For a good start - great that you have visited our website kwartalnikfotografia.pl and the way we process your personal data is not indifferent to you. Below you will find the purposes, legal basis and period of personal data processing indicated separately for each purpose of data processing.

To begin with, we want to emphasize that your data is safe with us. We ensure the confidentiality of any data you provide to us, protect it from unauthorized access, and take appropriate security and data protection measures as required by data protection laws.

1. general information

1.1 The administrator of your personal data is KF Publishing House Jolanta Śliwczyńska, 62-300 Września, 5 Szczecińska Street, NIP 7891259707, REGON 521844708. If you have any concerns about the privacy policy, you can contact us at any time by sending a message to waldemar@kwartalnikfotografia.pl

1.2 The RODO (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data) grants you the following rights related to the processing of your personal data:
(a) the right to access your data and receive a copy of it,
(b) The right to rectify (amend) your data,
(c) the right to erasure (if, in your opinion, there is no basis for us to process your data, you can request that we erase it),
(d) the right to restrict data processing (you can request to restrict data processing only to storage or performance of activities agreed with you),
(e) the right to object to processing (you have the right to object to processing on the basis of legitimate interests; you should indicate the particular situation that you believe justifies us stopping the processing covered by your objection. We will stop processing your data for these purposes unless we demonstrate that the grounds for our processing override your rights or that your data is necessary for us to establish, assert or defend claims),
(f) the right to data portability (you have the right to receive from us in a structured, commonly used machine-readable format the personal data you have provided to us on the basis of the
contract or your consent; you can have us send this data directly to another entity),
(g) the right to lodge a complaint with a supervisory authority (if you find that we are processing your data unlawfully, you can file a complaint about it with the President of the Office for Personal Data Protection or another
competent supervisory authority).

The rules related to the exercise of the rights indicated above are described in detail in Articles 16 - 21 of the RODO. Remember that you can also request that we provide you with information about what data we hold about you and for what purposes we process it. All you need to do is send a message to waldemar@kwartalnikfotografia.pl

1.3 Your personal data may be processed by entities whose services we use. They may have access to your personal data if the services they provide involve or may involve the processing of personal data, if they will provide services to the extent related to such access. This includes, in particular, entities such as web hosts, email service providers, website maintenance provider, law firms, marketing service providers, accounting firms, cloud software providers, etc. Remember that your data is secure and processed only to the extent necessary. In addition, if necessary, your personal data may be shared with entities, authorities or institutions authorized to access the data under the law, such as police, security services, courts, prosecutor's offices, as well as tax offices to the extent necessary to carry out tax and accounting obligations.

1.4 We transfer your personal data to third countries in connection with the use of tools that store personal data on servers located in third countries, in particular in the United States. The providers of these tools guarantee an adequate level of personal data protection through the relevant compliance mechanisms provided for by the RODO or the use of standard contractual clauses. The storage of personal data on servers located in third countries occurs within the framework of Google services (described in this privacy policy), whose provider is Google Ireland Limited, and within the framework of the Mailchimp mailing system.

1.5 We use tools that may take certain actions depending on the information collected through tracking mechanisms (profiling and behavioral advertising). However, we believe that these actions do not have a significant impact on you, as they do not differentiate your situation as a customer, nor do they affect the terms of the contract you may enter into with us.

1.6 We participate in Ceneo's Trusted Opinions program. If, in the process of placing an order, you voluntarily consent to the transfer of your order-related data for the purpose of examining your opinion on the level of satisfaction with the conducted purchase, your data will be made available to the company Ceneo pl. Sp. z o.o., which will thus become the administrator of your personal data. Details of data processing by Ceneo can be found on the Ceneo website: http://info.ceneo.pl/regulamin/.

2. purposes and activities of personal data processing

2.1 Contact.
Data processed: first name, e-mail address plus any data contained in the content
messages (providing data is voluntary, but necessary to make contact).

Purpose of processing: to establish contact Processing period: the content of correspondence may be subject to archiving and we are not able to clearly determine when it will be deleted.

Legal basis: article 6(1)(f) RODO, i.e. our legitimate interest. The legal basis for post-contact processing is also our legitimate purpose of archiving correspondence for internal purposes (Article 6(1)(f) RODO).

Entitlements: You have the right to request the history of correspondence you have had with us (if archived), as well as to request its deletion, unless its archiving is justified by our overriding interests, such as defense against potential claims on your part.

2.2 Newsletter.
Data processed: first name and e-mail address (providing data is voluntary, but necessary to subscribe to the newsletter.

Purpose of processing: sending newsletters. The mailing system we use tracks your actions taken in connection with messages sent to you. Accordingly, we have information about which messages you opened, within which messages you clicked on links, etc.

Processing period: the duration of the newsletter service and also for archiving purposes in order to be able to demonstrate in the future the fact that you have given your consent to receive the newsletter in the past. Legal basis: consent (Article 6(1)(a) RODO) given when signing up for the newsletter.

Eligibility: You can unsubscribe from the newsletter at any time by clicking on the dedicated link included in each message sent as part of the newsletter, or by simply contacting us. You can rectify your data or object to the processing of your personal data. due to our legitimate interest (Article 6(1)(f) RODO), we will not remove your data from the database. Deletion of such data would prevent us from demonstrating, if necessary, the fact that you have given your consent to receive the newsletter in the past.

2.3 User Account.
Processed data: e-mail address and password (Providing data is voluntary, but necessary to create an account. As part of editing your account data, you can provide your further data).

Purpose of processing: to provide you with the electronic service of providing you with a user account.

Processing period: You can delete your account at any time. If you choose to do so, your data will continue to be stored so that we can identify you as a returning user in the future, should you decide to use the site again as a registered user. In this regard, the legal basis for processing your personal data is our legitimate interest - Article 6(1)(f) of the RODO.

Legal basis: a contract concluded under the terms and conditions described in the regulations - Article 6(1)(b) RODO.

2.4 Procurement.
Processed data: data necessary to complete the order, i.e.: first and last name, billing address, company data, e-mail address, telephone number, tax ID number. (Provision of data is voluntary, but necessary to place an order).

Purpose of processing: performance of the contract concluded by placing an order, issuing an invoice and including it in the accounting records, archival and statistical purposes and direct marketing of our own products and services.

Processing period: the time necessary to process the order, and then until the expiration of the statute of limitations for claims under the concluded contract. After the expiration of this period, data may still be processed by us for statistical archival purposes - e.g. to identify a returning customer and also for direct marketing of our own products and services until you object.

Legal basis: performance of a contract concluded by placing an order (Article 6(1)(b) of the DPA), issuance of an invoice (Article 6(1)(c) of the DPA), inclusion of the invoice in accounting records (Article 6(1)(c) of the DPA), direct marketing of our own products and services (Article 6(1)(f) of the DPA), and for archival and statistical purposes (Article 6(1)(f) of the DPA).

Entitlements: In the case of order data, you do not have the option to rectify the data once the order has been processed. You also cannot object to data processing and demand deletion of data until the expiration of the statute of limitations for contractual claims. Likewise, you cannot object to data processing and demand deletion of data contained in invoices. You may object to data processing for the purposes of direct marketing of your own products and services.

2.5 Recovering abandoned shopping carts.
Data processed: e-mail address

Processing purpose: to be able to finalize your order. (For this purpose, your personal data collected by us in connection with the initiation of your order is processed).

Processing period: You may object to the processing of your data for the purposes of abandoned cart recovery by clicking on the link available within the message sent as part of abandoned cart recovery.

Legal basis: legitimate interest (Article 6(1)(f) RODO).

2.6 Complaints and withdrawal.
Data processed: name, residential address, telephone number, e-mail address, bank account number. Provision of data is voluntary, but necessary to make a complaint or withdraw from the contract.

Purpose of processing: execution of the complaint procedure or withdrawal procedure

Processing period: the time necessary to carry out the complaint or withdrawal procedure. Complaints and withdrawal statements may furthermore be archived in order to be able to demonstrate the complaint or withdrawal process in the future

Legal basis: for the purpose of the complaint procedure or withdrawal procedure (Article 6(1)(c) of the DPA), and then for archival purposes, which is our legitimate interest (Article 6(1)(f) of the DPA).

Entitlements: In the case of data contained in complaints and withdrawal declarations, you do not have the opportunity to rectify such data. You also cannot object to the processing of the data and request deletion of the data until the expiration of the limitation period for claims under the concluded contract. However, after the expiration of the limitation period for claims under the concluded contract, you may object to our processing of your data, as well as demand the deletion of your data from the database.

3. cookies

3.1 Cookies and other tracking technologies. Our website uses cookies. Cookies are small text information stored on your terminal device (e.g. computer, tablet, smartphone), which can be read by our ICT system (our own cookies) or the ICT system of third parties (third-party cookies). Some of the cookies we use are deleted when your browser session ends, i.e. when you close it (so-called session cookies). Other cookies are retained on your terminal device and enable us to recognize your browser the next time you visit the site (persistent cookies).

3.2 Cookie Consent.
● When you visit the site for the first time, you are shown information about the use of cookies, along with a question about your consent to the use of cookies. Thanks to a special tool, you have the ability to manage cookies from the site by disabling individual cookies.
● you can always change your cookie settings from within your browser or delete cookies altogether. Browsers manage cookie settings in different ways. See your browser's help menu for explanations on how to change your cookie settings.
● You can also manage your cookie settings by installing special add-ons that allow you to control cookies,
● disabling or restricting cookies may cause difficulties in using our website, as well as many other websites that use cookies.

3.3 Server Logs.
● Use of the site involves sending queries to the server where the site is stored. Each query directed to the server is recorded in the server logs.
● Logs include, but are not limited to, your IP address, the date and time of the server, information about your web browser and the operating system you are using.
● Logs are saved and stored on the server. The data stored in the server logs is not associated with specific individuals using the site and is not used by us to identify you.
● Server logs are only support material for the administration of the site, and their contents are not disclosed to anyone except those authorized to administer the server.

3.4 Google Analytics.
● We use the Google Analytics tool provided by Google LLC, based in the USA.
● The purpose is to create statistics and analyze them in order to optimize our websites.
● the data collected is personal data and does not make it possible to identify you. The information we have access to as part of Google Analytics is, in particular: information about the operating system and web browser you use, the sub-pages you view within our site, the time spent on our site and its sub-pages, the source from which you go to our site.
● within Google Analytics, we use Advertising Features such as demographic and interest reports, the age range you are in, your gender, approximate location, interests determined by your online activity.
● In order to use Google Analytics, we have implemented a special Google Analytics tracking code in the code of our website. The tracking code uses cookies from Google LLC regarding the Google Analytics service.

3.5 Google Ads.
● We use the Google Ads advertising program operated by Google LLC,
● the purpose is to conduct advertising campaigns, including remarketing, and the basis is the legitimate interest of marketing their own products or services.
● the data collected is personal data and does not make it possible to identify you.
● When you visit our website, a remarketing cookie from Google is automatically left on your device, which, with the help of a pseudonymous identifier (ID) and based on the pages you visit, enables interest-based advertising.
● Further processing of information only takes place if you have given your consent to Google to link your browsing history and application usage to your account and to use information from your Google account to personalize the ads that are displayed on the websites.
● If you are then logged in when you visit our website on Google, Google will use your data together with Google Analytics data to create and define target group lists for remarketing purposes on different devices. For this purpose, Google temporarily combines the collected information with Google Analytics data to create the target groups.
● In order to use Google Ads, we have implemented a special Google Ads conversion pixel in the code of our website. The pixel uses cookies from Google LLC regarding the Google Ads service. From our site, using the mechanism for managing cookies, you can disable these cookies. You can manage your Ads settings directly from the Google website: https://adssettings.google.com/.
● details related to Google Ads processing at: https://policies.google.com/privacy.

3.6 Facebook Ads and Insights.
● We use marketing and analytics tools available through Facebook (Facebook Inc.).
● the purpose is the marketing of their own products or services and analysis and statistics
● as part of our site, we have implemented the Facebook Pixel, which automatically collects information about your use of our site in terms of pages viewed, in order to target you with ads personalized to your behavior on our site
● The information collected as part of Facebook Pixel does not allow your
identification. With them, we only have the ability to know what actions you have taken within our site. We can also see what age range you are in, what gender you are, where you connect to the Internet from.
● For details on Facebook's privacy policy, see: https:// www.facebook.com/privacy/explanation.

3.7 Community tools.
● Our website uses plug-ins and other social tools provided by social networks such as Facebook, Instagram, Twitter.
● By displaying our website containing such a plug-in, your
The browser will establish a direct connection to the administrators' servers
social networks (service providers). The content of the plug-in is transmitted by the respective service provider directly to your browser and integrated into the site. Thanks to this integration, service providers receive information that your browser has viewed our site, even if you do not have a profile with the given service provider or you are not logged in with them at the moment. This information (along with your IP address) is sent by your browser directly to the service provider's server (some servers are located in the USA) and stored there. If you are logged into one of the social networks, this service provider will be able to directly associate your visit to my site with your profile on the given social network.
● You can also completely prevent plug-ins from loading on the site by using appropriate extensions for your browser, such as script blocking.
● logging out of a particular social networking site before visiting our website will prevent the data collected during your visit to our website from being associated directly with your profile data on the site
● If you use a particular plug-in, such as by hitting the "Like" or "Share" button, the corresponding information will also be sent directly to the server of the respective service provider and stored there.
● The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contacting you and your rights in this regard and the possibility of making settings to ensure the protection of your privacy are described in the privacy policies of individual service providers.
Facebook - https://www.facebook.com/legal/FB_Work_Privacy,
Instagram - https://help.instagram.com/155833707900388 ,
Twitter- https://twitter.com/en/privacy

3.8 Google Tag Manager.
● We use the Google Tag Manager tool provided by Google LLC.
● Google Tag Manager tool is used to manage tags
(tags) of the website through the interface. With the help of Google Tag Manager, we control the advertising campaigns we run and the way you use our sites.
● Google Tool Manager implements only tags. Its use does not involve storing cookies or collecting personal data. The tool allows other tags to operate, which may collect data under certain circumstances. However, Google Tool Manager does not access this data.
● If the option has been deactivated at the domain or cookie level
enrollment, this will apply to all tracking tags implemented through Google Tag Manager.
● We carry out activities in this regard based on our legitimate interest in marketing our own products or services and optimizing our websites.

3.8 Affiliate and partner programs.
● We participate in the Ceneo (Ceneo Sp. z o.o., based in Poznan) affiliate program, which means that if you make a purchase after going to the site from an affiliate link, we will be granted a commission
● If you make a purchase after going to the site from an affiliate link, you will be
commission awarded to us. In order for this commission to be credited, the affiliate program operator must have information that a transaction was made after clicking on a link on our site. Accordingly,
● for the purposes of the affiliate program, we have implemented a special click monitoring code within our site so that if you make a purchase after going to the site from the link, we will be charged a commission. The cookies associated with it are not exclusive because they would prevent us from using the program. If you do not agree to this use of cookies, we are forced to ask you to stop using our sites.

3.9 Content from external services.
● content from third-party sites, in particular YouTube videos, is embedded on our Sites.
● in this connection, cookies from Google LLC related to the YouTube service are used, including DoubleClick cookies.
● preventing the attribution of data collected during video playback or reading other content on our website directly to your profile on a particular site is possible by logging out of that site before visiting our site, as well as, for example, by blocking scripts.
● YouTube-related cookies are loaded only when the video is played, so refraining from watching the video will prevent them from loading
● the purpose and scope of data collection and its further processing and use by service providers, as well as your other rights related thereto, are described in the privacy policies of the respective service providers.

Please note that if any of the information we provide about our privacy policy or cookies is unclear to you, we are available to you at the following email address waldemar@kwartalnikfotografia.pl