Privacy Policy

PRIVACY POLICY OF THE WEBSITE 
www.kaizenrent.pl

1. The Administrator of Personal Data on the website at: www.kaizenrent.pl, hereinafter referred to as the Website, is Kaizen Rent S.A., with registered office at Gen. Józef Bema 8, 59-300 Lubin, registered by the District Court for Wrocław-Fabryczna in Wrocław, IX Commercial Department of the National Court Register under KRS number 0000954956, with NIP number: 6922509293 and share capital of PLN 1,505,000.00 paid in full. 
2. Respecting your rights as personal data subjects (data subjects) and respecting the applicable laws, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as RODO, the Act of 10 May 2018 on personal data protection (Journal of Laws 2018, item 1000, hereinafter referred to as the Act) and other relevant data protection legislation, we undertake to maintain the security and confidentiality of the personal data obtained from you. All employees have been adequately trained in the processing of personal data, and as a Personal Data Controller, we have implemented appropriate safeguards and technical and organizational measures to ensure the highest level of protection of personal data. We have implemented procedures and policies for the protection of personal data in accordance with the RODO, through which we ensure the lawfulness and fairness of data processing, as well as the enforceability of any rights you have as a data subject. Additionally, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. the President of the Office for Personal Data Protection (hereinafter referred to as PUODO).
3. In our Internet Service we collect the following personal data:
   1. name and surname - may be processed when, as users of our Website (including customers or potential customers), you provide them to us via e-mail, contact form available at our Website, postal mail or telephone contact, in order to use our offer,
   2. telephone number - may be processed in the event of telephone contact on your part (including as a client or potential client), as well as when you provide it to us via e-mail, contact form available on our Website or by post, in order to enable us to contact you if such a need arises in connection with the provision of services to you, as well as in order to answer questions concerning our offer,
   3. e-mail address - it may be processed, when as the users of our Website (including customers or potential customers) you provide it to us in case of contact via e-mail, contact form available on our Website, as well as via traditional mail or telephone contact; via e-mail we will send you an order confirmation, we will contact you in case there is such a need connected with order realization and we will answer your questions connected with our offer. If you have agreed to receive marketing information and you have subscribed to our newsletter, we will also send you commercial information a few times a month,
   4. NIP - we collect Tax Identification Number from entrepreneurs and persons who request invoice and have NIP number,
   5. device IP address or browser identifier - information resulting from the general rules of Internet connections, such as IP address (and other information contained in system logs), is used for technical and statistical purposes, including in particular the collection of general demographic information (e.g. about the region from which the connection is made),
   6. possibly other data may be collected in the framework of conducting specific cases or may be provided by you as a user of our Website (including as a customer or potential customer) via e-mail, contact form available on the Website, postal mail or telephone contact. 
4. Providing the data indicated in the preceding point is necessary in the cases specified therein, including in particular: 
   1. in order to perform the agreement concluded with the Administrator and to use the services offered in our Website,
   2. in order to answer your questions and enable contact via e-mail, contact form available in the Website, traditional mail or telephone contact,
   3. marketing products or services provided by Administrator and/or Administrator's business partners.
   4. in order to realize the newsletter service (subscription) - if you want to be informed about interesting events and commercial offers, you can become a subscriber to our newsletter; subscription is voluntary and you can unsubscribe from it at any time.
5. Our Website uses Cookies technology in order to adapt its functioning to your individual needs. Therefore, you may agree that the data and information entered by you will be remembered, so that it will be possible to use them next time you visit our Website without the need to enter them again. If you do not agree to the personalization of our Website, we suggest that you disable the use of cookies in the options of your web browser.
6. Each of you, as a user of our Website, can choose whether and to what extent you want to use our services and share information and data about yourself, as specified in this Privacy Policy. 
7. In accordance with the principle of minimization, we process only those categories of personal data that are necessary to achieve the purposes referred to in points. 3 and 4 above.
8. We process personal data for the period of time necessary to achieve the purposes mentioned in points. 3 and 4 above. We may process personal data for a longer period where such a right or obligation imposed on us as the Controller arises from specific legal provisions, from the Controller's legitimate interest referred to in para. 10(c) below (i.e. for the period of the statute of limitations for the claims or the end of the respective proceedings if any were instituted during the period of limitations) or if the service that we provide is of a continuous nature (e.g. newsletter subscription).
9. The source of the Personal Data processed by the Administrator are the data subjects.
10. The legal basis for the processing of your personal data is:
    1. Article 6(1)(b) of the RODO, i.e. the necessity to perform a contract to which you are a party or to take action at your request before entering into a contract, or
    2. Article 6(1)(c) of the RODO, i.e. the necessity to fulfil legal obligations imposed on the Administrator, or
    3. Article 6(1)(f) of the RODO, i.e. the Administrator's legitimate interest in the establishment, pursuit or defence of claims, until they become time-barred or until the end of the relevant proceedings, if any, are concluded during that period, or
    4. Article 6(1)(a) of the RODO, i.e. your consent to the processing of personal data for specific purposes when other legal grounds for the processing of personal data do not apply - e.g. in the case of the provision of a newsletter service. In this case, your personal data will be processed until the Administrator ceases to conduct marketing activities, no longer than for a period of 5 years from the last contact with you or until you withdraw your consent earlier.
11. Personal data is not transferred by us to a third country or international organization within the meaning of the provisions of the RODO. In the event that personal data is transferred to a third country or international organization, you will be informed in advance and the Administrator will apply the safeguards referred to in Chapter V of the RODO.
12. We do not share any personal information with third parties without the express consent of the data subject. With your express consent, we may share personal data with our business partners for the purpose of marketing their products and services. For marketing purposes, we use data obtained directly from the User, e.g.: data provided in the contact form, as well as data obtained automatically during the User's visit to the website, e.g.: information about the User's terminal equipment, connection to the Internet, operating system and platform, date and time of the visit to the website or visited pages, as well as User's IP address or location. Without the consent of the data subject, personal data may be disclosed only to entities under public law, i.e. authorities and administration (e.g. tax authorities, law enforcement agencies and other entities empowered by generally applicable laws).
13. In the event that there are links within the Application to the Administrator's social media accounts, with regard to data relating in particular to the IP or browser identifier, if the Administrator uses products:
    1. Facebook (e.g. Facebook, Messenger, Instagram) - the aforementioned data is processed in co-administration with Facebook Ireland Ltd. with registered office at: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland,
    2. Google (e.g. YouTube, Maps) - the above data is processed under joint control with Google Ireland Ltd. with registered office at: 4 Barrow St, D04 E5W5, Dublin, Ireland (Google Building Gordon House).
    3. LinkedIn - the above data is processed on a jointly administered basis with LinkedIn Ireland Unlimited Company with registered office at: Gardner House, 2 Wilton Place, Dublin 2 Ireland. 
    4. If, in the cases referred to in this section, there would be a transfer of personal data to third countries, this shall take place in accordance with the principles set out in para. 11. 
14. Personal Data may be entrusted for processing to entities that process such data on our behalf as a Personal Data Controller. In such a situation, as the Personal Data Controller, we enter into a personal data processing entrustment agreement with the processor. The processing entity shall process the entrusted personal data only for the purposes, to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence. Without entrusting your Personal Data to the Processor, we would not be able to carry out our activities on the Website. As the Personal Data Controller, we entrust personal data for processing to the following entities:
    1. those providing hosting services for the website on which our Website operates,
    2. providing other services on our behalf, which are necessary for the current functioning of the Website.  
15. Personal data is not subject to profiling by us as an Administrator within the meaning of the provisions of the RODO.
16. In accordance with the provisions of the RODO, any person whose personal data we process as a Personal Data Controller has the right to: 
    1. to be informed about the processing of his/her personal data, as referred to in Article 12 of the RODO,
    2. to have access to their personal data as referred to in Article 15 of the RODO,
    3. to correct, complete, update, or rectify their personal data, as referred to in Article 16 of the RODO,
    4. the erasure of data (right to be forgotten) referred to in Article 17 of the DPA,
    5. limitation of processing referred to in Article 18 of RODO,
    6. to data portability referred to in Article 20 of RODO,
    7. to object to the processing of personal data, as referred to in Article 21 RODO,
    8. in case of the legal basis referred to in point. 10 lit. d above - the right to withdraw consent at any time without affecting the legality of the processing performed on the basis of consent before its withdrawal,
    9. not to be subject to profiling referred to in Article 22 in conjunction with Article 4(4) of the RODO,
    10. to lodge a complaint to the supervisory authority (i.e. to the President of the Office for Personal Data Protection) referred to in Article 77 RODO,
    11. taking into account the rules of using and exercising these rights under the provisions of RODO.
17. If you wish to exercise your rights referred to in the preceding paragraph please send a message by e-mail to the e-mail address or in writing to the mailing address referred to in para. 18 below.
18. As an Administrator we have appointed a Data Protection Inspector, who is Konrad Cioczek. Any inquiries, requests and complaints regarding the processing of personal data by the Administrator, hereinafter referred to as Applications, should be directed to the following e-mail address of the Data Protection Inspector: rodo[at]kaizenrent[dot]pl or in writing to the following address: gen. Józefa Bema 8 street in Lubin (59-300).
19. The content of the notification should clearly indicate:
    1. the data of the person or persons to whom the Report pertains,
    2. the event which is the reason for the Notification,
    3. present your demands and the legal basis for these demands,
    4. indicate the expected way of settling the issue.
20.  Each identified security breach shall be documented, and if one of the situations specified in the provisions of the RODO or the Act occurs, the data subjects and, if applicable, the PUODO shall be informed of such breach of data protection provisions.
21.  To the extent possible, the provisions of this Privacy Policy shall apply mutatis mutandis to all persons with whom we have legal relations and in relation to whom we are also the Controller of their personal data, including in particular our customers, contractors, newsletter subscribers.
22.  In matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply. In case of inconsistency between the provisions of this Privacy Policy and the aforementioned regulations, these regulations shall prevail.