal data violates applicable data protection laws.

10. Data security

The Controller implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

11. Changes to the Privacy Policy

The Controller reserves the right to update this Privacy Policy, in particular in the event of changes in applicable laws, the operation of the website or the services used.

The current version of the Privacy Policy is published on the website.

12. Contact

For matters relating to the processing of personal data, users may contact the Controller using the contact details available on the website.

Data Controller:

XGA Group sp. z o.o.
Rondo ONZ 1
00-124 Warsaw
Poland

biuro@xgagroup.pl

 

Home