In short EN
When you, as an individual, contact us or use our services, whether you are acting on your behalf or on behalf of another entity (e.g., our client, supplier, etc.), or when we have received your personal information from other sources (e.g., publicly available industry websites or when your information has been disclosed to us as contact information for the performance of contracts), we commence processing your personal information. We handle all information about you responsibly and in accordance with legal provisions - in particular the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (further on “GDPR”).
The following information is intended to explain who we are, how we obtain information and what we do with it in our business, commercial and marketing relationships and in connection with contacting us. If anything is incomprehensible to you or raises your doubts, please contact us.
I. Glossary - basic terms
Personal data - all information that we process about you. This is e.g. name, surname, e-mail, telephone number.
Processing - all the activities we perform on your personal data. This is e.g. collecting, storing, updating, sending you messages.
User - a person who filled in the Enquiry form and, in case of saving concerning cookies, a person who visited the Data Administrator's website.
Data Administrator – K2 Holding S.A., with its registered office in Warsaw, ul. Domaniewska 44a, 02-672 Warsaw, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register under the KRS No: 000059690.
II. Which personal information do we collect and what is the purpose and legal basis of our action?
The scope of the data we process depends on what information you provide to us and on the form of contact you choose and what information is required in connection with our relationship - it mainly includes the content of our correspondence/communication. These are in particular:
- identification data, including your name and surname;
- telephone number, e-mail address.
The above information is therefore obtained directly from you.
We process this information for the purpose of answering your inquiries, improving our communication, and marketing our services.
The legal basis for these activities depends on the context of the communication. If these are general inquiries or conversations, the basis will be our "legitimate interest" as an administrator (according to the purposes indicated above; Article 6.1.f of the GDPR). On the other hand, if the inquiry aims at concluding a contract, or is related to a contract already concluded other than for the provision of our services (this is stated in point III below), the legal basis will be "to take action at the request of the data subject before concluding the contract" or the necessity to perform the contract (art. 6.1.b GDPR).
By visiting our website, you may agree to our use of cookie technology, which allows for the proper functioning of our website, as well as to analysis of the information about how you use this website.We process this data in order to improve the quality of our website, to match the content to the interests of our visitors, and to continuously improve its operation. Some cookies also allow the marketing of our products and services within our website.
If you have not provided us with your data on your own behalf, i.e., you are acting on behalf of another entity, we process your data for the purpose of contacting, in the context in which you are acting on behalf of a third party, and concluding or performing a contract with that third party or performing a joint venture. The basis for the processing of your personal data for this purpose will be our legitimate interest (Article 6.1.f of the GDPR) - building and maintaining relations with the third party on behalf of which you act, including the conclusion and implementation of relevant agreements with that third party, as well as the intention to build a positive image of K2 Holding.
Notwithstanding the above, your personal information, i.e. primarily your name, email address and telephone number, may be used by us to send you occasional correspondence (e.g., Christmas greetings) or to contact you regarding the promotion of K2 Holding products or services. The basis for processing your personal data for this purpose will be our legitimate interest (Article 6.1.f of the GDPR) - the intention to maintain our relationship, to build a positive image of K2 Holding and to market K2 Holding products or services.
In addition, if we process your Personal Data for the purpose of defending ourselves against potential claims, the basis for processing your Personal Data for this purpose will be our legitimate interest (Article 6.1.f of the GDPR);
In any case, we only send commercial information to electronic addresses (e-mail/telephone) if you give your prior consent (legal basis).
The provision of personal data by you is voluntary, however, it is necessary to respond to your inquiry or for the purpose of correspondence.
In the case of data processing on the basis of consent, we remind you that you can withdraw your prior consent at any time, without affecting the lawfulness of the processing that was carried out on the basis of consent before withdrawal. On the other hand, if your data is processed on the basis of the Administrator's legitimate interest, you have the right to oppose such processing.
The personal information you provide is not subject to automated decision making or profiling.
The personal data you provide will only be processed in the European Economic Area or in a third country providing an adequate level of protection, in accordance with the currently binding decision of the European Commission.
III. How long do we process your data?
As a general rule, data processed on the basis of our legitimate interest will be processed until you object or the purpose for which it has been processed is achieved.
If you are not our contractor or business partner, we store the data collected exclusively in connection with the current contact, for a period of several weeks (some cookies), for a maximum of 5 years (more detailed inquiries and conversations that may be relevant for our future contact), depending on the category of individual information.
The data processed only on the basis of your consent is processed until you revoke your consent, if necessary, or until the purpose for which it was given is achieved.
IV. Who actually has access to your personal information?
Your personal data is only accessible to:
- duly authorized K2 Holding employees or associates who are required to keep it confidential and not to use it for any other purpose than that for which K2 Holding has obtained the data;
- entities that support us in the provision of our services, on the basis of appropriate agreements entrusting personal data for processing, such as e-mail marketing platforms, providers of contact tools (instant messengers), legal and advisory service providers, hosting providers, couriers;
All of these entities have access only to information that is necessary for them to carry out specific activities.
V. What are cookies and other similar technologies? How and for what purpose do we use them?
Cookies are small text information sent by the server and stored on your device (in the memory of your computer, phone, tablet or other device you use to connect to our services).
It stores the information we may need to adapt to your use of our website and to collect statistical data.
When you visit our website, we have the ability to collect data about the domain name of your Internet service provider, browser type, operating system type, IP address, web pages you visit, items you downloaded, as well as operating data or location information about the device you use.
We ensure that all information received in this way is used by us only for the purposes set out in this policy and under no circumstances is harmful to you or to the device you are using because it does not make any configuration changes.
Cookies used on the website:
- Technical - includes cookies: necessary for the proper operation of the website to enable the functionality of the website, but their operation has nothing to do with tracking the user
- Analytical - used to analyse users' behaviour within the site, for statistical and analytical purposes (improving site operation), however, it does not include information allowing to identify a specific user's data
- Marketing - used to analyse user behaviour and provide information that identifies the data of a particular user, including for marketing purposes within third party websites.
VI. The Administrator of your personal data is K2 Holding S.A. Seated in Warsaw.
Registered and visiting address of K2 Holding S.A. is ul. Domaniewska 44a, 02-672 Warszawa
General e-mail contact: firstname.lastname@example.org
Data Protection Inspector at K2 Holding is Magdalena Pawlik, legal counsel.
Direct contact to Inspector: email@example.com
You can always ask us for access to your personal data to see which data we are processing about you and to obtain detailed information on
- whether we are processing your personal data,
- for what purpose,
- which categories of data we process,
- who is its recipient,
- if possible, what is the planned duration of its storage, and if this is not possible, the criteria for determining such period,
- if personal data has not been collected from you - all available information about its source.
In order to improve the process of providing information, please send requests for access to personal data to our e-mail address: firstname.lastname@example.org under subject "access to data - GDPR"
Right to rectification
If, in your opinion, the information about you is incorrect or incomplete, you have the right to request the correction of the data that you consider to be incorrect or incomplete.
To improve the process of correcting information, please send your request for rectification or completion to an e-mail address: email@example.com under subject "Data correction - GDPR".
Right to erasure
In certain situations the GDPR grants you the so-called right to be forgotten. The circumstances justifying your request of this kind include:
- No further indispensability of your personal data for the purposes for which it was collected or otherwise processed;
- your withdrawal of your consent to the processing of your personal data if there is no other legal basis for its further processing;
- your objection to the processing of your personal data if there are no overriding legal and reasonable grounds for processing;
- your objecting the processing of your personal data for marketing purposes;
- processing of your data illegally,
- fulfilling the legal obligation provided for in the law of the European Union or the law of a Member State, to which K2 Holding S.A. is subject.
In order to improve the process of deleting information, please send your request to the e-mail address: firstname.lastname@example.org, under subject "Data deletion - GDPR".
Right to restriction of processing
You may request a restriction of the processing of your personal data when:
- you question the accuracy of the personal data we process, for the period of time necessary to verify the accuracy of the data,
- The processing of your personal data is illegal, but you prefer restricting the processing instead of removing it,
- you have raised an objection to the processing of your personal data - only until the dispute is resolved.
Successfully requesting a restriction of processing will limit the actions taken by us on the data you have specified and in respect of certain processing operations / purposes to the minimum necessary - in principle only to storage.
In order to improve the process of restricting the processing of information, please send your request for limitation to our e-mail address: email@example.com, under subject "restriction of data processing - GDPR".
Right of objection
In certain situations you have the right to object to a given processing. You may exercise it in relation to:
- the processing of your personal data for the purposes of direct marketing, at any time, to the extent that the processing is related to such direct marketing,
Remember, however, that if despite your objection, we come to the conclusion that there are valid, legitimate grounds for processing overriding your interests, rights and freedoms, or grounds for establishing, asserting or defending claims, we will continue to process your objected data.
If you do not agree with such an assessment of the situation, you may exercise your right to file a complaint with a supervisory authority (see more information below).
To improve the handling of your objection, please send it to our e-mail address: firstname.lastname@example.org, under subject "Objection - GDPR".
Right to data portability
You have the right to obtain, in a structured, commonly used format, personal data concerning you. You also have the right to request that this data be sent to another administrator, if technically possible.
Right to lodge a complaint with a supervisory authority
In connection with our activity as the administrator of your personal data, you have the right to lodge a complaint with a supervisory authority, i.e. the President of the Office for Personal Data Protection.