Privacy policy

The Privacy Policy Yush Pracownia Marketingowa 

This policy applies to the website operating at URL: yushpracownia.pl The operator of the website and the personal data manager is: Yush Pracownia Marketingowa Magdalena Janaczek, Jagiełły 31b, 02-495 Warsaw. The operator’s email address is: magda@yushpracownia.pl. The operator is the administrator of your personal data for data voluntarily provided on webpage. 

The Administrator has the authority to process Users’ personal data in the following circumstances:

a. For the purpose of maintaining ongoing contact, including through the contact form, email, or telephone. The Administrator may process Users’ data such as their name, surname, email address, and any other data required by the contact form. Additionally, any other data that the User chooses to include in their messages to the Administrator will also be processed. This processing is carried out in order to respond to the User’s message or address any issues raised by the User, such as inquiries about the Administrator’s business activities, products, or any other correspondence. The legal basis for this processing is the Administrator’s legitimate interest in providing proper service to the User, which includes answering questions and addressing matters raised by the User through the contact form, email, or telephone.

b. For archiving purposes, after the conclusion of joint correspondence or information exchange. This is also considered a legitimate interest of the Administrator, as stated in Article 6(1)(f) of the General Data Protection Regulation (GDPR).

c. For the identification of the sender and handling of inquiries or issues submitted through the contact form, email, or telephone. This processing is also based on the Administrator’s legitimate interest, as outlined in Article 6(1)(f) of the GDPR.

d. For any data that is not necessary for establishing contact or handling inquiries or issues, the legal basis for processing is the User’s consent, as stated in Article 6(1)(a) of the GDPR. Providing this data is voluntary but necessary in order to correspond with the Administrator or exchange information. The processing of the User’s personal data will continue until a justified objection is submitted. Furthermore, the Administrator may process Users’ personal data in order to establish, pursue, or defend possible claims and rights. This processing is based on the Administrator’s legitimate interest, as stated in Article 6(1)(f) of the GDPR.

To the extent that applicable legal provisions regarding personal data provide for it, the User has the following rights:

a. The right to access personal data (Article 15 of the GDPR): The User has the right to obtain from the Administrator confirmation whether his or her personal data is being processed, and if this is the case, he or she has the right to access them and obtain information, among others: about the purpose of their processing, the categories of personal data concerned, the recipients or categories of recipients to whom his personal data have been or will be disclosed, including recipients in third countries or international organizations.
b. The right to rectify data (Article 16 of the GDPR): The User has the right to request the Administrator to rectify his or her personal data due to its incorrectness or incompleteness.
c. The right to delete personal data, i.e. the so-called the right to be forgotten (Article 17 of the GDPR) – in cases provided for by applicable law, the User has the right to request the Administrator to delete his or her personal data and to inform the entities to which the Administrator transferred his or her data about the User’s request.
d. The right to limit processing (Article 18 of the GDPR): in certain cases, the User has the right to request restriction of the processing of personal data, i.e.: a) when the User questions the accuracy of the personal data – for a period enabling the Administrator to check the accuracy of the data; b) the processing is unlawful and the User objects to the deletion of personal data and requests instead to limit their use; c) The Administrator no longer needs personal data for processing purposes, but the User needs them to establish, pursue or defend claims; d) The user has objected to processing pursuant to Art. 21 section 1 GDPR – until it is determined whether the legally justified grounds on the part of the Administrator override the grounds for the User’s objection.
e. The right to transfer data (Article 20 of the GDPR): The User has the right to receive personal data provided to the Administrator and to send them to another personal data administrator selected by the User. The right to transfer applies when the Administrator processes personal data on the basis of the User’s consent (Article 6(1)(a) of the GDPR) or the conditions for the performance of a contract (Article 6(1)(b) of the GDPR), and the processing is carried out in an automated manner. . If technically possible, the User may also request that his or her personal data be sent by the Administrator directly to another authorized administrator.
f. The right to claim (Article 21 of the GDPR): if the Administrator processes the User’s data on the basis of its legitimate interest, the User has the right to object to the Administrator’s processing of his or her personal data at any time for reasons related to the User’s particular situation. The User’s objection in this respect should include justification (except for the cases specified in the law). Then, the Administrator cannot process the User’s data unless he proves the existence of valid, legally justified grounds for processing, overriding the User’s interests, rights and freedoms, or grounds for establishing, pursuing or defending claims.
g. The right to withdraw consent (Article 7 of the GDPR): if the processing of personal data is based on the User’s consent (Article 6(1)(a) of the GDPR), he has the right to withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
h. The right to lodge a complaint with the supervisory authority (Article 77 of the GDPR): if it is considered that the processing of the User’s personal data violates applicable provisions, he or she has the right to lodge a complaint with the supervisory authority – the President of the Office for Personal Data Protection.

To use those rights (except for the right referred to in letter h above), the User should contact the Administrator via e-mail at: magda@yushpracownia.pl.

The User’s personal data may be transferred to entities processing personal data at the request of the Administrator, among others: IT service providers, providers of telecommunications, hosting, courier and legal services, as well as entities providing statistical analysis services, advertising and marketing services (including mailing services), marketing agencies or entities ensuring the maintenance of the Administrator’s Website and entities providing training and advisory services in the field of personal data protection.

As a rule, the Administrator does not transfer Users’ personal data outside the European Economic Area (EEA), however, if necessary, it may transfer them outside the EEA only if an appropriate level of protection is ensured in accordance with the GDPR, including: by: using appropriate safeguards in the form of standard contractual clauses adopted pursuant to decisions of the European Commission and contracts entrusting the processing of personal data that meet the requirements of the GDPR; cooperation with entities processing personal data in countries for which an appropriate and up-to-date decision of the European Commission has been issued regarding the assurance of an adequate level of personal data protection; application of binding corporate rules approved by the competent supervisory authority.