I. General provisions
This privacy policy of the www.anaklasis.pl website is of informative nature, which means that it is not a source of obligations for the Service Users or visitors to the website.
The Controller of the personal data collected through the website is Polskie Wydawnictwo Muzyczne, with its registered office at al. Krasińskiego 11a, (31-111) Kraków, hereinafter referred to as the "Controller", who is the Online Store Service Provider and the Seller at the same time.
We make sure that the processing of personal data is carried out in accordance with the provisions of the General Data Protection Regulation 2016/679/EC (hereinafter referred to as the "GDPR"), the Act on Personal Data Protection, as well as specific provisions (included, among others, in the Act on Accounting) and the Act on the Provision of Electronic Services dated 18 July 2002. (Journal of Laws 2002 No. 144, item 1204 as amended).
The Controller shall exercise due diligence in order to protect the interests of data subjects, and in particular shall ensure that the data it collects are processed in accordance with the law; collected for specified, legitimate purposes and not processed further in a manner incompatible with those purposes; substantially accurate and adequate in relation to the purposes for which they are processed and stored in a form which allows for the identification of data subjects they concern for no longer than it is necessary for the purposes of the processing.
Any and all words, expressions and acronyms appearing on this page and beginning with a capital letter (e.g. Seller, Online Shop, Electronic Service) shall be understood in accordance with their definitions contained in the Online Shop Terms and Conditions available on the Online Shop's website.
II. On what terms do we process your personal data
We exercise due diligence in order to protect the interests of the data subjects and in particular to ensure that the data are:
- processed in accordance with the law, fairly and in a transparent manner for the data subject;
- collected for specified, explicit and legitimate purposes and not processed further in a manner incompatible with those purposes;
- adequate, relevant and limited to what is necessary for the purposes for which they are processed;
- adequate and, where necessary, kept up to date; we take steps to ensure that personal data which are inaccurate in relation to the purposes for which they are processed are immediately erased or rectified;
- stored in a form which permits identification of the data subject for a period no longer than is necessary for the purposes for which they are processed;
- processed in a manner that ensures adequate security of personal data, including protection against unlawful or incompatible processing and accidental loss, destruction.
III. For what purpose and on what legal basis do we process your personal data:
We process personal data for the following purposes and on the following legal basis:
- for the purpose of the execution of the order submitted, i.e. under Article 6(1)(b) of the GDPR;
- for the purpose of performing the obligations arising from the regulations of the law, including accounting regulations, i.e. under Article 6(1)(c) of the GDPR;
- on the basis of the legally justified interests of the controller, including, inter alia, for the purpose of sending a newsletter and directing an offer concerning the services and promotions, i.e. under Article 6(1)(f) of the GDPR.
IV. What rights do you have with regards to the processing of your personal data:
We undertake appropriate measures to provide you with all relevant information and to communicate with you when it comes to the processing of your personal data in connection with the execution of your right to the following, in a concise, transparent, understandable and easily accessible form, using clear and simple language:
- the right to have information provided when collecting personal data;
- the right to have information provided on request
- the right to have information provided whether or not the data are being processed, and regarding other matters referred to in Article 15 of the GDPR, including the right to receive a copy of the data:
- to rectify data;
- for the data to be forgotten;
- to restrict processing;
- to transfer data;
- to object;
- to not be subject to a decision based solely on automated processing (including profiling);
- to have information provided in case of a data breach.
Furthermore, if personal data are processed on the basis of consent, you have the right to withdraw it. Consent may be withdrawn at any time, without affecting the legality of the processing carried out before withdrawal.
In order to contact us regarding the execution of a given right, please contact us at the address of the Controller's registered office or at the e-mail address: internet@pwm.com.pl.
The safety of your data is a priority for us. If by processing your personal data we are infringing the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.
V. How will we contact you:
We provide information in writing or otherwise, including, where appropriate, electronically. If you so request, we may provide information orally, provided that we confirm your identity by other means. If the request is transmitted electronically, the information will also be transmitted electronically, if possible, unless another preferred form of communication is indicated.
VI. Within what deadline will we fulfil your request:
We do our best to provide information without undue delay - as a rule, within one month of receiving the request. If necessary, this period may be extended by a further two months due to the complexity of the request or the number of requests. However, in any event, within one month of the receipt of the request, we will inform you of the action taken and (where applicable) of the extension of the deadline, giving the reason for such a delay.
VII. Subcontractors/processing entities:
If we cooperate with entities that process personal data on our behalf, we use only the services of such processing entities that provide sufficient guarantees of implementing appropriate technical and organisational measures to ensure that the processing meets the requirements of the GDPR and protects the rights of the data subjects.
We check the entities to which we entrust the processing of your data at length. We enter into detailed contracts with them and periodically verify the compliance of the processing operations with the contents of such a contract as well as legal regulations.
VIII. Data retention:
We store personal data in a form which permits identification of the data subject for no longer than it is necessary for the purposes for which the data are processed. After such a period of time, we either anonymize the data (deprive the data of its characteristics allowing for the identification of the person concerned) or delete it. The deletion of personal data is complete and permanent. In the retention procedure we ensure that the period of storage of personal data is limited to a strict minimum. The period of data processing is determined first of all on the basis of legal regulations (e.g. the period of storage of accounting documents), as well as the justified interest of the controller (e.g. marketing activities).
IX. Authorizations:
We ensure that any person acting under our authority and having access to your personal data will only process it on our request, unless other requirements arise under the European Union or Member State law.
X. Cookies
The www.anaklasis.pl website uses the "cookies" technology, which are text files placed on your device, to allow the website to recognize the user and adapt the website to your needs.
If you agree to place cookies on your device but would like to delete them after your visit to www.anaklasis.pl, you can do so without any risk. Information on how to do this can be found in the help files of your web browser.
If you do not agree to the placement of cookies on your device, you can block their placement by configuring your web browser accordingly. You will find information on how to do this in the help files of your web browser. Unfortunately, if you block the cookies from Polskie Wydawnictwo Muzyczne's online shop, we cannot guarantee its proper operation.
Google Analytics
Google Analytics uses the technology of "cookies", i.e. text files placed on your device, in order to enable the online store of Polskie Wydawnictwo Muzyczne to analyse the sources of traffic and the way visitors use it.
Google collects the data generated thanks to the placement of cookies on its servers and uses this information for the purpose of compiling reports and providing other services relating to website traffic and internet usage.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
The data only constitute the material for statistical analysis and mechanisms for correcting system errors.
Google AdWords
Google AdWords uses the "cookies" technology, i.e. text files placed on your device, to enable the Anaklasis website to assess the correctness and effectiveness of its advertising activities using the AdWords network.
Google collects the data generated by means of the placement of cookies on its servers and uses this information for the purpose of compiling reports and providing other services relating to website activity and internet usage.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
The data only constitute the material for statistical analysis and mechanisms for correcting system errors.
Version 1.0 (Krakow, 12 December 2018)