Our privacy policy

1. the Administrator of the Personal Data on the website at: www.changelog.pl, hereinafter referred to as the Website, is the Company under the name of CHANGELOG SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Wrocław (54-233), Niedźwiedzia 2/3c Street, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Wrocław - Fabryczna in Wrocław, VI Economic Division of the National Court Register under number 0000991961, NIP: 8943195139,

(2) Respecting your rights as personal data subjects (data subjects) and respecting the applicable laws, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016. on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as RODO, the Law of May 10, 2018 on the Protection of Personal Data (hereinafter referred to as the Law) and other relevant data protection laws, we are committed to maintaining the security and confidentiality of the personal data obtained from you. All employees have been properly trained in the processing of personal data, and as a Personal Data Administrator, we have implemented appropriate safeguards and technical and organizational measures to ensure the highest level of protection of personal data. We have implemented procedures and policies for the protection of personal data in accordance with the RODO, through which we ensure the legality and reliability of data processing, as well as the enforceability of any rights you have as a data subject. In addition, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. the President of the Office for Personal Data Protection (hereinafter referred to as PUODO).

(3) We collect the following personal information on our Website:

1. Name - may be processed when, as users of our Website (including customers or potential customers), you provide it to us via e-mail, registration form, order form, contact form available on our Website, snail mail or when contacting us by phone, in order to take advantage of our offer,
2. telephone number - may be processed in case of telephone contact on your part (including as customers or potential customers), as well as when you provide it to us via e-mail, registration form, order form, contact form available on our Website or snail mail, in order to enable us to contact you in case the need arises in connection with the provision of services to you, as well as to answer questions related to our offer,
3. e-mail address - it may be processed when you, as users of our Website (including customers or potential customers), provide it to us in case of contact via e-mail, registration form, order form or contact form available on our Website, as well as via snail mail or when contacting us by phone; we will send you confirmation of your order through your e-mail address, we will contact you if there is such a need related to the processing of your order, as well as we will answer your questions related to our offer; if you have agreed to the transfer of marketing content and you have become a subscriber to our newsletter, we will also send you commercial information several times a month,
4. TIN - Tax Identification Number we collect from businesses and individuals who request an invoice and have a TIN number,
5. IP address of the device or browser ID - information resulting from the general principles of connections made on the Internet, such as IP address (and other information contained in system logs), is used for technical and statistical purposes, including, in particular, the collection of general demographic information (e.g., about the region from which the connection is made),
6. Alternatively, other data may be collected in the course of conducting specific cases or may be provided by you as a user of our Website (including as a customer or potential customer) via e-mail, contact form available on the Website, snail mail or when contacting us by phone.

(4) Provision of data indicated in the preceding paragraph is necessary in the cases specified therein, including in particular:

1. in order to use the services offered on our Website, including without registering (creating an Account) on the Website,
2. for the purpose of carrying out the services ordered by you on our Website,
3. in order to answer your questions and to enable you to contact us via e-mail, the contact form available on the Website, snail mail or telephone contact,
4. for the purpose of voluntary registration (creation of an Account by you) on our Website; in this situation, we store the data you provide to facilitate your future use of the services available on our Website until you deregister (delete your Account),
5. for the purpose of carrying out the newsletter service (subscription) - if you want to be informed about interesting events and commercial offers, you can become a subscriber to the newsletter we run; joining the subscription is voluntary and you can unsubscribe from it at any time.

(5) Our Website uses Cookies technology in order to adapt its functioning to your individual needs. In this regard, you may agree that the data and information you have entered will be remembered so that you can use them the next time you visit our Website without having to enter them again. Owners of other sites will not have access to this data and information. If, on the other hand, you do not agree with the personalization of the Website, we suggest that you disable cookies in the options of your Internet browser.

(6) Each of you, as a user of our Website, has the opportunity to choose whether and to what extent you want to use our services and share information and data about yourself, to the extent specified in the contents of this Privacy Policy.

7. in accordance with the principle of minimization, we process only those categories of personal data that are necessary to achieve the purposes referred to in points. 3 and 4 above.

8. we process personal data for the period necessary to achieve the purposes listed in points. 3 and 4 above. Personal data may be processed for a longer period of time, where such a right or obligation imposed on us as the Administrator results from specific provisions of law, from the Administrator's legitimate interest referred to in sec. 10(c) below (i.e., for the period of the statute of limitations for claims or the completion of the relevant proceedings, if any, during the period of the statute of limitations), or when the service we perform is of a continuous nature (e.g., newsletter subscription).

(9) The source of the Personal Data processed by the Administrator is the data subjects.

10 The legal basis for processing your personal data is:

1. Article 6(1)(b) of the RODO, i.e. necessary for the performance of a contract to which you are a party, or to take action at your request prior to entering into a contract (applies only to natural persons), or
2. Article 6(1)(c) of the RODO, i.e., the necessity to fulfill the Administrator's legal obligations, or
3. Article 6(1)(f) of the RODO, i.e. the legitimate interest of the Administrator, which is the performance of a contract in the case of its conclusion by a commercial company or other business entity (association, foundation, public institution, etc.) the establishment, investigation or defense of claims until they are time-barred or until the completion of the relevant proceedings, if they were initiated during that period, or
4. Article 6(1)(a) of the RODO, i.e. your consent to the processing of personal data for specific purposes when other legal grounds for processing personal data do not apply - e.g. in the case of the provision of a newsletter service.

(11) Personal data shall not be transferred by us to a third country or international organization within the meaning of the RODO. In the event that personal data is transferred to a third country or international organization, you will be informed in advance and the Administrator will apply the safeguards referred to in Chapter V of the RODO.

12 We do not share any personal data with third parties without the express consent of the data subject. Personal data without the consent of the data subject may be shared only with public law entities, i.e. authorities and administration (e.g. tax authorities, law enforcement agencies and other entities authorized by generally applicable laws).

(13) In the case of the occurrence of the "Like!" button or other links within the Application to the Administrator's social media accounts, in terms of data relating in particular to the IP or browser ID, if the Administrator uses the products:

1. Facebook (e.g. Facebook, Messenger, Instagram) - the above data is processed on a jointly administered basis with Facebook Ireland Ltd. with its registered office at: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland,
2. Google (e.g. YouTube, Maps) - the above data is processed on a jointly administered basis with Google Ireland Ltd. with its registered office at: 4 Barrow St, D04 E5W5, Dublin, Ireland (Google Building Gordon House).
3. LinkedIn - the above data is processed on a jointly administered basis with LinkedIn Ireland Unlimited Company, headquartered at: Gardner House, 2 Wilton Place, Dublin 2 Ireland.
4. Twitter - the above data is processed on a jointly administered basis with Twitter International Company, headquartered at: The Academy, 42 Pearse Street, Dublin 2, Ireland.
5. If, in the cases referred to in this section, there would be a transfer of personal data to third countries, this shall be done in accordance with the principles set forth in Section. 11.

(14) Personal data may be entrusted for processing to entities that process such data on our behalf as Personal Data Controller. In such a situation, as the Personal Data Controller, we shall enter into a personal data processing entrustment agreement with the processor. The processor shall process the entrusted personal data only for the purposes, to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence. Without entrusting your personal data to the Processor, we would not be able to conduct our business on the Website. As Personal Data Administrator, we entrust personal data for processing to the following entities:

1. providing hosting services for the website on which our Website operates,
2. providing other services to us that are necessary for the ongoing operation of the Website.

15 Personal data shall not be subject to profiling by us as an Administrator under the provisions of the RODO.

16 In accordance with the provisions of the RODO, each person whose personal data we process as a Personal Data Controller has the right to:

1. To be informed about the processing of personal data, as referred to in Article 12 of the RODO,
2. Access to your personal data, as referred to in Article 15 of the RODO,
3. To correct, supplement, update, rectify personal data, as referred to in Article 16 of the RODO,
4. deletion of data (right to be forgotten), as referred to in Article 17 of the RODO,
5. restriction of processing, as referred to in Article 18 of the RODO,
6. Data portability, as referred to in Article 20 of the RODO,
7. object to the processing of personal data, as referred to in Article 21 of the RODO,
8. in the case of the legal basis referred to in item. 10(d) above - the right to withdraw consent at any time without affecting the legality of the processing carried out on the basis of consent before its withdrawal,
9. lodge a complaint to the supervisory authority (i.e., the President of the Office for Personal Data Protection) referred to in Article 77 of the RODO,
10. taking into account the rules for the use and exercise of these rights under the provisions of the RODO.

(17) If you wish to exercise your rights referred to in the preceding paragraph, please send a message by e-mail to the e-mail address or in writing to the mailing address referred to in paragraph. 18 below.

(18) All inquiries, requests and complaints regarding the processing of personal data by the Administrator, hereinafter referred to as Submissions, should be addressed to the following e-mail address: pomoc@changelog.pl or in writing to the following address: Niedźwiedzia 2/3c Street, 54-233 Wrocław.

(19) The content of the Application shall clearly indicate:

1. Data of the person or persons affected by the Notification,
2. the event that is the reason for the Notification,
3. present their demands and the legal basis for those demands,
4. indicate the expected manner of handling the case.

(20) Each identified security breach shall be documented, and if one of the situations specified in the provisions of the RODO or the Law occurs, the data subjects and, if applicable, the PUODO shall be informed of such breach of data protection regulations.

21 All capitalized words shall have the meaning given to them in the Terms and Conditions of our Website, unless otherwise stated in this Privacy Policy.

22 The provisions of this Privacy Policy shall, to the extent possible, apply mutatis mutandis to all persons with whom we have a legal relationship and to whom we are also the Controller of their personal data, including, in particular, our customers, contractors, newsletter subscribers and.

(23) In matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply accordingly. In the event of any inconsistency between the provisions of this Privacy Policy and the aforementioned regulations, these regulations shall prevail.