Privacy Policy

PRIVACY POLICY AND COOKIES POLICY

INTERNET SERVICE WWW.TAPISO.CO.UK

        §1 BASIC INFORMATION ABOUT THE SERVICE

This Privacy Policy sets out the rights and obligations of the Users of the website http://www.tapiso.co.uk.

        §2 GLOSSARY OF TERMS

For the purposes of this Privacy Policy and cookie policy of the website http://www.tapiso.co.uk :

• Personal Data – means personal data constituting a set of information about a natural person that allows for its identification;
• Contact Form – means a form in which Visitors or Website Users post information and inquiries in order to receive information about the Website’s activities;
• Operator – means TAPISO Sp. z o.o. with its seat in Warszawa, at the address: al. Solidarności 68/121, 00-240 Warszawa, entered into the Register of Entrepreneurs of the National Court Register under KRS number : 0000947758, with REGON: 521063247, NIP: 5252893112, with share capital in the amount of 20 000PLN (in words: twenty thousand zlotys);
• Administrator – Personal data administrator – TAPISO Sp. z o.o. with its registered office in Warszawa, at the address: al. Solidarności 68/121, 00-240 Warszawa, entered into the Register of Entrepreneurs of the National Court Register under KRS number : 0000947758, with REGON: 521063247, NIP: 5252893112, with share capital in the amount of 20 000 PLN (in words: twenty thousand zlotys);
• Website – means the website operating at the internet address http://www.tapiso.co.uk ;
• User Account – a separate part of the Website along with a team of IT solutions allowing the use of selected Services by Users; The account is created as a result of registration and is updated based on the User’s data;
• Visitors – means any natural person visiting the Website and using its resources, via the Internet, without registering on the Website as a User .
• User – means any natural person visiting the Website and using its resources via the Internet (Visitor), after logging in as a website user.
  
  §3 PRIVACY POLICY

1. The Website’s privacy policy is a document that concerns the protection and processing of Users ‘and Visitors’ Personal Data. The Policy defines the rules for ensuring the privacy of Users and Visitors based on the following legal provisions:

• Regulation of the European Parliament and of the Council 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection, GDPR);
• Act of May 10, 2018 on the protection of personal data (Journal of Laws, item 1000);
• the Act of 18 July 2002 on the provision of electronic services ( i.e. Journal of Laws of 2019, item 123);
• Act of July 16, 2004, Telecommunications Law ( i.e. of 2018, item 1954, as amended).

2. The use of the Website is carried out via a secure connection. Information sent and received by the Website is private.
   
   §4 VIEWING THE SERVICE RESOURCES BY THE USER

Storing inquiries from Users and Visitors to the server does not require the processing of Personal Data, because the data is not associated with specific people browsing the Website. The resources viewed by the User or Visitor are identified by URL addresses and relate to:

• public IP address of the end device from which the inquiry came;
• User station names – identification performed by the http protocol, if possible;
• time of arrival of the inquiry;
• the first line of the http request;
• http response code;
• the number of data sent by the server;
• the URL of the page previously visited by the User (the so-called referrer link) – if the Website was accessed via an external link;
• browser information;
• information about errors that occurred during the execution of the http transaction.
  
  §5 COOKIES POLICY

1. cookies ” technique . A cookie (also known as a “cookie”) is a small file with information saved by the Website on the Visitor’s end device in connection with the Visitor’s use of the Website.
2. cookies ” techniques does not allow the collection of any Personal Data and address of the Visitor, or any confidential information from his computer. The ” cookies ” technique allows only to define the profile of information that the Visitor is interested in. In this way, the collected data makes it possible to study the aggregate traffic of Visitors on the Website and for statistical purposes.
3. cookies ” technique is to ensure the proper functioning of the Website, collecting anonymous statistics to help determine how the content posted on the Website is used and presenting information and advertisements tailored to their preferences to Visitors.
4. The visitor can decide for himself how cookies are saved on his computer. To do this, change the settings / preferences in the web browser. The default settings of popular browsers usually allow cookies to be saved . By using the Website, the Visitor agrees to the use of cookies in accordance with the browser settings. It is also possible to use the Website without using and saving cookies , but then not all website functions may be available.
5. As part of the website, we use the following types of cookies :
   • “Session” – they are stored on the Visitor’s end device until they leave the Website or turn off the web browser;
   • “Permanent” – stored on the Visitor’s end device for the time specified in the cookie file parameters or until they are deleted by the Visitor;
   • “Performance” – they enable the collection of information on how to use the Website;

• “Necessary” – enabling the use of services available on the Website;
• “Own” – posted by the Website;
• “External” – coming from a website external to the Website;
• “Advertising” – adjusting advertisements on other websites to the preferences of the Visitor;§6 PERSONAL DATA PROTECTION

1. The Website does not process any data of Visitors, unless the Visitor has consented to the processing of his personal data and has sent consent along with the Contact Form or by consenting to the processing of his personal data in order to send him a newsletter .
2. The Website processes the following categories of Users’ data: name, surname, address, email address, behavioral data regarding activity on the Website .
3. The administrator of personal data of Visitors who have consented to the processing of their personal data and Users, as well as entities that have submitted a complaint regarding the use of the Website is TAPISO Sp. z o.o. with its seat in Warszawa, at the address: al. Solidarności 68/121, 00-240 Warszawa, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Warsaw, XII Commercial Division of the National Court Register under KRS number: 0000947758, having REGON: 521063247 NIP: 5252893112, with share capital in the amount of 20 000 PLN (in words: twenty thousand zlotys) paid in full.
4. Visitors’ personal data may be processed on the basis of art. 6 sec. 1 lit. a GDPR only for the purposes specified in the consent expressed by the Visitor to the processing of personal data, sent to the Operator using the Contact Form or when ordering a newsletter or in the case of creating a User Account.
5. The User’s personal data is processed by the Administrator pursuant to art. 6 sec. 1 lit. b GDPR only for the purpose of keeping the User Account and ensuring the possibility of using the Website functionalities provided for the User.
6. Personal data of entities that submitted a complaint are processed by the Administrator pursuant to art. 6 sec. 1 lit. c GDPR only to consider the complaint and are processed as long as it is necessary to ensure the highest quality of service on the Website.
7. Personal data of entities that made a purchase on the Website are processed in order to perform the sales contract pursuant to art. 6 sec. 1 lit. b GDPR and are processed as long as it is necessary to perform the contract and consider any complaints or guarantees of the purchased goods.
8. The administrator may process the personal data of the entities referred to in para. 3-7 above, pursuant to Art. 6 sec. 1 lit. f GDPR, if it is necessary for the purposes of the legitimate interests pursued by the Administrator.
9. The administrator may share the personal data of the entities referred to in para. 3-7 above, in accordance with applicable law, at the request of law enforcement authorities, other public administration bodies, the Police and other services. The provision of personal data in this case does not require the consent of the persons whose data is shared.
10. The entities referred to in paragraph 1. 3-7 above, in connection with the processing of their Personal Data, you have the right to access the data, the right to rectify the data, and the right to request data transfer, the right to lodge a complaint with the authority.
11. The entities referred to in paragraph 1. 3-7 above, you have the right to delete data, the right to limit data processing, the right to object to data processing, unless otherwise opposed by generally applicable provisions of law or the nature of the legal relationship between the indicated entity and the Administrator.
12. If the User places any Personal Data of other people on the Website (including their name, address, telephone number or e-mail address), they may do so only if they do not violate the provisions of generally applicable law.
13. Personal data is not transferred to third countries outside the European Economic Area. Personal data may be entrusted to third parties in order to use the services of an e-mail provider, provide legal services and use the IT website.
14. In connection with the provision of services, Personal data may be entrusted to external entities providing services to the Operator, including in particular suppliers responsible for the operation of IT systems, entities providing legal services, marketing agencies (in the scope of marketing services provided for the Operator) and a supplier of goods purchased on the Website.

    §7 PERIOD OF PROCESSING OF PERSONAL DATA

1. The period of personal data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, the data is processed for the duration of the service, until the consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the legitimate interest of the Administrator.
2. The period of personal data processing may be extended if the processing is necessary to establish and pursue any claims or defend against claims, and after that time only if and to the extent that it will be required by law. After the expiry of the processing period, the data will be irretrievably deleted or anonymized.

   §8 FINAL PROVISIONS

1. The Operator reserves the right to amend this Privacy Policy and the Website’s cookie policy in order to ensure that it is up-to-date and complies with applicable law. The change of the Website’s Privacy Policy may also result from changes in technology, methods, purposes or legal grounds for the processing of Users’ personal data.
2. Inquiries regarding this Privacy Policy and the Website’s cookie policy , including the processing of Users’ Personal Data and the privacy policy, should be sent to the following e-mail address: rodo@tapiso.com
3. The last changes to the Privacy Policy and cookies policy of the Website were introduced on 02.11.2023