Your privacy and the confidentiality of your Personal Data is extremely important to us. Therefore, in concern for data security and bearing in mind the applicable laws, this privacy policy has been created, in which you will find the necessary information, including detailed rules and purposes for the processing of Personal Data collected during the use of Service by the User.  

In order to standardize the meaning of certain terms and edit the text more clearly, the phrases and expressions below have the following meanings in this Policy.

– Administrator – means the entity operating the Service, i.e. EndoMe Sp. z o. o.
26 Bieniewicka St., 01-632 Warsaw NIP: 5252837639 , and also means controller of personal data, and thus an entity that independently determines the purposes and means of processing personal data. 

– Personal information – information about a natural person identified or identifiable by one or more specific factors that determine physical, physiological, genetic, mental, economic, cultural or social identity, including including device IP, location data, Internet identifier, and information collected through cookies and other similar technology. 

– Policy – This Privacy Policy.

– RODO – Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals in connection with processing of personal data and on the free flow of such data and repealing Directive 95/46/EC.

– Service – Internet service run by the Administrator at the following address https://endome.pl

– User – any natural person visiting the Website or using one or several services or functionalities described in Policy.

– Joint controllers –At least two controllers of personal data (as defined in Article 4  point 7 RODO) who jointly determine the purposes and means of processing personal data.

1. SECURITY

1.1. The Administrator at uses appropriate technical measures to ensure data security, which are designed to prevent unauthorized persons from obtaining and modifying personal data obtained through the Service and sent through contact forms available on the website, including secure communication encryption protocol (SSL certificate). An encrypted connection can be recognized by two elements – the string “https://” and the padlock symbol in the line of the browser.

1.2. The Administrator shall take all necessary measures to ensure that also its subcontractors and other cooperating entities provide guarantees of the application of appropriate security measures in each time they process Personal Data on behalf of the Administrator. 

2. PURPOSES AND LEGAL BASIS FOR DATA PROCESSING

When you use our website for information purposes only, i.e. if you do not use contact forms and do not subscribe to the newsletter or otherwise provide us with information in , we only collect the data that your browser sends to our server. Detailed information on the purposes and grounds for processing personal data is provided below.

USE OF SERVICE

2.1. Users’ personal data, at including IP address or other identifiers and information collected through cookies and other similar technologies, are processed by the Administrator:

1. a) for analytical and statistical purposes, in which case the legal basis for the processing is the Administrator’s legitimate interest (Article 6 (1) (f) RODO), consisting in conducting analysis of Users’ activities and also their preferences in order to improve the functionalities used and services provided; 
2. b) in order to possibly establish and assert or defend against claims – the legal basis for the processing is the legitimate interest of the Administrator (Article 6 paragraph 1 letter f RODO), consisting in the protection of its rights; 

2.2. User activity on Service, in including his/her Personal Data, is recorded in system logs (a program used to keep a chronological record containing information about events and activities that concern the IT system used to provide services by the Administrator). The data collected in this way are used primarily for the purpose of administering the Service. The Administrator also processes them for technical purposes, for the purpose of ensuring the security of the IT system and managing this system.  

CONTACT

2.3. The Website provides the possibility to contact Administrator by means of placed contact forms. Using form requires providing Personal Data, which is necessary to contact User and respond to the inquiry. The User may also provide other data in to facilitate contact or handling of the inquiry. Provision of data marked as mandatory is required in order to accept and handle the inquiry, and their failure to do so will result in the impossibility of service. Provision of other data is voluntary.  

2.4. Personal data are processed:

1. to realize contact with people who contact us via contact form or via e-mail. We answer questions asked to us, provide information, respond to inquiries. This purpose constitutes our legitimate interest o as mentioned in art. 6 (1) (f) RODO.
2. in for the purpose of possible establishment and assertion of claims or defense against claims – the legal basis of the processing is the legitimate interest of the Administrator (Article 6 paragraph 1 letter f RODO), consisting in the protection of its rights.

NEWSLETTER

2.5. The administrator may carry out the sending of newsletters to people who have provided their e-mail address in for this purpose. Provision of data is required in order to be able to send the newsletter, and failure to do so results in the lack of such possibility.  

2.6. Personal data are processed:

1. for the purpose of sending commercial information by electronic means, in particular newsletters, Administrator’s publications informing about activities and scope of services, as well as offering products and services – the legal basis for processing is the consent of users (Article 6 (1) (a) RODO)
2. in for the purpose of possible establishment and assertion of claims or defense against claims – the legal basis of the processing is the legitimate interest of the Administrator (Article 6 paragraph 1 letter f RODO), consisting in the protection of its rights.

2.7. Commercial information will be sent only to persons who have agreed to receive commercial information from the Administrator, in accordance with Article 10(2) of the Act of July 18, 2002 on provision of electronic services.

2.8. Personal data will be processed until you opt out of receiving commercial information, withdraw your consent to receive such information, or until you object to the processing of your personal data for marketing purposes.

3. VIDEOS – YOUTUBE

3.1. Our Service may use the function of displaying and playing videos from the provider “YouTube”, which belongs to Google Irleand Limited.

3.2. To ensure your privacy, we use an enhanced privacy mode, which according to the provider does not initiate storage of user information until the video file is played. In the case of starting to play embedded videos from YouTube, the provider uses “YouTube” cookies to collect information about user behavior. According to the provider, they are used to collect video statistics, improve user friendliness and prevent abuse, among other things.  

3.3. When you log into your Google account, your information will be directly linked to your account when you click on the video. In order for your data not to be used, you must log out before pressing the button. Google saves your data (even for users who are not logged in) in form of usage profiles and evaluates them. This is done on the basis of Article 6 (1) (f) of the RODO, Google’s legitimate interest, which is primarily to provide personalized ads and market research. You have the right to object to the creation of user profiles, whereby in order to exercise this right, it is necessary to contact Google, as administrator of the YouTube portal.

4. SOCIAL NETWORKS 

4.1. The Administrator processes Personal Data of Users visiting the Administrator’s profiles maintained on social media (Facebook). This data is processed exclusively in connection with running the profile, including in order to inform Users about the Administrator’s activities and promote various events, services and products. The legal basis for the Administrator’s processing of Personal Data for this purpose is its legitimate interest (Article 6 (1) (f) RODO) in promoting its own brand.

4.2. The information clause and information about data co-management with Facebook Ireland Limited can be found at this link https://www.facebook.com/privacy/explanation .

5. PERIOD OF PROCESSING OF PERSONAL DATA

5.1. The period of data processing by the Administrator depends on the purpose of the processing. As a general rule, data are processed until the withdrawal of the consent given or until an effective objection is made to the processing of the data in cases where the legal basis for the processing is the legitimate interest of the Administrator.  

5.2. We keep the data processed for contact purposes for the time necessary to complete the contact/respond to inquiries, and thereafter until the end of the calendar year following the year in which the matter was resolved or the contact was terminated. We keep correspondence for such period of time for purposes of proof, securing claims or defense against them.

5.3. The period of data processing may be extended in case the processing is necessary to establish and assert possible claims or defend against claims, and thereafter only in case and to the extent required by law. After the expiration of the processing period, the data are irreversibly deleted or anonymized.  

5.4. The withdrawal of consent by the User shall not affect the legality of the previously performed data processing on this basis.

6. RIGHTS OF SERVICE USERS

6.1. The User has the right to access the content of the data and to request rectification, deletion, restriction of processing, the right to data portability and the right to object to data processing, and also the right to lodge a complaint to the President of the Office for Personal Data Protection.

6.2. To the extent that User’s data are processed on the basis of consent, this consent can be withdrawn at any time by contacting the Administrator (biuro@lukasiuk.eu) To the extent of cookies that require consent, its withdrawal is possible through the functionality offered on the Website.

6.3. The User has the right to object to the processing of data for marketing purposes if the processing is carried out in connection with the legitimate interest of the Administrator, and also – for reasons related to the User’s specific situation – in other cases where the legal basis for data processing is the Administrator’s legitimate interest (e.g. in connection with the implementation of analytical and statistical purposes). 

7. DATA RECIPIENTS

7.1. In connection with performance of services, Personal Data will be disclosed to external entities, including in particular to providers responsible for IT support (e.g. hosting, IT support), marketing agencies (in the scope of marketing services), law firms and entities processing data at the Administrator’s direction, and also related to Administrator.

7.2. In case of obtaining the User’s consent, his/her data may also be made available to other entities for their own purposes, in including marketing purposes.

8. DATA TRANSFER OUTSIDE EOG

8.1. The level of protection of Personal Data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator does not, as a rule, transfer Personal Data outside EEA.

8.2 The Administrator always informs of its intention to transfer Personal Data outside the EEA at the stage of collection. This is done only when necessary, and with an appropriate degree of protection, primarily by:

1. Cooperation with processors of Personal Data in countries, in respect of which a relevant decision of the European Commission has been issued regarding the determination of ensuring an adequate level of protection of Personal Data;
2. Use of standard contractual clauses issued by the European Commission;
3. application of binding corporate rules approved by the relevant supervisory authority;
4. In case of transferring data to the US – cooperation with entities participating in Privacy Shield (Privacy Shield) program. Privacy Shield), approved by a decision of the European Commission.

9. CONTACT ADMINISTRATOR 

9.1. In if you wish to contact Administrator, it is possible via e-mail: info@endome.pl or to the mailing address: 26 Bieniewicka St., 01-632 Warsaw.  

9.2. It is also possible to contact administrator via the contact form located at: https://endome.pl/kontakt/ 

10. PRIVACY POLICY CHANGES

The policy is continuously reviewed and updated as necessary.