This Privacy Policy and Cookie Policy define the principles of processing and protection of personal data provided by Users and Cookies files, as well as other technologies appearing on the websitewww.emiliasedziak.pl.

The Administrator of the website and personal data is Emilia Sędziak, conducting business under the name BeEmily, Tax Identification Number (NIP): 6652630606, hereinafter referred to as the Administrator.

In case of any doubts regarding the provisions of this Privacy Policy and Cookie Policy, please contact the Administrator via:

email address: [email protected]

phone number: +48 533 535 819

All personal and address data provided by the User on the websitewww.emiliasedziak.pl will not be sold in any way to individuals or third parties.

The Administrator reserves the right to introduce changes to the privacy policy and cookie policy, and every user of the website is obliged to be familiar with the current privacy policy. The reasons for changes may include the development of internet technology, changes in the applicable law, or the development of the Website. The publication date of the current Privacy Policy is located at the bottom of the page.

“Administrator” – Emilia Sędziak, conducting business under the name BeEmily, NIP: 6652630606

“User” – any entity present on the website and using it.

“Website” – the website and blog located atwww.emiliasedziak.pl. The originator of the Website is Emilia Sędziak.

“Fanpage” – the pagehttps://www.facebook.com/negocjatoremiliasedziak, administered by Emilia Sędziak on the Facebook platform and/or individuals appointed (authorized) by her for this function.

“Newsletter” or “Newsletter service” – means a free-of-charge service provided electronically by the Administrator to the User by sending electronic letters, through which the Administrator informs about events, services, products, and other elements relevant from the Administrator’s point of view and/or for the purpose of realizing the legally justified interest of the Administrator e.g. marketing of own products and services or recommended by the Administrator.

“Newsletter service agreement” or “Newsletter agreement” – means an agreement between the Administrator and the User, the subject of which is the provision of a free-of-charge Newsletter service. To conclude it, you need to fill out an interactive form, check the checkboxes, and then confirm the subscription in the confirmation email received electronically.

1. The Administrator of the User’s personal data is the Administrator.

2. The User voluntarily provides personal data using the forms on the Website, as mentioned below, for the purposes indicated by the respective forms.

3. Only data provided by the user themselves are collected and processed (except – in certain situations – data collected automatically using cookies files and login data, as mentioned below). During the visit on the website, data regarding the visit itself are automatically collected, e.g. user’s IP address, domain name, browser type, operating system type, etc. (login data). Automatically collected data may be used for the analysis of user behavior on the website, collecting demographic data about users, or for personalizing the website content to improve it. However, this data is processed solely for the purpose of website administration and ensuring efficient hosting service and is not associated with the data of individual Users.

4. The User consents to the processing of provided personal data and receiving marketing information by electronic means from the Administrator for the purpose of contacting the User or sending other marketing information, e.g. about events or online products offered by the Administrator, if the User has given appropriate consent for these purposes and/or if it falls within the limits of the Administrator’s legally justified interest.

5. Personal data provided by the User in the course of the functioning of the Website and blog www.emiliasedziak.pl, fanpage https://www.facebook.com/negocjatoremiliasedziak, may be processed for the following purposes and on the following legal bases:

· Performance of a service quotation and service execution or contract execution — based on art. 6 sec. 1 lit. b GDPR (necessity to conclude and/or perform the contract);

· Issuing an invoice and fulfilling other obligations arising from tax law — based on art. 6 sec. 1 lit. c GDPR (obligation arising from tax law);

· Granting a discount or promotional code — based on art. 6 sec. 1 lit. a) GDPR (consent);

· Consideration of complaints or claims — based on art. 6 sec. 1 lit. b GDPR (necessity to conclude and/or perform the contract);

· Establishment, investigation, or defense against claims — based on art. 6 sec. 1 lit. f) GDPR (legitimate interest of the administrator);

· Telephone contact regarding service-related matters — based on art. 6 sec. 1 lit. a GDPR (consent);

· Storage of unpaid orders — based on art. 6 sec. 1 lit. f) GDPR (legitimate interest of the administrator);

· Creating registers and records related to GDPR — based on art. 6 sec. 1 lit. c) GDPR (obligation arising from the provisions of law) and art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator);

· Archival and evidentiary purposes, to secure information that may be used to prove facts — based on art. 6 sec. 1 lit. f) GDPR (legitimate interest of the administrator);

· Analytical purposes, including analysis of data collected automatically when using the website, including cookies such as Google Analytics cookies, GDPR (legitimate interest of the administrator);

· Use of cookies on Administrator’s Websites — based on art. 6 sec. 1 lit. a) GDPR (consent);

· Managing the website, groups, and administrator’s pages on other platforms — based on art. 6 sec. 1 lit. f) GDPR (legitimate interest of the administrator);

· Posting comments on Administrator’s Websites — based on art. 6 sec. 1 lit. a) GDPR (consent);

· Posting opinions by the User about services provided by the Administrator — based on art. 6 sec. 1 lit. a) GDPR (consent); · Satisfaction surveys of the services offered — based on art. 6 sec. 1 lit. f) GDPR (legitimate interest of the administrator);

6. Providing data is voluntary, however, failure to provide certain information, generally indicated on the Administrator’s websites as mandatory, will result in the inability to perform a given service and achieve a specific purpose.

7. Providing by the User of data that is not mandatory or an excess of data that the Administrator does not need to process is based on the User’s own decision, and in such cases, processing is based on the premise contained in art. 6 sec. 1 lit. a) GDPR (consent). The User consents to the processing of this data and to anonymizing data that the Administrator does not require and does not want to process, yet the User has provided it to the Administrator;

8. The User has the right to access his/her data at any time, to correct, rectify, delete, or limit processing, the right to object to processing, the right to data portability, the right to request access to data, and the right to lodge a complaint with the supervisory authority – the President of the Office for Personal Data Protection (according to the rules set out in the Personal Data Protection Act), if he/she believes that the processing of his/her data is inconsistent with the currently applicable data protection laws. The User also has the right to be forgotten if further processing is not provided for by currently applicable data protection laws. In these cases, the User may contact the Administrator via email: [email protected].

9. User’s data will not be transferred outside the European Union, to third countries, and if such a situation occurs, they will only be transferred to recipients who have joined the “Privacy Shield” agreement. Due to the use of Google services, User data may be transferred to the United States of America (USA) in connection with their storage on American servers. Google has joined the Privacy Shield program and thus guarantees an adequate level of personal data protection required by the laws of the European Union.

10. User data will be stored by the Administrator for the duration of the individual services/purposes and:

· for the limitation period according to the provisions of the Code of Civil Procedure;

· for the period required by tax law – regarding personal data related to fulfilling tax obligations;

· until the effective objection is raised – regarding personal data processed on the basis of the legitimate interest of the administrator or for marketing purposes;

· until consent is withdrawn or the purpose of processing is achieved – regarding personal data processed on the basis of consent;

· until they become outdated or lose their relevance – regarding personal data processed mainly for analytical, statistical, cookie usage, and administration purposes of the Administrator’s Websites.

11. If the User does not provide his/her personal data, which are required, he/she will not be able to use the materials or services offered by the Administrator within the forms available on the Website.

12. Links to other websites may appear on the Website. They will open in a new browser window or in the same window. The Administrator is not responsible for the content provided by these websites. The User is obliged to familiarize himself/herself with the privacy policy or regulations of these websites.

13. User provides data voluntarily, however, it is necessary to achieve the goal or take actions related to their provision.

14. User’s personal data is stored and protected with due diligence, in accordance with the implemented internal procedures of the Administrator. The Administrator processes information about the User using appropriate technical and organizational measures meeting the requirements of the law in force. These measures are primarily aimed at securing Users’ personal data against unauthorized access. In particular, only authorized persons who are obliged to keep this data confidential have access to Users’ personal data.

15. The Personal Data Administrator hereby informs the User that it entrusts the processing of personal data, among others, to the following entities:

– Google LLC – for using Google services, including email,

– UAB “MailerLite”, Paupio str. 46, Vilnius, Republic of Lithuania – for sending newsletters and using the MailerLite mailing system – contractors or subcontractors engaged in technical support, administration, or legal assistance for the Administrator’s clients.

16. Entities to which the Administrator entrusts the processing of personal data guarantee the fulfillment of obligations imposed by the GDPR and the application of appropriate measures to protect and secure personal data.

17. The Personal Data Administrator hereby informs that it has not appointed a Data Protection Officer (DPO) and independently performs the obligations related to the processing of personal data.

18. The User acknowledges that his/her personal data may be disclosed to authorized state authorities in connection with proceedings conducted by them, at their request and after meeting the criteria confirming the necessity of obtaining this data from us.

19. User’s personal data will not be used for automated decision-making, including profiling.

§4

FORMS

The Administrator uses one type of form within the Website:

1. A form allowing for leaving comments. All data is provided voluntarily. Providing an email address is mandatory and is solely used to prevent spam or display the User’s avatar. It is not shared with third parties.

2. The Administrator may entrust the processing of personal data to third parties without the separate consent of the User. Data obtained from forms may not be transferred to third parties.

3. If the User uses services of external providers such as Google or Disqus, they should familiarize themselves with their privacy policy available from these service providers.

§5

NEWSLETTER SERVICE

1. In order to use the Newsletter service, the User is obliged to provide true data (name, email address).

2. The Administrator provides the Newsletter service free of charge.

3. Acceptance of this Privacy Policy and Cookie Policy is voluntary but necessary to use the Newsletter service.

4. Conclusion of the Newsletter agreement is possible at any time by filling out the existing active Newsletter forms on the website.

5. In order to provide the Newsletter service, the Administrator will process the provided email address and name entered by the User in the subscription form.

6. In order to conclude the Newsletter agreement, the User is obliged to:

6.1. Fill out the Newsletter form, then click the confirmation button, receive an email sent to the provided email address with an activation link, confirm the subscription by clicking on the appropriate place indicated in the email message – activation link (so-called Double opt-in). 6.2. Accept this Privacy Policy and Cookie Policy.

6.3. Consent to the processing of personal data by the Administrator for the purpose of sending the Newsletter.

6.4. Consent to receiving commercial and marketing information via electronic means of communication, e.g., email, within the meaning of the Act of July 18, 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204, as amended) – if applicable.

6.5. Consent to the use by the Administrator of telecommunications end devices by the User (e.g., telephone, tablet, computer) for direct marketing of Administrator’s products and services and presenting commercial information to the User in accordance with art. 172 sec. 1 of the Telecommunications Law (Journal of Laws of 2014, item 243, as amended) – if applicable.

7. The above consents are voluntary but necessary to conclude the agreement for the provision of the Newsletter service.

8. The above consents may be withdrawn at any time, which will result in termination of the agreement for the provision of the Newsletter service.

9. The Newsletter agreement is concluded for an indefinite period from the moment of activation of the activation link received in accordance with sec. 6.1.

10. The User is entitled to terminate the Newsletter agreement at any time by unsubscribing from the Administrator’s subscriber list. They can do this by clicking on the deactivation link in the email received from the Administrator, e.g., with the content “UNSUBSCRIBE.” They can also do it in any other convenient way, e.g., by contacting the Administrator.

11. In the event of a complaint submitted by the User, the Administrator will respond to it within 14 business days by sending a response electronically to the email address provided by the User.

12. If the buyer does not consent to marketing consents, newsletter consent, and does not want to provide their personal data, but expresses a desire to obtain content available in the newsletter, they have the right to obtain it for an appropriate fee.

§6

COMMENTS

1. The Administrator is not responsible for the content of comments posted by readers of the Website and blog, as well as individuals commenting on the Facebook platform; on the Administrator’s fan page, the right to refrain from posting comments of a spam nature, offensive, containing vulgar or offensive expressions, content contrary to law, or containing any links to other sites is reserved.