Privacy Policy

This Privacy Policy prescribes the manner in which Gawsoft, i.e. the administrator of the website webshotapi.com (hereinafter referred to as “Gawsoft”), processes personal data.

The Policy is for information purposes and serves satisfaction of information obligations imposed on the data controller under the GDPR, i.e. Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

1. PERSONAL DATA CONTROLLER

1.1. The controller of personal data provided by you is Gawsoft Złotoryja (59-500), ul. Wiśniowa 1, Tax Identification Number NIP: 6941639921, National Business Registry Number REGON: 020692583.

1.2. You may contact Gawsoft as the personal data controller in particular via e-mail at [email protected] or via mail at the address stated in clause 1.1 above.

2. DATA PROCESSING METHOD

2.1. The purpose and scope of the processing of your personal data are determined by the scope of consents and data provided by you sent by means of a relevant form.

2.2. The processing of your personal data may pertain to your first and last name, e-mail address, residential address, IP address, phone number VAT-EU ID, business name.

2.3. Your personal data will be processed for the following purposes: 2.3.1. compliance with obligations resulting from legal provisions—the legal basis is the statutory authorisation to process data necessary to act in line with the law (Article 6.1(c) of the GDPR); 2.3.2. provision of services by electronic means through the WebShotApi website—the legal basis is the statutory authorization to process data which is necessary to perform an agreement if the data subject is a party to such agreement, or if it is essential for undertaking certain actions prior to conclusion of an agreement upon request of the data subject (Article 6.1(b) of the GDPR); 2.3.3. performance of an agreement concluded with you, in particular providing you with access to the functionalities of the WebShotApi application—the legal basis is the statutory authorization to process data necessary to perform an agreement if the data subject is a party to such agreement (Article 6.1(b) of the GDPR); 2.3.4. initiation of promotional and commercial actions carried out by Gawsoft—the legal basis is a legitimate interest executed by Gawsoft (Article 6.1.(f) of the GDPR) or voluntary consent (Article 6.1(a) of the GDPR).

2.4. Your personal data will be processed for the following period: 2.4.1. a period sufficient for Gawsoft to prove the appropriate performance of its obligations, whereby such term corresponds to the period of limitation of claims; 2.4.2. in the case of marketing actions, until the concerned person objects to further processing of his/her personal data for marketing purposes or until he/she revokes the consent to be sent messages with marketing content.

2.5. Upon the lapse of the above mentioned period, personal data will be deleted, unless their processing is necessary under another legal basis.

2.6. In certain situations Gawsoft may transfer your personal data to third countries (i.e. beyond the European Economic Area), in particular to the United States of America. In the case of the USA, this will take place in compliance with the EU-U.S. Privacy Shield. In such a case, Gawsoft will take every effort to ensure that your personal data are appropriately secured and will transfer them only to entities which guarantee the appropriate level of protection of your data.

2.7. In the case of third countries other than the USA, your personal data may be transferred there only subject to the conditions resulting from Article 45 of the GDPR (data transfers on the basis of an adequacy decision issued by the European Commission), Article 46 of the GDPR (transfers subject to appropriate safeguards) or Article 47 of the GDPR (transfers within binding corporate rules).

3. RECIPIENTS OF DATA

3.1. Gawsoft may entrust the processing of your personal data to third parties to ensure the functioning of the website, execution of orders, as well as the exercising of its rights or compliance with its obligations connected with processing. In such a case, data recipients may include: hosting provider, the CRM service provider, e-mail operator, legal firm, as well as providers of functionalities which enable making payments within the website (payment operators), statistical measurements and conducting marketing actions.

3.2. Personal data collected by Gawsoft may also be disclosed to: competent state bodies upon their request on the basis of relevant provisions of the law or other persons and entities – in the cases prescribed in the legal provisions.

3.3. Each entity to which Gawsoft transfers personal data for processing on the basis of a personal data transfer agreement (hereinafter referred to as Transfer Agreement) guarantees an adequate level of security and confidentiality of the processing of personal data. The entity processing your personal data on the basis of the Transfer Agreement may process your personal data through another entity only upon prior consent of Gawsoft.

3.4. Disclosing personal data to unauthorized entities under this Privacy Policy may only take place upon prior consent of the data subject.

3.5. If personal data are transferred for processing to entities from third countries, such transfer may take place on the basis of respective model contract clauses or decisions of the European Commission, in particular the EU-U.S. Privacy Shield, i.e. Commission Implementing Decision 2016/1250/EU of 12 July 2016.

4. RIGHTS OF DATA SUBJECT

4.1. In connection with the processing of your data you have the right to: (a) delete the collected personal data referring to you both from the system belonging to Gawsoft as well as from bases of entities with which Gawsoft has co-operated, (b) restrict the processing of data, (c) portability of the personal data collected by Gawsoft and referring to you, in this to receive them in a structured form, (d) request Gawsoft to enable you access to your personal data and to rectify them, (e) object to processing, (f) withdraw the consent towards Gawsoft at any time without affecting the legality of processing carried out on the basis of the consent before it is withdrawn, (g) lodge a complaint about Gawsoft to the supervisory authority (President of the Personal Data Protection Office).

5. OTHER DATA

5.1. Gawsoft may store http enquiries, therefore the files containing web server logs may store certain data, including the IP address of the computer sending the enquiry, the name of station—identification through http protocol, if possible, date and system time of registration on the website Gawsoft.pl and receipt of the enquiry, number of bytes sent by the server, the URL address of the site visited by you before, if you entered the website through a link, information concerning your browser, information concerning errors, information concerning your device, mobile device identifiers (i.e. Apple Advertising Identifier). Web server logs may be collected for the purpose of proper administration of the website. Only persons authorized to administer the IT system have access to data. Files containing web server logs may be analyzed for the purpose of preparing statistics concerning traffic on the website and occurring errors. Summary of such details does not enable identification of any person.

6. SECURITY

6.1. Gawsoft applies technological and organizational means in order to secure the processing of personal data adequately to the threats and category of data to be secured, in particular, through technical and organisational means Gawsoft secures data against being disclosed to unauthorized persons, taken over by an unauthorized person, processed in violation of the law, and changed, lost, damaged or destroyed. The set of collected users’ personal data is stored on a secured server, moreover, the data are also secured by Gawsoft’s internal procedures related to the processing of personal data and information security policies.

6.2. Gawsoft has also implemented appropriate technical and organizational means, such as pseudonymisation, designed to effectively enforce the data protection principles, such as data minimisation, and for the purpose of providing the processing with necessary safeguards, so as to meet the GDPR requirements and protect the rights of data subjects.

6.3. At the same time, Gawsoft would like to advise you that using the Internet and services provided by electronic means may pose a threat of malware breaking into your teleinformatic system and device, as well as any other unauthorized access to your data, including personal data, by third parties. In order to minimize such threats, you should use appropriate technical security means, e.g. use updated antivirus programs or programs securing the identification in the Internet. In order to obtain detailed and professional information related to security in the Internet, Gawsoft recommends taking advice from entities specializing in such IT services.

7. COOKIES AND USER IDENTIFIERS

7.1. For the purposes of the correct operation of the website, Gawsoft uses a cookie support technology. Cookies are packages of information stored on your device through the website, usually containing information corresponding to the intended use of a particular file, by means of which you use the website Gawsoft.pl—these are usually: address of the website, date of publishing, lifetime of a cookie, unique number and additional information corresponding to the intended use of a particular file.

7.2. The website uses two types of cookies: (a) session cookies, which are permanently deleted upon closing the session of the browser; (b) permanent cookies, which remain on the device after closing the session until they are deleted.

7.3. It is not possible to identify you on the basis of cookie files, whether session or permanent. The cookie mechanism prevents collection of any personal data.

7.4. The cookies used by the website are safe for your device, in particular they prevent viruses or other software from breaking into to the device.

7.5. Files generated directly by Gawsoft may not be read by other websites. Third-party cookies (i.e. cookies provided by entities co-operating with Gawsoft) may be read by an external server.

7.6. You may individually change the cookie settings at any time, stating the conditions of their storage, through the Internet browser settings or configuration of the service.

7.7. First of all, you may disable storing cookies on your device in accordance with the instructions of the browser producer, but this may disable certain parts of or the entire operation of the website.

7.8. You may also individually remove cookies stored on his/her device at any time in accordance with the instructions of the browser producer.

7.9. Gawsoft uses own cookies for the following purposes: configuration of the website Gawsoft.pl and adjustment of the page content to the preferences or conduct of users; analysis and research of views, click number and path taken on the website to improve the appearance and organisation of content on the website, time spent on the website, number and frequency of visits on the website.

7.10. Gawsoft uses third-party cookies for the following purposes: Tool: Purpose of storing: Google Analytics collecting general or anonymous statistical data by means of analytical tools Google Adwords promotional and marketing actions within the retargeting process Apple Search Ads promotional and marketing actions within the retargeting process in the Apple AppStore Facebook Ads promotional and marketing actions within the retargeting process

7.11. Details concerning cookie support are available in the settings of your browser.

FINAL PROVISIONS

8.1. This Privacy Policy shall come into effect on 31-10-2022.